Privacy Policy

1. Introduction & Scope

Welcome to the Privacy Policy of bos899 ("we", "us", "our", "the Platform"). This document explains how bos899 collects, processes, stores, and protects the personal information of users ("you", "your", "Player") who access and use our online gaming services, including casino games, live dealer experiences, sports betting, and togel (Indonesia's traditional numbers lottery) markets.

This Policy applies to all personal data processed in connection with: the bos899 website and any associated mobile-optimized interface accessible at bos899.cam; the account registration and verification process; payment transactions conducted through Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, and OCBC NISP and e-wallets such as OVO, DANA, GoPay, ShopeePay, and LinkAja; customer support interactions via live chat, email, and WhatsApp; and any promotional or marketing communications we send you with your consent.

bos899 is committed to protecting your privacy and handling your data with the utmost care and respect. We process personal data in accordance with internationally recognized data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.

By creating a bos899 account or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices as described herein, you must discontinue use of the platform and close your account.

2. Information We Collect

bos899 collects personal information through several channels. The categories of data we collect are as follows:

2.1 Registration Data

When you create an account with bos899, we collect the following information:

• Identity Data: Full legal name, date of birth, gender, and nationality.
• Contact Data: Email address, mobile phone number, and residential address within Indonesia (including city, province, and postal code).
• Credentials: Username and hashed password. We never store passwords in plain text.

2.2 Identity Verification (KYC) Data

As required by our Know Your Customer (KYC) procedures, we collect:

• Copies of government-issued identification documents, typically your Indonesian National Identity Card (KTP) or passport.
• Proof of residential address documents dated within the last three months, such as utility bills or bank statements.
• Selfie photographs taken during the verification process, which may be processed using identity-matching technology.

2.3 Financial Data

To facilitate deposits and withdrawals, we collect:

• Bank account numbers, account holder names, and branch details for Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata).
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Transaction records including deposit amounts, withdrawal requests, and processing timestamps. All amounts are denominated in Indonesian Rupiah (IDR).

We do not store complete card details. Payment processing is handled by certified third-party payment processors who comply with international security standards.

2.4 Usage and Gameplay Data

When you use bos899 services, we automatically collect:

• Game session logs including games played, bet amounts, results, session duration, and timestamps.
• Navigation patterns within the platform, including pages visited, features accessed, and click paths.
• Device information including IP address, device type, operating system, browser type and version, and screen resolution.
• Geolocation data derived from IP address to verify compliance with geographic eligibility requirements.

2.5 Communication Data

We retain records of all communications between you and bos899, including live chat transcripts, email correspondence, WhatsApp message logs, and in-app support messages. These records are maintained for quality assurance, dispute resolution, and legal compliance purposes.

3. How We Use Your Data

bos899 uses your personal information for the following purposes:

We do not use your personal data for automated decision-making that produces significant legal effects without human oversight, except where this is explicitly permitted or required by applicable law.

4. Legal Basis for Processing

bos899 processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract we have with you — specifically to operate your gaming account, process payments, and deliver gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable law, including anti-money laundering regulations, KYC obligations, age verification requirements, and cooperation with law enforcement investigations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, where such interests are not overridden by your rights.
• Consent: Where processing is based on consent — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Sharing & Disclosure of Personal Data

bos899 does not sell, rent, or trade your personal information to third parties for commercial purposes. We share personal data only in the following circumstances:

5.1 Service Providers and Partners

We share data with carefully vetted third-party service providers who assist in delivering our services, including: payment processors and Indonesian banking partners; identity verification and KYC service providers; game software providers such as Pragmatic Play, Evolution Gaming, and Ezugi; customer support platform providers; fraud detection and cybersecurity vendors; and cloud infrastructure and hosting services. All third-party providers are contractually bound to process your data solely as instructed by bos899 and to maintain appropriate security standards.

5.2 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required or permitted by law, including in response to lawfully issued requests, subpoenas, court orders, or investigations related to fraud, money laundering, or other criminal activity.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bos899's assets, your personal data may be transferred as part of that transaction. We will notify affected users prior to data being transferred and will ensure the receiving entity is bound by privacy commitments no less protective than this Policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with research organizations, analytics providers, and industry partners for statistical and reporting purposes.

6. Cookies & Tracking Technologies

bos899 uses cookies and similar tracking technologies on our website to enhance your experience, analyze usage patterns, and improve platform performance. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the platform to function. These cannot be disabled and include session authentication tokens, security cookies, and language preference cookies.
• Performance and Analytics Cookies: Collect anonymized information about how visitors use our platform, including which pages are visited most frequently and error messages encountered. This helps us improve functionality and user experience.
• Functionality Cookies: Remember your preferences such as language settings, deposit method preferences, and display options to personalize your experience.
• Targeting and Advertising Cookies: Used with your consent to deliver relevant promotional content. You may opt out of these cookies at any time through your account settings.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of some platform features. Our ful l Cookie Policy is available upon request from our support team.

7. Data Retention

bos899 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account relationship with bos899, plus a minimum of five years following account closure to comply with anti-money laundering and financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five years from the date of submission, or longer where required by applicable regulatory obligations.
• Transaction and Financial Records: Retained for a minimum of five years from the date of each transaction in accordance with financial compliance requirements.
• Gameplay and Session Logs: Retained for up to three years from the date of each session for fraud prevention, dispute resolution, and responsible gaming monitoring purposes.
• Customer Support Communications: Retained for up to three years from the date of each interaction for quality assurance and dispute resolution.
• Marketing Consent Records: Retained for the duration of active consent plus two years following withdrawal, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual. In certain circumstances, such as ongoing legal proceedings or regulatory investigations, we may retain data beyond the standard periods described above.

8. Security Measures

bos899 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and bos899 servers is protected using industry-standard TLS/SSL encryption with a minimum of 256-bit key strength.
• Encryption at Rest: Sensitive personal data stored on our servers, including identity documents and financial records, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to authorized personnel on a need-to-know basis. All staff with access to personal data undergo background checks and are bound by confidentiality obligations.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA) to provide an additional layer of protection against unauthorized access.
• Intrusion Detection: Our infrastructure is monitored continuously by automated intrusion detection systems that alert our security team to suspicious activity in real time.
• Regular Security Audits: We conduct periodic penetration testing and third-party security audits to identify and remediate vulnerabilities in our systems.
• Payment Security: All payment processing integrations comply with applicable international payment security standards. We do not store complete payment card details on our servers.

9. Your Rights

As a user of bos899, you have the following rights regarding your personal data. To exercise any of these rights, please contact us using the details provided in Section 12.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic contact information directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note that we may be unable to fully erase data where retention is required by law.
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances, such as while the accuracy of data is contested or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling, where your individual circumstances justify such objection. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting our support team or adjusting your communication preferences in your account settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

We will respond to all legitimate rights requests within 30 calendar days. In complex or high-volume cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

10. Minors & Age Restriction

bos899 services are strictly limited to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under 21. Our registration process includes age verification steps designed to prevent minors from creating accounts.

If we become aware that personal data has been collected from a user under the age of 21, we will take immediate steps to suspend the account, delete all associated personal data, and void any transactions. If you are a parent or guardian and believe that your child has created a bos899 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11. Changes to This Privacy Policy

bos899 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When we make material changes to this Policy, we will notify registered users via email to the address on file and display a prominent notice on the platform for at least 30 days following the update.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of bos899 services following notification of material changes constitutes your acceptance of the revised Policy.

12. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how bos899 handles your personal information, please contact our Data Privacy team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the bos899 website
• Support Hours: Monday to Sunday, 08:00 – 24:00 WIB (Western Indonesia Time, UTC+7)

We take all privacy concerns seriously and will investigate your complaint thoroughly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or seek independent legal advice.