Rujukan Laman

Privacy Policy – How We Handle Your Information

We collect account details, payment data, and device information when you open an account or deposit via Touch 'n Go, GrabPay, Boost dan FPX.

Account & contact dataPayment transaction recordsDevice & browser fingerprintsCookie & session tokensSupport chat logs

View Lobby Read FAQ

What We Collect and Why We Need It

bos888 Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

When you register, we ask for your name, email, phone number, and date of birth so we can verify your account and send withdrawal confirmations. Payment details—wallet ID for Touch 'n Go, GrabPay, Boost dan FPX, transaction amounts, and timestamps—are stored to process deposits and withdrawals

1
and to comply with record-keeping requirements where local law permits. We log IP addresses, device type, operating system, and browser version to detect duplicate accounts and block access from restricted regions. Cookies track your session so you stay signed in when you switch from slot rooms
2
to live tables, and they remember language and currency preferences. Support chat transcripts are kept to resolve disputes and improve our help-desk responses. We do not sell your data to third parties; we share it only with payment processors and fraud-prevention vendors under confidentiality agreements. You
3
may request a copy of your data, ask us to correct errors, or delete your account by contacting support; we honour those requests within thirty days where local law permits, though we retain transaction records for regulatory and dispute-resolution periods as required.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

PRIVACY CONTACT

How to Reach Us About Your Data

If you want to view the personal information we hold, update an outdated phone number or email, or ask us to remove your account and associated records, our support team will walk you through the process. Response times are usually under twenty-four hours for data requests, and we confirm each step by email so you know when your request is complete.

Team online

Live chat

Open the chat bubble in the bottom corner of any lobby page and choose the data-request topic. An agent will ask for your registered email and the specific action you need—viewing your file, correcting a detail, or scheduling account deletion—then send a confirmation link to that email address within one business day.

Privacy email

Send your request to the privacy address shown in your account settings footer. Include your full name, registered email, and a clear description of what you want—data export, correction, or deletion. We reply with next steps and a secure upload link if we need identity documents to verify the request before we proceed.

Account settings

Sign in, navigate to your profile, and click the privacy tab to download a JSON export of your account data, transaction history, and support tickets. You can also toggle marketing email preferences and request closure directly from that page; closure requests are queued and completed within thirty days where local law permits.

DATA HANDLING

Security, Retention, and Your Control

We encrypt payment and login credentials with industry-standard protocols, store backups in geographically separated data centres, and run quarterly audits of access logs.

Encryption at rest

All account credentials, wallet IDs, and transaction logs are encrypted using AES-256 before they reach our database. Backups are written to separate storage regions and protected by the same key-management system, so even if one server is compromised the data remains unreadable without the master key held offline.

Access control

Only authorised support and compliance staff can view your personal information, and every lookup is logged with a timestamp, employee ID, and reason code. Quarterly audits flag unusual access patterns, and any unexplained query triggers an internal review before the data is used to respond to your support ticket or regulatory request.

Cookies

We drop a session cookie when you sign in so you stay authenticated across lobby pages, and a preference cookie that remembers your language and currency choices for seven days. Third-party analytics tags measure page-load speed and button clicks but do not capture form inputs or wallet balances; you can block those tags in your browser without affecting deposit or withdrawal functions.

Retention periods

Account profiles, email addresses, and phone numbers are kept while your account is open. Transaction records—deposit amounts, wallet IDs, timestamps—are archived for six years after account closure to meet local record-keeping rules where applicable. Marketing opt-in flags and device fingerprints are deleted ninety days after closure unless a chargeback dispute or fraud investigation requires us to preserve them longer.

Data export

Request a machine-readable copy of your account data from the privacy tab in your profile. The export includes registration details, transaction history, support chat logs, and cookie preferences in JSON format. We email a download link within forty-eight hours; the link expires after seven days for security, so save the file promptly.

Deletion requests

Submit a closure request through live chat, the privacy email, or the account-settings page. We verify your identity, close your account, and delete personal information within thirty days where local law permits. Transaction records and dispute logs may be archived beyond that period to satisfy regulatory and legal obligations, but they are no longer accessible to marketing or customer-support teams.

Privacy Policy FAQ

Visitors in George Town and across Malaysia ask these questions most often. If your concern is not covered here, open a live-chat session or email the privacy address shown in your account footer and we will reply within one business day.

We ask for your full name, email address, phone number, date of birth, and preferred currency. Payment details—Touch 'n Go, GrabPay, Boost dan FPX wallet IDs—are added when you make your first deposit. Device fingerprints, IP addresses, and browser metadata are logged automatically to verify eligibility and detect duplicate accounts where local law permits.

Your phone number is used for two-factor authentication codes during withdrawals and password resets. Date of birth confirms you meet the minimum age requirement where applicable and helps our support team verify your identity if you forget your login credentials or request account recovery after a long period of inactivity.

Deposit and withdrawal logs, including amounts, wallet IDs, and timestamps, are archived for six years after account closure to satisfy regulatory record-keeping rules where local law requires it. Personal profile data—name, email, phone—is deleted within thirty days of closure unless a chargeback dispute or fraud case demands longer retention for legal defence.

Yes. Sign in, go to your account settings, and open the privacy tab. Click the export button and we will email a JSON file containing your registration details, transaction history, support tickets, and cookie preferences within forty-eight hours. The download link expires after seven days, so save the file as soon as you receive it.

We share payment data with Touch 'n Go, GrabPay, Boost dan FPX processors to complete deposits and withdrawals. Fraud-prevention vendors receive hashed device fingerprints and IP addresses to flag duplicate accounts. All partners sign confidentiality agreements and are prohibited from using your data for marketing. We do not sell personal information to advertisers or data brokers.

A session cookie keeps you signed in when you navigate from slot rooms to live tables. A preference cookie remembers your language and currency for seven days. Third-party analytics tags measure page speed and button clicks but never capture wallet balances or form inputs. You can block analytics tags in your browser settings; session and preference cookies are required for the lobby to function.

Open live chat, email the privacy address in your footer, or visit the privacy tab in account settings and click the closure button. We verify your identity, process any pending withdrawals, and delete your profile within thirty days where local law permits. Transaction records may be retained longer for regulatory compliance but are isolated from active systems and inaccessible to marketing or support teams.

Privacy Policy – How We Handle Your Information

How to Reach Us About Your Data

Live chat

Privacy email

Account settings

Security, Retention, and Your Control

Encryption at rest

Access control

Cookies

Retention periods

Data export

Deletion requests

Privacy Policy FAQ

01 What personal data do you collect when I register?

02 Why do you need my phone number and date of birth?

03 How long do you keep my transaction records?

04 Can I see the data you hold about me?

05 Do you share my information with third parties?

06 What cookies do you use and can I disable them?

07 How do I delete my account and all personal data?

Related Pages