Updated — January 2026

Privacy Policy BossPay — Your Personal Data Protection

BossPay takes every member's privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with Malaysia's Personal Data Protection Act (PDPA).

Commitment Data Protection BossPay

Six core principles that ensure your personal data is always safe and protected at BossPay.

256-Bit SSL Encryption

All data transmitted between your device and bosspay servers is protected by 256-bit SSL encryption — the same security technology used by Malaysia's leading banking institutions. Your personal information and financial transactions cannot be intercepted by third parties.

Secure & Limited Data Storage

Your personal data is stored on servers protected by multi-layered access controls. Only BossPay staff with specific authorisation may access your personal information, and only for purposes related to account management or legal compliance.

Privacy Controls in Your Hands

BossPay gives you full control over your personal data. You can request to review, update, or delete your information at any time by contacting our support team via Live Chat — no hassle, no fees.

Malaysia PDPA Compliance

BossPay's Privacy Policy is designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We only collect data that is genuinely necessary and use it in accordance with the purposes clearly stated to you at registration.

No Sale of Data to Third Parties

BossPay has never and will never sell, rent, or transfer your personal data to advertisers, data brokers, or any third party for marketing purposes. Your data belongs to you — we only use it to manage your account properly.

Flexible Communication Options

You can choose to receive or opt out of marketing communications from BossPay at any time. Update your communication preferences directly in your account or by contacting our support team — the choice is entirely yours.

Last updated: 1 January 2026
Important Note: This Privacy Policy describes how BossPay ("we", "Platform") collects, uses, and protects the personal information you provide when using the bosspay.pro website and BossPay mobile app. By using our platform, you agree to the practices described in this Privacy Policy.

1 Introduction

BossPay is committed to protecting the privacy and security of personal data for all members and visitors to our platform. We understand that your trust is our most valuable asset, and we take this responsibility seriously.

This Privacy Policy applies to all personal information we collect through the BossPay website at bosspay.pro, the BossPay mobile app for Android and iOS, and all official BossPay communication channels including Live Chat support. We encourage you to read this Privacy Policy carefully and to contact us if you have any questions.

2 Information We Collect

BossPay collects your personal information through the following means:

Information you provide directly:

  • Full name, date of birth and gender upon account registration.
  • Email address, mobile number, and residential address.
  • Identity verification documents (MyKad, passport) for the KYC process.
  • Malaysian bank account details for deposit and withdrawal purposes.
  • Any information you provide when contacting customer support.

Information collected automatically:

  • IP address, device type, operating system, and web browser version.
  • Activity log data including pages visited, access times, and in-account actions.
  • Geolocation information based on your IP address.
  • Cookie and similar tracking technology data.
Data Category Data Examples Primary Purpose
Identity Data Name, date of birth, MyKad number KYC verification, fraud prevention
Contact Data Email, phone number, address Account communications, customer support
Financial Data Bank account number, transaction history Deposit & withdrawal processing
Technical Data IP address, device type, browser Account security, platform analytics
Usage Data Games played, total wagering amount Account management, related promotions

3 How We Use Your Data

BossPay uses your personal information only for lawful and relevant purposes, including:

  • Account management — creates, verifies and maintains your bosspay account.
  • Transaction processing — processes MYR deposits and withdrawals to your bank account securely and swiftly.
  • Identity verification (KYC) — ensures compliance with anti-money laundering (AML) legal requirements and verifies that you are 18 years of age or older.
  • Platform security — detects and prevents fraud, account abuse and suspicious activity.
  • Customer Support — addresses enquiries, resolves issues and provides technical assistance via Live Chat.
  • Service communications — sends important notifications related to your account, transactions and security updates.
  • Marketing (with your consent) — keeps you informed about bosspay's latest promotions, bonuses and offers, provided you have consented to receive such communications.
  • Platform improvement — analyses usage patterns to enhance the gaming experience and overall bosspay platform performance.

4 Legal Basis for Data Processing

BossPay processes your personal data on the following legal bases in accordance with Malaysia's PDPA:

  • Your consent — for marketing communications and the use of non-essential cookies.
  • Contractual requirement — to fulfil our obligations in providing bosspay services to you.
  • Legal obligation — to comply with KYC, AML and applicable financial regulatory requirements.
  • Legitimate interest — to detect fraud, ensure platform security and improve our services.

5 Information Sharing

BossPay does not sell or rent your personal data to any third party. However, we may share your information with the following parties under limited circumstances:

  • Payment service providers — such as FPX, DuitNow and registered e-wallet providers, solely for the purpose of processing your financial transactions.
  • Technical service providers — companies that assist us in operating the platform, storing data and providing security infrastructure, subject to strict confidentiality agreements.
  • Regulatory bodies and authorities — when required by Malaysian law or pursuant to a valid court order.
  • KYC service providers — a licensed identity verification platform that helps us fulfil our anti-money laundering obligations.

All third parties we work with are bound by data protection agreements that prohibit them from using your information for any purpose other than those specified by bosspay.

6 Data Security

BossPay implements robust technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure, including:

  • 256-bit SSL encryption for all data transmission between your device and bosspay servers.
  • Encryption of sensitive data such as banking information and identity documents when stored in the database.
  • Role-based access control (RBAC) ensuring only authorized staff can access personal data.
  • 24/7 security monitoring and automated intrusion detection systems.
  • Regular security audits and penetration testing by independent security experts.
  • Clear incident response procedures in the event of a data breach.

While bosspay takes all reasonable steps to protect your data, no security system is entirely perfect. You also play an important role by keeping your account password strong and not sharing it with anyone.

7 Data Retention Period

BossPay retains your personal data for as long as your account is active or as needed to provide services to you. After account closure, we will retain your data for the minimum period required under Malaysian law, typically:

  • KYC and financial transaction data — retained for a minimum of 6 years in compliance with AML legal requirements.
  • Activity log data — retained for 2 years for security and dispute resolution purposes.
  • Customer support communications — retained for 3 years for service history records.

Once the defined retention period has ended, your data will be securely deleted or permanently anonymised so that it can no longer be associated with you.

8 Cookies & Tracking Technologies

BossPay uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

  • Essential cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance cookies — helps us understand how visitors use our platform so we can improve the user experience.
  • Functional cookies — remembers your preferences such as language and display settings to provide a more personalised experience.
  • Analytics cookies — used to analyse overall platform traffic and usage patterns for continuous improvement purposes.

You can manage cookie settings through your web browser preferences. Note that disabling certain cookies may affect the functionality of some areas of the BossPay platform.

9 Your Rights as a Data Subject

As a bosspay member, you have the following rights regarding your personal data under Malaysia's PDPA:

Right of Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of any inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your data, subject to applicable legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restriction

You may request restriction of your data processing in certain circumstances provided by law.

To exercise any of the rights above, please contact the bosspay support team via Live Chat. We will process your request within 14 business days. Identity verification may be required before the request is processed to ensure the security of your data.

10 Children's Privacy

The bosspay platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors. Should we discover that a minor's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.

If you suspect a minor is using the bosspay platform, please contact our support team immediately via Live Chat so that appropriate action can be taken without delay.

11 Changes to This Privacy Policy

BossPay reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. When significant changes are made, we will notify you via:

  • In-account notifications on your bosspay account upon login.
  • Notification email sent to the email address registered to your account.
  • Clear notices on the bosspay.pro homepage.

Continued use of the bosspay platform after changes are published constitutes your acceptance of the updated Privacy Policy. The "Last Updated" date at the top of this page will always reflect the latest version currently in effect.

12 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Live Chat: Available 24/7 directly within the bosspay platform or mobile app — the fastest way to get a response.
  • Email: [email protected] (displayed as text only)
  • FAQ: Visit page FAQ us for answers to frequently asked questions about privacy and your account.

The bosspay privacy team operates fully in both Bahasa Malaysia and English, and will respond to every inquiry thoroughly within a reasonable timeframe. We take every privacy concern seriously and are committed to resolving them transparently and professionally.

YOUR DATA IS SAFE WITH BOSSPAY

Play with confidence — your privacy always protected

Create a free BossPay account today and enjoy a safe, fair, and transparent online betting experience. 256-bit SSL encryption, full PDPA compliance, and 24/7 customer support are always with you.

Bahasa Melayu