Privacy Policy

1. Who We Are

1.1 boscuci ("the Company", "we", "us", "our") operates the online gaming platform accessible at boscuci.co, offering online casino games, sports betting, lottery products, and related financial account management services to eligible players.

1.2 For the purposes of applicable data protection legislation, boscuci acts as the data controller in respect of personal data collected through the platform. Questions about data processing may be directed to our support team using the contact details in Section 13 of this Policy.

2. Data We Collect

2.1 boscuci collects the following categories of personal data from players and platform visitors:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identity document details (e.g., MyKad number, passport number) submitted during account registration and KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address provided at registration or updated subsequently.
• Financial Data: Bank account details, e-wallet identifiers (Maybank2u, Touch 'n Go eWallet, Boost, DuitNow, GrabPay), deposit and withdrawal transaction records, and crypto wallet addresses where applicable.
• Gaming Data: Bet history, game session records, wagering activity, account balance movements, and bonus usage history.
• Technical Data: IP address, device type and identifiers, operating system and browser information, time zone, login timestamps, and session duration data collected automatically when you access the boscuci platform.
• Communications Data: Records of your interactions with boscuci customer support, including live chat transcripts and email correspondence.
• Responsible Gaming Data: Self-imposed limit settings, cooling-off period requests, self-exclusion elections, and any information you provide in connection with your responsible gaming profile.

2.2 Data You Provide Voluntarily. In addition to the above, boscuci may collect additional information you choose to provide voluntarily, such as preferences indicated in account settings or feedback submitted through support channels.

3. How We Use Your Data

3.1 boscuci uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your boscuci account, including processing deposits and withdrawals, verifying your identity, and communicating account-related information.
• Service Delivery: To provide access to casino games, sports betting markets, lottery products, and all other platform features.
• Legal Compliance: To comply with applicable anti-money laundering (AML) regulations, age verification requirements, know-your-customer (KYC) obligations, and other legal and regulatory duties to which boscuci is subject.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, collusion, and other prohibited conduct.
• Responsible Gaming: To monitor gaming activity in the context of responsible gaming obligations, administer player-imposed limits and self-exclusion elections, and identify patterns that may indicate problem gambling behaviour.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical and account assistance.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the boscuci platform, fix bugs, and optimise the user experience.
• Marketing Communications: Where you have provided your consent, to send you promotional communications about boscuci offers, new games, and platform updates. You may withdraw marketing consent at any time via your account settings.

4. Legal Basis for Processing

4.1 boscuci processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to perform the contract between you and boscuci — i.e., operating your account and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations and age verification requirements.
• Legitimate Interests: Processing necessary for boscuci's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where boscuci relies on your consent as the legal basis for processing — principally for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

5.1 boscuci does not sell your personal data to third parties. boscuci shares personal data only in the following circumstances:

• Payment Processors: Financial data is shared with payment service providers (including FPX operators, e-wallet providers, and banking partners) solely to process your deposit and withdrawal transactions.
• Game Providers: Certain gaming data (such as player session identifiers) is shared with licensed game suppliers to facilitate game functionality and dispute resolution.
• KYC & Verification Providers: Identity documents and related data are shared with specialist identity verification service providers to fulfil our age verification and AML compliance obligations.
• Regulatory Authorities: boscuci may be required to disclose personal data to regulators, law enforcement agencies, or courts where required by applicable law or a valid legal order.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of boscuci's business, personal data held by boscuci may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

5.2 All third-party service providers who receive personal data from boscuci are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.

6. Cookies & Tracking Technologies

6.1 The boscuci platform uses cookies and similar tracking technologies to operate core platform functionality, maintain your session state, and collect technical usage data for analytics and security purposes.

6.2 The following categories of cookies are used on the boscuci platform:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies cannot be disabled without impairing your ability to use core features, including account login and the gaming cashier.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the boscuci platform. This information is used to identify performance issues and improve the user experience.
• Security Cookies: Used to detect fraudulent activity, prevent account takeover attacks, and maintain the integrity of player sessions.

6.3 You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will affect your ability to log in and use the boscuci platform.

7. Data Retention

7.1 boscuci retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account & Identity Data: Retained for a minimum of five (5) years from the date of account closure, in compliance with applicable AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming Activity Data: Retained for a minimum of three (3) years from the date of each session or transaction.
• Support Communications: Retained for a minimum of two (2) years from the date of the last communication.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with boscuci's data destruction procedures.

8. Security Measures

8.1 boscuci implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and boscuci servers.
• Encryption at rest for sensitive personal and financial data stored in boscuci systems.
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Two-factor authentication available to all registered players for enhanced account security.

8.2 Notwithstanding the measures above, no data transmission over the internet can be guaranteed to be entirely secure. boscuci cannot warrant the absolute security of data transmitted to or from the platform and recommends that you take personal security precautions, including using a strong and unique password and enabling 2FA on your boscuci account.

9. Your Rights

9.1 Subject to applicable law, you have the following rights in respect of the personal data boscuci holds about you:

• Right of Access: You may request a copy of the personal data boscuci holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to boscuci's legal retention obligations.
• Right to Restriction: You may request that boscuci restrict the processing of your data in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes.
• Right to Data Portability: Where processing is based on consent or contract performance, you may request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing.

9.2 To exercise any of the rights listed above, contact boscuci using the details in Section 13. boscuci will respond to all verified data subject requests within thirty (30) days of receipt.

10. Children & Minors

10.1 The boscuci platform is strictly for adults aged 21 and above. 21+ boscuci does not knowingly collect personal data from persons under the age of 21. If boscuci becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account suspended.

10.2 Age verification through KYC document submission is a mandatory requirement for all boscuci accounts prior to the processing of any withdrawal. If you believe that a minor may have accessed the boscuci platform, please contact our support team immediately.

11. Third-Party Links

11.1 The boscuci platform may contain links to third-party websites for informational purposes. boscuci is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to data processed by boscuci through the boscuci.co platform. We recommend that you review the privacy policy of any third-party site you visit independently.

12. Changes to This Privacy Policy

12.1 boscuci reserves the right to amend this Privacy Policy at any time. The updated Policy will be published on this page with a revised effective date. Where changes are material to your rights as a data subject, boscuci will endeavour to notify registered account holders via their registered email address prior to the changes taking effect.

12.2 Your continued use of the boscuci platform following publication of any revised Privacy Policy constitutes your acceptance of the updated terms.

13. Contact Us

13.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data boscuci holds about you, please contact us through the following channels:

• Live Chat: Available 24/7 via the on-site support widget on all pages of the boscuci platform — the fastest channel for urgent data-related matters.
• Email: [email protected] (displayed as plain text — not a clickable link).

13.2 boscuci will acknowledge all privacy-related requests within five (5) business days and provide a substantive response within thirty (30) days of receipt.