Your Data Is Protected
All personal data is encrypted in transit and at rest using industry-standard 256-bit SSL/TLS protocols. We do not sell your data to third parties.
No Unauthorised Sharing
We share your data only with parties necessary to operate your account — payment processors, KYC providers, and fraud prevention services — under strict confidentiality obligations.
You Control Your Data
You have the right to access, correct, and request deletion of your personal data held by bos288, subject to legal retention obligations.
Transparent Cookie Use
We use cookies and similar technologies for session management, analytics, and fraud prevention. Cookie preferences can be managed through your browser settings.
Introduction
bos288 ("bos288", "we", "us", "our") is the operator of the online sportsbook and live casino platform accessible at https://bos288.click and all associated digital services. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered Players, website visitors, and prospective customers.
This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bos288. It applies to all personal data collected through your use of the bos288 website, mobile application, customer support channels, and any other services offered by bos288 under the bos288 brand.
By registering an account with bos288, accessing the platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the bos288 platform.
This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which form part of your agreement with bos288.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:
- "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, online identifiers, and financial information.
- "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, bos288 is the Data Controller.
- "Data Processor" — a third party that processes Personal Data on behalf of bos288 pursuant to a written agreement incorporating appropriate data protection obligations.
- "Player" — any natural person who has registered a verified account on the bos288 platform.
- "KYC" — Know Your Customer; the identity and age verification process required under bos288's licensing obligations and anti-money laundering policies.
- "Cookies" — small text files placed on your device by the bos288 platform for the purposes of session management, preference storage, analytics, and fraud prevention.
Data Controller Information
bos288 acts as the Data Controller in respect of all Personal Data collected through the bos288 platform. As Data Controller, bos288 determines the purposes for which your Personal Data is collected and the manner in which it is processed.
bos288 operates under international online gaming licensing. Our data processing activities are conducted in accordance with the data protection principles applicable under our licensing jurisdiction, which include requirements for lawful processing, data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality.
For all privacy-related enquiries, data access requests, or complaints, please contact our Data Protection team at [email protected]. We aim to respond to all data-related requests within thirty (30) calendar days.
Information We Collect
bos288 collects Personal Data from you in the following categories and through the following means:
4.1 Registration & Account Data
When you create a bos288 account, we collect:
- Full legal name as it appears on your government-issued identification
- Date of birth (for mandatory age verification — 21+ enforcement)
- Residential address, including city, state, and postcode
- Email address and mobile phone number
- Username and encrypted password
- Preferred language and currency (MYR is the default for Malaysian players)
4.2 KYC & Identity Verification Documents
To comply with our licensing obligations and anti-money laundering requirements, we collect and process the following documents upon request:
- Government-issued photo identification (Malaysian Identity Card / MyKad, passport, or driving licence)
- Proof of address documentation (utility bills, bank statements, or official correspondence issued within the last three months)
- Proof of payment method ownership (screenshots or statements evidencing ownership of Maybank, CIMB, Public Bank, Touch 'n Go eWallet, DuitNow, or other registered payment instruments)
- Source of funds documentation where required by risk-based assessment thresholds
4.3 Financial & Transaction Data
We collect records of all financial transactions conducted through your bos288 account, including:
- Deposit amounts, methods, timestamps, and transaction references
- Withdrawal requests, processed amounts, destination method details, and completion timestamps
- Bonus credits, wagering activity, and cashback calculations
- Account balance history and net win/loss records
4.4 Technical & Usage Data
We automatically collect certain technical information when you access the bos288 platform:
- IP address and approximate geolocation data
- Device type, operating system, browser type, and screen resolution
- Session duration, pages visited, and features interacted with
- Referral source (if you arrived via an affiliate or partner link)
- Error logs and crash reports for platform improvement purposes
4.5 Communications Data
When you contact bos288 through Live Chat, WhatsApp, email, or any other support channel, we retain records of those communications including message content, timestamps, and resolution outcomes. These records are used for quality assurance, compliance, and dispute resolution purposes.
How We Use Your Personal Data
bos288 uses your Personal Data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, identity documents |
| Age verification and KYC compliance | Date of birth, identity documents, address proof |
| Processing deposits and withdrawals | Financial data, payment method details |
| Fraud prevention and anti-money laundering | Technical data, financial data, identity documents |
| Customer support and dispute resolution | Communications data, account data, transaction records |
| Responsible gambling monitoring | Wagering history, session data, account flags |
| Platform improvement and analytics | Technical and usage data (aggregated/anonymised) |
| Marketing communications (with consent) | Contact details, preferences, wagering history |
| Legal and regulatory compliance | All categories as required by applicable obligations |
We will not use your Personal Data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.
Legal Basis for Data Processing
bos288 processes your Personal Data on the following legal bases:
- Contractual necessity: Processing required to create and operate your account, process transactions, and deliver the services described in our Terms & Conditions.
- Legal obligation: Processing required to comply with anti-money laundering obligations, KYC requirements imposed by our licensing framework, and any applicable law enforcement requests.
- Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and the improvement of our services, where such interests are not overridden by your fundamental rights.
- Consent: Processing of your data for optional marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Data Sharing & Third-Party Disclosure
bos288 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your Personal Data with carefully selected third parties in the following limited circumstances:
7.1 Payment Processing Partners
To process deposits and withdrawals through Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, and cryptocurrency networks, we share necessary transaction data with authorised payment processors. These processors are bound by strict confidentiality obligations and are not permitted to use your data for any purpose other than transaction processing.
7.2 Identity Verification Service Providers
We engage licensed KYC and identity verification providers to assist with age checks, document authentication, and fraud screening. These providers process your identity documents and return a verification outcome to bos288; they do not retain your documents beyond what is contractually permitted.
7.3 Fraud Prevention & Security Services
Technical and usage data may be shared with fraud prevention services to identify and prevent unauthorised account access, payment fraud, and bonus abuse. These services may cross-reference your data against shared fraud databases within the licensed online gaming industry.
7.4 Legal & Regulatory Disclosures
bos288 may disclose your Personal Data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or licensing obligations. We will notify you of such disclosures where legally permitted to do so.
Important: bos288 will never share your Personal Data with third parties for advertising, profiling, or data brokerage purposes without your explicit prior consent.
International Data Transfers
As an internationally licensed platform, bos288 may transfer your Personal Data to countries outside Malaysia in order to operate its services. Such transfers may occur when data is processed by payment partners, KYC providers, or cloud infrastructure providers located in other jurisdictions.
Where Personal Data is transferred internationally, bos288 ensures that appropriate safeguards are in place, including: data processing agreements incorporating standard contractual clauses, transfers to jurisdictions with adequate data protection frameworks, or other legally recognised transfer mechanisms consistent with applicable international data protection standards.
By using the bos288 platform, you acknowledge and consent to the potential international transfer of your Personal Data as described in this section, subject to the safeguards outlined above.
Data Retention
bos288 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations, whichever is longer.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years post-closure |
| KYC documents and identity records | 5 years from account closure (AML compliance) |
| Financial transaction records | 5 years from transaction date |
| Customer support communications | 3 years from last interaction |
| Technical and session logs | 12 months from collection date |
| Marketing preference records | Until consent withdrawal + 12 months |
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to an identified individual. Certain aggregated, anonymised analytics data may be retained indefinitely for platform improvement purposes.
Cookies & Tracking Technologies
The bos288 platform uses cookies and similar tracking technologies to enable core platform functionality, analyse usage patterns, and improve the overall user experience. By continuing to use the bos288 platform, you consent to our use of cookies as described in this section.
10.1 Strictly Necessary Cookies
These cookies are essential for the bos288 platform to function. They enable you to navigate the site, maintain your logged-in session, and access secure areas of the platform. These cookies cannot be disabled without impairing core platform functionality.
10.2 Analytical Cookies
We use analytical cookies to understand how Players interact with the bos288 platform — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data is used in aggregated, anonymised form to improve platform design and performance.
10.3 Fraud Prevention Cookies
Certain cookies and device fingerprinting technologies are used to identify suspicious login patterns, detect bot activity, and prevent account takeover fraud. These cookies are a core part of our security infrastructure and cannot be disabled for active sessions.
10.4 Managing Your Cookie Preferences
You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bos288 platform. Instructions for managing cookies in major browsers are available from browser vendor support pages.
Your Data Protection Rights
Subject to applicable law and the requirements of our licensing obligations, you have the following rights in respect of your Personal Data held by bos288:
- Right of Access: You may request a copy of the Personal Data bos288 holds about you. We will provide this within 30 calendar days of a verified request.
- Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. Account details may be updated via your account settings or by contacting support.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data required for AML compliance cannot be deleted before the mandatory retention period expires.
- Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, for example while the accuracy of data is disputed.
- Right to Data Portability: Where processing is based on consent or contract, you may request your Personal Data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing based on our legitimate interests, including direct marketing communications. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of the rights above, please contact our Data Protection team at [email protected]. We may require you to verify your identity before processing any data rights request.
Security Measures
bos288 implements a comprehensive range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and bos288 servers
- Encryption of sensitive data at rest, including identity documents and financial records
- Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis
- Two-factor authentication (2FA) available for all Player accounts and mandatory for all administrative staff
- Continuous 24/7 automated monitoring for anomalous login patterns and transaction activity
- Regular independent security audits and penetration testing by qualified third-party assessors
- Formal incident response procedures for data breach detection, containment, and notification
Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for immediately notifying bos288 support if you suspect any unauthorised access to your account.
Children's Privacy
The bos288 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process.
If bos288 becomes aware that Personal Data has been collected from a person under the age of 21 — whether through fraudulent registration, falsified identity documents, or any other means — the relevant account will be immediately suspended, all associated funds and winnings will be forfeited pending investigation, and the Personal Data will be securely deleted to the extent permitted by applicable anti-money laundering record-keeping requirements.
21+ Policy: If you have reason to believe that a minor has registered an account on the bos288 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
Policy Amendments
bos288 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our service offering. Any amendments will be published on this page with a revised effective date. Where changes are material — for example, where we introduce a new processing purpose or a new category of third-party sharing — we will notify registered Players via email or in-platform notification prior to the change taking effect.
Your continued use of the bos288 platform following publication of any revised Privacy Policy constitutes your acceptance of the updated version. If you do not accept any amendment to this Policy, you must discontinue use of the platform and may request account closure by contacting support.
Archived versions of this Privacy Policy are available upon request by contacting our Data Protection team.
Contact & Privacy Complaints
For all queries relating to this Privacy Policy, including data access requests, rectification requests, erasure requests, and complaints about how your Personal Data has been handled, please contact our Data Protection team:
- Email: [email protected] — mark your email subject line "Privacy / Data Request"
- Live Chat: Available 24/7 on the bos288 platform — average response time 3–5 minutes
- WhatsApp: Available 24/7 — contact details available within your registered account
We aim to acknowledge all privacy-related requests within five (5) business days and to provide a substantive response or resolution within thirty (30) calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline and the reasons for the delay.
If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in your jurisdiction. bos288 will cooperate fully with any supervisory authority investigation.
Support is available in English, Bahasa Melayu, and Mandarin. Malaysian players may also contact our support team for guidance on their data rights under this Policy.
What Our Privacy Policy Guarantees You
Six clear privacy commitments bos288 makes to every player on our platform.
No Data Sales
bos288 does not and will never sell your Personal Data to third parties, data brokers, or advertisers. Your data is used solely to operate your account and improve our services.
Clear Retention Limits
We retain your data only for as long as legally required or operationally necessary. Data that is no longer needed is securely deleted or anonymised in accordance with our retention schedule.
Meaningful Rights
Your rights to access, correct, port, restrict, and erase your data are real and actionable. We respond to data requests within 30 days and do not create unnecessary friction in the process.
Bank-Grade Encryption
256-bit SSL encryption, encrypted storage, role-based access controls, and regular independent security audits protect every piece of data we hold about you.
Transparent Processing
We clearly state what data we collect, why we collect it, and who we share it with. No hidden processing purposes, no surprise uses of your information without notice.
Accessible Privacy Support
Our 24/7 multilingual support team — in English, Bahasa Melayu, and Mandarin — is available to assist with any privacy-related question or data request from Malaysian players.
Privacy Questions or Data Requests?
Our Data Protection team is available 24/7 in English, Bahasa Melayu, and Mandarin. Contact us via Live Chat or email, or visit our homepage to learn more about the bos288 platform.
For players aged 21 and above only. Please gamble responsibly.