Your privacy is more than a legal obligation to BossWin168 — it is a moral responsibility we take seriously every day. This document clearly explains how we collect, use, store, and protect your personal information as a member of our platform.
Six core principles that define how we handle the personal data of all BossWin168 platform members.
BossWin168 only collects data that is strictly necessary for platform operations. We do not gather irrelevant or excessive information simply for the sake of having more data.
All data transmitted between your device and BossWin168's servers is protected by SSL 256-bit encryption — the same level of security used by Malaysian banking institutions.
BossWin168 does not sell, rent, or share members' personal information with any third party for commercial marketing purposes without your explicit consent.
Access to members' personal data within BossWin168 is restricted to staff who genuinely need it to carry out their duties, governed by role-based access control (RBAC).
BossWin168's Privacy Policy is built to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a data subject are protected.
You have the right to access, correct, or request the deletion of your personal data at any time. Requests will be processed within 14 business days.
Welcome to BossWin168's Privacy Policy page. This policy describes our platform's privacy practices and explains your rights regarding the personal data we hold. BossWin168 is committed to protecting the personal information of all its members in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).
By registering for or using the BossWin168 platform at bosswin168.biz, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.
BossWin168 collects various categories of personal data depending on the nature of your interaction with our platform. Our principle is simple: we collect only what is genuinely necessary — nothing more, nothing less.
| Data Category | Example | Requirements |
|---|---|---|
| Identity | Full name, MyKad, date of birth | Mandatory – KYC |
| Relationship | Phone number, email | Required – account |
| Financial | Bank accounts, e-wallets | Mandatory – RM transactions |
| Technical | IP, device, cookies | Automatic – security |
| Games | Betting history, winnings | Automatic – operations |
Your personal data is collected through various points of interaction with the BossWin168 platform:
BossWin168 uses collected personal data solely for the following purposes:
BossWin168 does not sell members' personal data. However, in certain circumstances, we may need to share data with the following parties:
We work with selected third-party service providers to support platform operations — including payment processors (DuitNow and FPX gateways), cloud service providers, and security audit firms. All providers are bound by strict confidentiality agreements and may only use your data for purposes we have specified.
BossWin168 may disclose personal data where required by Malaysian law, court order, or direction from a competent authority such as Bank Negara Malaysia or law enforcement agencies.
In cases of fraud, money laundering, or serious security threats, BossWin168 reserves the right to share relevant information with Malaysian authorities for investigation and enforcement purposes.
BossWin168 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure:
In the event of a serious data breach that affects members' rights and freedoms, BossWin168 will notify affected members and the relevant authorities within the timeframe required by law.
BossWin168 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or to comply with applicable legal requirements:
| Data Type | Retention Period |
|---|---|
| Active account data | For the duration of the active account + 5 years after closure |
| Financial transaction records | 7 years (legal requirement) |
| Security & access logs | 2 years |
| Support communication records | 3 years |
| KYC Documents | 5 years after account closure |
| Cookie data (session) | Until session ends or a maximum of 30 days |
Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you.
As a BossWin168 member and data subject under Malaysia's PDPA, you have the following rights with respect to your personal data:
To exercise any of the rights above, please contact the BossWin168 customer support team via Live Chat or email at support@bosswin168.biz. We will process your request within 14 business days.
BossWin168 uses cookies and similar technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our platform.
| Type | Purpose | Status |
|---|---|---|
| Session login, security, and core platform functionality | Required | |
| Understanding how users interact with the platform to drive improvements | Optional | |
| Saving language settings, themes, and user preferences | Optional |
You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the BossWin168 platform.
BossWin168 does not target or accept members under the age of 18. Our platform is not designed for minors, and we do not knowingly collect personal data from individuals known to be under 18.
Should we discover that we have collected data from a minor, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect that an account has been created by their underage child are advised to contact us promptly.
In the course of operating the BossWin168 platform, your personal data may be processed or stored on servers located outside Malaysia. When this occurs, BossWin168 ensures that such data transfers are carried out with protections equivalent to or greater than those required under Malaysian law.
We enter into comprehensive data processing agreements (DPAs) with all our international service providers to ensure your data remains protected regardless of where it is physically processed.
BossWin168 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform operations. Each new version supersedes the previous one.
For material changes — those that significantly affect how we use your data or your rights — BossWin168 will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. The "Updated" date at the top of this document reflects the date of the latest version of this Privacy Policy.
If you have any questions, concerns, or complaints regarding BossWin168's Privacy Policy or how we handle your personal data, please contact us:
We encourage you to reach out to us directly with any data-related concerns before filing a formal complaint with the relevant authorities. We are committed to resolving all privacy issues promptly and professionally.
Data related to the following payment methods is retained for transaction records in MYR only:
Full card numbers or e-banking passwords never stored on BossWin168's servers.
BossWin168 fully respects and upholds your rights as a data subject under Malaysia's Personal Data Protection Act 2010.
You may request a copy of all personal data BossWin168 holds about you. Requests will be processed within 14 business days.
If your data is inaccurate or out of date, you may request a correction. Updates will be made within 7 business days.
You may request the deletion of your personal data, subject to any legal retention requirements that remain applicable.
You may object to the processing of your data for specific purposes, particularly direct marketing. Such objections will be honoured immediately.
Where processing of your data is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
You may request your data in a structured, machine-readable format for transfer to another platform of your choice.
Your privacy and data security are at the heart of the trust you place in BossWin168. Register today and enjoy over 200 top games — Live Casino, Malaysia Super League football betting, jackpot slots, and lottery — in an environment that is safe, fair, and fully protected.