Privacy Policy

1 Introduction

bos889 operates as an internationally licensed online betting and gaming platform serving players across Indonesia, including Jakarta, Surabaya, Bandung, Medan, Semarang, Makassar, Yogyakarta, Bali, and Palembang. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered Member, a prospective player, or a visitor browsing our website.

This Privacy Policy sets out the types of personal data we collect, the purposes for which we process it, the third parties with whom we may share it, the security measures we apply to protect it, and the rights available to you under applicable data protection frameworks. We encourage you to read this policy carefully and to contact us if you have any questions or concerns.

This policy should be read in conjunction with our Terms & Conditions, which govern your use of the bos889 platform and are incorporated into this Privacy Policy by reference.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, national identity number, financial data, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means bos889, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of bos889, subject to our instructions and this Privacy Policy.
• "Member" means any individual who holds a registered account with the bos889 platform.
• "KYC Documents" means identity verification documents submitted by a Member, including government-issued identification such as an Indonesian national identity card (KTP).
• "Cookies" means small text files placed on your device by the bos889 platform to recognize your browser, remember preferences, and facilitate analytics.

3 Data We Collect

3.1 Registration Data

When you create a bos889 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Mobile phone number
• Username and password (password stored in hashed, non-reversible form)
• Country and city of residence (e.g., Jakarta, Bali, Medan)

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering requirements and to verify your eligibility to use the platform, we collect:

• Government-issued photo identification (Indonesian KTP or passport)
• Proof of address documentation where required
• Bank account details or e-wallet identifiers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) for payment method verification
• Source-of-funds documentation for high-value accounts where enhanced due diligence is required

3.3 Financial Transaction Data

We record data related to all deposits, withdrawals, and in-platform transactions, including transaction amounts in Indonesian Rupiah (IDR / Rp), timestamps, payment method identifiers, and transaction reference numbers. We do not store full bank account numbers or card numbers on our servers.

3.4 Gaming and Betting Activity Data

We collect records of your betting and gaming activity on the platform, including wagers placed, game sessions, win/loss records, and bonus usage. This data is used for account management, dispute resolution, fraud prevention, and regulatory compliance.

3.5 Technical and Device Data

When you access bos889, we automatically collect certain technical data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited and features used within the platform
• Referral source (how you arrived at the bos889 platform)

3.6 Communications Data

If you contact our customer support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution of any issues raised. This data is used to improve service quality and to maintain an accurate record of support interactions.

4 How We Collect Data

bos889 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, place bets, or contact our support team.
• Automatically: Through cookies, server logs, and analytics tools that record your interactions with the platform during each session.
• From third parties: From payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) to confirm transaction details, and from identity verification service providers during KYC processing.
• From publicly available sources: Where necessary for fraud prevention or enhanced due diligence, we may consult publicly available information to verify details you have provided.

5 Purposes of Processing

We use your personal data for the following specific purposes:

6 Legal Basis for Processing

bos889 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing is necessary to perform the contract between you and bos889 — that is, to provide you with access to our betting and gaming services as set out in our Terms & Conditions.
• Legal Obligation: Processing is necessary for bos889 to comply with applicable legal and regulatory requirements, including anti-money-laundering laws and international gaming regulations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud detection, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: For specific processing activities — such as sending promotional communications — we rely on your explicit, freely given consent. You may withdraw consent at any time by contacting our support team or using the opt-out mechanism provided in any marketing communication.

7 Data Sharing & Third Parties

7.1 Our Principle

bos889 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only where it is necessary to deliver our services, comply with legal obligations, or protect the platform and its Members from harm.

7.2 Categories of Recipients

Your personal data may be shared with the following categories of third parties, each bound by strict confidentiality obligations and data processing agreements:

• Payment Processors & Banking Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers who assist in verifying the identity and age of Members seeking to use the platform.
• Game and Technology Providers: Software providers such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft, who operate games hosted on the bos889 platform and may receive limited session data for game integrity purposes.
• Fraud Prevention Services: Third-party analytics and risk management tools used to detect suspicious activity, prevent money laundering, and protect Member accounts.
• Regulatory and Law Enforcement Authorities: Where required by a valid legal order, court judgment, or applicable law, we may disclose personal data to competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and financial advisers engaged in connection with our business operations, subject to strict professional confidentiality obligations.

7.3 Business Transfers

In the event that bos889 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide advance notice of any such transfer and of any material change to data processing practices that results from it.

8 International Data Transfers

As an internationally operated platform, bos889 may transfer your personal data to servers or service providers located outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections provided under this Privacy Policy.

Safeguards may include standard contractual clauses, data processing agreements with equivalent protections, or transfers to jurisdictions that provide an adequate level of data protection as recognized under applicable international standards.

9 Data Retention

bos889 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification.

10 Your Privacy Rights

As a Member of bos889, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at the details provided in Section 15 of this policy.

11 Cookies & Tracking Technologies

11.1 What We Use

bos889 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, prevent fraud, and analyze platform usage. The following categories of cookies may be active during your session:

• Essential Cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impacting platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how Members use the platform, helping us identify areas for improvement. No personally identifiable information is collected through analytics cookies.
• Security and Fraud Prevention Cookies: Help us detect suspicious activity, identify devices associated with fraudulent accounts, and protect the integrity of the platform.

11.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling essential cookies will impair or prevent your use of the bos889 platform. Instructions for managing cookies are available in your browser's help documentation. Continued use of the platform following our cookie notice constitutes your acceptance of our use of cookies as described in this policy.

12 Minors

The bos889 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account with bos889, please contact our support team immediately so that we can investigate and take appropriate action.

13 Security Measures

bos889 applies comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our security framework includes:

• SSL/TLS Encryption: All data in transit between your browser and our servers is encrypted using industry-standard TLS protocols.
• AES-256 Encryption at Rest: Sensitive data stored on our servers is encrypted using AES-256, one of the strongest encryption standards available.
• Access Controls: Access to personal data is strictly limited to authorized personnel who require it to perform their job functions. All staff with data access are subject to confidentiality obligations.
• Intrusion Detection Systems: Our infrastructure is monitored around the clock for unauthorized access attempts and anomalous activity.
• Regular Security Audits: We conduct periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to your rights and interests, we will notify affected Members promptly and take all necessary remedial steps.

14 Policy Amendments

bos889 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform services. The most current version of this policy will always be available on our website, with the "Last Updated" date clearly shown at the top of the page.

Where changes are material — for example, a new category of data collection or a new category of recipient — we will notify active Members via email or an in-platform notification at least fourteen (14) days before the changes take effect. Your continued use of the platform following such notification constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how bos889 protects your personal data.

15 Contact & Complaints

15.1 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bos889 processes your personal data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available directly on the bos889 platform, accessible after login, 24 hours a day, seven days a week.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Inquiry" to ensure your message is directed to the appropriate team.

We aim to respond to all privacy-related inquiries within five (5) business days and to fulfill verified data rights requests within thirty (30) calendar days.

15.2 Filing a Complaint

If you are dissatisfied with our response to a privacy concern or believe that bos889 has processed your personal data in a manner inconsistent with this Privacy Policy or applicable data protection law, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. We encourage you to contact us first so that we have the opportunity to address your concern directly before you escalate.

For further information about how your account data is managed, please also review our Terms & Conditions and our FAQ page, which addresses common questions about account management and data handling.