Boss99 takes the privacy and security of every member's personal data seriously. This Privacy Policy transparently explains how we collect, use, protect, and manage your information in accordance with Malaysia's Personal Data Protection Act 2010.
Last Updated: 1 January 2026. Any material changes to this policy will be communicated via your registered email or through in-platform notifications on boss99.
Six core pillars of boss99's privacy commitment to every Malaysian member.
All data transmitted between your device and Boss99 servers is encrypted using 256-bit SSL technology. This ensures your personal information, account details, and financial transaction data cannot be intercepted or read by unauthorised parties while in transit.
Boss99 does not store your full credit card or bank account details. All transactions via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX are handled by licensed payment providers with their own security standards. We only retain transaction records necessary for accounting purposes.
Boss99 does not sell, rent, or trade members' personal data to any third party for marketing purposes. Your data belongs to you. We only share what is strictly necessary with operational partners bound by strict confidentiality agreements.
All data processing operations at Boss99 are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have legally protected rights over your personal data, including the right to access, correct, and request deletion of your data under certain circumstances.
Boss99 offers two-factor authentication (2FA) for all accounts. Enabling 2FA adds an extra layer of security, ensuring only you can access your account even if your password is compromised. We strongly encourage all members to activate this feature.
This Privacy Policy is written in plain language — not confusing legal jargon. Boss99 believes members deserve to know exactly what happens to their data. If there are any changes to how we handle privacy, we will notify you in advance.
Welcome to the Boss99 Privacy Policy. This document outlines the privacy practices of Boss99, an online betting platform operating in Malaysia through boss99.my. We understand that privacy is more than just a word — it is the trust you place in us every time you use this platform.
This Privacy Policy applies to all personal information we collect through the Boss99 website, mobile app (where available), email communications, customer support interactions, and all other services we provide. By registering an account or using the Boss99 platform, you agree to the practices described in this policy.
This policy should be read alongside boss99 Terms & Conditions which forms part of the overall agreement between you and our platform.
Our Commitment: boss99 has never sold, and will never sell, member personal data to any third party for commercial purposes. This is a core, unwavering principle of how we operate.
Boss99 collects personal data necessary to provide a safe, efficient, and compliant online betting service. The following are the categories of data we collect:
Account Registration Information:
Financial & Transaction Information:
Platform Usage Data:
KYC (Know Your Customer) Documents:
Note: We only collect data that is strictly necessary for platform operations. We do not ask for unrelated information such as medical details or religious beliefs.
The personal data we collect is used for the following purposes:
Boss99 will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent.
Boss99 only shares member personal data in very limited circumstances and with parties bound by strict confidentiality agreements. Parties that may receive your data include:
What We Don't Do: Boss99 does not share data with third-party advertisers, data brokers, social media platforms, or any commercial entity not directly involved in our platform operations.
Boss99 continuously invests in security infrastructure to protect member personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:
While we take all reasonable precautions, no security system can be guaranteed 100% secure. In the event of a data breach involving your information, boss99 will notify you in a timely manner in accordance with Malaysian legal requirements.
Warning: Boss99 will never ask for your password via email, SMS, or live chat. If you receive such a message, it is a phishing attempt. Please contact our support team immediately.
Boss99 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.
Types of cookies we use:
You can manage and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the boss99 platform.
As a boss99 member and an individual protected under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:
To exercise any of the above rights, please contact the boss99 data protection team by email at support@boss99.my. We will process your request within 14 working days.
Boss99 retains members' personal data only for as long as necessary for the purposes it was collected, or as required by Malaysian law. Our general retention guidelines are:
Once the retention period expires, your personal data will be securely and permanently deleted or anonymised.
The Boss99 platform is strictly restricted to individuals aged 18 and above. We do not knowingly collect personal data from children or anyone under the age of 18.
Should we discover that we have collected data from a minor without proper verification, we will take immediate action to delete that data and close the account in question. If you have reason to believe that your child or a minor has registered on boss99, please contact us immediately at support@boss99.my.
Boss99 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Any changes take effect upon publication on boss99.my.
For material and significant changes, we will provide advance notice through:
We encourage you to review this Privacy Policy page periodically. The last updated date is always displayed at the top of this document for your reference.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how boss99 handles your personal data, please reach out to us through the following channels:
Our privacy team will respond within 3 business days for general enquiries, and 14 business days for formal data rights requests.
For issues that cannot be resolved directly with Boss99, you have the right to file a complaint with the Personal Data Protection Department (JPDP) Malaysia as the relevant regulatory authority.
As a boss99 member, these are your privacy rights under Malaysia's PDPA.
Request a copy of all personal data Boss99 holds on your account — processed within 14 business days.
Update or correct any inaccurate personal information directly through your account profile settings.
Request deletion of your personal data under certain circumstances — subject to legal retention obligations.
Withdraw your marketing consent at any time via the unsubscribe link in our emails or through your account settings.
Object to the use of your data for direct marketing or profiling that you have not consented to.
Receive your data in a machine-readable format for transfer to another platform where applicable.