Last Updated: 1 January 2026

Boss97 Privacy Policy – Malaysian Player Data & Privacy Protection

Boss97 takes your privacy seriously. This Privacy Policy clearly explains what data we collect, how it is used, who it may be shared with, and your rights as the owner of that data. Reading this document helps you make more informed decisions when using the boss97 platform.

Boss97's Six Data Protection Principles

This is the foundation of how boss97 handles every member's personal data — straightforward, transparent, and free of complicated legal language.

256-Bit SSL Encryption

All data transmitted between your device and boss97's servers is encrypted using 256-bit SSL — the same security standard used by leading Malaysian banking and financial institutions. Your phone number, betting records, and payment details never traverse the network in plain text that could be intercepted.

Your Data Is Never Sold

Boss97 never sells, rents, or trades members' personal data to any third party for marketing or advertising purposes. This is an unconditional commitment — your data belongs to you, not to boss97 as a business asset to be traded with others.

Data Minimisation

Boss97 only collects data that is strictly necessary to operate the platform safely and effectively. We do not collect irrelevant or excessive information — if a piece of data is not needed for boss97's platform operations, we will not request it from you.

Strict Internal Access Controls

Access to boss97 members' personal data within our organisation is strictly limited on a "need-to-know" basis — only staff with a legitimate operational requirement may access specific data categories. All access is automatically logged and periodically reviewed by boss97's internal security team.

Access & Deletion Rights

As a boss97 member, you have the right to request a copy of the personal data we hold about you, request corrections to any inaccurate data, or request deletion of your data subject to record retention requirements mandated by Malaysian law. Please contact our support team to submit any data-related request.

Data Breach Notification

In the event of any security incident affecting boss97 member data, we are committed to notifying affected members within a reasonable timeframe via in-platform notification or email, along with details of the data involved and the steps being taken to address the situation.

1Scope and Definitions

This Privacy Policy ("Policy") describes how boss97 ("Platform", "We", or "boss97") collects, uses, stores, and protects the personal data you ("Member", "User", or "You") provide when registering for and using the boss97 platform at boss97.best and the boss97 mobile app.

This Policy applies to all users of the boss97 platform in Malaysia, including visitors who have not yet registered an account. By registering a boss97 account or continuing to use the platform, you confirm that you have read and understood this Privacy Policy and agree to be bound by its provisions.

A few key terms used throughout this document:

  • "Personal Data" refers to any information that can be used to identify you directly or indirectly, including your name, phone number, address, and financial transaction data.
  • "Processing" refers to any operation carried out on personal data, including collection, storage, use, disclosure, and deletion.
  • "Third Party" refers to any entity or individual separate from boss97 and you, including service providers, business partners, and statutory authorities.

Note: This Privacy Policy should be read alongside Terms & Conditions boss97. Together, both documents form the complete agreement between you and boss97 regarding your use of the platform and the handling of your data.

2Types of Personal Data Collected

Boss97 collects several categories of personal data depending on how you interact with the platform. Below is a complete list of the data categories we may collect:

2.1 Identity and Account Data

  • The Malaysian phone number used when registering your boss97 account.
  • Personal identification information that may be requested for KYC (Know Your Customer) verification purposes, such as your identification card number (MyKad) and date of birth.
  • Account passwords stored in hashed form (not in plain text) — boss97 does not store your password in any readable format.

2.2 Financial Transaction Data

  • Records of all deposits made via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX through Maybank2u or CIMB Clicks — including the amount, timestamp, and payment method used.
  • Records of all processed withdrawals, including withdrawal destinations and the status of each transaction.
  • Complete records of account balance and fund movement history.

2.3 Betting Activity Data

  • Records of all bets placed — covering football, badminton, e-sports, and all Live Casino activities such as baccarat, roulette, blackjack, and dragon tiger.
  • Odds used, stake amount, outcome, and winnings or losses for each bet.
  • The time and type of games played during each activity session on the boss97 platform.

2.4 Technical and Device Data

Types of Technical Data Example Purpose of Collection
IP Address 192.168.x.x Location verification, fraud prevention
Device information Phone model, Android/iOS OS Platform optimisation, technical support
Usage data Pages visited, session duration User experience improvement
Error Logs Application error messages Platform debugging and maintenance
Cookie Data Session ID, display preferences Core platform functionality, personalisation

3How Data Is Collected

Boss97 collects your personal data through several channels as you interact with the platform:

3.1 Directly from You

This is the primary way data is collected at boss97. It occurs when you:

  • Registering a new boss97 account by entering your phone number and setting a password.
  • Submitting identity verification documents during the KYC process if requested by boss97.
  • Making a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX.
  • Submitting a withdrawal request, including selecting the withdrawal destination.
  • Contacting boss97 customer support via live chat or email — information you share during those support sessions is retained for record-keeping and service improvement purposes.
  • Participating in surveys, contests, or promotional programmes run by boss97 from time to time.

3.2 Automatically During Platform Use

When you use the boss97 platform — whether via the website or mobile app — our systems automatically collect certain technical data required for the platform to operate safely and effectively. This includes IP address, device and operating system information, usage patterns, and activity logs. This data is collected using industry-standard technologies including cookies, tracking pixels, and server logs.

3.3 From Authorised Third Parties

In certain situations, boss97 may receive personal data about you from authorised third parties, for example:

  • Payment verification providers such as Touch 'n Go, DuitNow, or the bank you use — to verify the status and details of your deposit or withdrawal transactions.
  • Identity verification service providers used by boss97 for KYC purposes, where applicable.
  • Malaysian statutory authorities, where information is shared in accordance with applicable legal provisions.

4Purposes for Using Personal Data

Boss97 uses collected personal data solely for the legitimate and stated purposes below. We do not use your data for any other purpose without obtaining your consent first:

4.1 Platform Operations and Account Management

  • Creating and managing your boss97 account, including processing registrations, verifying identity, and maintaining account security.
  • Processing all deposit and withdrawal transactions accurately and securely.
  • Settling bets and automatically crediting winnings to your account.
  • Managing the boss97 VIP Rewards programme, including the calculation and crediting of VIP points, cashback, and related benefits.

4.2 Security and Fraud Prevention

  • Detecting and preventing fraudulent activity, money laundering, or misuse of the boss97 platform.
  • Verifying member identity and ensuring compliance with the minimum age requirement of 18 years.
  • Monitoring suspicious activity and taking necessary action to protect other members and the integrity of the platform.
  • Investigating complaints and reports related to account security or unauthorised activity.

4.3 Communications and Customer Support

  • Sending important account-related notifications, including deposit confirmations, withdrawal status updates, and security alerts.
  • Providing effective customer support whenever you reach out to the boss97 team via live chat or email.
  • Notifying you of important changes to boss97's Terms & Conditions or Privacy Policy.
  • Sending information about boss97 promotions and special offers — subject to your marketing communication preferences, which can be updated at any time from your account settings.

4.4 Platform Improvement & Analytics

Boss97 uses anonymised and aggregated usage data — meaning data that has been processed so it can no longer be linked to any specific individual — to understand how members use the platform, identify areas for improvement, and develop new features that deliver greater value to users in Malaysia.

5Sharing Data with Third Parties

Boss97 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are limited situations where boss97 may need to share certain data with trusted third parties:

5.1 Authorised Service Providers

Boss97 works with a number of trusted third-party service providers to operate the platform. These providers are permitted to use shared data solely for the purpose of delivering the services contracted with boss97, and for no other purpose:

  • Payment processing providers: Payment gateways processing Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX transactions receive the transaction information required to process your deposits and withdrawals.
  • Identity verification provider: KYC services used to verify member identity for compliance and security purposes.
  • Technology infrastructure providers: Server hosting and cloud service providers that store boss97 platform data in a secure environment compliant with international security standards.
  • Live casino game providers: Live casino studio operators providing baccarat, roulette, blackjack, and other game tables within the boss97 platform may receive the session ID required to manage gameplay on a technical level.

5.2 Statutory Authorities

Boss97 may disclose personal data to Malaysian statutory authorities when required by law, court order, or a lawful directive from an authority with the relevant jurisdiction. In such situations, boss97 will disclose only the minimum data necessary to comply with the applicable legal requirement.

boss97's Guarantee: In all data sharing with third parties, boss97 ensures that adequate data protection agreements are in place. We do not disclose your personal data to advertising companies, data brokers, or any third party for their own commercial purposes under any circumstances.

6Data Security and Protection Measures

Boss97 consistently invests in technical and organisational security measures designed to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. While no system can guarantee absolute security, we apply industry-best standards to minimise risk.

6.1 Technical Security Measures

  • 256-bit SSL/TLS Encryption for all data communications between the boss97 platform and your device — ensuring that data in transit cannot be read even if intercepted.
  • Data-at-rest encryption for all sensitive data stored in boss97's server database — including account information and transaction records.
  • Multi-level access controls for boss97's internal systems, ensuring staff can only access data relevant to their job responsibilities.
  • Continuous security monitoring through an intrusion detection system that monitors platform traffic in real time to identify suspicious activity.
  • Regular security audits conducted by the internal security team and, from time to time, by independent security assessors.

6.2 Your Security Responsibilities

The security of your boss97 account is a shared responsibility between boss97 and you. Here are some simple steps you can take to help keep your account secure:

  • Use a strong and unique password for your boss97 account — avoid reusing passwords from other accounts.
  • Do not share your boss97 account login credentials with anyone, including family members.
  • Always log out of your boss97 account when using a shared or public device.
  • Contact boss97 customer support immediately at support@boss97.best if you suspect your account has been accessed without authorisation.

7Data Retention Period

Boss97 retains your personal data for as long as your account remains active and for as long as necessary to fulfil the purpose for which it was collected. Once that purpose has been fulfilled, the data will be deleted or anonymised in accordance with the established data retention schedule.

In general, boss97 follows these data retention guidelines:

Data Category Retention Period Justification
Account identity data Duration of active account + 5 years KYC Requirements and Audits
Financial Transaction Records 7 years from the date of transaction Malaysian Financial Legal Requirements
Betting Activity Records 3 years from the date of activity Security, dispute resolution
Customer Support Logs 2 years from the date of interaction Service quality, complaint resolution
Technical data & logs 90 days Security, technical debugging
Marketing data (where consent has been given) Until you withdraw your consent Member consent

Once the retention period has elapsed, data will be permanently deleted from boss97's systems or fully anonymised so it can no longer be linked to any individual. Exceptions apply where Malaysian law requires a longer retention period for certain data categories.

8Cookies and Tracking Technologies

The boss97 platform uses cookies and similar tracking technologies to ensure the platform operates correctly and to deliver a better experience for users. Below is an explanation of the types of cookies used and their purposes:

8.1 Necessary Cookies (Required)

These cookies are strictly necessary for the boss97 platform to function. Without them, core services such as login, game sessions, and transactions cannot be carried out. This type of cookie cannot be disabled and does not store any personally identifiable information.

8.2 Performance & Analytics Cookies

These cookies help boss97 understand how users interact with the platform — which pages are visited most, how long play sessions last, and where users encounter difficulties. All data collected through this type of cookie is in aggregated form and is not linked to any individual's identity.

8.3 Managing Your Cookie Preferences

You can manage your cookie settings through your web browser or device settings. Please note that disabling certain cookies may affect the functionality of the boss97 platform — in particular, cookies required for login sessions and transactions. For more information on how to manage cookies in your specific browser, please refer to the relevant browser's help documentation.

Important Note: boss97 does not use cookies to sell or disclose your data to third-party advertisers. The cookies used are solely for the purposes of platform operation, security, and improvement.

9Your Rights as a Data Owner

As a boss97 member and the owner of your personal data, you have several important rights regarding how boss97 handles your data. Below is a full list of those rights and how to exercise them:

Right of Access

You have the right to request and receive a copy of all personal data that boss97 holds about you. Data access requests can be submitted by email to support@boss97.best. boss97 will process requests within 14 working days.

Right to Rectification

If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. For basic account information such as your phone number, you can make changes directly from your boss97 account settings.

Right to Erasure

You may request the deletion of your personal data from boss97's systems. However, this right is subject to boss97's legal obligations to retain certain financial records under applicable Malaysian law. Data that is legally required to be retained cannot be deleted until the mandatory retention period has expired.

Right to Object to Marketing

You may opt out of marketing communications from boss97 at any time. To stop receiving promotional messages, adjust your communication settings in your boss97 account or contact our customer support. Opting out of marketing communications will not affect your core account services.

Data Portability

You have the right to request a copy of your personal data in a machine-readable format (such as CSV or JSON) so that you can reuse it on another platform if needed. Please contact boss97 support to submit this request formally.

Right to Restrict Processing

In certain situations — for example, when you dispute the accuracy of your data or the lawfulness of its processing — you may request that boss97 temporarily restrict the processing of your data while the dispute is being resolved. Please contact customer support to discuss your specific case.

To exercise any of the above rights, you may contact the boss97 team by email at support@boss97.best, stating the right you wish to exercise and providing sufficient information to verify your identity. boss97 will process all valid requests within a reasonable timeframe.

10Children's Data & Age Restrictions

The boss97 platform is an exclusive service for adults aged 18 and above. boss97 does not knowingly collect, process, or store personal data from individuals under the age of 18.

During the boss97 account registration process, all applicants are required to confirm that they are at least 18 years of age. Any account found or suspected to belong to a minor will be suspended immediately, and the associated data will be deleted in accordance with boss97's established internal procedures.

If you believe a minor has registered for or is using the boss97 platform, please notify us immediately at support@boss97.best so that prompt action can be taken.

11Links to Third-Party Services

The boss97 platform integrates several third-party services for operational purposes, primarily payment gateways such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX via Maybank2u or CIMB Clicks. When you use these services to make deposits or withdrawals, you interact directly with their platforms, which have their own privacy policies.

Boss97 is not responsible for the privacy practices or content of any third-party services accessed through or in connection with the boss97 platform. We recommend reading the privacy policy of each third-party service you use to understand how they handle your data.

Note: When you leave the boss97 platform to use payment gateway services such as Touch 'n Go, DuitNow, or your bank's FPX interface, boss97's Privacy Policy no longer applies. Data you provide to those services is subject to their respective privacy policies.

12Amendments to This Privacy Policy

Boss97 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. The "Last Updated" date displayed at the top of this page will be revised whenever changes are made.

For significant changes to how we use your personal data, boss97 will endeavour to provide members with adequate notice via in-platform notifications or email before the changes take effect. For minor changes that do not materially affect your privacy rights, the changes will take effect immediately upon publication.

We encourage you to review this Privacy Policy periodically to stay informed about how boss97 protects your data. Continued use of the boss97 platform after any changes are published constitutes your acceptance of the updated Privacy Policy.

13How to Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how boss97 handles your personal data, please do not hesitate to get in touch. The boss97 team is ready to assist you in both English and Bahasa Malaysia.

How to reach the boss97 privacy team:

  • Email: support@boss97.best — use the subject line "Data Privacy Inquiry" to ensure your message reaches the right team promptly.
  • Live Chat: Available on the boss97 platform 24 hours a day, 7 days a week. Our support team will escalate your privacy enquiry to the responsible team if needed.

Boss97 is committed to responding to all valid privacy-related enquiries within 14 business days of receipt. For more complex requests such as comprehensive data deletion, processing may take longer and you will be kept informed of your request's progress on a regular basis.

Communications Security: boss97 will never ask for your account password via email, live chat, or any other communication channel. If you receive such a request claiming to be from boss97, do not provide that information and report it to us immediately.

Other boss97 Policies

This Privacy Policy should be read alongside boss97's other platform documents for a more complete understanding.

Terms & Conditions

The primary document governing the relationship between you and boss97 — covering membership eligibility, betting rules, bonus terms, and platform liability limits. Should be read alongside this Privacy Policy.

Read Terms & Conditions
Responsible Gambling

The policies and tools boss97 provides to help members manage their betting habits responsibly — including deposit limits, session time limits, and self-exclusion options.

Read This Policy
Frequently Asked Questions (FAQ)

Answers to the questions most frequently asked by boss97 members — covering account management, deposits, withdrawals, bonuses, and general platform usage.

View FAQ
Summary of boss97's Privacy Commitments

Boss97 is committed to protecting the privacy of every member. All personal data — including phone numbers, financial transaction records via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, and betting history — is secured with high-grade 256-bit SSL encryption.

We never sell or disclose your data to third parties for marketing purposes. Any data sharing is limited to legitimate operational requirements and is clearly stated in this Privacy Policy. You have the full right to access, correct, and request deletion of your data.

For privacy-related enquiries, contact us at support@boss97.best. All inquiries will be responded to within 14 business days by the responsible team at boss97.

Ready to Join a Platform That Respects Your Privacy?

Boss97 is built on the trust of Malaysian players. Your data is protected, your transactions are secure, and your privacy is respected. Register in under two minutes and start a transparent, responsible betting experience.

Bahasa Melayu