Rujukan Laman

How boss999 Handles Your Personal Data

At boss999, we take the privacy of your personal data seriously — this page sets out exactly what we collect, why we collect it, and how we keep…

Data collected only as neededEncrypted account storageYour right to request deletionMalaysia-based account scopeNo data sold to third parties
boss999 How boss999 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

If you have a question about how your personal data is handled, or if you want to exercise any of your data rights, our support channels are open around the clock.

Live Chat Open a live chat session directly from the boss999 lobby at any hour. Identify yourself as submitting a data privacy request and an agent will log it immediately under your account reference.
Email Support Send your written data request to our support email address. Include your registered account email and the specific right you are exercising — access, correction or deletion — and we will respond within 7 business days.
In-App Help Desk Through the boss999 app, tap the Help icon and select Privacy Request from the dropdown. Your request is routed directly to our data compliance team and logged with a case number for tracking.
DATA HANDLING PRACTICES

How We Protect and Manage Your Data

Every measure listed here is applied consistently across your account — from the moment you open it to the moment you request closure.

Encrypted Storage

All personal data tied to your boss999 account is stored using AES-256 encryption at rest. Access inside our systems is role-restricted, meaning only authorised personnel with a documented need can retrieve identifiable records.

Cookie Policy

We use session cookies to keep you logged in, performance cookies to measure page load times, and analytics cookies to understand which sections of the lobby you visit most. You can manage cookie preferences through your browser settings at any time.

Account Security

Two-factor authentication is available on every boss999 account. We also monitor for unusual login patterns — if a sign-in comes from an unrecognised device or location, we flag it and may pause access until you verify via your registered contact method.

Data Retention

We keep your account data for as long as your account is active, plus any period required by applicable Malaysian law. Once both conditions are satisfied, personal identifiers are deleted or irreversibly anonymised from our records.

Third-Party Sharing

We share data with payment processors — Touch 'n Go, GrabPay, Boost dan FPX — only to the extent needed to complete a transaction. We do not sell, rent or trade your personal data to marketing companies or unaffiliated third parties.

Requesting Changes

You can request a copy of the data we hold on you, ask us to correct any inaccuracy, or request full deletion by contacting support via live chat, email or the in-app help desk. We aim to complete all valid requests within 7 business days.

Your Privacy Questions, Clearly Answered

The questions below cover the data rights and privacy concerns we hear most from account holders in Malaysia. If your specific question is not listed here, reach our support team through live chat or email and we will respond with a written answer tied to your account.

We collect your name, email address, phone number, date of birth and the device information associated with your login. Payment method identifiers are passed through the relevant processor — Touch 'n Go, GrabPay, Boost dan FPX — and we receive only a transaction reference.

Submit a data access request through live chat, email or the in-app help desk. Include your registered account email. We will compile and send your data in a readable format within 7 business days of verifying your identity.

Yes. You can request deletion at any time. We will remove your personal identifiers once your account is closed and any legally required retention period has passed. We will confirm completion of the deletion in writing to your registered email.

Only to the extent needed to process a payment or comply with applicable Malaysian law. We do not sell or transfer your data to advertisers or unaffiliated data brokers. Payment processors operate under their own privacy terms for the data they handle directly.

We use session cookies for login continuity, performance cookies to monitor page speed, and analytics cookies to see which lobby sections are visited most. You control non-essential cookies through your browser or device settings — disabling them will not lock you out of your account.

We retain your data for the period required under applicable Malaysian law after account closure, typically tied to financial record obligations. Once that period ends, all personal identifiers are deleted or anonymised from our systems.

Contact our support team immediately via live chat — available around the clock. We can temporarily suspend your account, review recent login activity and help you reset your credentials. Enable two-factor authentication afterwards to reduce the risk of repeat incidents.