Privacy Policy
At bosku8, we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect when you use our platform, how that information is used, with whom it may be shared, and what rights you have with respect to your data. We encourage you to read this document in full before registering an Account or using any service on bosku8.cam.
Introduction
This Privacy Policy ("Policy") is published by bosku8, the operator of the online gaming and sports betting platform accessible at bosku8.cam
bosku8 is committed to protecting the privacy and personal data of its users. We process personal data only where we have a lawful basis for doing so, we apply appropriate technical and organisational security measures, and we do not sell your personal data to unrelated third parties for their independent marketing purposes.
Scope: This Policy applies to personal data collected through: (a) the bosku8.cam website and all subdomains; (b) any mobile-optimised interface of the Platform; (c) communications between Players and the Company via live chat, email, WhatsApp, and other support channels; and (d) any promotional, loyalty, or referral programme operated by the Company.
By registering a Player Account on the Platform or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not register an Account or use the Platform.
Definitions
For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:
- "Personal Data" means any information relating to an identified or identifiable natural person — including, but not limited to, name, identification number, contact details, location data, IP address, and online identifiers — when such information can, directly or indirectly, identify that person.
- "Processing" means any operation or set of operations performed on personal data, including collection, storage, organisation, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" means the entity that determines the purposes and means by which personal data is processed — in this case, bosku8.
- "Data Processor" means a third party that processes personal data on behalf of the Data Controller, under written instruction.
- "Data Subject" means the natural person to whom the personal data relates — in this context, the Player or visitor to the Platform.
- "Consent" means any freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the processing of their personal data for a stated purpose.
- "KYC" means Know Your Customer verification — the process by which the Company verifies the identity, age, and eligibility of a Player before permitting withdrawals or high-value transactions.
Data Controller Identity
bosku8 acts as the Data Controller in respect of the personal data collected and processed through the Platform. For the purposes of data protection enquiries, the Company may be contacted via the channels set out in Section 17 of this Policy.
Where the Company engages third-party service providers (such as payment processors, game software providers, identity verification services, or cloud infrastructure providers) who process personal data on its behalf, those parties act as Data Processors and are required to handle personal data only in accordance with the Company's documented instructions and applicable data protection obligations.
If you have any questions about how your personal data is processed, or if you wish to exercise any of your data rights described in Section 12, please contact our Data Protection Officer via the contact details in Section 17.
Categories of Personal Data We Collect
The categories of personal data we collect, and the circumstances in which we collect each category, are set out in the table below. We collect only the minimum data necessary for the stated purposes, consistent with the principle of data minimisation.
| Data Category | Specific Data Points | Collection Occasion |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government-issued ID number (MyKad / passport), photograph (for KYC) | Account registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, state, postcode, country — e.g., Kuala Lumpur, Penang, Johor Bahru) | Account registration and profile updates |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), payment method type, transaction amounts in MYR, deposit and withdrawal history | Deposits, withdrawals, and payment method registration |
| Account Data | Username, hashed password, Account balance, VIP tier, bonus history, wagering history, game play records | Account creation and ongoing platform use |
| Technical Data | IP address, device type, operating system, browser type and version, device fingerprint, session duration, page interaction logs | Automatically upon accessing the Platform |
| Communications Data | Live chat transcripts, email correspondence, WhatsApp message content (where support is provided), support ticket records | When contacting customer support |
| Marketing Preferences | Email marketing opt-in/opt-out status, preferred communication channel, promotion response history | Account settings and marketing interaction |
| Responsible Gambling Data | Self-imposed deposit limits, session time limits, cooling-off period status, self-exclusion status | When responsible gambling tools are activated |
We do not intentionally collect Sensitive Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for identity verification). Where KYC documents incidentally contain such information, it is used solely for identity verification purposes and is not otherwise processed.
How We Collect Personal Data
We collect personal data through the following channels and mechanisms:
5.1 Direct Collection
We collect data that you provide to us directly, including when you: complete the Account registration form; submit documents for KYC verification; make a deposit or withdrawal; contact our support team via live chat, email, or messaging application; respond to a survey or promotion; or update your Account profile.
5.2 Automated Collection
When you access the Platform, certain technical data is collected automatically through the use of cookies, web beacons, server logs, and similar technologies. This includes your IP address, device information, browser type, referal URL, and session activity. Please refer to Section 11 for a full description of our cookie practices.
5.3 Third-Party Sources
We may receive personal data about you from third parties in limited circumstances, including: identity verification service providers who assist with KYC processes; payment processors such as DuitNow, FPX, and e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay) who process your payment transactions; fraud prevention agencies; and publicly available sources where we are permitted to consult them for due diligence purposes.
Purposes of Data Processing
We process your personal data for the following purposes, each of which is explained below:
- Account Management: To create, maintain, and administer your Player Account, including authentication, balance management, and Account communications.
- Service Delivery: To provide access to games, sports betting markets (including Liga Super Malaysia, EPL, UFC, and other events), live casino, promotions, and all other Platform services.
- Payment Processing: To process deposits and withdrawals in MYR via your selected payment methods, and to maintain accurate financial records.
- Identity & Age Verification (KYC): To verify that you are at least 21 years of age and that your identity information is accurate, as required by our operating licence and responsible gambling obligations.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct; and to maintain platform security.
- Legal & Regulatory Compliance: To comply with applicable laws, licence conditions, anti-money laundering obligations, and requests from competent authorities.
- Customer Support: To respond to your enquiries, complaints, and support requests through live chat, email, and other communication channels, in English, Bahasa Melayu, or Mandarin.
- Responsible Gambling: To administer deposit limits, session alerts, self-exclusion programmes, and other responsible gambling tools at your request or as required by our policies.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time through your Account settings.
- Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the design, functionality, and performance of the Platform.
Legal Bases for Processing
We process your personal data one or more of the following legal bases, depending on the purpose of processing:
- Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide the Platform services under the Terms & Conditions you agreed to upon registration. This covers Account management, payment processing, and service delivery.
- Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
- Legal Obligation: Processing is necessary to comply with our legal and regulatory obligations, including KYC requirements, anti-money laundering obligations, and responses to lawful authority requests.
- Consent: For marketing communications and certain non-essential cookies, we rely on your freely given and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Disclosure
bosku8 does not sell your personal data to unrelated third parties. We may share your personal data with the categories of recipients described below, strictly for the purposes set out in this Policy:
8.1 Service Providers (Data Processors)
We engage reputable third-party service providers who process personal data on our behalf under contractual data processing agreements. These include: cloud hosting and infrastructure providers; payment processors and e-wallet operators (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners such as Maybank, CIMB, Public Bank, and Hong Leong); identity verification and KYC service providers; game software providers; customer relationship management platforms; fraud detection and analytics providers.
8.2 Legal & Regulatory Authorities
We may disclose personal data to competent authorities, law enforcement agencies, regulatory bodies, or courts where required or permitted by applicable law, including connection with investigations of fraud, money laundering, or other criminal activity.
8.3 Corporate Transactions
In the event of a merger, acquisition, business sale, or restructuring involving the Company, personal data held by the Company may be transferred to the relevant successor entity, subject to appropriate confidentiality and data protection obligations.
Our commitment: We never share your personal data with unrelated third-party advertising networks, data brokers, or any party for their independent marketing or profiling purposes. All data shared with service providers is governed by written agreements requiring appropriate data protection standards.
International Data Transfers
Given that bosku8 operates as an internationally licensed online gaming platform with global technology infrastructure, your personal data may be transferred to and processed in countries outside of Malaysia. Such countries may not have data protection laws equivalent to those applicable in Malaysia or the European Economic Area.
Where personal data is transferred internationally, we implement appropriate safeguards to ensure that your data receives a standard of protection consistent with this Policy. These safeguards include: contractual obligations on data recipients (such as standard contractual clauses); restriction of transfers to jurisdictions deemed to provide adequate protection; and technical security measures to protect data in transit and at rest.
If you have questions about specific international transfers of your personal data, you may contact us via the details in Section 17 and we will provide information on the applicable safeguards.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licence obligations. The following general retention principles apply:
- Active Account Data: Retained for the duration of the Account's active status and for minimum period of five (5) years following Account closure, to satisfy anti-money laundering record-keeping requirements.
- KYC Documents: Retained for a minimum of five (5) years from the date of last transaction or Account closure, whichever is later, in accordance with applicable compliance obligations.
- Transaction Records: Retained for a minimum of five (5) years to support financial auditing and regulatory compliance requirements.
- Support Communications: Retained for a minimum of two (2) years from the date of the last communication, or longer where the matter is subject to an ongoing dispute.
- Technical/Log Data: Typically retained for up to twelve (12) months for security and fraud prevention analysis purposes.
- Marketing Data: Retained until you opt out of marketing communications, at which point your preferences are updated. Records of opt-out are retained to ensure compliance with your wishes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.
Cookies & Tracking Technologies
bosku8 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the Platform, improve your user experience, and analyse how the Platform is used.
11.1 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, authentication, and security. These cannot be disabled without impacting core Platform functionality.
- Performance & Analytics Cookies: Used to understand how visitors interact with the Platform — including page views, session duration, and error reports — to improve Platform performance. Data collected is aggregated and anonymised where possible.
- Functional Cookies: Remember your preferences and settings, such as language preferences, to provide a more personalised experience on return visits.
- Marketing & Targeting Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These are only deployed where you have given consent.
11.2 Managing Cookies
You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies may affect the availability of core Platform features including Account login and payment processing. For non-essential cookies, you may also manage preferences through the cookie consent mechanism provided on the Platform.
Your Data Rights
Subject to applicable law and the conditions described below, you have the following rights with respect to your personal data held by bosku8. To exercise any of these rights, please contact us using the details in Section 17. We will respond to verified requests within 30 days, and will notify you if additional time is required.
Right of Access
Request a copy of the personal data we hold about you and information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your Account.
Right to Erasure
Request deletion of your personal data where there is no longer a lawful basis for retention, subject to legal record-keeping obligations.
Right to Restrict Processing
Request that we limit the processing of your data in certain circumstances, such as while a dispute is being resolved.
Right to Data Portability
Receive your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes, with effect from the date of your objection.
Withdraw Consent
Withdraw consent at any time where processing is based on your consent (e.g., marketing emails), without affecting prior lawful processing.
Right to Complain
Lodge a complaint with the relevant data protection supervisory authority if you are not satisfied with our response to a data rights request.
Please note that certain rights are subject to limitations — for example, we may be unable to delete data that we are legally required to retain, and we will verify your identity before processing any data rights request to prevent unauthorised disclosure.
Security Measures
bosku8 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- Encryption in Transit: All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS protocols, the same standard used by major global financial institutions.
- Encryption at Rest: Sensitive data categories, including financial records and identity document copies, are encrypted at rest using industry-standard encryption methods.
- Access Controls: Access to personal data within the Company is restricted on a strict need-to-know basis. Internal access permissions are reviewed regularly and revoked when no longer required.
- Password Security: Player passwords are stored in hashed form using a cryptographically secure hashing algorithm. Plain-text passwords are never stored or transmitted.
- Infrastructure Security: Platform infrastructure is hosted with reputable cloud providers maintaining ISO 27001 or equivalent security certifications, with regular penetration testing and vulnerability assessments conducted.
- Incident Response: We maintain a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.
While we apply robust security measures, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately at[email protected] if you suspect any unauthorised access to your Account.
Children & Minors
The Platform is strictly intended for use by persons aged 21 years and above. bosku8 does not knowingly collect or process personal data of persons below this age. Mandatory KYC verification is in place to enforce this restriction.
If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated Account, and return any funds deposited in accordance with our standard procedures.
If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on bosku8, please contact us immediately at [email protected] so that we can take appropriate action.
Third-Party Links & Services
The Platform may contain references to or integrations with third-party services, including payment processors, game providers, and responsible gambling resources. This Privacy Policy applies only to the bosku8 Platform and does not govern the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the Platform.
Payment processing services such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect operate under their own privacy policies and data processing arrangements. By using these services to transact on the Platform, you may be subject to their terms and data practices in addition to ours.
Amendments to This Policy
bosku8 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered Players via the email address associated with their Account or through a prominent notice on the Platform. The "Last Updated" date displayed at the top of this document reflects the most recent revision.
Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any amendment, you must cease using the Platform and may contact our support team to arrange Account closure and data deletion requests in accordance with Section 12.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bosku8, please contact us through the following channels:
- Live Chat: Available24/7 on the Platform — the fastest channel for urgent data concerns. Typical response time is under 5 minutes.
- Email: [email protected] — for formal data rights requests and privacy enquiries. Please include "Privacy Request" in your subject line.
- Languages: Data rights requests and privacy enquiries are handled in English, Bahasa Melayu, and Mandarin.
We will acknowledge receipt of your request within 5 business days and aim to resolve all data rights matters within 30 calendar days. For complex requests, we may extend this period and will notify you accordingly.
If you are not satisfied with our response to a data rights request or privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. Details of applicable supervisory authorities may be obtained by contacting our support team.
This Privacy Policy was last reviewed and updated on 1 January 2026. Players are encouraged to review this page periodically to remain informed of any changes.
How We Protect Your Privacy in Practice
Our privacy commitments are backed by real security infrastructure, strict access controls, and a team that takes data protection seriously.
256-bit SSL Encryption
Every connection between your device and bosku8 is protected with 256-bit SSL/TLS encryption — the same standard used by major global banks including Maybank and CIMB. Your login credentials, financial data, and personal information are encrypted in transit at all times.
No Data Sales — Ever
bosku8 does not sell your personal data to third parties. We share only with service providers who are contractually required to protect it, and only to the extent necessary for the services they provide. Your profile is not sold to advertisers or data brokers.
Your Rights, Respected
You have the right to access, correct, delete, or port your personal data at any time. Data rights requests submitted to [email protected] are acknowledged within 5 business days and resolved within 30 days — no bureaucratic runaround.
Minimum Data Collection
We collect only the data we genuinely need — for account management, payment processing, KYC compliance, and fraud prevention. We do not collect data speculatively or for undefined future use. Data retention schedules are reviewed and enforced regularly.
Hashed Password Storage
Your Account password is never stored in plain text. We use a cryptographically secure one-way hashing algorithm — meaning even our own staff cannot view your password. If you forget your password, it must be reset, not retrieved.
Breach Notification
In the unlikely event of a data breach affecting your personal information, we will notify you promptly and take immediate remediation steps. We maintain a documented incident response plan and test it regularly. Your data security is not an afterthought — it's a core operational priority.
Questions About Your Data?
If you have any concerns about how bosku8 handles your personal data, our support team is available24/7 in English, Bahasa Melayu, and Mandarin. You can also review our FAQ or visit our homepage to explore the full platform.
21+ only · Play responsibly · bosku8 is for entertainment purposes only