Privacy Policy

📋 1. Introduction

BossClub55 ("we", "us", "our", "the Company") operates the online gaming and sports betting platform accessible at bossclub55.cam ("the Platform"). This Privacy Policy ("Policy") describes how we collect, use, disclose, store, and protect personal information about individuals ("you", "User", "Player") who access or interact with the Platform.

We recognise that the privacy and security of your personal data is of fundamental importance. This Policy is designed to ensure that you clearly understand what data we hold about you, why we hold it, how is used, and what rights you have in relation to it. We encourage you to read this Policy in full before registering an Account or providing any personal information to BossClub55.

By accessing bossclub55.cam, creating an Account, or otherwise using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. If you do not agree with this Policy, you should not use the Platform.

📖 2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including name, identification number, email address, location data, or online identifier.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means BossClub55, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of BossClub55 under contractual instructions.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your wishes, by which you signify agreement to the processing of your Personal Data for one or more specific purposes.
• "Cookie" means a small text file placed on your device by the Platform when you visit bossclub55.cam, used to store session and preference information.
• "KYC" (Know Your Customer) means the identity and age verification process required to comply with regulatory obligations and enforce the Platform's 21+ eligibility requirement.

📂 3. Categories of Personal Data We Collect

BossClub55 collects the following categories of Personal Data in connection with the operation of the Platform:

3.1 Registration & Account Data

• Full legal name as it appears on a government-issued identification document.
• Date of birth (required to verify the minimum age of 21 years).
• Residential address, including city, state, and postcode (covering cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam).
• Email address and mobile phone number.
• Username and account credentials (passwords are stored in hashed, irreversible form).

3.2 KYC & Verification Documents

• Copies of government-issued photo identification (e.g., Malaysian MyKad or passport).
• Proof of address documentation.
• Proof of payment method ownership, where required.

3.3 Financial & Transaction Data

• Payment method details (e.g., Touch 'n Go eWallet account reference, Maybank or CIMB account holder name, GrabPay user reference, DuitNow identifier). Full card or account numbers are not stored on our servers — these are handled directly by the relevant payment gateway.
• Deposit and withdrawal transaction history, amounts in MYR, timestamps, and method used.
• Wagering and gaming activity records.

3.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Browser type and version, operating system, and device type.
• Pages visited on bossclub55.cam, session duration, and clickstream data.
• Referring URLs and Platform navigation patterns.

3.5 Communications Data

• Records of correspondence with our customer support team via live chat or email.
• Feedback, complaints, and enquiries submitted to BossClub55.

🔍 4. How We Collect Your Data

We collect Personal Data through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automatically: Through cookies, web beacons, pixel tags, and server logs when you access bossclub55.cam. See Section 10 for full details on our Cookie Policy.
• From third parties: From identity verification service providers engaged to conduct KYC checks, payment processors who confirm successful transactions, and fraud prevention services that share relevant flags with us.

⚙️ 5. Data Processing & Use

We use the Personal Data we collect for the following purposes:

⚖️ 6. Legal Basis for Processing

BossClub55 processes your Personal Data one or more of the following legal bases:

• Contractual necessity: Processing is required to perform our contractual obligations to you — including Account management, payment processing, and service delivery.
• Legal obligation: Processing is required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations and age verification mandates.
• Legitimate interests: Processing is necessary for BossClub55's legitimate business interests — including fraud prevention, security, Platform improvement, and responsible gambling enforcement — provided such interests do not override your fundamental rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

🔗 7. Data Sharing & Third-Party Disclosure

BossClub55 does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. We may share your Personal Data with the following categories of recipients, strictly as necessary and under appropriate data protection agreements:

• Payment processors and e-wallet providers: Including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and cryptocurrency network providers — to process your financial transactions.
• Identity verification and KYC providers: Specialist third-party services engaged to verify your identity documents and confirm eligibility to use the Platform.
• Fraud prevention and security services: Services that help us detect and prevent fraudulent activity, money laundering, and account abuse.
• Technology and hosting infrastructure providers: Cloud hosting and infrastructure partners who store and process data on our behalf under strict confidentiality and security obligations.
• Regulatory and law enforcement authorities: Where BossClub55 is legally required to disclose Personal Data in response to a valid legal order, court order, or regulatory investigation.
• Professional advisers: Including legal counsel, auditors, and compliance consultants, where necessary and subject to professional confidentiality obligations.

🗂️ 8. Data Retention

BossClub55 retains Personal Data for the period necessary to fulfil the purposes outlined in this Policy, and for as long as required to comply with applicable legal, regulatory, tax, and accounting obligations. Our general data retention principles are as follows:

• Account data: Retained for the duration of your Account relationship with BossClub55 and for a minimum of five (5) years following Account closure, in compliance with AML regulatory requirements.
• KYC documentation: Retained for the period required by applicable financial crime and anti-money laundering regulations — typically five (5) to seven (7) years from the date of collection.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required for financial audit and compliance purposes.
• Customer support communications: Retained for up to three (3) years following the resolution of the relevant enquiry or complaint.
• Technical and usage data: Typically retained for a rolling period of up to twelve (12) months, unless longer retention is required for fraud investigation purposes.

When Personal Data is no longer required for its intended purpose and no legal obligation requires its continued storage, it is securely deleted or anonymised.

🛡️ 9. Data Security

BossClub55 implements a range of technical, organisational, and administrative security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bossclub55.cam.
• Encrypted storage of sensitive data, including password hashing using industry-standard algorithms.
• Strict access controls and role-based permissions governing which employees and systems can access Personal Data.
• Regular security audits, penetration testing, and vulnerability assessments of the Platform's infrastructure.
• Two-factor authentication options for Account access.
• Data minimisation practices — we collect only the data necessary for the stated purposes.

While we take every reasonable precaution to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

🍪 10. Cookies & Similar Technologies

BossClub55 uses cookies and similar tracking technologies (including web beacons and pixel tags) on bossclub55.cam. Cookies are small data files stored on your device that help us deliver a better, more personalised experience. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — for example, maintaining your logged-in session and remembering your preferences during a visit. These cannot be disabled without affecting core functionality.
• Analytical / Performance Cookies: Allow us to understand how visitors interact with bossclub55.cam — which pages are most visited, where users encounter errors, and how the Platform performs. This data is aggregated and anonymised.
• Functional Cookies: Remember your preferences and settings (such as display language and region) to personalise your experience on return visits.
• Marketing / Targeting Cookies: Used to deliver relevant promotional content based on your interests and browsing behaviour within the Platform. These are only set with your consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the Platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

✅ 11. Your Data Rights

Subject to applicable law and the specific circumstances of your request, registered players and users of bossclub55.cam hold the following rights in relation to their Personal Data:

To exercise any of the above rights, please contact our Data Privacy team via the live chat on bossclub55.cam or by emailing [email protected]. We will respond to all valid requests within a reasonable timeframe, and in any event within thirty (30) days unless the complexity of the request warants an extension, of which we will inform you.

🔞 12. Minors & Age Restriction

BossClub55 is strictly intended for adults aged21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21 years of age, you are prohibited from registering an Account or using the Platform in any capacity.

As part of our KYC process, we verify the age of all registering players. If we become aware that we have inadvertently collected Personal Data from a person under the minimum age, we will take immediate steps to delete that data and close the associated Account.

🌐 13. International Data Transfers

BossClub55 operates internationally and your Personal Data may be transferred to, stored, or processed in countries outside Malaysia. Where such transfers occur, we take appropriate steps to ensure that your Personal Data remains protected to a standard consistent with this Privacy Policy and applicable data protection law.

Transfers to third-party service providers outside Malaysia are conducted under contractual data processing agreements that impose equivalent data protection obligations on the recipient. Where applicable, we implement standard contractual clauses or other lawful transfer mechanisms to safeguard your data during international transfers.

✏️ 14. Changes to This Privacy Policy

BossClub55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Where material changes are made, we will provide advance notice by posting a prominent notice on bossclub55.cam, or by notifying registered users via their registered email address.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

📬 15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which BossClub55 handles your Personal Data, please do not hesitate to contact us through the following channel:

• Live Chat: Available 24 hours a day, 7 days a week, directly via the on-site chat widget at bossclub55.cam.
• Email: [email protected] — please mark the subject line "Privacy Enquiry" for fastest routing to our Data Privacy team.

We aim to acknowledge all Privacy-related enquiries within 48 hours and to resolve them within 30 days. For complex requests — such as formal subject access requests — we may require additional time, and we will keep you informed of the expected timeline.

You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe your rights under applicable data protection law have been infringed. We would, however, appreciate the opportunity to address your concerns directly before you approach regulatory authority.