Privacy Policy

1. Introduction

This Privacy Policy governs the collection, processing, storage, and protection of personal data by bos99 in connection with our online betting, casino gaming, and related services provided through https://bos99.cam and associated platforms. This policy applies to all users who register accounts, access our website, or utilize any bos99 services.

bos99 operates internationally and serves customers in Indonesia and other jurisdictions. We are committed to complying with applicable data protection laws and regulations, including international data protection principles and Indonesian data privacy norms to the extent they apply to our operations.

As a responsible gaming operator, we take data privacy seriously. Your personal information is collected and processed only for legitimate business purposes necessary to deliver our services, comply with legal obligations, prevent fraud, and ensure platform security. We employ industry-standard security measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of bos99 services. If you have any questions about how we handle your personal data, please contact our support team at any time.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" or "Personal Information" means any information relating to an identified or identifiable natural person, including but not limited to name, address, email, phone number, date of birth, identification documents, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, deletion, or destruction.
• "Data Subject" refers to you, the individual whose personal data is collected and processed by bos99.
• "Data Controller" refers to bos99, the entity that determines the purposes and means of processing your personal data.
• "Third Party" means any individual or organization other than the data subject, bos99, or our authorized service providers.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.

3. Information We Collect

bos99 collects several categories of personal information to provide, maintain, and improve our services. The types of data we collect include:

3.1 Information You Provide Directly

When you register an account with bos99, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address in Indonesia
• Account Credentials: Username, password, security questions and answers
• Identification Documents: Indonesian KTP (national identity card), proof of address, and any additional documents required for KYC (Know Your Customer) verification
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, etc.), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history
• Communication Records: Messages exchanged with customer support, feedback, survey responses

3.2 Information Collected Automatically

When you access bos99 services, we automatically collect certain technical information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers
• Log Data: IP address, access times, pages viewed, time spent on pages, referring website URLs
• Location Data: General geographic location based on IP address (country, region, city)
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies (detailed in Section 9)

3.3 Gaming and Transaction Data

To operate our gaming services and comply with regulatory requirements, we collect:

• Betting history, game play records, wins and losses
• Deposit and withdrawal transactions, including amounts, dates, and payment methods
• Bonus claims, wagering activity, and promotional participation
• Responsible gaming settings (deposit limits, loss limits, self-exclusion status)

3.4 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment processors and financial institutions for transaction verification
• Identity verification services for KYC compliance
• Fraud prevention and security services for risk assessment
• Marketing partners (only if you have consented to such data sharing)

4. How We Use Your Data

bos99 processes your personal data for the following purposes:

4.1 Service Provision and Account Management

• Creating and maintaining your bos99 account
• Verifying your identity and age (21+ requirement enforcement)
• Processing deposits, withdrawals, and financial transactions
• Providing access to sports betting, casino games, and other gaming products
• Tracking betting activity, calculating winnings, and settling bets
• Administering bonuses, promotions, and loyalty programs

4.2 Legal and Regulatory Compliance

• Complying with KYC (Know Your Customer) and AML (Anti-Money Laundering) regulations
• Preventing underage gambling and enforcing age restrictions
• Detecting and preventing fraud, money laundering, and other illegal activities
• Responding to legal requests, court orders, and regulatory inquiries
• Maintaining transaction records as required by gaming regulations and tax authorities

4.3 Security and Fraud Prevention

• Monitoring for suspicious account activity and betting patterns
• Protecting against unauthorized access, cyberattacks, and data breaches
• Identifying and blocking duplicate accounts and bonus abuse
• Enforcing our Terms & Conditions and preventing platform misuse

4.4 Customer Support and Communication

• Responding to your inquiries, technical issues, and support requests
• Sending important account notifications (withdrawal confirmations, security alerts, policy changes)
• Providing customer service in Indonesian and English via live chat and email
• Resolving disputes and investigating complaints

4.5 Responsible Gaming

• Implementing self-exclusion, deposit limits, and other responsible gaming tools
• Monitoring for signs of problem gambling behavior
• Providing access to responsible gaming resources and support
• Maintaining records of responsible gaming interventions

4.6 Marketing and Promotions (With Your Consent)

• Sending promotional offers, bonus notifications, and special event announcements
• Personalizing marketing communications based on your gaming preferences
• Conducting surveys and requesting feedback to improve our services

Note: Marketing communications are sent only to users who have opted in. You can unsubscribe at any time through account settings or by contacting support.

4.7 Platform Improvement and Analytics

• Analyzing user behavior to improve website functionality and user experience
• Testing new features and conducting A/B testing
• Generating aggregated, anonymized statistics for business intelligence
• Optimizing game selection based on player preferences

5. Legal Basis for Data Processing

bos99 processes your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gaming services as outlined in our Terms & Conditions).
• Legal Obligation: Processing is required to comply with KYC, AML, age verification, tax reporting, and other legal obligations imposed by gaming regulators and financial authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, platform improvement, and customer support, provided these interests do not override your fundamental rights.
• Consent: For marketing communications and non-essential data processing, we obtain your explicit consent, which you can withdraw at any time.

6. Data Sharing and Disclosure

bos99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your data in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (for handling deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.)
• Game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.)
• Identity verification and KYC services
• Fraud detection and security services
• Cloud hosting and data storage providers
• Customer support platform providers

These service providers are contractually obligated to process your data only for the specific purposes we authorize and to maintain strict confidentiality and security standards.

6.2 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement, regulators, courts, or government agencies when:

• Required by law, regulation, or legal process (subpoena, court order)
• Necessary to investigate suspected illegal activity, fraud, or Terms violations
• Requested by gaming regulators or tax authorities for compliance audits
• Essential to protect the rights, safety, or property of bos99, our users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or part of bos99's assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change via email and/or prominent notice on our website, and the new entity will be bound by this Privacy Policy.

6.4 With Your Consent

We may share your information with other third parties when you have explicitly consented to such sharing.

7. Data Security Measures

bos99 employs comprehensive technical, administrative, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

7.1 Technical Security

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols—the same encryption used by major Indonesian banks like BCA and Mandiri.
• Secure Data Centers: Personal data is stored on secure servers in protected data centers with 24/7 monitoring, physical access controls, and redundant systems.
• Firewall Protection: Advanced firewall systems protect against unauthorized network access and cyberattacks.
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and address vulnerabilities.
• Data Backup: Regular encrypted backups ensure data integrity and recoverability in case of system failures.

7.2 Administrative Security

• Access to personal data is restricted to authorized bos99 employees and contractors who require it for their job functions.
• All personnel with access to personal data undergo background checks and sign confidentiality agreements.
• We implement role-based access controls and the principle of least privilege.
• Security awareness training is provided to all staff members.

7.3 Account Security Best Practices

While we implement robust security measures, you also play a critical role in protecting your account:

• Create a strong, unique password and never share it with anyone.
• Enable two-factor authentication (2FA) if available.
• Log out after each session, especially on shared or public devices.
• Keep your email and phone number updated for security notifications.
• Report any suspicious activity or unauthorized access immediately to [email protected].

Important: While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use our services at your own risk. bos99 is not liable for unauthorized access resulting from circumstances beyond our reasonable control.

8. Data Retention

bos99 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and business requirements:

8.1 Active Accounts

While your account is active, we retain your personal data to provide ongoing services, maintain transaction records, and support customer service needs.

8.2 Closed Accounts

After account closure, we retain certain data for mandatory legal and regulatory periods:

• Financial Records: Transaction history, deposit/withdrawal records, and tax-related information are retained for a minimum of 7 years to comply with financial regulations and tax authorities.
• KYC Documents: Identity verification documents are retained for at least 5 years after account closure as required by AML regulations.
• Gaming History: Betting records, game play data, and dispute-related information are retained for 5 years to address potential regulatory inquiries or disputes.
• Communication Records: Customer support interactions may be retained for 3-5 years for quality assurance and dispute resolution.

8.3 Data Deletion

Once retention periods expire and we no longer have a legal or business need to retain your data, we will securely delete or anonymize your personal information. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

8.4 Self-Exclusion and Responsible Gaming

If you self-exclude from bos99, we retain your exclusion status and related data to prevent you from creating new accounts during the exclusion period, even if you request deletion.

9. Cookies and Tracking Technologies

bos99 uses cookies, web beacons, pixels, and similar tracking technologies to enhance user experience, analyze website traffic, and deliver personalized content.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognize your device and remember your preferences and activity.

9.2 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, such as login sessions, account security, and transaction processing. These cannot be disabled without affecting website operation.
• Performance Cookies: Collect anonymous data on how users interact with our website (pages visited, time spent, errors encountered) to help us improve performance.
• Functional Cookies: Remember your preferences (language settings, display options) to provide a personalized experience.
• Marketing Cookies: Track your browsing across websites to deliver targeted advertising and measure campaign effectiveness. These are only used with your consent.

9.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. However, disabling essential cookies may prevent you from using certain features of bos99 services. To manage cookies, refer to your browser's help documentation.

9.4 Third-Party Analytics

We may use third-party analytics services (such as Google Analytics) to understand website usage patterns. These services use cookies and collect anonymized data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

10. Your Privacy Rights

As a bos99 user, you have the following rights regarding your personal data:

10.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This includes account information, transaction history, KYC documents, and communication records. To request access, contact our support team at [email protected]. We will provide the requested information within 30 days, free of charge for the first request in any 12-month period.

10.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings. For changes to KYC documents (name, date of birth, address), contact support with updated documentation.

10.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent for data processing (where consent was the legal basis)
• The data was unlawfully processed

Limitations: We may not be able to delete your data if retention is required by law (e.g., financial transaction records, KYC documents) or necessary to establish, exercise, or defend legal claims. Even after deletion requests, we retain data subject to legal retention periods outlined in Section 8.

10.4 Right to Restrict Processing

You can request that we temporarily restrict processing of your personal data while we verify the accuracy of data you've disputed or assess the legitimacy of your objection to processing.

10.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and to transmit that data to another service provider. This right applies to data you've provided to us and that we process based on consent or contract.

10.6 Right to Object

You have the right to object to processing of your personal data for:

• Marketing purposes: You can opt out of promotional emails at any time via the unsubscribe link or account settings.
• Legitimate interests: You can object to processing based on our legitimate interests, and we will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

10.8 Exercising Your Rights

To exercise any of these rights, contact our Indonesian-speaking support team:

• Email: [email protected] (plain text, not clickable)
• Live Chat: Available 24/7 through the website

We will respond to your request within 30 days. If your request is complex or we receive multiple requests, we may extend the response period by an additional 30 days with notification.

11. Children's Privacy

bos99 services are strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or retain personal data from individuals under 21 years of age. Our registration process includes age verification, and we require submission of Indonesian KTP (national identity card) showing date of birth during KYC verification.

If we discover that we have inadvertently collected personal data from someone under 21, we will immediately delete that data and permanently close the associated account. All funds in underage accounts will be forfeited, and we may report the matter to relevant authorities.

Parents and guardians: Please monitor your children's internet usage and ensure they do not access online gambling platforms. If you believe your child has provided personal information to bos99, contact us immediately at [email protected] so we can take appropriate action.

12. International Data Transfers

bos99 operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. These countries may have data protection laws that differ from Indonesian regulations.

When we transfer data internationally, we implement appropriate safeguards to ensure your data receives adequate protection:

• Standard contractual clauses approved by international data protection authorities
• Contracts with service providers requiring them to maintain data protection standards equivalent to this Privacy Policy
• Technical measures such as encryption during transmission and at rest

Our primary data storage facilities are located in jurisdictions with robust data protection frameworks. By using bos99 services, you acknowledge and consent to the international transfer of your personal data under these safeguards.

13. Changes to This Privacy Policy

bos99 reserves the right to amend, update, or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes that significantly affect your privacy rights, we will:

• Update the "Last Updated" date at the top of this document
• Notify you via email to your registered email address
• Display a prominent notice on our website homepage
• Require your explicit consent for changes that expand our data processing beyond the original purposes

We encourage you to review this Privacy Policy periodically. Your continued use of bos99 services after policy changes take effect constitutes your acceptance of the updated terms. If you do not agree with any changes, you must stop using our services and close your account.

14. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or how bos99 processes your personal data, please contact us:

• Email: [email protected] (plain text, not clickable)
• Live Chat: Available 24/7 through the website
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays
• Language: Indonesian and English support available
• Response Time: Live chat under 2 minutes, email within 4-6 hours

Our Indonesian-speaking customer support team is trained to assist with privacy-related inquiries, data access requests, consent management, and any other concerns regarding your personal information. We are committed to addressing your privacy questions promptly and professionally.