Privacy Policy Bospay —
Protection of Our Members' Personal Data

Bospay ("we", "Platform", or "company") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, use, store, disclose, and protect your personal information.

As an online entertainment platform operating in Malaysia, we comply with the Personal Data Protection Act 2010 (PDPA) and all applicable related legislation. We believe privacy is not merely a legal obligation — it is part of our commitment to the trust every bospay member places in us.

If you have any questions about how we handle your personal data, the bospay customer support team is available via live chat 24/7 on the platform.

Bospay collects various types of information to enable the platform to function properly and provide you with the best experience. The following are the main categories of data we collect:

Your personal data is collected through various means as you interact with the Bospay platform:

Directly from You

• During the account registration process — when you complete the registration form
• During the KYC process — when you submit identity verification documents
• When you make a deposit or withdrawal
• When you contact our customer support team
• When you update your account profile

Automatically During Platform Use

• Game activity logs and betting history
• Technical device data such as IP address and web browser information
• Cookie and related tracking technology data (see Section 7)
• Login session information including time, duration, and access location

From Authorized Third Parties

In certain cases, Bospay may receive your personal data from third-party payment service providers (such as FPX or DuitNow) solely for the purpose of verifying and processing your financial transactions.

Bospay uses your personal data only for legitimate purposes that have been clearly stated. We do not use your data for any purpose unrelated to the services we offer.

• Account Management: To create, manage, and maintain your account on bospay
• Identity Verification (KYC): To verify that you are a legitimate individual and meet the age eligibility requirements
• Transaction Processing: To securely process deposits, withdrawals, and all financial transactions
• Platform Security: To detect and prevent fraud, money laundering, and other unlawful activities
• Customer Support: To effectively address your complaints, enquiries, and support requests
• Platform Improvement: To analyse aggregated usage patterns in order to improve the user experience
• Service Communications: To send important notifications related to your account, transactions, and policy updates
• Legal Compliance: To comply with legal obligations, including financial reporting and cooperation with authorities where required
• Marketing (Optional): To send promotional information and special offers — you may opt out at any time

Bospay does not sell, rent, or trade your personal data to any third party. However, in certain limited situations, we may need to share your information with the following parties:

Technology Service Providers

We work with carefully selected technical service providers to carry out specific platform functions, such as payment processing, cloud services, and analytics. All providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

Authorities and Regulatory Bodies

Bospay will only disclose your personal data to the authorities when required by applicable Malaysian law, including in cases of criminal investigation, court orders, or directives from a legitimate regulatory body.

Payment Service Providers

Information required to process financial transactions is shared with authorised payment service providers such as banks, FPX, DuitNow, Touch 'n Go, Boost, and GrabPay solely for transaction processing purposes.

Protecting your personal data is a responsibility we take very seriously. bospay implements multiple layers of technical and organisational security to prevent unauthorised access, modification, or disclosure of data.

Technical Security

• 256-bit SSL encryption for all data transmitted between your device and our servers
• Sensitive data in our databases is encrypted using industry-standard encryption algorithms
• Multi-layered firewall and intrusion detection system (IDS) active 24/7
• Two-factor authentication (2FA) available to protect your account
• Regular data imaging and backups to a secure, separate location

Organisational Security

• Access to members' personal data is restricted to Bospay staff with a legitimate business need only.
• All staff with access to sensitive data undergo background checks and regular privacy training
• Strict internal procedures for handling any data breach — including notification to affected parties within the stipulated timeframe

While we take all reasonable steps to protect your data, no digital security system is completely perfect. You also play an important role in safeguarding your account by using a strong password and not sharing your login credentials.

Bospay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as staying logged in and session security. These cookies cannot be disabled.
• Performance Cookies: Help us understand how users interact with the platform for improvement purposes. Data is collected in aggregate and anonymised form.
• Functional Cookies: Remember your preferences such as language, display settings, and game preferences for a smoother experience.
• Analytics Cookies: Used to analyze overall platform usage patterns for development and improvement purposes.

You can manage cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Bospay platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and global data protection best practices, you have several important rights regarding the personal data we hold:

To exercise any of the rights above, please contact the bospay customer support team via live chat. We will process your request within 30 working days after verifying your identity. Some requests may be subject to legal restrictions or compliance requirements that we are obligated to observe.

Bospay is a platform that exclusively for users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we find that we have inadvertently collected personal data of anyone under the age of 18, we will immediately take the following steps:

• Suspend the account in question immediately
• Delete all related personal data from our systems
• Refund any deposited funds (subject to review)

If you believe a minor has registered or is using the bospay platform, please contact our support team immediately so appropriate action can be taken without delay.

In certain cases, your personal data may be transferred to, stored in, or processed outside Malaysia — particularly when we use cloud service providers or international technologies.

When international data transfers occur, Bospay ensures that:

• Data recipients are committed to providing a level of data protection equal to or higher than that required under Malaysian law
• Appropriate data processing agreements have been finalised with all parties that receive data
• Data transfers only take place to countries or jurisdictions with adequate data protection laws

Bospay will not transfer your data overseas for purposes unrelated to our platform's services.

Bospay retains your personal data for as long as necessary for the purposes stated in this policy, or for as long as your account is active, or as required by applicable law.

Specifically:

• Active Account Data: Retained for as long as your account is active and for the period after account closure required by law
• Financial Transaction Records: Retained for a minimum of seven (7) years after the transaction, in accordance with Malaysian financial reporting legal requirements
• KYC Data: Retained for a minimum of five (5) years after the business relationship ends, in accordance with Anti-Money Laundering Act requirements
• System Logs: Retained for the period required for security and audit purposes, typically between 90 days and 2 years
• Marketing Data: Retained until you withdraw consent or request deletion

When data is no longer needed and there is no legal obligation to retain it, Bospay will securely delete or anonymize that data.

Bospay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in the services we offer.

When significant changes are made to this policy, we will:

• Update the "Last Updated" date shown at the top of this document
• Display a clear notice on the bospay homepage regarding the changes
• Send notification emails to all registered members if the changes made are significant

It is your responsibility to review this Privacy Policy periodically. Your continued use of the Bospay platform after any changes are announced constitutes your acceptance of the updated policy. For any questions or concerns regarding this Privacy Policy, please contact the Bospay support team via live chat on the platform.