BOS898 is committed to protecting the personal data of every member and visitor to this platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you hold over your own data.
These principles underpin every data handling decision at BOS898. They are not aspirational statements — they are enforceable commitments built into our operational processes.
We collect only the personal information that is strictly necessary to operate your account, process transactions, and comply with our regulatory obligations. We do not collect data speculatively or beyond what each specific purpose requires.
All personal data stored and transmitted on the BOS898 platform is protected by 256-bit SSL encryption. Access to personal data within our organisation is restricted to authorised personnel on a strict need-to-know basis, with audit trails maintained.
BOS898 does not sell, rent, or lease your personal information to unafiliated third parties for their own marketing or commercial purposes — under any circumstances. Your data is not a product we trade.
You have meaningful rights over your personal data — including the right to access, correct, restrict, and in certain circumstances erase the information we hold about you. These rights are exercisable by contacting our support team directly.
Personal data is retained only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. Once no longer required, data is securely deleted or anonymised.
This Privacy Policy is written in plain language, publicly accessible, and kept up to date. We will notify members of any material changes to the way we process their personal data with reasonable advance notice where practicable.
This Privacy Policy ("Policy") is published by BOS898 ("the Platform", "we", "us", "our") and applies to all personal data collected from users ("you", "your", "Member") who register an account with, access, or interact with the BOS898 platform available at bos898.asia
BOS898 acts as the data controller in respect of personal data collected through this Platform. We are committed to handling your personal information responsibly, in accordance with applicable data protection legislation and with the transparency and security that our Malaysian members rightly expect.
By registering an account or otherwise using the BOS898 Platform, you acknowledge that you have read and understood this Privacy Policy, and that you consent to the collection and processing of your personal data in the manner described herein. If you do not agree with any part of this Policy, please do not register or continue to use the Platform.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably identify a living individual, either directly (e.g., full name, Malaysian IC number) or indirectly (e.g., IP address combined with other data). |
| Processing | Any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction. |
| Data Controller | The entity that determines the purposes and means of processing personal data. For this Platform, the Data Controller is BOS898. |
| Data Processor | A third party that processes personal data on behalf of BOS898, subject to a binding data processing agreement (e.g., payment gateway operators, KYC verification providers). |
| Consent | A freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data for a stated purpose. |
| KYC | Know Your Customer — the identity verification process required before withdrawals can be processed, involving submission of government-issued identification documents. |
| Cookie | A small text file placed on a user's device by a website to store session information, preferences, and analytics data. |
BOS898 collects the following categories of personal data from members and platform visitors. Data is collected only to the extent necessary for the purposes described in Section 5 of this Policy.
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, Malaysian MyKad number or passport number | Account registration and KYC verification |
| Contact Data | Email address, Malaysian mobile phone number, residential address | Account registration |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), transaction history, deposit and withdrawal records in MYR | Deposit / withdrawal processing; KYC |
| Gaming Data | Bet history, game selections, session duration, win/loss records, bonus usage, responsible gambling settings | Platform usage (automatic) |
| Technical Data | IP address, device type, browser type and version, operating system, session tokens, time zone | Platform access (automatic) |
| Communications Data | Records of live chat interactions, email correspondence, dispute submissions | Customer support contact |
| Verification Documents | Copies of government-issued ID, proof of payment method, selfie verification images where required | KYC verification process |
BOS898 collects personal data through the following channels:
BOS898 processes your personal data for the following specific, legitimate purposes:
BOS898 processes personal data on the following legal bases, as applicable to each processing activity:
BOS898 does not sell, rent, or trade your personal data to any unaffiliated third party for commercial or marketing purposes. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:
All third-party data processors engaged by BOS898 are bound by contractual data processing agreements that prohibit them from using your personal data for any purpose other than that specified by BOS898, and that require them to maintain appropriate technical and organisational security measures.
BOS898 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Identity & KYC Documents | Duration of account + 5 years after closure | Regulatory / AML obligation |
| Transaction Records (deposits, withdrawals) | 7 years from transaction date | Legal / financial record-keeping |
| Gaming History | 3 years from last account activity | Responsible gambling monitoring; dispute resolution |
| Customer Support Records | 2 years from last interaction | Quality assurance; dispute resolution |
| Technical / Log Data | 12 months | Security; fraud prevention |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Consent management |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.
BOS898 uses cookies and similar tracking technologies to operate the Platform and to improve the user experience. The following types of cookies are used:
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to access and use the Platform. BOS898 does not use third-party advertising cookies or cross-site tracking technologies.
BOS898 implements a multi-layered security framework to protect the personal data of all members. Our technical and organisational security measures include:
As a BOS898 member whose personal data is processed by us, you hold the following rights. These rights are subject to applicable legal limitations and regulatory obligations that may require us to retain certain data regardless of a member's request.
Request a copy of the personal data BOS898 holds about you, along with information about how it is being processed.
Request correction of inaccurate personal data, or completion of incomplete personal data held in your account.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that processing of your personal data be restricted in certain circumstances, such as where you contest its accuracy or object to its use.
Request receipt of your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
Object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing where applicable.
To exercise any of the above rights, please contact BOS898's support team via live chat or email at [email protected]. We will acknowledge your request within 5 business days and aim to provide a substantive response within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you and explain the reason for the extension.
The BOS898 Platform is strictly intended for use by individuals aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the BOS898 registration and KYC process.
If BOS898 becomes aware that personal data has been collected from an individual who does not meet the age eligibility requirement, we will take immediate steps to close the associated account, delete the personal data collected (subject to any legal obligations requiring its retention), and — where applicable — return any deposited funds to the originating payment method.
BOS898 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or regulatory requirements. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
Where amendments are material — for example, where we introduce a new purpose for processing personal data or share data with a new category of third party — BOS898 will endeavour to provide advance notice to registered members via the Platform or registered email address. Continued use of the Platform following any such notification constitutes acceptance of the revised Policy.
We encourage members to review this Policy periodically to remain informed about how their personal data is being protected and used.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way BOS898 processes your personal data, please contact us through the following channels:
For information about how to manage your gambling activity, including deposit limits, session reminders, and self-exclusion, please visit our Responsible Gambling page. For full details of your account usage rights and obligations, please refer to our Terms & Conditions.