Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how Boswin88 ("we", "us", "our", "Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "User", "Member") who access or use the Boswin88 online gaming platform at boswin88.cam and all associated services, features, and applications (collectively, the "Services").

Boswin88 takes data privacy seriously. We are committed to handling your personal information responsibly and in accordance with applicable data protection principles. This Policy is intended to give you a clear, honest, and readable explanation of our data practices — not to obscure them.

By registering an account, accessing the Platform, or otherwise using the Services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform generally.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly — including name, identification number, email address, location data, IP address, or any factor specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
• "Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means — including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, Boswin88 acts as the Data Controller in respect of Member Personal Data.
• "Data Processor" means a natural or legal person, public authority, agency, or other body that Processes Personal Data on behalf of the Data Controller.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the Processing of their Personal Data.
• "KYC" means Know Your Customer — the identity and address verification process conducted by Boswin88 to confirm a Member's eligibility and identity prior to enabling withdrawal services.
• "Cookies" means small text files placed on your device by the Platform to store information about your session, preferences, and browsing behaviour.

3 Data We Collect

Boswin88 collects Personal Data in several categories, depending on the nature of your interaction with the Platform. The primary categories are outlined below:

• Full legal name as it appears on your identity document
• Date of birth (used for age verification — 21+ requirement strictly enforced)
• Email address and account username
• Residential address, including city, postcode, and state/country
• Nationality and country of residence

• Copies of government-issued identity documents (Malaysian MyKad, Passport, or Driver's License — front and back)
• Proof of residential address (recent utility bills, TNB statements, bank correspondence, or official government mail dated within 3 months)
• Selfie photographs taken while holding the identity document
• Payment method verification screenshots showing account holder name

• Deposit and withdrawal transaction records (amounts, dates, payment method references) in Malaysian Ringgit (MYR)
• Payment method identifiers (e-wallet account references for Touch'n Go eWallet, Boost, GrabPay; bank account references for DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB) — we do not store full bank account numbers or card numbers
• Bonus and promotional credit records
• Wagering and gameplay financial history

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session data including login timestamps, session duration, and pages visited
• Game interaction logs, bet placement history, and gaming activity records
• Customer support interaction records including live chat transcripts

• Email correspondence between you and Boswin88
• Live chat conversation records
• Responses to surveys, feedback forms, or promotional participation

4 How Data Is Collected

Boswin88 collects Personal Data through the following mechanisms:

• Directly from you: When you register an account, submit KYC documents, make a deposit or withdrawal request, contact our support team, or participate in promotional activities.
• Automatically: Through cookies, server logs, and analytics tools when you access and navigate the Platform — including IP address, device identifiers, and session behaviour data.
• From payment service providers: Transaction confirmation data is received from Malaysian payment partners (e.g., DuitNow operators, FPX network participants, e-wallet providers) when you initiate a deposit or withdrawal.
• From identity verification services: During KYC processing, document verification data may be cross-referenced with authorised third-party identity verification tools.
• From fraud prevention services: Technical identifiers and behavioural data may be shared with and received from fraud detection partners to protect platform integrity.

5 Data Processing & Use

Boswin88 processes your Personal Data for the following purposes:

6 Legal Basis for Processing

Boswin88 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a Member — including account management, payment processing, KYC verification, and gameplay facilitation.
• Legal obligation: Processing necessary to comply with applicable anti-money laundering (AML) legislation, financial regulations, gaming licensing requirements, and other mandatory legal obligations.
• Legitimate interests: Processing in pursuit of our legitimate business interests, including fraud prevention, platform security, abuse detection, and responsible gambling monitoring — provided these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific consent — such as receiving promotional communications, participating in optional research, or enabling optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

Boswin88 does not sell your Personal Data to third parties. We share Personal Data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment service providers: Financial transaction data is shared with Malaysian payment partners (DuitNow operators, FPX network, e-wallet providers including Touch 'n Go eWallet, Boost, and GrabPay) to process deposit and withdrawal requests.
• Identity verification partners: KYC documents and identity data may be shared with authorised identity verification service providers to fulfil regulatory verification obligations.
• Fraud prevention and security services: Technical identifiers and behavioural signals may be shared with trusted anti-fraud service providers to protect both the Platform and our Members.
• Game content providers: Limited technical data (session tokens, bet amounts) is shared with game studio integration partners solely for the purpose of delivering gameplay and calculating outcomes.
• Legal and regulatory authorities: We may disclose Personal Data to competent authorities, regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction — including for AML reporting obligations.
• Group companies and service providers: Personal Data may be shared with affiliated companies within the Boswin88 group and with trusted third-party service providers (hosting, analytics, customer support tooling) under strict data processing agreements that prohibit use of your data for any purpose other than delivering the contracted service.

8 Data Retention

Boswin88 retains Personal Data for only as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations.

• Account and identity data: Retained for the duration of your active Account relationship with Boswin88, plus a minimum of five (5) years following account closure — as required by anti-money laundering legislation and licensing conditions.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with financial record-keeping obligations applicable to gaming operators.
• KYC verification documents: Retained for the duration of the Account relationship plus five (5) years following closure.
• Customer support records: Retained for up to three (3) years following the resolution of the support interaction, or longer if associated with an ongoing dispute or legal matter.
• Technical and usage data: Anonymised or aggregated after 24 months; identified technical logs retained for up to 12 months for security purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with Boswin88's data destruction procedures.

9 Cookies & Tracking Technologies

Boswin88 uses cookies and similar tracking technologies to operate and improve the Platform. A "cookie" is a small text file placed on your device by a website server. Cookies allow the Platform to recognise your device on return visits and to remember your preferences.

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Used to collect anonymised information about how visitors use the Platform, which pages receive the most visits, and how users navigate. This data helps us improve Platform design and performance.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and previously viewed content.
• Security cookies: Used to detect and prevent fraudulent activity, including login anomaly detection and CSRF protection tokens.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Your continued use of the Platform following our cookie notice constitutes consent to our use of cookies as described in this section.

10 Your Rights

As a data subject, you have the following rights in relation to your Personal Data held by Boswin88. To exercise any of these rights, please contact us using the details in Section 15 of this Policy.

We will respond to all verified rights requests within 30 calendar days. In complex cases, the response period may be extended by a further 60 days, in which case we will notify you of the extension and the reason within the initial 30-day window. We will not charge a fee for responding to rights requests unless they are manifestly unfounded, excessive, or repetitive.

11 Data Security

Boswin88 implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Boswin88 platform is encrypted using 256-bit SSL/TLS encryption, indicated by the HTTPS protocol in your browser address bar.
• Access controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and receive regular data protection training.
• Data storage security: Personal Data is stored on secured servers with multi-layered access controls, intrusion detection systems, and regular security auditing.
• Payment data handling: We do not store full bank account numbers, card numbers, or payment credentials. Financial transaction references are stored only to the extent necessary for record-keeping and dispute resolution purposes.
• Incident response: Boswin88 maintains a documented data breach response procedure. In the event of a Personal Data breach that poses a risk to your rights and freedoms, we will notify affected individuals without undue delay and in accordance with applicable notification obligations.

While Boswin88 takes all reasonable steps to protect your data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your Account login credentials and for notifying us immediately of any suspected unauthorised access.

12 Minors

The Boswin88 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If we become aware that Personal Data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete such data, close the associated Account, and void any associated balances or winnings. If you believe that a minor may have registered an account on Boswin88, please contact our support team immediately.

13 Third-Party Services

The Boswin88 Platform integrates with several third-party service providers to deliver its Services. These providers operate under separate privacy policies and data processing agreements with Boswin88. They are not permitted to use your Personal Data for any purpose other than the specific service they provide to Boswin88.

Categories of third-party service providers we work with include payment processors, identity verification services, game content providers, analytics platforms, customer support software providers, and cloud hosting infrastructure operators. Each provider is subject to contractual data protection obligations consistent with applicable privacy law.

Boswin88 is not responsible for the privacy practices of third-party websites or services that may be linked from the Platform. We encourage you to review the privacy policies of any third-party services you access independently.

14 Policy Amendments

Boswin88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page. We will notify you of significant changes via email or through a prominent in-platform notice where practicable.

We encourage you to review this Policy periodically to stay informed about how Boswin88 handles your Personal Data. Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement of the changes. If you do not agree to the revised Policy, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

15 Contact & Complaints

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to raise a data protection complaint, please contact the Boswin88 Data Protection team using the following details:

We will acknowledge all privacy-related requests within 5 business days and respond in full within 30 calendar days. If you are not satisfied with our response, you may raise a complaint with the relevant data protection supervisory authority in your jurisdiction.