Privacy Policy

boostpay99 ("we", "us", "our", or "the Platform") is the operator of the online casino and sports betting platform accessible atboostpay99.cam. We are committed to protecting the personal data of every player who uses our services, particularly those based in Malaysia and other permitted jurisdictions where our platform is accessible.

This Privacy Policy explains how bostpay99 collects, processes, stores, shares, and protects personal data in connection with your use of the Platform. It also sets out your rights as a data subject and how you may exercise those rights.

This Privacy Policy applies to all users of the bostpay99 Platform, including registered account holders and unregistered visitors. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which contain additional provisions relevant to your use of the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including name, identification number, location data, online identifiers, and any factor specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction — whether automated or manual.
• "Data Controller" means bostpay99, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of boostpay99 under a contractual agreement, such as payment processors, KYC verification providers, and cloud infrastructure providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "Cookie" means a small text file stored on your device by a web browser in accordance with settings you control, used to remember preferences and track usage patterns.
• "KYC" means Know Your Customer — the process of verifying a player's identity, age, and address prior to processing withdrawals or as required for compliance purposes.

bostpay99 collects personal data in several categories depending on how you interact with the Platform. The following table summarises the main categories of data we collect and specific examples within each category.

bostpay99 collects personal data through the following mechanisms:

You provide data directly when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, respond to a promotional survey, or update your account profile. All data submitted in these contexts is associated with your Account.

When you access the Platform, our servers automatically collect technical data including your IP address, browser information, device type, and session activity. This data is collected via server logs, cookies, and similar web tracking technologies, as described further in Section 9of this Policy.

In certain circumstances, bostpay99 may receive personal data from third-party sources, including:

• Identity verification service providers used to validate your MyKad, passport, or other identity documents during KYC.
• Payment processors (including FPX, DuitNow, and e-wallet providers) who confirm the status of deposit and withdrawal transactions.
• Fraud detection and anti-moneylaundering screening services that may provide risk signals associated with your account activity.
• Marketing affiliate partners who referred you to the Platform, where applicable and only to the extent permitted under our affiliate agreements.

boostpay99 uses the personal data we collect for the following purposes:

To create and administer your Account, process deposits and withdrawals via your chosen payment method (Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, etc.), credit bonuses, verify your identity, and provide access to games and sports betting markets.

To fulfil our obligations under applicable anti-money-laundering (AML) regulations, counter-terrorism financing (CTF) requirements, and our operating licence conditions — including KYC verification, transaction monitoring, suspicious activity reporting, and record-keeping obligations.

To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, collusion, match-fixing, and other prohibited conduct described in our Terms & Conditions. This includes automated risk-scoring of account activity and manual review by our compliance team.

To monitor gameplay patterns for signs of potential problem gambling behaviour, apply player-requested responsible gambling tools (such as deposit limits, session reminders, or self-exclusion requests), and comply with responsible gambling obligations under our licence.

To respond to your enquiries, process your complaints, and provide assistance via live chat or email. Communications data retained from support interactions is used to improve service quality and for training purposes.

Where you have provided consent, to send you promotional communications about bostpay99 offers, new games, sports markets, and platform updates via email or in-platform notifications. You may withdraw consent for marketing communications at any time by updating your notification preferences within your Account settings or by contacting our support team.

To analyse aggregated and anonymised usage data for the purpose of improving platform performance, user experience, game library selection, payment processing efficiency, and responsible gambling tool effectiveness.

bostpay99 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you as an Account holder — including identity verification, payment processing, and game access — is carried out on the basis of contract performance.
• Legal Obligation: Processing required to comply with applicable AML, CTF, and licensing regulations is carried out to fulfil our legal obligations as a regulated operator.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement is carried out on the basis of our legitimate interests as a platform operator, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your explicit consent, which may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bostpay99 may share your personal data with the following categories of recipients in the circumstances described:

Financial data is shared with your chosen payment provider — including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — to the extent necessary to process your deposit or withdrawal request. Each provider operates under its own privacy policy and regulatory obligations.

During KYC verification, your identity documents and personal details may be shared with our contracted identity verification service provider for the purpose of document authentication and sanctions screening. This provider processes data only under our instructions and is contractually bound to data protection obligations consistent with this Policy.

bostpay99 is required by law to share certain data with regulatory bodies, law enforcement agencies, financial intelligence units, and licensing authorities upon valid legal request. Such disclosures are made strictly to the extent required by the applicable legal obligation and will not be disclosed to you where doing so would itself be unlawful.

We use third-party cloud hosting, database management, and security infrastructure providers who may have access to personal data in the course of providing their services to bostpay99. These providers are engaged under data processing agreements and are permitted to use personal data only for the specific purpose for which it was shared.

Certain game studios may receive aggregated, anonymised gameplay data for regulatory and fairness auditing purposes. Individual player identity data is not shared with game studios beyond what is necessary for the technical function of live dealer game sessions.

bostpay99 retains personal data only for as long as is necessary for the purposes for which it was collected, or for the period required by applicable law or regulatory obligation, whichever is longer.

• Account and Identity Data: Retained for the duration of your Account relationship with boostpay99, plus a minimum of five (5) years following Account closure, in accordance with standard AML/CTF record-keeping requirements.
• Transaction Data: Retained for a minimum of seven (7) years from the date of the transaction in accordance with financial record-keeping regulations.
• KYC Verification Documents: Retained for a minimum of five (5) years following the date of verification or, where required by our licensing authority, for the duration specified in our licence conditions.
• Communications Data: Support chat and email records are retained for a minimum of two (2) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Device and Usage Data: Technical log data is retained for up to twelve (12) months from the date of collection for security and fraud detection purposes, after which it is anonymised or deleted.
• Marketing Preferences: Records of your consent or opt-out status for marketing communications are retained indefinitely to demonstrate compliance with consent requirements, even if you have opted out of receiving communications.

Upon the expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in a manner consistent with industry best practices for data destruction.

boostpay99 uses cookies and similar technologies (including web beacons and session tokens) to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are in use:

These cookies are essential for the Platform to function correctly. They enable core features such as maintaining your logged-in session, processing secure transactions, and remembering your language and display preferences. These cookies cannot be disabled without significantly impairing your ability to use the Platform.

These cookies collect anonymised information about how visitors use the Platform — which pages are most visited, how long users stay, and where technical errors occur. This data helps us improve Platform performance. These cookies are deployed only with your consent.

These cookies remember choices you make (such as preferred payment method display or sound settings in games) to provide a more personalised experience. These cookies are deployed only with your consent.

You may control cookie settings through your browser's privacy settings at any time. Disabling strictly necessary cookies may prevent some core Platform features from working correctly. Disabling analytical or functional cookies will not affect your ability to place wagers or access games but may result in a less personalised experience.

boostpay99 implements a layered approach to data security, applying technical and organisational measures appropriate to the sensitivity of the data we hold and the risks associated with its processing. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using industry-standard TLS protocols, preventing interception by unauthorised third parties.
• Encryption at Rest: Sensitive personal data, including identity documents and financial account details, is encrypted in storage using AES-256 encryption.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and regular data protection training.
• Two-Factor Authentication: Two-factor authentication is available to players for Account login and is mandatory for our internal staff systems.
• Penetration Testing: The Platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate weaknesses before they can be exploited.
• Incident Response: bostpay99 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authority within the timeframe required by applicable law.

While bostpay99 takes every reasonable precaution to protect personal data, no data transmission or storage system can be guaranteed to be 100% secure. You are also responsible for maintaining the security of your own Account credentials.

As a data subject, you have the following rights in relation to the personal data that bostpay99 holds about you. These rights may be exercised by contacting our support team via live chat or email as set out in Section 15.

bostpay99 will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or high in volume, we may extend this period by a further two (2) months, of which you will be informed. We will not charge a fee for data rights requests unless they are manifestly unfounded or excessive.

The bostpay99 Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an Account or access any part of the gaming services offered on this Platform.

If bostpay99 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data, close the associated Account, and void any associated gameplay. Any real-money deposits made by an underage user will be handled in accordance with our Terms & Conditions and applicable regulatory guidance.

If you believe a person under 21 may have registered an Account on the bostpay99 Platform, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action.

The boostpay99 Platform may contain links to third-party websites or services, including those of our game studio partners and payment providers. This Privacy Policy applies solely to data collected and processed by boostpay99 in connection with the Platform. It does not extend to the privacy practices of any third-party operator, website, or service.

bostpay99 has no control over and assumes no responsibility for the content, privacy policies, or practices of third-party sites linked from or integrated within the Platform. We encourage you to review the privacy policies of any third-party service you interact with, particularly those of your chosen payment method provider (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, or CIMB), before submitting personal data to those services.

bostpay99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or Platform features. The date of the most recent revision is displayed at the top of this page.

Where changes to this Policy are material — for example, changes to the categories of data we collect, the legal basis for processing, or your rights as a data subject — bostpay99 will provide advance notice of the changes via a prominent notice on the Platform or via email to your registered address. Where the changes require your fresh consent, we will request that consent before the changes take effect in relation to your data.

Non-material amendments, such as typographical corrections or clarifications that do not alter the substance of the Policy, may be implemented without prior notification. We encourage you to review this Privacy Policy periodically to stay informed of how we are handling your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by boostpay99, please contact our support team through the channels below. We take all privacy enquiries seriously and aim to respond within 48 hours for email, or within minutes via live chat.

• Live Chat: Available24 hours a day, 7 days a week, directly within the bostpay99 Platform. This is the fastest channel for urgent privacy matters, including suspected data breaches or unauthorised Account access.
• Email: [email protected] — formal data rights requests, please include your registered username, the specific right you are seeking to exercise, and any relevant supporting information.

When submitting a data rights request (such as a Subject Access Request), please include your full name as registered on your Account, your registered email address, and a clear description of the specific request. We may need to verify your identity before processing the request to prevent disclosure of your personal data to an unauthorised party.

For responsible gambling concerns, including self-exclusion requests and deposit limit changes, please refer to our dedicatedResponsible Gambling page, which provides specific guidance and tool access. For matters relating to the general Terms of Service, please refer to our Terms & Conditions.