At bosplay, your privacy is a matter we handle with the same seriousness as we apply to platform security. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information.
Six principles guide every data decision we make. These are not aspirations — they are operational standards built into how bosplay handles your information.
We collect only the personal data that is strictly necessary for account registration, identity verification, payment processing, and compliance obligations. We do not collect data speculatively or for purposes we cannot justify.
Bosplay does not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial purposes. Any data sharing with service partners is governed by strict contractual data processing agreements.
All data transmitted between your device and bosplay is protected by industry-standard 256-bit TLS encryption. Sensitive information such as payment details and identity documents is stored in encrypted form with access restricted to authorised personnel only.
Internal access to your personal data is governed by role-based access controls. All access to player records is logged and audited. Bosplay employees may not access player data outside of defined operational requirements.
You have the right to access, correct, export, and in certain circumstances, delete the personal data bosplay holds about you. Requests are processed within 30 days and are subject to our legal retention obligations as set out in this Policy.
We do not hold your data indefinitely. Retention periods are tied to the purpose for which data was collected and our legal obligations. Account records are typically retained for a defined period following account closure as required by applicable compliance frameworks.
This Privacy Policy ("Policy") is issued by bosplay ("bosplay", "we", "us", "our"), the operator of the online gaming platform accessible at bosplay.click ("the Platform"). This Policy governs the collection, processing, storage, and disclosure of personal data relating to individuals ("you", "User") who access or use the Platform, contact our support team, or interact with us in any capacity.
Bosplay is committed to handling personal data responsibly and in accordance with applicable international data protection standards. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms and Conditions, which govern your overall use of bosplay.
Malaysian Users: Malaysia's Personal Data Protection Act 2010 (PDPA) sets out the legal framework governing the processing of personal data in commercial transactions involving Malaysian residents. Bosplay is committed to operating in a manner consistent with these principles, including the processing of data lawfully, for specified purposes, with appropriate security measures in place.
If you have any questions about how bosplay processes your personal data, or if you wish to exercise any of your rights as described in this Policy, please contact our Data Protection contact as set out in Section 15.
For the purpose of this Privacy Policy, the following terms bear the meanings assigned below:
Bosplay collects personal data from you through a variety of interactions with the Platform. The categories of data we collect are described below:
When you create a bosplay account, we collect: full legal name, date of birth (to verify your 21+ eligibility), email address, mobile telephone number, preferred currency (MYR), and a username of your choosing.
To satisfy our compliance and anti-money-laundering obligations, we may request: copies of government-issued identity documents (Malaysian MyKad, passport, or equivalent), proof of residential address (utility bill or bank statement dated within three months), and documentation confirming ownership of payment accounts used on the Platform.
We collect records of all deposit and withdrawal transactions, including the payment method used (e.g., Touch 'n Go eWallet, DuitNow, FPX via Maybank, CIMB, Public Bank, Hong Leong Bank, Boost, GrabPay, or USDT TRC20), transaction amounts in MYR or cryptocurrency equivalent, and timestamps. Bosplay does not store full payment card numbers or banking login credentials.
We record your gaming history, including game titles played, wager amounts, outcomes, session durations, bonus usage, and VIP tier progression. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory compliance.
We automatically collect technical information when you access the Platform, including: IP address, device type and operating system, browser type and version, referring URLs, and session timestamps. This data assists us in delivering a consistent Platform experience and in identifying and preventing fraudulent or bot-driven access.
Where you contact bosplay support via live chat or email, we retain records of those communications to ensure continuity of service and to assist in dispute resolution. Support interactions may be monitored for quality assurance purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, phone, DOB | Account creation, age verification |
| KYC Documents | MyKad, passport, proof of address | Identity verification, AML compliance |
| Financial Data | Deposit/withdrawal records, MYR amounts | Transaction processing, fraud prevention |
| Gaming Activity | Wagers, outcomes, session data | Account management, RG monitoring |
| Technical Data | IP address, device info, browser | Security, fraud detection, UX delivery |
| Communications | Support chat logs, emails | Service delivery, dispute resolution |
Bosplay processes your personal data for the following purposes:
Bosplay processes your personal data on the following legal grounds:
Bosplay does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:
To process deposits and withdrawals, we share relevant transaction data with our payment technology partners, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency payment gateways. These providers act as Data Processors under contractual data processing agreements.
KYC documents and associated personal data are processed by our identity verification partner(s) who are contractually bound to use your data solely for the purpose of conducting identity checks on bosplay's behalf.
Gaming activity data may be shared with our game studio providers to the extent necessary to resolve technical disputes, verify outcomes, or conduct RNG audits. Studios receive only the minimum data required for these purposes.
We may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bosplay, its users, or the public.
Bosplay will never disclose your personal data to third parties for their own marketing purposes, nor will we share your data with any entity that has not entered into an appropriate data processing agreement with bosplay.
As an internationally operated platform, bosplay may transfer your personal data to jurisdictions outside Malaysia for processing by our service providers. Where such transfers occur, bosplay takes appropriate steps to ensure that your data is afforded a level of protection equivalent to that applied within Malaysia, including through the use of standard contractual clauses and data processing agreements with receiving parties.
By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Malaysia. We will not transfer your data to any recipient in a jurisdiction that does not provide adequate data protection safeguards without your knowledge.
Bosplay uses cookies and similar tracking technologies to deliver and improve the Platform experience. Cookies are small text files stored on your device by your browser when you access the Platform. The categories of cookies we use are as follows:
You may control cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from using bosplay's core features, though certain personalisation functions may be reduced.
Bosplay retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following general retention periods apply:
At the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.
Subject to applicable law and our legitimate compliance obligations, you hold the following rights in respect of the personal data bosplay processes about you. To exercise any of these rights, please contact us as described in Section 15. We will respond within thirty (30) calendar days of receiving a valid request.
Please note that certain rights are subject to limitations where legal obligations require us to retain data — for example, AML and KYC records cannot be deleted within the mandatory retention periods regardless of an erasure request.
The bosplay Platform is strictly restricted to persons aged 21 years and above. Bosplay does not knowingly collect personal data from any individual under the age of 21. If you believe that a minor has registered on the Platform or provided personal data, please contact us immediately at the contact details in Section 15 so that we may take prompt action to close the account and delete the associated data.
The protection of minors is a non-negotiable priority at bosplay. Age verification is conducted as part of our standard KYC process and any account found to be registered by a person under 21 will be closed immediately, with any balance forfeited in accordance with our Terms and Conditions.
Bosplay implements a layered technical and organisational security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:
Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. Bosplay will notify affected users and applicable regulatory bodies in the event of a data breach that poses a material risk to users' rights and freedoms, in accordance with applicable notification obligations.
The bosplay Platform does not include links to external third-party websites as a matter of deliberate policy. However, to the extent that any third-party services are integrated into the Platform (for example, payment gateways and game studio iframes), please be aware that those services operate under their own privacy policies and data practices.
Bosplay is not responsible for the data practices of third-party service providers beyond the scope of our data processing agreements with them. We encourage you to review the privacy policies of any third-party service you interact with independently of the bosplay Platform.
Bosplay reserves the right to update or modify this Privacy Policy at any time. Where changes are material — such as significant alterations to the categories of data collected, the purposes of processing, or User rights — we will notify you by posting a prominent notice on the Platform or by sending a notification to your registered email address.
The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Continued use of the Platform following notification of an update constitutes your acceptance of the revised Policy. If you do not accept an updated Policy, you should cease using the Platform and may close your account in accordance with our Terms and Conditions.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bosplay processes your personal data, or if you wish to exercise any of your data rights as described in Section 10, please contact us through any of the following channels:
We aim to acknowledge all data protection enquiries within five (5) business days and to resolve them fully within thirty (30) calendar days. Where a request is particularly complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the Bosplay Privacy Policy.
Our data protection team is available 24/7. For a full overview of how bosplay operates, visit the homepage or read our FAQ for common questions about accounts and payments.
By using bosplay you also agree to our Terms & Conditions and our Responsible Gambling Policy.