Privacy Policy Boss Slot – How We Protect Your Data

SECTION 1 Personal Data We Collect

Boss Slot only collects personal data that is genuinely necessary to operate the platform and deliver the best possible service to Malaysian users. We do not collect excessive or irrelevant data beyond what our services require.

SECTION 2 How Boss Slot Collects Your Data

Your personal data is collected through several channels during your use of the Boss Slot platform. Understanding these channels helps you make more informed decisions about the information you share with us.

• Account Registration: Information you provide when first registering a Boss Slot account — your name, email address, phone number, and date of birth.
• Identity Verification: Documents you submit for the KYC (Know Your Customer) process, such as a copy of your MyKad or passport when requested.
• Financial Transactions: Information generated when you make deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, as well as withdrawal records to your Malaysian bank account.
• Platform Usage: Data automatically generated when you use Boss Slot – including pages visited, bets placed, casino games played, and session duration.
• Support Communications: Records of conversations and emails you have sent to the Boss Slot customer support team.
• Automated Technology: Cookies, server logs, and tracking technologies that automatically capture technical information about your device and session.

Boss Slot does not collect data from social media platforms, third-party lists, or any external source without your knowledge and consent. All data collection is direct and transparent.

SECTION 3 How Your Personal Data Is Used

Data collected by Boss Slot is used only for legitimate purposes directly related to operating the platform. Below is a complete list of how your data is used:

• Account Management: Creating and managing your Boss Slot account, processing logins, and verifying your identity.
• Transaction Processing: Processing deposits and withdrawals in MYR via your chosen local payment method.
• Security & Fraud Prevention: Detecting and preventing suspicious activity, money laundering and platform abuse.
• Legal Compliance: Fulfilling legal obligations, including anti-money laundering (AML) requirements and customer identity verification (KYC).
• Customer Support: Processing complaints, responding to enquiries, and resolving issues related to your account or bets.
• Platform Improvements: Analysing usage patterns to improve the interface, speed and overall experience of the Boss Slot platform.
• Responsible Gambling: Monitoring betting patterns to identify signs of problem gambling and provide appropriate support.
• Service Communications: Sends important notifications related to your account, security and policy updates — not unsolicited marketing emails.

SECTION 4 Data Protection and Security Measures

Boss Slot invests seriously in security infrastructure to ensure that the personal and financial data of Malaysian users is protected at all times. The security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All communication between your browser and Boss Slot's servers is encrypted using TLS 1.3 with AES-256 encryption — the highest standard currently available.
• Stored Data Encryption: Sensitive data stored in the Boss Slot database is encrypted using file-level encryption for an additional layer of protection.
• Multi-Layered Firewall: Boss Slot's server infrastructure is protected by multi-layered firewalls that continuously filter all incoming and outgoing traffic.
• Two-Factor Authentication (2FA): Users are encouraged to enable 2FA on their accounts — Boss Slot itself uses 2FA for all internal administrative access.
• 24/7 Monitoring: The Boss Slot security team continuously monitors systems to detect any unusual activity or intrusion attempts.
• Periodic Auditing: Boss Slot's security systems are periodically audited by independent parties to identify and address any potential vulnerabilities.

While Boss Slot takes all reasonable steps to protect your data, no system can be guaranteed 100% secure in a digital environment. We encourage users to take their own protective measures — including using strong passwords and not sharing login credentials.

SECTION 5 Data Sharing with Third Parties

Boss Slot does not sell or transfer users' personal data to third parties for marketing or commercial purposes. However, there are certain situations where Boss Slot may need to share some user data with specific parties for legitimate purposes:

• Payment Providers: Information required to process financial transactions is shared with licensed payment service providers such as Touch 'n Go eWallet, GrabPay and the FPX network. These providers are governed by their own privacy policies and Malaysian regulatory compliance obligations.
• Legal Authorities: Boss Slot will disclose user information to the relevant authorities when required to do so by law, court order, or valid legal proceedings – for example, in money laundering investigations.
• Trusted Technology Providers: Certain technical service providers that assist in operating the Boss Slot platform (such as licensed cloud services) may have limited access to data for technical purposes only — they are bound by strict confidentiality agreements.

SECTION 6 Cookies and Tracking Technologies

Boss Slot uses cookies and similar technologies to enhance the user experience and ensure the platform functions properly. Below are the types of cookies we use and their purposes:

• Session Cookies (Mandatory): Required to maintain your login status during an active session. These cookies are automatically deleted when you close your browser. Without them, the Boss Slot platform cannot function.
• Preference Cookies: Saves your language settings and display preferences so you do not have to reconfigure them each time you visit Boss Slot.
• Security Cookies: Used to detect suspicious sessions and help verify that requests are coming from legitimate users — not automated scripts or bots.
• Analytics Cookies: Collects anonymous information about how users interact with Boss Slot — the most frequently visited pages, time spent, and navigation patterns. This information is used to improve the platform.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the Boss Slot platform. For detailed instructions on managing cookies in your browser, please refer to your browser's documentation.

SECTION 7 Your Rights as a Boss Slot User

As a Boss Slot user in Malaysia, you have the following rights regarding your personal data. Boss Slot is committed to facilitating the exercise of these rights without unnecessary barriers:

To exercise any of the rights above, contact the Boss Slot privacy team at support@bossslot.click by clearly stating the right you wish to exercise and your account details. Boss Slot will respond within 5 business days and resolve requests within 30 days from the date of receipt.

SECTION 8 Data Retention Period

Boss Slot retains users' personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal obligations. General data retention guidelines are as follows:

• Active Account Data: For as long as your Boss Slot account remains active, and for the period required after account closure to resolve any outstanding complaints.
• Financial Transaction Records: Minimum 7 years from the transaction date — in line with Malaysia's financial accountability and anti-money laundering legal requirements.
• Security Logs: Between 12 and 24 months for security investigation and dispute resolution purposes.
• Marketing Data: Until you withdraw your consent or request deletion.
• KYC Records (Identity Verification): For the period required under applicable AML laws — typically a minimum of 5 years after the business relationship ends.

Once the designated retention period expires, data is securely deleted using methods that ensure it cannot be recovered. This secure deletion is carried out systematically according to a schedule set by the Boss Slot data management team.

SECTION 9 Children's Privacy

Boss Slot services are strictly for individuals aged 18 and above. Boss Slot does not knowingly collect or process personal data from individuals under the age of 18.

Should Boss Slot discover that personal data from a minor has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. If you believe your child or any minor has registered a Boss Slot account, please contact us immediately at support@bossslot.click.

SECTION 10 Amendments to This Privacy Policy

Boss Slot reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant amendments will be communicated to all active users via:

• Email notification to your registered email address at least 7 days before the amendment takes effect
• In-platform notifications on Boss Slot during your next login session
• Update the "Last updated" date at the top of this document

Continued use of the Boss Slot platform after the effective date of any amendments will be considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we handle your personal data.

SECTION 11 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how Boss Slot handles your personal data, please contact our privacy team through the following channels:

• Privacy Email: support@bossslot.click – include "Privacy Inquiry" in your email subject line
• Live Chat: Available 24 hours a day, 7 days a week on the Boss Slot website in Bahasa Melayu

Boss Slot is committed to resolving all privacy-related enquiries and complaints within 5 business days. For more complex complaints requiring in-depth investigation, we will provide a progress update within 5 business days and resolve the matter within 30 days.