Boss Game Privacy Policy — Your Data, Your Rights

Boss Game (referred to in this policy as "Boss Game", "we", "us", or "our") operates the online gaming and sports betting platform accessible at bossgame.bet and through the Boss Game mobile application. Boss Game is the data controller for all personal information collected through this platform from Pakistani players and visitors.

This Privacy Policy applies to all users of Boss Game's services, including registered players, visitors to bossgame.bet who have not registered, and anyone who contacts Boss Game's customer support team. By using Boss Game, you acknowledge that you have read and understood this policy.

For all data protection enquiries, Boss Game can be contacted at: support@bossgame.bet

Boss Game collects different categories of personal information depending on how you interact with the platform. Here is a full breakdown of what we collect and when:

Registration Data

When you create a Boss Game account, we collect your full name, date of birth, Pakistani mobile number, email address, and the city or region you are registering from. This information is required to create and verify your account and cannot be omitted.

Identity Verification (KYC) Data

To comply with anti-money laundering regulations and to protect Pakistani players from identity fraud, Boss Game may request copies of:

• Pakistani National Identity Card (CNIC) — front and back
• Proof of address (utility bill, bank statement, or similar document dated within 90 days)
• Proof of payment method ownership (screenshot or confirmation of mobile wallet or bank account)

KYC documents are stored securely and access is restricted to Boss Game's compliance team. They are not shared with third parties except where required by law.

Financial Data

Boss Game records all deposits, withdrawals, bets, and transactions associated with your account. This includes amounts, timestamps, payment methods used, and transaction outcomes. Full card numbers are never stored by Boss Game — payment card data is processed and held by our PCI-DSS-compliant payment processor only.

Device and Technical Data

When you access Boss Game, we automatically collect technical information including your IP address, device type and model, operating system and version, browser type, screen resolution, and connection type. This information is used for security monitoring, fraud detection, and to optimise the Boss Game experience for your device.

Behavioural and Usage Data

Boss Game records your activity on the platform — which games you play, session duration, bet history, feature usage, and pages visited. This data is used to improve the platform, personalise your experience, and detect unusual activity that may indicate account compromise or responsible gaming concerns.

Customer Support Communications

When you contact Boss Game support via live chat, email, or any other channel, the contents of those communications are recorded and stored. This allows us to maintain continuity across support interactions and to review outcomes in the event of a dispute.

Boss Game uses the personal data we collect for the following purposes:

Boss Game does not use personal data for automated decision-making that significantly affects your rights as a player, except in fraud detection where automated systems may flag suspicious activity for human review. Any automated fraud flag can be reviewed and appealed through Boss Game's customer support team.

Boss Game processes personal data under the following legal bases:

• Contract performance: Processing necessary to fulfil Boss Game's obligations under your player account agreement — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with anti-money laundering laws, financial regulations, and any lawful request from Pakistani regulatory or law enforcement authorities.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where Boss Game's interests do not override your fundamental privacy rights.
• Consent: Processing for optional marketing communications, preference-based personalisation, and any other purpose where Boss Game specifically requests and receives your consent. You may withdraw consent at any time through your account settings.

Boss Game does not sell your personal data to third parties. We share data only in the following controlled circumstances:

• Payment processors: Transaction data is shared with Boss Game's licensed payment service providers (including the operators of Easypaisa, JazzCash, NayaPay, SadaPay, and card processing networks) solely for the purpose of completing financial transactions. These processors are contractually bound to use data only for payment purposes.
• Game providers: Where Boss Game licences games from third-party providers, limited account-level data (such as a pseudonymised player ID) may be shared with the game provider to deliver the game experience. Full identity data is not shared.
• Fraud and security services: Boss Game uses third-party security tools that may process technical data (IP address, device fingerprint) for fraud detection purposes. These services are bound by strict data processing agreements.
• Legal and regulatory authorities: Boss Game will disclose personal data to Pakistani regulatory or law enforcement bodies where legally required to do so, or where disclosure is necessary to protect Boss Game's legal rights.
• Corporate transactions: In the event of a merger, acquisition, or sale of Boss Game, player data may be transferred as part of that transaction. You will be notified before your data is transferred and subjected to a different privacy policy.

Given that Boss Game handles real PKR transactions for Pakistani players, payment data security receives particular attention. The following measures are in place:

• Boss Game does not store full payment card numbers. Card transactions are processed by a PCI-DSS Level 1 compliant payment processor — the highest available standard.
• Mobile wallet transactions via Easypaisa, JazzCash, NayaPay, and SadaPay are processed through their respective official APIs with encrypted authentication tokens. Boss Game stores a transaction reference, not your wallet credentials.
• IBFT bank transfer details are stored only for the purpose of processing the associated withdrawal and are not retained beyond the transaction lifecycle.
• Transaction records are retained for a minimum of 5 years in compliance with financial regulations. After this period, records are purged unless an active legal hold requires extended retention.
• Access to financial records within Boss Game is restricted to authorised personnel on a strict need-to-know basis, with full access logging and regular audits.

Boss Game uses cookies and similar technologies on its website and application. Here is a breakdown of what we use and why:

• Essential cookies: Required for Boss Game to function — session management, login authentication, and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, game category, and display options. These persist between sessions to improve your experience.
• Analytics cookies: Used by Boss Game's internal analytics system to understand how Pakistani players use the platform — which pages are visited, where players encounter issues, and how features are used. This data is aggregated and not linked to identifiable individuals.
• Security cookies: Used for fraud detection and to distinguish human users from automated systems. These may record device characteristics and interaction patterns.

Boss Game does not use third-party advertising cookies or cross-site tracking technologies that would follow you beyond the Boss Game platform. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect platform functionality.

Boss Game implements a comprehensive set of technical and organisational security measures to protect your personal data:

• Encryption in transit: All data between your device and Boss Game is encrypted using TLS 1.3. This applies to the website, mobile app, and all API communications.
• Encryption at rest: Personal data and financial records stored on Boss Game's servers are encrypted using AES-256 encryption.
• Access controls: Employee access to personal data is governed by role-based permissions. Access to sensitive data requires multi-factor authentication and is fully logged.
• Regular security audits: Boss Game's security infrastructure is reviewed by independent third-party security firms on a scheduled basis. Penetration testing is conducted at least twice a year.
• Incident response: Boss Game maintains a documented data breach response procedure. In the event of a breach affecting Pakistani player data, affected players will be notified within 72 hours of Boss Game becoming aware of the incident, along with details of what was affected and what actions Boss Game is taking.

Boss Game retains personal data for as long as it is necessary for the purposes described in this policy, or as required by applicable law. Specific retention periods include:

• Active account data: Retained for the duration of your Boss Game account, plus a post-closure period of 2 years to handle any post-closure disputes or enquiries.
• Financial and transaction records: Retained for a minimum of 5 years following the transaction date, in compliance with financial regulatory requirements.
• KYC and identity documents: Retained for a minimum of 5 years following account closure or the completion of the last transaction, whichever is later.
• Customer support communications: Retained for 3 years following the resolution of the support interaction, to allow for dispute review.
• Technical and device data: Retained for up to 12 months unless required longer for an active fraud investigation.

After applicable retention periods expire, data is permanently deleted from Boss Game's systems using secure deletion procedures. Backups containing expired data are purged on the same schedule as the primary data store.

As a Pakistani player registered on Boss Game, you have the following rights over your personal data. To exercise any of these rights, contact Boss Game at support@bossgame.bet with your account details and the specific right you wish to exercise. Boss Game will respond within 30 days.

• Right to access: Request a copy of all personal data Boss Game holds about you. Boss Game will provide this in a structured, readable format.
• Right to correction: Request correction of any inaccurate or outdated personal data held by Boss Game. Some data corrections (such as name or date of birth) require supporting documentation.
• Right to deletion: Request deletion of your personal data. Boss Game will comply subject to any legal retention obligations that require data to be kept. Data required for AML/KYC compliance cannot be deleted until its mandatory retention period expires.
• Right to restrict processing: Request that Boss Game limits how your data is used while a dispute or review is in progress, rather than deleting it outright.
• Right to object: Object to Boss Game's processing of your data where that processing is based on legitimate interests, including responsible gaming monitoring.
• Right to withdraw consent: Where Boss Game processes your data based on consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Boss Game is strictly an 18+ platform. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If Boss Game discovers that a person under 18 has registered an account, the account will be closed immediately, all data will be deleted, and any deposited funds will be returned to the source payment method after verification.

If you have reason to believe that a minor has registered on Boss Game, please contact support@bossgame.bet immediately. Boss Game treats reports of underage registration as a priority and will investigate within 24 hours.

Boss Game's primary data infrastructure is located within the region to serve Pakistani players. In some circumstances, data may be processed by service providers located outside Pakistan — for example, cloud infrastructure providers or security services.

Where international data transfers occur, Boss Game ensures that appropriate safeguards are in place to protect your data to a standard equivalent to local data protection requirements. This includes contractual data processing agreements with all service providers that handle Boss Game player data. No personal data is transferred to countries or organisations that cannot demonstrate adequate data protection standards.

Boss Game reviews this Privacy Policy on a regular basis and updates it when our data practices change, when legal requirements evolve, or when player feedback highlights areas requiring clarification.

When Boss Game makes material changes to this policy — changes that affect how your data is collected, used, or shared — we will notify registered Pakistani players via email and through a platform notification at least 7 days before the changes take effect. Minor updates such as clarifications or corrections to existing policy language may be made without advance notification.

The date of the most recent update is displayed at the top of this page. We recommend reviewing the Privacy Policy periodically. Continued use of Boss Game after the effective date of an update constitutes acceptance of the revised policy.

For any questions, concerns, or requests relating to this Privacy Policy or Boss Game's handling of your personal data, please contact the Boss Game data protection team:

• Email: support@bossgame.bet
• Subject line: Include "Privacy Request" or "Data Query" for faster routing to the relevant team
• Response time: Boss Game aims to respond to all privacy-related enquiries within 5 working days

If you are not satisfied with Boss Game's response to a privacy complaint, you have the right to escalate the matter through the formal complaints process described in Boss Game's Terms and Conditions.