mybos88 Privacy Policy

1. Introduction

mybos88 ("we", "us", "our", the "Company") is committed to protecting the privacy and personal data of all members and visitors to the mybos88 platform, accessible at mybos88.win (the "Platform"). This Privacy Policy ("Policy") sets out how we collect, use, store, share, and protect personal data in connection with the provision of our online casino, sportsbook, and associated services to members in Malaysia and other permitted jurisdictions.

This Policy should be read alongside the mybos88 Terms & Conditions, which govern the overall relationship between mybos88 and its members. By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

mybos88 operates under international gaming authority licensing, which imposes specific data processing obligations including identity verification, anti-money laundering record-keeping, and responsible gaming monitoring. This Policy reflects those obligations alongside general data protection best practice.

2. Data Controller

The data controller responsible for personal data processed through the Platform is mybos88, the entity holding the international gaming authority licence under which the Platform operates. For data-related enquiries, members and visitors may contact us using the details set out in Section 14 of this Policy.

3. Personal Data We Collect

mybos88 collects personal data in several categories, depending on the nature of your interaction with the Platform:

mybos88 does not collect sensitive personal data (as defined under applicable data protection law) beyond what is strictly necessary for regulatory compliance — specifically, where applicable, data relevant to problem gambling indicators as required under our responsible gaming obligations.

4. Legal Basis for Processing

mybos88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to provide mybos88 services under the Terms & Conditions — account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with our international gaming authority licence — specifically identity verification (KYC), anti-money laundering (AML) screening, responsible gaming monitoring, and regulatory reporting.
• Legitimate interests: Processing for fraud prevention, platform security, system performance monitoring, and service improvement, where such interests are not overridden by member rights.
• Consent: Processing for optional communications such as promotional emails or SMS, where you have provided explicit consent. You may withdraw consent at any time via your account settings or by contacting support.

5. How We Use Your Personal Data

mybos88 uses the personal data collected for the following purposes:

• Registering and managing your mybos88 account;
• Processing deposits and withdrawals in Malaysian Ringgit (MYR) via your selected payment methods;
• Verifying your identity and age (21+ requirement) as required by our international gaming licence;
• Conducting anti-money laundering screening and politically exposed person (PEP) checks in compliance with regulatory obligations;
• Delivering and personalising casino, slot, table, and sportsbook content to you;
• Administering promotions, bonuses, and loyalty programme benefits;
• Monitoring for responsible gaming indicators and administering self-exclusion, deposit limit, and cool-off requests;
• Detecting and preventing fraud, collusion, bonus abuse, and other prohibited conduct;
• Responding to support queries and resolving disputes;
• Generating anonymised and aggregated analytics to improve Platform performance;
• Sending transactional communications (account confirmations, security alerts, payment notifications) — these are mandatory and cannot be opted out of while your account is active;
• Sending promotional communications where you have provided consent (opt-out available at any time).

6. Data Sharing & Third Parties

mybos88 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Data is shared only as described below and only to the extent necessary for the specified purpose:

• Payment processors: Financial data is shared with payment service providers (including e-wallet operators and bank FPX gateways) to facilitate deposits and withdrawals. These providers are PCI-DSS compliant and process data solely for payment execution.
• Identity verification providers: Identity and document data is shared with third-party KYC and AML screening services to fulfil our regulatory verification obligations.
• Game content providers: Limited technical data (session tokens, bet history) is shared with licensed game providers (e.g., Pragmatic Play, Evolution) to deliver game content. These providers process data under separate licensing agreements and are independently audited.
• Regulatory and law enforcement authorities: mybos88 will disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by law or a valid regulatory direction, without prior notice to the member where disclosure would prejudice an investigation.
• Professional advisers: Legal, audit, and compliance advisers may access data on a confidential basis where necessary for professional engagements.

All third-party data processors engaged by mybos88 are bound by contractual data processing agreements requiring them to implement appropriate technical and organisational security measures and to process data only on mybos88's documented instructions.

7. Cookies & Tracking Technologies

mybos88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — session authentication, load balancing, security tokens. These cannot be disabled.
• Performance cookies: Anonymous analytics data on page load times, error rates, and navigation patterns used to improve Platform performance.
• Functional cookies: Remembering your preferences such as language, game lobby filters, and "Remember me" login settings.
• Analytics cookies: Aggregated, anonymised usage data processed by our internal analytics system. No identifiable data is shared with third-party analytics platforms.

mybos88 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent the Platform from functioning correctly.

8. Data Retention

mybos88 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and identity data: Retained for the duration of active membership plus five (5) years following account closure, as required by our international gaming authority licence for AML record-keeping purposes.
• Financial transaction records: Retained for seven (7) years from the date of each transaction in accordance with applicable financial record-keeping requirements.
• Gaming activity records: Retained for five (5) years from account closure for regulatory audit purposes.
• Support communications: Retained for two (2) years from the date of the last interaction, except where retention is required for ongoing dispute resolution.
• Technical logs: Retained for ninety (90) days for security and fraud investigation purposes, then automatically purged.
• Self-exclusion records: Retained permanently to prevent re-registration by excluded persons.

9. Security Measures

mybos88 implements the following technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• TLS 1.3 encryption for all data transmitted between your device and the Platform;
• AES-256 encryption for data at rest in mybos88 databases;
• PCI-DSS compliant payment processing — no raw card data stored on mybos88 systems;
• Passwords hashed using industry-standard algorithms — mybos88 staff cannot view member passwords;
• Multi-factor authentication available for member accounts and mandatory for staff access to production systems;
• Role-based access controls limiting staff data access to what is necessary for their function;
• Regular third-party penetration testing and vulnerability assessments;
• Incident response procedures with notification processes in the event of a material data breach.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely secure. mybos88 cannot guarantee absolute security of your data. In the event of a data breach that poses material risk to members, mybos88 will notify affected members and relevant authorities in accordance with applicable legal obligations.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, mybos88 members have the following rights in respect of their personal data:

• Right of access: You may request a copy of the personal data mybos88 holds about you. Requests will be fulfilled within thirty (30) days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Corrections to identity data require supporting documentation.
• Right to erasure: You may request deletion of your personal data where processing is no longer necessary for the original purpose. Note that data subject to mandatory regulatory retention (see Section 8) cannot be erased before the end of the applicable retention period.
• Right to restriction: You may request that processing of your data be restricted where you contest its accuracy or object to processing, pending resolution of that objection.
• Right to data portability: You may request your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to object: You may object to processing based on legitimate interests. mybos88 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent (e.g., promotional communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact mybos88 at [email protected]. mybos88 will respond within thirty (30) days. We may require identity verification before processing rights requests to protect against unauthorised access to member data.

11. International Data Transfers

mybos88's primary data infrastructure is located in the jurisdiction of our gaming authority licence. Where personal data is transferred to processors located in other jurisdictions — for example, game content providers or identity verification services — mybos88 ensures that appropriate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses.

For members accessing the Platform from Malaysia, data may transit through servers in multiple jurisdictions as part of normal internet routing and content delivery. Such transits are incidental to service delivery and are covered by the security measures described in Section 9.

12. Children and Underage Persons

21+ The mybos88 Platform is strictly restricted to persons aged 21 years and above. mybos88 does not knowingly collect personal data from persons under 21. If we become aware that personal data has been submitted by an underage person, we will delete that data immediately and close the associated account without compensation.

If you have reason to believe that an underage person has registered an account on mybos88, please contact us at [email protected] immediately.

13. Policy Amendments

mybos88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or operational procedures. Where changes are material, mybos88 will notify registered members via their registered email address or in-platform notification at least seven (7) days before the updated Policy takes effect, except where immediate amendment is required for legal or regulatory compliance reasons.

The date of the most recent revision is indicated at the top of this Policy. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact & Complaints

For any queries, concerns, or requests relating to this Privacy Policy or mybos88's data processing practices, please contact us:

• Live Chat: Available on the Platform daily, 9am – 2am MYT
• Email: [email protected]

mybos88 will acknowledge privacy-related enquiries within 24 hours and provide a substantive response within thirty (30) days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction or to the dispute resolution body under our gaming authority licence.

Email and contact details above are plain-text reference information only. mybos88 does not use mailto: links on this Platform.