Mybos Privacy Policy — Data Protection Malaysian User Privacy

1 Introduction and Scope of This Privacy Policy

Mybos is an online gaming platform operating under a valid licence and is fully committed to protecting the privacy of every user who entrusts us with their personal information. This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices.

This document applies to all your interactions with mybos — including visiting our website, registering an account, making deposits or withdrawals, using the mybos mobile app, contacting our customer support team, and participating in any promotional campaigns or loyalty programmes we run.

By using mybos services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please contact us for further clarification or discontinue use of the platform.

2 Types of Personal Data We Collect

Mybos only collects personal data that is strictly necessary to provide our users with a secure, lawful, and high-quality service. The following are the categories of data we collect:

We may also collect data you share voluntarily — such as feedback submitted through customer satisfaction surveys or information included in your communications with our team. All such data is handled with the same level of protection.

3 How We Use Your Personal Data

Every piece of data we collect is used for clear and legitimate purposes. mybos will not use your data for any purpose other than those stated below, except with your explicit prior consent:

• Account Management: Creating, verifying, and maintaining your mybos account while ensuring login security at all times.
• Transaction Processing: Processing all deposits and withdrawals securely, verifying bank account holder identities, and preventing financial fraud.
• KYC and AML Compliance: Meeting legal requirements related to Know Your Customer (KYC) and Anti-Money Laundering (AML) as mandated by regulatory authorities.
• Customer Service: Providing technical support, responding to enquiries, and efficiently resolving complaints or disputes.
• Platform Security: Detecting and preventing fraudulent activity, account misuse, hacking attempts, and other cybersecurity threats.
• Service Improvement: Analysing usage patterns on an aggregate and anonymised basis to enhance the mybos platform user experience.
• Marketing Communications: Sending information about the latest promotions, bonuses, and campaigns — only to users who have consented to receive such communications.
• Responsible Gaming: Monitoring gaming patterns to identify early signs of problem gambling and taking appropriate protective action.

4 Data Sharing with Third Parties

Mybos does not sell, rent, or disclose users' personal data to third parties for commercial marketing purposes. However, in the course of operating the platform, mybos may share data with the following selected parties for legitimate and strictly controlled reasons:

• Payment Service Providers: Registered payment processing partners such as FPX, DuitNow, and e-wallet providers require limited transaction data to securely process your deposits and withdrawals.
• Gaming Service Providers: Game developers and Live Casino companies integrated with the mybos platform receive only the minimum session data required to deliver the gaming experience.
• KYC Verification Provider: Approved third-party identity verification services help us process verification documents securely and efficiently.
• Cloud Infrastructure and Hosting: Technical infrastructure providers used to operate the mybos platform are subject to strict data protection agreements.
• Legal Authority: mybos will disclose the necessary data to law enforcement agencies, regulatory bodies, or courts when required by applicable Malaysian law.

Every third party we work with is bound by strict confidentiality and data protection agreements. They are only permitted to use your data for the specific purposes outlined in those agreements and must comply with the data security standards set by mybos.

5 Use of Cookies and Tracking Technologies

Mybos uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how users interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, transaction security, and account integrity. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how users use the platform — such as most frequently visited pages and load times — to help us improve technical performance.
• Functional Cookies: Storing user preferences such as language, time zone, and display settings to deliver a more personalised experience.
• Analytics Cookies: Helping us understand aggregate and anonymised user behaviour for the continuous improvement of the mybos platform.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the mybos platform. mybos does not use third-party cookies for advertising or cross-site tracking purposes.

6 Data Security Measures We Implement

The security of your personal data is mybos's highest priority. We continuously invest in the latest security infrastructure and undergo regular security audits by independent experts. The key security measures we implement include:

• Advanced-Level Data Encryption: All data in transit is protected using TLS 1.3, while stored data is encrypted with AES-256 — the security standard used by the world's leading financial institutions.
• Firewall and Intrusion Detection System: mybos infrastructure is protected by multiple layers of firewalls and an IDS/IPS system that monitors security threats 24 hours a day.
• Role-Based Access Control: Only mybos staff with a legitimate business need and who have undergone background checks are permitted to access users' personal data.
• Two-Factor Authentication (2FA): mybos provides and encourages the use of 2FA for all user accounts as an effective additional layer of protection.
• Real-Time Monitoring: mybos's automated monitoring system continuously watches for suspicious activity and will immediately block any unauthorised access.
• Regular Security Testing: mybos conducts regular penetration testing and vulnerability assessments to identify and address any system weaknesses before they can be exploited.

7 Personal Data Retention Period

Mybos does not retain your personal data longer than necessary for its original collection purpose or as required by applicable Malaysian law. Below are our data retention guidelines:

• Active Account Data: Retained for the duration your account remains active and operational on the mybos platform.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction date, in line with Malaysian financial and tax regulatory requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later, to meet AML requirements.
• Support Communication Records: Retained for 3 years for dispute resolution and service quality improvement purposes.
• Technical Log Data: Typically retained for 12 months for security and digital forensics purposes where required.
• Marketing Data: Retained until you withdraw consent or request deletion, subject to the minimum retention requirements stated above.

Once the relevant retention period has expired and there is no legal or business requirement for continued storage, your personal data will be securely deleted or fully anonymised.

8 Your Rights as a Data Subject

As a mybos user, you have clear rights regarding your personal data under Malaysia's PDPA 2010. mybos is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the mybos Data Protection Officer team via email at [email protected]. We will process your request within the stipulated timeframe and notify you of the action taken.

9 Cross-Border Data Transfers

In the context of the global operations of the mybos platform, some of your personal data may need to be transferred to or accessed from countries or regions outside Malaysia. This may occur in the following circumstances:

• Use of cloud computing infrastructure operating across multiple international data centre locations.
• Collaboration with gaming and live casino service providers based outside Malaysia.
• Use of technical support or cybersecurity services provided by international companies.

Mybos ensures that all such data transfers are carried out with adequate safeguards, including through PDPA-compliant data transfer agreements, the use of recognised standard contractual clauses, and ensuring that the recipient country provides a level of data protection equivalent to that of Malaysia. You may request further information about the specific protection mechanisms we use for international transfers by contacting us.

10 Children's Privacy and Protection of Minors

Mybos takes the protection of children and minors extremely seriously. The mybos platform is strictly intended for individuals aged 18 years and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

Measures mybos takes to prevent registration and use by individuals under the age of 18 include:

• Age verification requirement during account registration.
• A KYC process that verifies users' identity and date of birth through valid official documents.
• Continuous monitoring and prompt investigation of any reports relating to access by underage individuals.

If mybos discovers that personal data belonging to an individual under the age of 18 has been inadvertently collected, we will take immediate action to delete that data and close the relevant account. Parents or guardians who suspect their child has used the mybos platform are urged to contact us immediately at [email protected].

11 Amendments to This Privacy Policy

Mybos reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, applicable legal requirements, or improvements to the privacy protections we offer. Any material amendments will be communicated to you through:

• In-platform mybos notifications that will appear upon your next login.
• Notification email sent to the email address registered in your mybos account.
• Updating the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically to ensure you are always informed of how we protect your information. Continued use of the mybos platform after any amendments take effect will be considered your acceptance of the revised policy. If you do not agree with any amendment, you have the right to close your account and request the deletion of your personal data.

12 Contact Our Data Protection Officer

Mybos has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and handling all enquiries related to the protection of users' personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mybos handles your personal data, please contact us through the following:

You also have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) if you believe your personal data has been handled improperly. mybos will cooperate fully with the PDPD in any investigation conducted.