Privacy Policy

This Privacy Policy ("Policy") sets out the data processing practices of Boospay99 ("the Platform", "the Company", "we", "us", "our") in relation to personal data collected from registered users and visitors ("User", "Data Subject", "you") of the Boospay99 website and associated Services at https://boospay99.cam.

Boospay99 is an English-language online casino and sports betting platform operated specifically for the Malaysian market. In the course of providing the Services — including account registration, identity verification (KYC), payment processing, customer support, and promotional communications — we necessarily collect and process certain categories of personal data. This Policy explains how that data is handled at every stage of its lifecycle.

By creating a Boospay99 account or using any component of the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. Where consent is the legal basis for processing, you may withdraw that consent at any time by contacting us as set out in Section 14.

The following terms carry the meanings assigned below throughout this Policy:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes name, identity card number, email address, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure by transmission, dissemination, combination, restriction, erasure, or destruction.
• "Data Controller" — Boospay99, the entity that determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" — a third party that processes personal data on behalf of Boospay99, pursuant to a written agreement and only documented instructions from the Company.
• "KYC Data" — personal data collected as part of the Know Your Customer verification process, including identity documents, proof of address, and biometric selfie photographs.
• "Cookies" — small text files stored on a User's device by the Platform to facilitate session management, analytics, and personalisation functions.
• "Services" — all products, games, betting markets, payment processing, support channels, and platform features offered through the Boospay99 website.

Boospay99 collects personal data across several categories, depending on how you interact with the Platform:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data (except where voluntarily disclosed in connection with responsible gambling self-exclusion requests), or biometric data beyond the selfie photograph required for KYC compliance.

Boospay99 collects personal data through the following channels:

• Directly from you — when you register an account, complete the KYC verification process, make a deposit or withdrawal, interact with our customer support team, or update your account preferences.
• Automatically via the Platform — through cookies, session tracking technologies, and server logs that record technical data about your device and browsing behaviour during each Platform session.
• From payment service providers — when you initiate a transaction via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, or USDT TRC20, relevant payment confirmation and reference data is transmitted to the Platform by the respective provider.
• From identity verification services — our KYC partners may return verification status signals and document authenticity assessments as part of the automated identity checking process.
• From fraud and security monitoring systems — automated risk assessment tools analyse technical and behavioural data to flag potentially fraudulent or suspicious account activity.

We process your personal data for the following purposes, each supported by a lawful basis for processing:

• Account Creation and Management — to register your account, verify your identity, and maintain your account profile. Legal basis: Contractual necessity.
• KYC Compliance — to verify your age, identity, and address as required for operating an online gaming platform and complying with anti-money laundering obligations. Legal basis: Legal obligation.
• Payment Processing — to process deposits and withdrawals via supported Malaysian payment channels and to maintain accurate financial records. Legal basis: Contractual necessity.
• Fraud Prevention and Security — to detect, investigate, and prevent fraudulent transactions, account takeovers, and platform abuse. Legal basis: Legitimate interests.
• Customer Support — to respond to your enquiries, resolve disputes, and maintain communication records. Legal basis: Contractual necessity and legitimate interests.
• Responsible Gambling — to implement deposit limits, self-exclusion tools, and cooling-off periods at your request, and to proactively identify accounts that may exhibit problem gambling behaviour. Legal basis: Legal obligation and legitimate interests.
• Marketing Communications — to send you promotional emails, platform updates, and bonus notifications, where you have opted in to receive such communications. Legal basis: Consent (withdrawable at any time).
• Platform Improvement — to analyse aggregate usage patterns, improve user experience, and develop new features. Legal basis: Legitimate interests.

6.1 No Commercial Data Selling. Boospay99 does not sell, rent, license, or commercially transfer your personal data to any third party for their own marketing or commercial purposes. This is an absolute commitment, not a qualified policy position.

6.2 Service Partners. We share personal data with the following categories of third-party service providers, strictly to the extent necessary for them to deliver their services to the Platform:

• Payment processors and e-wallet providers — Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX infrastructure, and banking partners — solely for the purpose of processing your transactions.
• KYC and identity verification services — to authenticate your identity documents and confirm age eligibility.
• Fraud detection and cybersecurity providers — to protect the Platform and all registered users from malicious activity.
• Cloud infrastructure and hosting providers — for secure data storage and platform delivery.
• Customer support platform providers — to deliver live chat, email, and ticketing support functions.

6.3 Legal Disclosures. Boospay99 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or lawful request. We will, where legally permissible, notify you of any such disclosure.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of the business assets of Boospay99, personal data held by the Platform may be transferred to the acquiring entity. Users will be notified of any such transfer and any resulting changes to this Privacy Policy.

7.1 Bospay99 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulatory obligations.

7.2 Active Accounts. Personal data associated with an active Account is retained for the full duration of the Account's active status.

7.3 Closed Accounts. Upon closure, personal data is retained for a minimum period of five (5) years from the date of closure to comply with anti-money laundering record-keeping obligations, tax regulations, and to facilitate the resolution of any outstanding disputes or legal proceedings.

7.4 KYC Documents. Identity and address verification documents are retained for a minimum of five (5) years following the last transaction or account closure, whichever is later, in accordance with applicable AML compliance requirements.

7.5 Marketing Data. Where you have opted out of marketing communications, your opt-out preference is retained permanently to ensure your preference is honoured. Email addresses associated with suppressed marketing consent are retained on a suppression list only.

7.6 Deletion Requests. Subject to legal retention obligations, you may request deletion of your personal data as described in Section 10 (User Rights). Where a deletion request cannot be fully actioned due to a legal retention obligation, Boospay99 will inform you of the specific obligation that prevents full deletion and will anonymise or restrict data processing where deletion is not immediately possible.

8.1 Boospay99 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks presented by the processing activities. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between the user's device and the Platform.
• Encryption at rest for sensitive data fields including passwords (hashed using industry-standard algorithms), KYC documents, and financial identifiers.
• Multi-factor authentication requirements for account access and withdrawal authorisation.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Continuous automated monitoring for intrusion attempts, anomalous access patterns, and data exfiltration indicators.
• Regular security audits and penetration testing of Platform infrastructure.

8.2 Data Breach Response. In the event of a personal data breach that creates a risk to the rights and freedoms of affected users, Boospay99 will take immediate containment action and notify affected users without undue delay. Notifications will be delivered to the email address registered on the affected Account.

8.3 Notwithstanding the measures above, no data transmission over the internet or method of electronic storage is entirely secure. While Boospay99 uses commercially reasonable efforts to protect your personal data, absolute security cannot be guaranteed.

9.1 Boospay99 uses cookies and similar tracking technologies on the Platform to support core functionality, analyse usage, and deliver a personalised experience. The following categories of cookies are used:

• Essential Cookies — strictly necessary for the Platform to function, including session management, authentication tokens, and security cookies. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies — used to collect aggregate, anonymised data about how users navigate and interact with the Platform. This data is used solely for Platform improvement purposes and does not identify individual users.
• Preference Cookies — store user settings such as language preference, display configuration, and session preferences to deliver a consistent experience across visits.
• Security Cookies — used by fraud detection systems to identify suspicious patterns and protect against account takeover attempts.

9.2 You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in to and use the Platform. Disabling analytics and preference cookies will not affect your ability to access the Services.

9.3 Boospay99 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts.

As a data subject, you hold the following rights in respect of personal data held by Boospay99. These rights may be exercised at any time by contacting us as set out in Section 14:

All rights requests are acknowledged within five (5) business days of receipt. We endeavour to fully action all requests within thirty (30) days. Where a request cannot be fully actioned — for example, due to a conflicting legal obligation — we will explain the basis for any limitation in writing.

11.1 The Boospay99 platform is strictly intended for persons aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21.

11.2 Where Boospay99 becomes aware that personal data has been collected from a person under the age of 21, the associated Account will be immediately suspended, all funds will be held pending review, and the personal data of the underage individual will be deleted in accordance with applicable data protection standards, subject to any legal obligations relating to the misrepresentation.

11.3 If you believe that a person under the age of 21 has created an Account on the Boospay99 platform, please notify us immediately at the contact details provided in Section 14. We take all such reports seriously and act on them promptly.

12.1 Boospay99 operates in the Malaysian digital market and endeavours to process personal data of Malaysian users within infrastructure that is compliant with applicable data protection expectations for the region.

12.2 Certain third-party service providers engaged by Boospay99 — including cloud infrastructure, KYC verification services, and cybersecurity platforms — may process data in data centres located outside Malaysia. Where such transfers occur, Boospay99 ensures that adequate contractual safeguards are in place, including data processing agreements that impose equivalent data protection obligations on the recipient.

12.3 By using the Services, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia as described above, subject to the protections described in this Section.

13.1 Boospay99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational procedures.

13.2 Material changes to this Policy — particularly those affecting how your personal data is collected, used, or shared — will be communicated to registered Users via email notification to the registered Account email address and/or by a prominent notice displayed upon next login.

13.3 The effective date at the top of this document will be updated to reflect the date on which any revised Policy comes into effect. Continued use of the Services after that date constitutes acceptance of the revised Policy.

13.4 Users who do not agree to a revised Privacy Policy may exercise their rights under Section 10, including the right to request Account closure.

For all privacy-related enquiries, data rights requests, or questions regarding this Privacy Policy, please contact Boospay99 through the following channels:

• Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request" (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Boospay99 platform — average response time 3–5 minutes
• Languages: English, Bahasa Melayu, and Mandarin

We are committed to acknowledging all privacy-related correspondence within five (5) business days. Data rights requests will be actioned within thirty (30) days of receipt of a complete request, subject to identity verification.