How BossCuci Protects Your Personal Information

Clause 01

1. Introduction

BossCuci respects the privacy of every visitor and registered player. This Privacy Policy forms part of the rules governing use of the BossCuci website and services. It describes the personal data we process when you browse the platform, register, verify your identity, deposit or withdraw funds, contact support, claim a promotion, or place a casino or sports wager.

By using BossCuci, you acknowledge that your information will be processed as described in this policy. Where consent is legally required for a specific activity, BossCuci will request it separately. Consent may be withdrawn for future processing, although withdrawal does not affect processing already completed or activities required to operate your account lawfully.

Clause 02

2. Scope and Data Controller

This policy applies to bosscuci.cam, registered player accounts, customer support interactions, payment activity, promotions, casino games, live football markets, EPL and Liga Super Malaysia betting, and related services operated under the BossCuci brand.

For the purposes of applicable data protection requirements, BossCuci determines why and how account data is processed. Some payment providers, banks, e-wallet operators, game suppliers, and identity verification services may independently determine how they process information within their own systems.

Clause 03

3. Information We Collect

Depending on how you use BossCuci, the information collected may include:

• Identity details: full name, date of birth, nationality, gender, and government-issued identification information.
• Contact details: residential address, email address, mobile number, and preferred communication settings.
• Account details: username, encrypted password data, security questions, account status, login records, and preference settings.
• Verification documents: MyKad, passport, driving licence, proof of address, source-of-funds records, and identity selfies where required.
• Payment details: masked bank or card information, e-wallet identifiers, cryptocurrency wallet details, deposit history, withdrawal history, currency, and transaction references.
• Gaming information: bets, stakes, wins, losses, game sessions, bonus use, wagering requirements, limits, and responsible gambling interactions.
• Technical information: IP address, browser, device type, operating system, language, approximate location, cookie identifiers, and security logs.
• Communications: messages sent to BossCuci support, complaint records, verification discussions, and feedback.

Clause 04

4. How We Collect Personal Data

BossCuci receives information directly from you when you register, complete KYC checks, update your profile, make a payment, set a deposit limit, request self-exclusion, or contact support. Information is also generated automatically when you browse, log in, select a game, place a bet, or use a promotion.

Data may also be received from payment processors, fraud prevention providers, identity verification services, game suppliers, and publicly available sources used for regulatory screening. For example, a DuitNow or FPX transaction may provide BossCuci with a confirmation reference and the verified account holder name required to reconcile an MYR payment.

Clause 05

5. Purposes of Data Processing

BossCuci processes personal information where reasonably necessary to:

• Create, authenticate, maintain, and secure your account;
• Confirm that users are aged 21 and above;
• Conduct identity, address, KYC, anti-fraud, and source-of-funds checks;
• Accept deposits and process withdrawals in MYR or supported digital currencies;
• Record wagers, settle outcomes, calculate balances, and administer bonuses;
• Provide customer service during Malaysian support hours and investigate complaints;
• Detect duplicate accounts, payment abuse, collusion, suspicious betting, or account takeover;
• Apply responsible gambling controls, including deposit limits, cooling-off periods, and self-exclusion;
• Improve platform stability, usability, payment performance, and game selection;
• Comply with lawful obligations connected with international gaming operations.

BossCuci does not sell player identity documents or payment information. Personal data is not used for unrelated purposes without a lawful basis and appropriate notice.

Clause 06

6. Legal Grounds for Processing

Depending on the activity and applicable law, BossCuci relies on performance of its agreement with you, compliance with legal or licensing obligations, legitimate interests, protection of vital interests, or consent. Legitimate interests may include maintaining security, preventing fraud, resolving disputes, improving services, and protecting players from gambling-related harm.

Where BossCuci balances a legitimate interest against your rights, we consider the nature of the information, reasonable player expectations, the benefit of processing, and potential privacy effects. Additional safeguards are applied to sensitive identity, financial, and responsible gambling information.

Clause 07

7. Payment and Financial Information

BossCuci supports Malaysian payment options such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank. To process a transaction, relevant account identifiers, amounts, timestamps, status codes, and transaction references may be exchanged with the selected provider.

BossCuci generally stores only the payment information necessary for reconciliation, compliance, refunds, withdrawals, security review, and dispute handling. Complete card credentials and online banking passwords should be handled by the applicable payment provider rather than stored by BossCuci.

Clause 08

8. Identity Verification, KYC and Fraud Prevention

BossCuci may request a valid Malaysian identity document, passport, driving licence, recent proof of address, payment ownership evidence, or a selfie. These records help verify age and identity, prevent impersonation, support anti-fraud controls, and confirm that withdrawals go to the correct player.

Automated risk indicators may be used to flag unusual logins, rapid payment changes, duplicated documents, bonus misuse, or transaction patterns requiring human review. A risk indicator does not automatically prove wrongdoing. BossCuci may ask for clarification or additional evidence before deciding whether to restrict an account or payment.

Clause 09

9. Cookies, Devices and Analytics

BossCuci may use essential cookies and comparable storage technologies to maintain sessions, remember settings, support security, and keep players signed in. Performance information may help us understand page loading, navigation errors, device compatibility, and service reliability.

You may adjust browser controls to block or delete cookies. However, disabling essential cookies can prevent login, cashier, account security, or preference features from working correctly. BossCuci limits cookie data to the purposes described in this policy.

Clause 10

10. Disclosure of Personal Data

BossCuci may disclose only the information reasonably necessary to vetted service providers that support hosting, cybersecurity, identity verification, payments, game delivery, customer support, analytics, professional advice, or fraud prevention. These parties are expected to protect information and use it only for authorised purposes.

Information may also be disclosed where BossCuci reasonably believes disclosure is required by applicable law, a valid legal process, an international licensing obligation, the investigation of suspected criminal activity, or the protection of players and platform integrity. If ownership or operation changes, relevant information may transfer as part of that transaction under confidentiality and privacy safeguards.

Clause 11

11. International Data Transfers

Because BossCuci operates through international gaming, technology, and payment infrastructure, personal data may be processed outside Malaysia. Privacy standards in another jurisdiction may differ from Malaysian standards.

Where required, BossCuci uses contractual restrictions, access controls, vendor reviews, encryption, or other recognised safeguards to protect transferred information. We assess the type of data, processing purpose, destination, and provider security before approving material processing arrangements.

Clause 12

12. Data Retention

BossCuci retains personal information only for as long as reasonably required for the purpose collected and for applicable legal, licensing, anti-fraud, accounting, complaint, and dispute obligations. Retention periods vary according to the type of record and the reason it is held.

Closing an account does not always permit immediate deletion. BossCuci may need to retain KYC, payment, wagering, self-exclusion, or dispute records after closure. When information is no longer required, it is deleted, securely destroyed, or anonymised so it can no longer reasonably identify you.

Clause 13

13. Data Security

BossCuci uses layered safeguards designed to protect personal information. Measures may include encrypted transmission, restricted employee access, credential controls, network monitoring, logging, backup procedures, provider assessments, and staff confidentiality requirements.

No internet service can guarantee absolute security. You must keep your BossCuci password confidential, use a unique password, protect your device, and contact support promptly if you notice an unfamiliar login or transaction. BossCuci may temporarily restrict access while a suspected security event is investigated.

Clause 14

14. Your Privacy Rights

Subject to applicable law and necessary verification, you may ask BossCuci to provide access to your personal information, correct inaccurate records, explain processing, restrict certain uses, review an objection, or delete data that is no longer required.

Some requests may be limited where retention is required for KYC, fraud prevention, legal claims, transaction records, licensing, self-exclusion enforcement, or the rights of another person. BossCuci will explain material limitations where legally permitted.

To protect account holders, BossCuci may require proof of identity before acting on a privacy request. We will not disclose account information to a requester whose identity cannot be reasonably verified.

Clause 15

15. Responsible Gambling Information

BossCuci may process deposit patterns, wagering frequency, session duration, limit changes, support messages, and self-exclusion records to identify possible indicators of gambling harm and administer player protection tools. Such information may be treated as sensitive and restricted to trained personnel with a legitimate need for access.

A request for self-exclusion will be retained for the period needed to prevent account reopening or circumvention. Privacy rights do not require BossCuci to erase information that is necessary to enforce a valid self-exclusion. Further details are available on our Responsible Gambling page.

Clause 16

16. Children and Minimum Age

BossCuci services are not intended for children or anyone under 21. BossCuci does not knowingly permit a person below this age to register or gamble. If we identify an underage account, we may suspend access, investigate the activity, retain evidence required for compliance, and take appropriate protective action.

Clause 17

17. Changes to This Privacy Policy

BossCuci may revise this policy to reflect legal developments, service changes, new security practices, or updated processing activities. The current version will be displayed on this page with an effective date. Where a change materially affects player rights, BossCuci will provide an appropriate notice through the platform or registered account contact details.

Continued use after a revision means the updated policy applies to subsequent processing, subject to any consent requirements imposed by law. We encourage players to review this page periodically.

Clause 18

18. Contact Us