Privacy Policy bosskucuci – Your Personal Data Protection

01 Introduction

This Privacy Policy ("Policy") describes how bosskucuci ("we", "Platform") collects, uses, stores, and protects your personal information when you use the bosskucuci.win website and all related services.

We understand that your trust is the most valuable asset we hold. For this reason, we are committed to handling your personal data with the highest level of transparency, security, and integrity. This policy is structured in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By using the bosskucuci platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform immediately.

02 Data We Collect

Bosskucuci collects several categories of personal data depending on your interactions with our platform. Below is a full overview of the types of data we may collect:

03 How We Collect Data

Your personal data is collected through several channels as you interact with the bosskucuci platform:

• Account Registration: Information you provide directly when creating a new account, including your name, email, and password.
• KYC Process: Identity verification documents and proof of address that you upload to complete account verification.
• Financial Transactions: Details shared during the deposit or withdrawal process via your chosen payment method.
• Platform Usage: Data collected automatically while you browse, play, or use platform features.
• Support Communications: Information you provide when contacting our customer support team.
• Cookies and Tracking Technologies: Technical data collected automatically via cookies and similar technologies.

All data collection is carried out transparently and with your knowledge. We do not collect data from third-party sources without notifying you in advance.

04 Use of Your Personal Data

Bosskucuci uses the personal data collected solely for the following legitimate purposes:

• Operate and manage your user account, including registration, verification, and account security.
• Securely process financial transactions including deposits, withdrawals, and bonus payments.
• Comply with legal and regulatory obligations, including anti-money laundering (AML) and KYC requirements.
• Provide effective customer support and resolve any complaints or enquiries.
• Enhance user experience and personalise platform content according to your preferences.
• Send important account-related information, security updates, and policy changes.
• Support responsible gambling initiatives by monitoring usage patterns that may be of concern.
• Detect and prevent fraud, system abuse, and illegal activity on the platform.

05 Data Sharing & Disclosure

Bosskucuci does not sell, rent, or share your personal data with third parties for their own commercial purposes. However, we may share your information in the following limited circumstances:

• Service Providers: Third parties that assist us in operating the platform, such as payment processors, cloud service providers, and cybersecurity firms. All such parties are bound by strict data protection agreements.
• Legal Requirements: When required by law, court order, or direction from a legitimate law enforcement authority.
• Fraud Prevention: To anti-fraud agencies or regulatory bodies in the context of legitimate investigations.
• Business Transfers: In the event of a merger, acquisition, or asset transfer, your data may be transferred as part of that process, subject to equivalent protections.

In all data sharing cases, bosskucuci ensures that recipient parties adhere to data protection standards equal to or higher than those we practice.

06 Data Security

We continuously invest in security infrastructure to ensure your data is protected against unauthorized access, loss, or breach. Key security measures we employ include:

• 256-bit SSL encryption for all data transmitted between your browser and our servers.
• Passwords are stored using an irreversible one-way hashing algorithm.
• Two-factor authentication (2FA) is available for all user accounts as an added layer of security.
• 24/7 system monitoring by a dedicated cybersecurity team.
• Regular penetration testing by independent security experts to identify and address vulnerabilities.
• Strict role-based access controls to ensure only authorised staff can access sensitive data.
• Encrypted automatic data backups to ensure service continuity.

07 Data Retention Period

Bosskucuci retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law.

• Active Account Data: Retained for as long as your account is active and for a reasonable period following account closure.
• Financial Records: Retained for a minimum of seven years as required by Malaysian financial and accounting laws.
• KYC Documents: Retained for a minimum of five years after the business relationship ends, in accordance with AML requirements.
• Communication Logs: Retained for a period of two years for dispute resolution and support purposes.
• Technical Data: Technical logs are retained for a maximum of 90 days before being automatically deleted.

Once the designated retention period expires, your data will be securely deleted or anonymised in a manner that ensures it can no longer be linked to you.

08 Your Rights as a User

Under the Personal Data Protection Act 2010 and bosskucuci's policy, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data under certain circumstances, subject to our legal obligations.
• Right to Object: Object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: Receive your data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Withdraw consent you have previously given for data processing at any time.

To exercise any of these rights, contact our data protection team through the platform. We will process your request within 30 business days. Some requests may require additional identity verification before they can be processed.

09 Cookies & Tracking Technologies

Bosskucuci uses cookies and similar tracking technologies to enhance your platform experience, maintain session security, and understand how users interact with our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled.
• Performance Cookies: Gather insights on how you use the platform to help us improve functionality and user experience.
• Preference Cookies: Save your preferences such as language and display settings for a more personalised experience.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect platform functionality.

10 Children & Youth Protection

The bosskucuci platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children or minors below the stipulated age limit.

Should we discover that we have collected data from a minor without proper age verification, we will take immediate steps to delete that data and close the account in question.

11 Privacy Policy Amendments

Bosskucuci reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform enhancements. All amendments take effect upon publication of the updated version on our website.

For material amendments, we will notify you via a prominent notice on the platform or by email registered to your account at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the amended terms.

We encourage you to review this page periodically to stay up to date on how we protect your data. The "Updated" date at the top of this document indicates when this Policy was last revised.

12 Contact the Data Protection Officer

Bosskucuci has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and handling all personal data-related enquiries.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact us via:

• Live chat support within your bosskucuci account (available 24/7).
• The customer support section on our website.
• Official platform email: [email protected]

We are committed to resolving all privacy-related inquiries and complaints within a reasonable timeframe. If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.