boso1 Privacy Policy

boso1 ("we", "us", "the Operator", "the Platform") is committed to protecting the privacy and personal data of all individuals who use the boso1 website at https://boso1.click ("the Platform"), including all associated gaming, betting, account management, and support services. This Privacy Policy ("Policy") explains how we collect, use, store, disclose, and safeguard personal information in connection with the operation of the boso1 Platform.

This Policy applies to all registered players, prospective players who visit the Platform, and any individual who communicates with us through any channel including live chat, email, or support forms. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and boso1.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Data Subject" means the individual to whom Personal Data relates — in this context, any registered or prospective player of boso1.
• "Data Controller" means boso1, which determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" means any third party that processes personal data on behalf of boso1, including payment service providers, identity verification services, and analytics providers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, and deletion.
• "KYC" means Know Your Customer — the identity and document verification process required prior to enabling withdrawals or responding to fraud alerts.
• "Cookies" means small data files placed on your device by the Platform to enable or improve certain Platform functions.

boso1 collects the following categories of personal data depending on the nature of your interaction with the Platform:

We collect only the minimum personal data necessary for the purposes described in this Policy. We do not knowingly collect sensitive personal data beyond what is required for identity verification and compliance obligations.

We collect personal data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional communication.
• Automated technical collection: When you visit the Platform, we automatically collect technical data such as your IP address, browser type, device identifiers, and browsing behaviour through server logs and cookies. This occurs on every page visit regardless of whether you are logged in.
• Third-party sources: We may receive information about you from payment service providers (confirming transaction status), identity verification services (confirming document authenticity), and fraud prevention agencies. This data is used solely to verify your identity and protect the integrity of the Platform.
• Publicly available sources: In limited circumstances and as required for compliance purposes, we may reference publicly available data to verify information you have provided.

boso1 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is necessary to provide the services you have requested — including account registration, game access, and payment processing — under the contract formed when you accept our Terms & Conditions.
• Legal obligation: Processing is required to comply with applicable anti-money laundering (AML) regulations, identity verification requirements, and licensing obligations, including retention of transaction records and KYC documentation.
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement, provided these interests are not overridden by your fundamental rights.
• Consent: Where we send you direct marketing communications or use non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time by contacting us or adjusting your browser cookie settings.

boso1 uses personal data for the following specific purposes:

• To create, manage, and maintain your player Account, including authenticating your identity at each login.
• To process deposits and withdrawals via your chosen payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20.
• To fulfil KYC and identity verification obligations required under our licensing conditions and applicable anti-money laundering standards.
• To monitor gaming activity for signs of problem gambling and to administer responsible gambling tools, including deposit limits and self-exclusion requests.
• To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, and other violations of our Terms & Conditions.
• To provide customer support in English, Bahasa Melayu, and Mandarin Chinese, and to maintain records of support interactions for quality assurance.
• To improve the Platform's technical performance, user experience, and game library through analysis of aggregated, anonymised usage data.
• To send you transactional communications (deposit confirmations, withdrawal notifications, KYC status updates) and, where you have consented, promotional communications about new games or offers.

boso1 does not sell or rent your personal data to any third party. We may share personal data with the following categories of recipients strictly on a need-to-know basis:

• Payment service providers: To process your deposits and withdrawals, we share the minimum necessary financial data with your chosen payment provider (e.g., Touch 'n Go eWallet operator, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow/PayNet, or crypto wallet processor). These providers operate under their own privacy policies and data protection obligations.
• Identity verification services: KYC documentation may be shared with third-party identity verification services to authenticate your identity and detect document fraud. These services are contractually obligated to process data solely for verification purposes.
• Fraud prevention and AML agencies: We may disclose data to fraud prevention agencies or share information with other Platform operators via industry fraud databases where we have a legitimate interest in protecting the Platform and its players from financial crime.
• Technology service providers: We use third-party cloud hosting, security, analytics, and support platform providers who process data on our behalf under data processing agreements that restrict use to the specified purpose.
• Regulatory and legal authorities: We will disclose personal data where required to do so by applicable law, court order, regulatory directive, or in response to a lawful request by competent law enforcement authorities.

All third parties with whom we share personal data are required to maintain appropriate security standards and are prohibited from using your data for any purpose beyond the specific service they provide to boso1.

Financial transaction data processed through the boso1 Platform is handled with the highest level of security. When you initiate a deposit or withdrawal using Malaysian payment methods — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX bank transfer — your payment is processed through a secure, encrypted gateway. boso1 does not store full bank account numbers, e-wallet PINs, or online banking credentials on our servers.

Transaction records (amount, date, time, method, status) are retained as required under anti-money laundering regulations and for dispute resolution purposes. These records are accessible only to authorised boso1 personnel and are subject to strict access controls and audit logging.

For USDT TRC20 cryptocurrency transactions, blockchain transaction IDs may be recorded to facilitate verification and dispute resolution. Cryptocurrency wallet addresses associated with your withdrawals are treated as personal financial data and handled accordingly.

boso1 uses the following categories of cookies and tracking technologies on the Platform:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication tokens, security cookies, and load balancing identifiers. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your language preferences, game lobby settings, and other personalisation choices to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used exclusively for Platform improvement.
• Security and fraud detection cookies: Help identify suspicious activity, multiple account registration attempts, and automated bot traffic by comparing device fingerprint data across sessions.

boso1 does not use advertising cookies or allow third-party advertisers to place tracking cookies on the Platform. You may disable non-essential cookies through your browser settings, though doing so may affect certain Platform features.

boso1 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention guidelines apply:

• Account data and gaming records: Retained for the duration of your active Account and for a minimum of five years following Account closure or the last transaction, in line with standard AML record-keeping requirements.
• KYC documentation: Retained for a minimum of five years from the date of verification or Account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• Support correspondence: Retained for up to three years from the date of the most recent interaction, unless longer retention is required for unresolved disputes.
• Technical logs and security data: Retained for up to 12 months unless required for longer periods in connection with an active investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

boso1 implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration:

• All data transmitted via the Platform is encrypted using 256-bit TLS/SSL protocols.
• Player funds and associated financial records are held in systems segregated from general operational infrastructure.
• Access to personal data is restricted to boso1 personnel on a strict need-to-know basis, with role-based access controls and multi-factor authentication requirements.
• All access to personal data systems is logged and subject to periodic security audit review.
• Our infrastructure undergoes regular vulnerability assessments and penetration testing by independent security professionals.
• In the event of a data breach that poses a risk to affected individuals, we will take prompt remediation steps and notify affected players and relevant authorities as required by applicable law.

boso1 operates internationally and may process or store personal data on servers located outside of Malaysia. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as Malaysia's Personal Data Protection Act 2010, we implement appropriate safeguards including contractual data processing agreements with our service providers that require equivalent protective standards.

Specifically, where data is transferred to third-party payment processors operating the Malaysian payment infrastructure — including entities associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or major Malaysian banks — such transfers are subject to the applicable Malaysian financial regulatory framework governing those payment systems.

Subject to applicable law and the terms of this Policy, you have the following rights in relation to your personal data held by boso1:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances, such as while a correction request is being assessed.
• Right to Data Portability: Where technically feasible, you may request that your personal data be provided to you in a commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to Object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact our support team via email at [email protected] or via live chat. We will respond within 30 days of receiving your request. In certain circumstances, we may need to verify your identity before processing your request.

The boso1 Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by an individual under 21, we will take immediate steps to delete that data and close the associated Account.

Parents and guardians are strongly encouraged to implement appropriate parental control software on devices accessible to minors to prevent inadvertent access to online gambling platforms. If you believe a minor may have registered an Account on boso1, please notify us immediately via our support channels so we can investigate and take appropriate action without delay.

boso1 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be notified to registered players via a prominent notice on the Platform homepage or by email to the address associated with your Account.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the Platform following the posting of an updated Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way boso1 handles your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line
• Live Chat: Available 24/7 in English, Bahasa Melayu, and Mandarin Chinese via the Platform
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days; complex data subject access requests may take up to 30 days

For general support enquiries unrelated to data privacy, please refer to our FAQ page or contact our 24/7 support team. For concerns about responsible gambling, please visit our Responsible Gambling page.