Privacy Policy

At bos55, we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy (the "Policy") explains how bos55 ("we," "us," "our," or the "Company") collects, uses, stores, shares, and protects the personal data of users ("you," "your," or "Player") who access and use our online gaming platform and services (the "Service" or "Platform").

This Policy applies to all personal data collected through the bos55 website, mobile applications, and any related services. By creating an account, accessing the Platform, or using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with this Policy, you must immediately cease using the Service and refrain from providing any personal information to bos55.

1. Information We Collect

bos55 collects various types of personal information to provide, maintain, improve, and secure our services. The categories of information we collect include:

1.1 Information You Provide Directly

When you create an account or use our services, you voluntarily provide us with personal information, including:

• Account Registration Information: Full legal name, date of birth, gender, residential address, email address, mobile phone number, and username.
• Identity Verification Documents: Indonesian national identity card (KTP), selfie photographs for facial verification, and additional documents such as utility bills or bank statements for address verification.
• Financial Information: Bank account details (bank name, account holder name, account number), e-wallet information (OVO, DANA, GoPay, ShopeePay account details), transaction history, deposit and withdrawal records, and payment method verification documents.
• Communication Data: Messages, inquiries, complaints, and feedback sent through live chat, email, WhatsApp, or other support channels.
• Preferences and Settings: Language preferences, notification settings, responsible gaming limits, and marketing communication preferences.

1.2 Information Collected Automatically

When you access or use the bos55 Platform, we automatically collect certain information about your device and usage patterns:

• Device Information: Device type, operating system, browser type and version, unique device identifiers, mobile network information, and screen resolution.
• Usage Data: Pages visited, features used, games played, bets placed, time spent on the Platform, click patterns, navigation paths, and referral sources.
• Technical Data: IP address, geolocation data (country, region, city), login times, session duration, and access dates.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to track user activity, remember preferences, analyze trends, and improve user experience. See Section 8 for detailed information about our cookie usage.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay).
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from specialized verification providers.
• Game Providers: Gameplay data, betting history, and win/loss records from third-party game developers such as Pragmatic Play, Evolution Gaming, Microgaming, and others.
• Marketing Partners: Aggregated demographic and interest data to improve our advertising effectiveness (we do not purchase personally identifiable information from data brokers).

2. How We Use Your Information

bos55 uses the personal information we collect for the following legitimate business purposes:

2.1 Service Provision and Account Management

• Create, maintain, and manage your player account.
• Process your registration and verify your identity to comply with legal requirements.
• Enable you to access sports betting, casino games, lottery games, and other gaming services.
• Process deposits, withdrawals, and other financial transactions securely.
• Maintain accurate records of your gaming activity, transaction history, and account balance.

2.2 Security, Fraud Prevention, and Compliance

• Verify your age to ensure compliance with the 21+ age restriction requirement.
• Detect, prevent, and investigate fraudulent activity, money laundering, and other illegal activities.
• Monitor gameplay for patterns indicating problem gambling, bonus abuse, or terms violations.
• Comply with legal and regulatory obligations, including anti-money laundering (AML) and know-your-customer (KYC) regulations.
• Respond to legal requests from government authorities, law enforcement agencies, and regulators.
• Protect the security and integrity of our Platform against unauthorized access, hacking, and cyber attacks.

2.3 Customer Support and Communications

• Respond to your inquiries, complaints, and support requests through live chat, email, WhatsApp, and other communication channels.
• Send important service announcements, account notifications, security alerts, and policy updates.
• Provide technical support and troubleshoot issues related to account access, payments, or gameplay.
• Communicate with you about responsible gaming tools and self-exclusion options.

2.4 Marketing and Personalization

• Send promotional offers, bonuses, and marketing communications via email, SMS, push notifications, or in-app messages (only if you have opted in to receive such communications).
• Personalize your gaming experience by recommending games based on your preferences and playing history.
• Conduct surveys, contests, and promotional campaigns to gather feedback and improve our services.
• Display targeted advertisements on the Platform and through third-party advertising networks.

2.5 Platform Improvement and Analytics

• Analyze usage patterns, trends, and user behavior to improve Platform functionality and performance.
• Conduct internal research and development to enhance game offerings, payment methods, and user interface design.
• Test new features, optimize website speed, and fix technical bugs.
• Generate aggregated, anonymized statistics and reports for business intelligence purposes.

3. Legal Basis for Processing

Under applicable data protection laws, bos55 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you, including providing gaming services, processing payments, and maintaining your account.
• Legal Compliance: Processing is required to comply with Indonesian and international legal obligations, such as age verification, anti-money laundering checks, and tax reporting.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, service improvement, and marketing, provided these interests do not override your fundamental rights and freedoms.
• Consent: In certain cases, we rely on your explicit consent, such as for marketing communications and non-essential cookies. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

4. How We Share Your Information

bos55 does not sell your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in this Policy:

4.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to facilitate deposits and withdrawals.
• Game Providers: Third-party developers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe to deliver gaming content and track gameplay data.
• Identity Verification Services: Specialized providers that verify your identity, age, and address to ensure compliance with regulatory requirements.
• Cloud Hosting and IT Services: Technology partners that host our website, store data securely, and provide technical infrastructure support.
• Customer Support Tools: Live chat platforms, email management systems, and CRM software providers that help us deliver customer service.
• Analytics and Marketing Partners: Companies that help us analyze user behavior, measure advertising effectiveness, and optimize marketing campaigns.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, regulators, law enforcement, courts, and other authorities when:

• Required by law, regulation, legal process, or court order.
• Necessary to investigate, prevent, or take action regarding suspected fraud, money laundering, or other illegal activities.
• Needed to protect the rights, property, or safety of bos55, our users, or the public.
• Required to comply with tax, licensing, or anti-money laundering obligations.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company. We will notify you of any such transfer and the choices you have regarding your personal data.

4.4 With Your Consent

We may share your information with other third parties when you have provided explicit consent for such disclosure.

5. Data Security Measures

bos55 implements comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All sensitive data, including financial information and passwords, is encrypted using industry-standard 256-bit SSL/TLS encryption during transmission and AES-256 encryption at rest.
• Access Controls: Strict access controls ensure that only authorized personnel with a legitimate business need can access your personal information. Multi-factor authentication is required for all administrative accounts.
• Secure Payment Processing: We use PCI-DSS compliant payment gateways to process all financial transactions. We do not store full credit card numbers or CVV codes on our servers.
• Regular Security Audits: Our systems undergo regular vulnerability assessments, penetration testing, and third-party security audits to identify and address potential weaknesses.
• Employee Training: All employees with access to personal data receive regular training on data protection, security best practices, and confidentiality obligations.
• Firewalls and Intrusion Detection: Advanced firewall systems and intrusion detection/prevention systems monitor network traffic to detect and block malicious activity.
• Data Backup and Recovery: Regular encrypted backups ensure data availability and integrity in the event of system failure or disaster.

While we employ industry-leading security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we continuously work to enhance our security infrastructure and respond promptly to any identified vulnerabilities.

6. Data Retention

bos55 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are determined based on:

• Active Accounts: While your account remains active, we retain all account information, transaction history, and gameplay data to provide ongoing services.
• Closed Accounts: After account closure, we retain personal data for a minimum of 5 years to comply with regulatory obligations, resolve disputes, enforce our Terms and Conditions, and prevent fraud.
• Financial Records: Transaction records, deposit/withdrawal history, and financial documentation are retained for 7 years in accordance with Indonesian tax and accounting regulations.
• Marketing Data: If you have consented to receive marketing communications, we retain your contact information and preferences until you withdraw consent or request deletion.
• Legal Obligations: We may retain certain data for longer periods when required by law, such as for ongoing legal proceedings, regulatory investigations, or audit requirements.

After the retention period expires, we securely delete or anonymize your personal information so that it can no longer be associated with you as an individual.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

7.2 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. You can update most information directly through your account settings.

7.3 Right to Erasure (Right to be Forgotten)

You may request the deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may be required to retain certain information to comply with legal obligations.

7.4 Right to Restriction of Processing

You have the right to request that we limit the processing of your personal information in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

7.5 Right to Object

You may object to the processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications by clicking the unsubscribe link in emails or adjusting your notification preferences in your account settings.

7.6 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider, where technically feasible.

7.7 Right to Withdraw Consent

If we process your personal information based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing conducted before withdrawal.

7.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority in Indonesia or your country of residence.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 11.

8. Cookies and Tracking Technologies

bos55 uses cookies and similar tracking technologies to enhance your experience, analyze site usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you during future visits.

Types of Cookies We Use:

• Essential Cookies: Required for basic site functionality, such as login authentication, session management, and security features. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use the Platform, such as page views, traffic sources, and error messages. This helps us improve site performance.
• Functionality Cookies: Remember your preferences, such as language settings, location, and notification preferences, to provide a more personalized experience.
• Advertising Cookies: Track your browsing activity to deliver relevant advertisements and measure the effectiveness of marketing campaigns. These cookies may be set by third-party advertising networks.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, but disabling essential cookies may affect the functionality of the Platform. For more information about managing cookies, visit your browser's help section.

9. International Data Transfers

bos55 operates primarily in Indonesia, but some of our service providers and data processing facilities may be located in other countries. When we transfer your personal information outside Indonesia, we ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

• Standard contractual clauses approved by data protection authorities.
• Adequacy decisions recognizing equivalent data protection standards in the recipient country.
• Binding corporate rules for transfers within our corporate group.
• Your explicit consent for specific transfers.

10. Children's Privacy

bos55 is strictly for users aged 21 years and older. We do not knowingly collect, use, or disclose personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected personal information from someone under 21, we will take immediate steps to delete that information and close the account. If you believe a minor has provided personal information to bos55, please contact us immediately at the details provided in Section 11.

11. Changes to This Privacy Policy

bos55 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any changes will be effective immediately upon posting the revised Policy on the Platform. We will update the "Last Updated" date at the top of this Policy to indicate when changes were made.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy. If we make material changes that significantly affect your rights, we will notify you via email or prominent notice on the Platform.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer: