Privacy Policy bosku – Your Personal Data Protection

1 Introduction

Bosku is committed to protecting the privacy of every individual who uses our platform. This Privacy Policy is written in plain language so you truly understand what happens with your information — not just a complex legal document nobody reads.

This policy applies to all information collected through the bosku website, the bosku mobile app, and all our official communication channels including customer support, email, and live chat. It covers information you provide directly and information collected automatically while you use our platform.

Bosku operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All personal data processing is carried out on a lawful, fair, and transparent basis as required by law.

2 Personal Data We Collect

Bosku collects personal information from you in several different situations. Below are the categories of data we collect and specific examples:

3 Purposes of Personal Data Use

Every piece of data we collect is used for a clear and lawful purpose. bosku does not process your data for any purpose not stated in this policy. The following are the primary purposes for which your personal data is used:

• Account Management: Create and manage your account, verify identity through the KYC process and ensure account security at all times.
• Transaction Processing: Process deposits, withdrawals and all financial transactions securely and accurately.
• Service Provision: Allow you to access all games and features on the bosku platform seamlessly.
• Security and Fraud Prevention: Detect and prevent fraud, money laundering, multiple account usage and suspicious activity.
• Service Communications: Send important notifications about your account, transactions, terms changes and security information.
• Responsible Gaming: Monitor gaming patterns to identify signs of problem gambling and provide appropriate assistance.
• Platform Improvements: Analyze usage patterns to improve user experience, technical performance and the games offering.
• Legal Compliance: Meet legal obligations including financial reporting requirements and compliance with applicable regulations.

4 Data Sharing with Third Parties

Bosku does not sell your personal data. However, in the course of operating the platform, there are limited situations where we need to share certain information with trusted parties:

• Payment Providers: Information required to process transactions is shared with licensed payment processors such as FPX, digital wallet providers and partner banks. All such providers are bound by strict data protection agreements.
• Game Software Providers: Minimal technical data is shared with licensed game providers to ensure game integrity and licensing compliance.
• Identity Verification Services: KYC information is shared with licensed third-party identity verification platforms to meet legal requirements.
• Legal Authorities: bosku will disclose required information when ordered by a court or authorised law enforcement agency under Malaysian law.
• Analytics and Security Services: Anonymised technical data is shared with cybersecurity and analytics service providers to monitor threats and improve platform performance.

All third parties that receive data from bosku are required to maintain the confidentiality and security of that data, and to use it solely for the purposes specified in their agreement with us.

5 Data Security

Bosku continuously invests in security infrastructure to ensure your data is always protected. The security measures we implement cover multiple layers of protection:

• 256-bit SSL/TLS encryption for all data transmitted between the platform and your device.
• At-rest data encryption for all information stored in our database.
• Role-based access control ensuring only authorized personnel can access specific data categories.
• Periodic security audits by independent third parties to identify and address system vulnerabilities.
• Intrusion detection and 24/7 monitoring to identify suspicious activity in real time.
• Two-factor authentication (2FA) is available for your account as an added layer of security.
• A clear incident response protocol in the event of a data breach.

6 Data Retention Period

Bosku retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by law. General retention periods are as follows:

• Active account data: Retained throughout your active membership period and for a specified period after account closure.
• Financial transaction records: Retained for seven (7) years in line with Malaysia's anti-money laundering and tax legal requirements.
• KYC Records: Retained for a minimum of five (5) years after the business relationship ends, in accordance with legal requirements.
• Support communication logs: Retained for two (2) years for reference and dispute resolution purposes.
• Technical data and access logs: Retained for ninety (90) days for security and debugging purposes.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be associated with any specific individual.

7 Your Rights Regarding Personal Data

As a bosku member, you have the following rights regarding your personal data. We are committed to making it easy to exercise these rights without unnecessary burden:

To exercise any of the above rights, contact the bosku support team via live chat or email. We will process your request within thirty (30) calendar days.

8 Cookies and Tracking Technologies

Bosku uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the platform to help us improve performance and user experience. All data is collected anonymously.
• Functional Cookies: Remember your preferences such as display settings and preferred language to deliver a more personalized experience.
• Analytics Cookies: Help us understand how members interact with the platform through aggregated and anonymized data.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the full functionality of the bosku platform.

9 International Data Transfers

In the course of operating the platform, your data may be transferred to and stored on servers located outside Malaysia. This occurs primarily in the context of cloud computing services and international gaming software providers.

Bosku ensures that any international data transfers are carried out with adequate safeguards through:

• Data processing agreements that comply with international data protection standards.
• Transfers only to countries or organizations that provide an equivalent or higher level of data protection.
• Use of internationally recognized standard contractual clauses to protect data during transfers.

10 Child Protection

The bosku platform is strictly for adult users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we discover that we have collected data from someone under the age of 18, we will immediately take the following steps:

• Suspend the relevant account immediately.
• Delete all personal data associated with the account.
• Refund any deposits made where the source can be verified.

Parents or guardians who suspect their child has registered on the bosku platform are requested to contact us immediately through our customer support channels.

11 Changes to This Privacy Policy

Bosku reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons.

When we make significant changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display clear notices on the platform regarding changes made.
• Notify members via email or in-app notifications for material changes.

Continued use of the bosku platform after changes take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically.

12 Contact Us About Privacy

If you have any questions, concerns or complaints regarding how bosku handles your personal data, we encourage you to reach out to us directly. Our data privacy team is ready to assist you.

You can reach us via:

• Live Chat: Available 24 hours a day, 7 days a week via the bosku platform.
• Support Email: [email protected] (as plain text — please type this address into your email client).

We will respond to all privacy-related inquiries within five (5) business days. For more complex complaints or those requiring further investigation, we will keep you informed of the progress within a reasonable timeframe.