Privacy Policy BossKuCuci — Malaysian Member Personal Data Protection

Welcome to the BossKuCuci Privacy Policy. This document explains in detail how the management of bosskucuci ("we", "the platform", or "bosskucuci") collects, processes, stores, and protects your personal data ("Member" or "you") when you use our online casino platform at bosskucuci.bet.

Bosskucuci takes the privacy of every member seriously. We understand that your trust in us depends not only on the quality of our games or the speed of withdrawals, but also on how we handle the personal information you entrust to us. That is why we ensure every aspect of our data management complies with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering a bosskucuci account or continuing to use our platform, you confirm that you have read, understood, and agreed to this Privacy Policy. If you are under 18 years of age, you are not permitted to use the bosskucuci platform and your data should not be present in our system.

Bosskucuci only collects personal data that is strictly necessary to provide a safe, fair, and responsible service to our members. The following are the categories of data we collect:

We do not collect irrelevant data such as your medical information, political views, or religious beliefs. Sensitive data such as MyKad numbers is only collected when required for identity verification (KYC) and is stored with full encryption.

Bosskucuci collects your personal data through various transparent and lawful means. The following are the primary sources of our data collection:

• Account Registration: When you register a bosskucuci account, you directly provide your name, phone number, email address, and other basic required information.
• KYC Verification: During the identity verification process, you may be asked to upload a copy of your MyKad or other supporting documents to verify your identity and age.
• Financial Transactions: Information related to deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX is collected automatically when you complete a transaction.
• Platform Usage: Technical data such as IP addresses, device information, and usage patterns are collected automatically by our systems as you browse and play on bosskucuci.
• Support Communications: When you contact the bosskucuci customer support team via live chat or email, the content of that conversation may be retained for quality and training purposes.
• Cookies and Tracking Technologies: The bosskucuci platform uses cookies and similar technologies to remember your preferences, analyse usage patterns, and improve website performance.

Bosskucuci uses collected personal data solely for legitimate, stated purposes. We do not process your data for any other purpose without your consent. The following are the primary purposes for which your data is used:

• Account Management: Creating, managing, and maintaining your bosskucuci account, including login processing, profile management, and security settings.
• Transaction Processing: Processing MYR deposits via Malaysian payment methods such as DuitNow, Touch 'n Go eWallet, and FPX, and handling withdrawal requests securely and accurately.
• Identity Verification: Conducts the KYC process required to verify the minimum age of 18 and meet legal compliance requirements related to anti-money laundering.
• Security & Fraud Prevention: Monitoring account activity to detect and prevent fraud, multiple account usage, bonus abuse, and unauthorised access.
• Customer Support: Enables the bosskucuci support team to provide accurate and effective assistance whenever you need help.
• Service Communications: Sends important notifications related to your account, transactions, security updates, and changes to the Terms & Conditions or Privacy Policy.
• Marketing (with Consent): Sending information about the latest bosskucuci promotions, bonuses, and offers — only to members who have given their consent, with the option to unsubscribe at any time.
• Legal Compliance: Fulfils legal obligations under Malaysia's PDPA and mandatory reporting requirements related to platform operations.

Bosskucuci does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. However, in the following limited situations, we may share data with certain parties:

• Payment Service Providers: Required transaction information is shared with payment providers such as DuitNow, Touch 'n Go eWallet, GrabPay, and FPX banks solely for the purpose of processing your deposits and withdrawals.
• Game Software Providers: Minimal technical data may be shared with third-party game providers that support bosskucuci's slots, baccarat, poker, and live casino platform, subject to strict confidentiality agreements.
• Legal Requirements: Bosskucuci will disclose personal data when required by Malaysian law, court order, or a competent authority.
• Crime Prevention: In cases of suspected fraud, money laundering, or other criminal activity, bosskucuci reserves the right to share relevant information with the appropriate authorities.

All third parties with access to bosskucuci member data are bound by strict data protection agreements and are prohibited from using that data for any purpose other than what bosskucuci has specified.

Bosskucuci invests seriously in security infrastructure to ensure our members' personal data is always protected. The following are the key security measures we have in place:

While bosskucuci takes all reasonable precautions, no security system is entirely foolproof. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.

Bosskucuci retains your personal data for as long as necessary to fulfil the purposes outlined in this privacy policy, or as required by applicable Malaysian law.

• Active Account Data: Personal data for active accounts is retained for the duration of your active membership with bosskucuci.
• Data After Account Closure: After account closure, transaction data and account records are retained for a minimum of 7 years as required by Malaysian financial law.
• KYC Data: Identity verification documents are retained for 5 years after the business relationship ends, in accordance with AML/CFT compliance requirements.
• Communication Logs: Customer support conversation records are retained for 2 years for service quality and dispute resolution purposes.
• Cookie Data: Session cookies expire when you close your browser, while preference cookies are stored for a maximum of 12 months.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by bosskucuci:

To exercise any of the rights above, please contact the bosskucuci privacy team by email at support@bosskucuci.bet clearly stating your request. We will respond within the timeframe stipulated under PDPA.

The bosskucuci platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the basic functionality of the bosskucuci platform, including login, session security, and navigation. Disabling them will affect how the platform operates.
• Preference Cookies: Saves your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time.
• Analytics Cookies: Helps us understand how members use the bosskucuci platform so we can continually improve the user experience. This data is aggregated and anonymised.
• Security Cookies: Used to detect fraudulent activity, duplicate sessions, and unauthorised access attempts on your account.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality and your experience on the bosskucuci platform. For more information on managing cookies, please refer to your browser settings.

Bosskucuci is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we discover that personal data of a child or underage individual has been collected without proper age verification, we will immediately take the following steps:

• Immediate termination of the account in question.
• Delete all personal data associated with the individual from our systems.
• Returning any relevant account balance in accordance with the prescribed procedures.

Bosskucuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The amendment process is as follows:

• Amendment Notice: Any material amendments will be communicated to members via their registered email or in-platform notification at least 14 days before taking effect.
• Effective Date: The latest update date will always be displayed at the top of this document.
• Security Amendments: In cases where amendments are required urgently for security or legal compliance purposes, changes may take effect immediately with simultaneous notice to members.
• Continued Acceptance: Your continued use of the bosskucuci platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically. If you do not agree with any amendments, you have the right to close your account and request data deletion in accordance with the prescribed procedures.

If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data by bosskucuci, please contact us through the following channels:

• Privacy Email: support@bosskucuci.bet — for data-related requests, privacy complaints, or any PDPA enquiries.
• 24/7 Live Chat: The bosskucuci customer support team is available to assist you via live chat, accessible at all times on our platform.
• Response Time: bosskucuci is committed to responding to all privacy-related enquiries within 3 business days and resolving formal requests within 21 business days.