Privacy Policy BossPay –
Your Data Is Safe in Our Hands

This Privacy Policy ("Policy") describes how BossPay ("We", "Platform") collects, uses, discloses, and protects your personal information when you use our services at bosspay.fun. We are committed to ensuring your privacy is fully maintained in line with best data protection practices.

By registering or continuing to use the BossPay platform, you agree to the collection and use of information as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact us with any enquiries.

BossPay collects your personal information through several channels — primarily during account registration, identity verification (KYC), financial transaction processing, and your interactions with the platform. Below are the categories of data we collect:

Every piece of information we collect has a clear and lawful purpose. bosspay uses your personal data for the following purposes:

• Account Management — Create, manage, and verify your member account, including KYC processes required to ensure platform security.
• Transaction Processing — Process deposits, withdrawals, and all financial transactions accurately and securely through supported payment channels.
• Fraud Prevention — Detect and prevent fraudulent activity, money laundering, and platform abuse using behavioural data analysis.
• Customer Support — Provide effective technical assistance and customer service whenever you contact us.
• Legal Compliance — Fulfil compliance obligations, including reporting to relevant authorities when required by law.
• Service Improvement — Analyse usage patterns to improve platform functionality, performance, and overall user experience.
• Important Communications — Send account-related notifications, promotions (with your consent), and important service updates.
• Responsible Gaming — Monitor betting behaviour to identify signs of problem gambling and offer the necessary support to members who need it.

We will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

BossPay does not sell your personal data. However, under certain circumstances, we may share necessary information with the following parties:

• Payment Processors — Required information is shared with payment processors and financial institutions involved in processing your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• KYC Verification Providers — Third-party services that assist us in the identity verification process to ensure platform security.
• Legal Authority — When required by court order, regulatory investigation, or valid legal obligation, we will disclose the necessary information.
• Technical Service Providers — Cloud infrastructure and technical service providers that help us operate the platform, subject to strict data processing agreements.

Protecting your data is bosspay's highest priority. We continuously invest in security infrastructure to ensure your information remains protected at all times:

• End-to-End Encryption: All communications between your device and bosspay servers use TLS 1.3 protocol with 256-bit SSL encryption — the same standard used by major banks in Malaysia.
• Multi-Layered Firewall: Our infrastructure is protected by multi-layered firewalls that filter suspicious traffic in real time, 24 hours a day, 7 days a week.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account login process.
• Regular Security Audits: The bosspay platform undergoes regular penetration testing and independent security audits conducted by certified cybersecurity firms.
• Internal Access Controls: Only staff with specific authorisation may access sensitive member data, and every access is logged for audit purposes.
• Automatic Data Backup: Your data is automatically backed up to a secure secondary server location to ensure service continuity and disaster recovery.

BossPay uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collecting anonymous data on how members use the platform — pages visited, time spent, errors encountered — to help us improve our services.
• Functional Cookies: Saving your preferences such as language, time zone, and display settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: We use reputable third-party analytics tools to understand platform traffic and usage patterns in an aggregated and anonymised manner.

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the bosspay platform.

As a bosspay member, you have the following rights regarding your personal data. We respect and will facilitate the exercise of these rights:

BossPay only retains your personal data for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. Below are our general data retention guidelines:

• Active Account Data: Retained for the duration your account is active, plus 5 years after account closure for financial compliance purposes.
• Transaction Records: All financial transaction records are retained for a minimum of 7 years in compliance with Malaysia's financial regulatory requirements.
• Security Logs: Access logs and security activity are retained for 2 years for incident investigation and audit purposes.
• Support Records: Customer support correspondence is retained for 3 years to enable us to provide consistent service.
• Marketing Data: If you withdraw your marketing consent, the relevant data will be deleted within 30 days.

Upon expiry of the retention period, your data will be securely deleted or anonymised in accordance with our established data deletion procedures.

BossPay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, services, or legal requirements. When material changes are made:

• We will display a clear notice on the platform's homepage at least 7 days before any changes take effect.
• Active members will receive notifications via email or in-platform alerts.
• The "Updated" date at the top of this document will be revised to reflect the latest version.
• Continued use of the platform after amendments take effect constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the BossPay Data Privacy team through the following channels:

• Live Chat 24/7: The fastest way to get immediate assistance — available at the bottom-right corner of the platform at all times.
• Privacy Email: [email protected] — dedicated to privacy and data protection enquiries.
• Response Time: All privacy complaints will be addressed within 3 to 7 business days depending on the complexity of the case.