1. Introduction
BossPay99 ("we", "Platform" or "BossPay99") respects the privacy of every individual who uses our website and mobile app. This Privacy Policy has been drafted in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards.
This document outlines our practices regarding the collection, processing, storage, and protection of your personal data. By registering or continuing to use the BossPay99 platform, you consent to the collection and use of your information as described herein.
We encourage you to read this policy together with Terms and Conditions and Responsible Gaming Policy ours for a more comprehensive understanding of how this platform operates.
2. Information We Collect
BossPay99 collects information from various sources when you use our platform. The following are the main categories of data we collect:
2.1 Registration & Identity Information
- Full name as per identity card or passport
- Identity card number (MyKad) or passport number
- Date of birth and gender
- Email address and mobile number
- Current residential address
2.2 Financial Information
- Bank account number and bank name
- Account holder name (must match the registered name)
- Deposit and withdrawal transaction records
- Name of digital wallet used (Touch 'n Go eWallet, GrabPay, etc.)
2.3 Technical & Usage Information
- IP address and device type used
- Internet browser type and version
- Your device's operating system
- Login records including date, time and location
- Pages visited and time spent in each session
- General geolocation data (state/region only)
2.4 KYC (Know Your Customer) Data
To meet compliance and security requirements, we collect identity verification documents such as copies of your ID card, passport, bank statement, or recent utility bill. This KYC process is mandatory before your first withdrawal is approved, and serves as a protective measure for your account's security.
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity | Name, IC number, date of birth | Account verification & KYC |
| Contact | Email, phone number | Communication & Notifications |
| Financial | Bank account number, transaction records | Payment processing |
| Technical | IP address, device, browser | Security & Fraud Detection |
| Behavioural | Gaming activity, login dates | User Experience Improvement |
3. How We Use Your Data
Every piece of data collected by bosspay99 has a clear and legitimate purpose. We do not use your data beyond the scope stated below:
- Account management: To create, verify and maintain your account on the platform.
- Transaction processing: To process deposit, withdrawal and bonus payments securely and accurately.
- Identity verification (KYC): To comply with legal compliance requirements and prevent identity fraud.
- Platform security: To detect and prevent suspicious activity, money laundering and system abuse.
- Customer support: To provide accurate and effective assistance when you contact our team.
- Marketing communications: To send information about promotions, bonuses and platform updates — you may unsubscribe at any time.
- Service improvement: To analyse usage patterns and improve platform performance and usability.
- Legal compliance: To fulfil obligations to the relevant authorities when required by law.
4. Data Storage & Security
Your data security is our top priority. bosspay99 implements multiple layers of technical and organizational protection to keep your information safe at all times:
- 256-bit SSL Encryption for all data transmitted between your device and our servers.
- Static data encryption (at-rest encryption) for all records stored in our database.
- Two-Factor Authentication (2FA) available to all member accounts for an extra layer of security.
- 24/7 System Monitoring by our IT security team to detect any intrusion attempts.
- Strict internal access controls — only authorized staff may access sensitive member data.
- Regular security audits by independent third parties to ensure security standards are consistently upheld.
Your data is stored in data centres located in the Asia region with full physical and digital protection. Data is retained for as long as your account is active, plus the period required by law after account closure (typically 5–7 years for financial records).
5. Data Sharing with Third Parties
BossPay99 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we are required to share certain information:
- Payment service providers: To process your deposit and withdrawal transactions via FPX, digital wallets and local banks.
- Game software providers: Minimum information required to verify your eligibility to access certain games.
- Legal authorities: When required by court order, police directive, or legitimate legal compliance obligations.
- Identity verification services: For KYC purposes via trusted third-party verification platforms.
All third parties working with bosspay99 are bound by strict data protection agreements and may only use your information for specified purposes.
6. Cookies & Tracking Technologies
The bosspay99 platform uses cookies and similar tracking technologies to enhance user experience and analyse website performance. We use several types of cookies:
- Essential cookies: Required for core platform functions such as login session verification and security. Cannot be disabled.
- Analytics cookies: Helps us understand how users interact with the platform for improvement purposes — data is collected anonymously.
- Functional cookies: Stores user preferences such as language, region, and display settings for your convenience.
- Performance cookies: Monitors page response times and identifies technical issues for prompt resolution.
You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. This website does not use third-party cookies for advertising purposes.
7. Your Rights as a Member
Under Malaysia's PDPA and BossPay99's internal policies, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request the correction of inaccurate or incomplete information.
- Right to Erasure: Request the deletion of your data under certain circumstances permitted by law.
- Right to Object: Object to the processing of your data for direct marketing purposes.
- Right to Data Portability: Request your data in a machine-readable format for transfer to another platform.
- Right to Withdraw Consent: Withdraw consent for data processing at any time without affecting prior activities.
To exercise any of the above rights, please contact our support team via 24/7 Live Chat or email us at [email protected]. We will process your request within 14 working days.
8. Children's Data
BossPay99 is a platform intended exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data from individuals under the age of 18. If we discover that a child's data has been collected without our knowledge, we will promptly delete the information and terminate the associated account.
If you are a parent or guardian who believes your child has registered an account on our platform, please contact us immediately so that corrective action can be taken without delay.
9. Third-Party Links
The bosspay99 platform may contain links to third-party websites or services such as game providers and payment platforms. This Privacy Policy applies only to official bosspay99 websites and applications. We are not responsible for the privacy practices of any third-party websites. We encourage you to read the privacy policy of every site you visit.
10. Privacy Policy Amendments
BossPay99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. Any material amendments will be communicated to members via platform notification or email at least 7 days before changes take effect.
The "Updated" date at the top of this document reflects the date of the last amendment. Continued use of the platform after an amendment is published constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us via:
- 24/7 Live Chat: Available directly on the bosspay99 platform
- Email: [email protected]
- Frequently asked questions: Visit our FAQ page
We are committed to handling all privacy-related complaints seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.