01
Introduction
This Privacy Policy ("Policy") describes how bosku88 ("the Company", "we", "us", "our") — operator of the online casino and sports betting platform accessible at bosku88.cam — collects, processes, stores, and protects personal data relating to registered players, website visitors, and other individuals who interact with our platform ("you", "your", "the User").
bosku88 serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We are committed to safeguarding the privacy and personal data of every individual who entrusts us with their information, and to operating in compliance with applicable data protection standards.
By registering an account, making a deposit, or otherwise accessing the bosku88 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use our platform.
This Policy applies to all personal data collected through the bosku88 website, mobile browser experience, live chat interactions, email correspondence, and any other channel through which you communicate with us. It does not apply to third-party websites linked to or from our platform.
02
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:
| Term |
Meaning |
| "Personal Data" |
Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers. |
| "Processing" |
Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" |
The Company, which determines the purposes and means of processing personal data. |
| "Data Processor" |
A third party engaged by the Company to process personal data on the Company's behalf and under its instructions. |
| "Consent" |
A freely given, specific, informed, and unambiguous indication of the data subject's agreement to processing of their personal data. |
| "KYC" |
Know Your Customer — the identity and age verification process required under anti-money laundering and responsible gambling obligations. |
| "Platform" |
The bosku88 website, services, games, and all associated digital interfaces accessible at bosku88.cam. |
03
Personal Data We Collect
We collect the following categories of personal data, depending on your interaction with the Platform:
3.1 Registration & Account Data
- Full name and date of birth;
- Email address and Malaysian mobile phone number;
- Username and encrypted password hash;
- Residential address (city, state, postcode);
- Preferred language and currency (MYR by default).
3.2 Identity Verification (KYC) Data
- Malaysian MyKad number or passport number;
- Copies of government-issued photo identification (front and back);
- Proof of address documents;
- Selfie or liveness verification image, where required;
- Source of funds or source of wealth documentation, for high-value accounts.
3.3 Financial & Transaction Data
- Deposit and withdrawal transaction records, including amounts, timestamps, and method references;
- Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow, FPX), or cryptocurrency wallet addresses used for transactions;
- Account balance history and wagering activity;
- Bonus and promotion redemption history.
3.4 Technical & Usage Data
- IP address and approximate geographic location;
- Browser type and version, operating system, and device type;
- Session duration, pages visited, and navigation paths;
- Game play logs, bet history, and session timestamps;
- Cookies and similar tracking technology data (see Section 10).
3.5 Communications Data
- Live chat transcripts and support ticket content;
- Email correspondence with the support team;
- Records of responsible gambling tool activations (e.g., deposit limit changes, self-exclusion requests).
04
How Personal Data Is Collected
bosku88 collects personal data through the following means:
- Direct provision: Data you enter during registration, KYC submission, account settings updates, or when you contact support;
- Automated collection: Technical data collected automatically when you access the Platform, through cookies, server logs, and analytics tools;
- Transaction records: Data generated as a result of deposits, withdrawals, and gameplay activity on the Platform;
- Third-party sources: Identity verification agencies, fraud prevention services, and payment processors may provide supplementary data to verify your identity or assess risk;
- Referral programmes: If you join bosku88 through a referral link, limited data relating to the referral event may be collected from the referring player's account.
05
Legal Basis for Processing
We process your personal data on the following legal bases:
| Legal Basis |
Examples of Processing Activities |
| Contractual necessity |
Processing your registration data to create and maintain your account; processing transactions; providing game services you have requested. |
| Legal obligation |
KYC and AML verification; age verification; reporting obligations to regulatory authorities; retention of financial records. |
| Legitimate interests |
Fraud detection and prevention; platform security; responsible gambling monitoring; service improvement analytics. |
| Consent |
Sending promotional communications and personalised bonus offers; certain non-essential cookies. Consent may be withdrawn at any time. |
06
How We Use Your Personal Data
Your personal data is used for the following purposes:
- Creating, maintaining, and administering your bosku88 account;
- Processing deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT;
- Verifying your identity and age in compliance with KYC and anti-money laundering obligations;
- Providing, personalising, and improving our games, sports betting markets, live casino offerings, and platform features;
- Administering VIP tier assessments, birthday bonuses, referral rewards, and other loyalty programme benefits;
- Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited conduct;
- Delivering customer support in English, Bahasa Melayu, and Chinese through live chat and email;
- Sending transactional communications (e.g., deposit confirmations, withdrawal approvals, KYC status updates);
- Sending promotional communications and personalised offers, where you have consented to receive such communications;
- Enforcing our Terms and Conditions and other platform policies;
- Monitoring player behaviour to identify and address responsible gambling concerns, including enforcing self-exclusion and deposit limit controls;
- Complying with applicable legal and regulatory requirements.
We do not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human review. VIP tier assessments involve human oversight by our player management team.
07
Data Sharing & Disclosure
bosku88 does not sell, rent, or trade your personal data with third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment processors and financial institutions: To process deposits and withdrawals. This includes e-wallet providers (Touch 'n Go, Boost, GrabPay), bank partners (Maybank, CIMB, Public Bank, Hong Leong), DuitNow/FPX operators, and cryptocurrency exchange services;
- Identity verification and KYC service providers: Third-party agencies engaged to verify your identity, confirm age, and conduct AML screening;
- Fraud prevention and security services: Providers that assist in detecting suspicious activity, account takeover attempts, and fraudulent transaction patterns;
- Game content providers: Certain game providers may receive anonymised or pseudonymised session data for the purposes of RNG auditing, game performance monitoring, and dispute resolution;
- Customer support platforms: Live chat and ticketing system providers who process communication data under binding data processing agreements;
- Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, we may disclose personal data to government agencies or law enforcement bodies.
All third-party processors engaged by bosku88 are subject to contractual obligations requiring them to process personal data only for specified purposes, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection law.
08
International Data Transfers
Given the international nature of online gaming operations, your personal data may be processed in jurisdictions outside Malaysia. Where this occurs, the Company takes reasonable steps to ensure that adequate data protection safeguards are in place, including through contractual clauses, data processing agreements, and assessments of the recipient jurisdiction's data protection framework.
By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries other than Malaysia. Such transfers are made solely for the purposes described in this Policy.
09
Data Retention
We retain personal data for no longer than is necessary for the purposes for which it was collected, subject to the following general principles:
| Data Category |
Retention Period |
| Account registration and KYC data |
Duration of account + minimum 5 years post-closure (AML compliance) |
| Financial transaction records |
Minimum 5 years from transaction date |
| Game play and bet history |
3 years from date of activity |
| Customer support communications |
2 years from last interaction |
| Marketing consent records |
Until consent is withdrawn + 1 year |
| Technical and usage logs |
13 months on a rolling basis |
| Self-exclusion records |
Duration of exclusion + 5 years |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data lifecycle management procedures.
10
Cookies & Tracking Technologies
The bosku88 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small data file placed on your device when you visit a website. We use the following categories of cookies:
- Strictly necessary cookies: Essential for the Platform to function correctly, including session management, login authentication, and security tokens. These cannot be disabled without impairing core functionality.
- Performance and analytics cookies: Used to collect anonymised data about how visitors use the Platform — pages visited, session duration, referral sources — to help us improve performance and user experience.
- Functional cookies: Used to remember your preferences such as language, currency, and display settings between sessions.
- Marketing and targeting cookies: Used to deliver relevant promotional content and personalised bonus offers, where you have consented to such communications.
You may manage or withdraw cookie consent at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Full cookie management options are available in your account settings.
11
Data Security
bosku88 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform;
- AES encryption for personal data stored in our databases;
- Two-factor authentication (2FA) options for player account access;
- Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function;
- Regular penetration testing and vulnerability assessments by independent security auditors;
- Automated intrusion detection and real-time threat monitoring;
- Staff training on data protection obligations and incident response procedures.
Notwithstanding these measures, no system can guarantee absolute security. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify affected individuals in accordance with our legal obligations.
You are responsible for maintaining the security of your account credentials. Never share your password with anyone. bosku88 will never request your password via email, live chat, or any other channel. If you believe your account has been compromised, contact support immediately.
12
Your Data Rights
Subject to applicable data protection law and certain statutory limitations, you have the following rights in relation to your personal data held by bosku88:
Right of Access
You may request a copy of the personal data we hold about you, along with information about how it is processed and shared.
Right to Rectification
If your personal data is inaccurate or incomplete, you may request that we correct or update it. Some corrections may require re-submission of KYC documentation.
Right to Erasure ("Right to Be Forgotten")
You may request deletion of your personal data where it is no longer necessary for the purpose collected, or where you withdraw consent. This right is subject to our legal retention obligations under AML and gaming regulations.
Right to Restriction of Processing
You may request that we restrict processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
Right to Data Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you may request your personal data in a commonly used, machine-readable format.
Right to Object
You may object to processing based on our legitimate interests, and to the use of your data for direct marketing purposes. You may withdraw consent for marketing communications at any time via your account settings.
To exercise any of the above rights, please contact our support team as described in Section 15. We will respond to all data subject requests within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days with prior notification.
13
Children & Minors
The bosku88 Platform is strictly prohibited to persons under 21 years of age. We do not knowingly collect personal data from individuals under the age of 21. All players are required to confirm their age at registration, and age verification is enforced as part of the KYC process.
If we discover that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, delete the associated personal data (subject to any overriding legal obligations), and refund any deposits made. If you believe that a minor has registered an account on the Platform, please contact us immediately using the details in Section 15.
21+ Only: bosku88 enforces a strict minimum age of 21 years for all gambling activities. This is a non-negotiable condition of Platform access and is enforced through automated checks and manual KYC review.
14
Amendments to This Policy
We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is prominently displayed at the top of this page.
Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — we will provide advance notice via the email address registered to your account and/or through a prominent notice on the Platform. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of those amendments.
We encourage you to review this Policy periodically to stay informed about how your data is protected.