Privacy Policy

bos89 ("bos89", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://bos89.cam. We are committed to protecting the privacy and personal data of every player who uses our services. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of the bos89 platform.

This policy applies to all players accessing bos89 from Indonesia and any other jurisdiction where bos89 services are made available. It covers all products and services offered through the bos89 platform, including sports betting (football, badminton, MotoGP, and esports markets), live casino games, togel (Indonesia's traditional numbers lottery) draws, slot games, and all associated payment and account management features.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into the overall agreement between bos89 and each registered player.

If you have questions about this policy at any time, please contact our dedicated data team at the address set out in Clause 13.

bos89 collects personal data across several categories. The table below summarises each category, the specific data points within it, and the primary reason we collect it.

bos89 collects personal data through the following channels:

• Direct Registration: When you create an Account on bos89, you provide your name, date of birth, contact details, and preferred payment method. This information is entered directly into our registration interface.
• KYC Submissions: When prompted by our compliance team, you upload identity and address verification documents. These may be submitted via our secure document upload portal.
• Payment Transactions: Each deposit and withdrawal processed through BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or LinkAja generates a transaction record that we store for financial compliance purposes.
• Platform Interaction: As you navigate bos89 — browsing game lobbies, placing bets on BRI Liga 1 matches, playing togel draws, or spinning slots — our systems automatically log technical and usage data including IP address, session activity, and betting behaviour.
• Cookies and Similar Technologies: We use cookies, pixel tags, and local storage to maintain session state, remember your preferences, and gather analytics data. See Clause 7 for full details.
• Support Interactions: When you contact our 24/7 live chat or email support team, we record the content of those communications for quality assurance, training, and dispute resolution purposes.
• Third-Party Verification Services: Our KYC and fraud-detection partners may supply us with data points (such as identity verification scores or device reputation signals) to assist with compliance checks.

bos89 uses the personal data it collects for the following specific purposes:

1. Account Management: Creating, maintaining, and securing your Player Account, processing your login, and enabling access to all bos89 products.
2. Identity and Age Verification: Confirming that you are at least 21 years of age and meet all eligibility requirements set out in our Terms & Conditions before activating betting or withdrawal privileges.
3. Payment Processing: Facilitating deposits and withdrawals in IDR via your chosen Indonesian bank or e-wallet, and maintaining transaction records required for financial compliance.
4. Fraud Prevention and AML Compliance: Monitoring transaction patterns and wagering activity to detect, investigate, and prevent fraud, money laundering, and other prohibited conduct.
5. Responsible Gaming: Analysing your gameplay and wagering patterns to identify potential signs of problem gambling and, where relevant, triggering responsible gaming interventions such as suggested deposit limits or cooling-off periods.
6. Customer Support: Responding to your inquiries, resolving disputes, and processing account closure or self-exclusion requests.
7. Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, site performance, and user experience.
8. Personalised Promotions: Sending targeted bonus offers, free-spin promotions, and seasonal campaign communications — but only where you have given explicit opt-in consent. Indonesian cultural-calendar events (such as Idul Fitri, Ramadhan, and the 17 August Independence Day) may be referenced in these promotions.
9. Legal and Regulatory Compliance: Retaining records and disclosing information to competent authorities where required by applicable law or a lawful regulatory request.

bos89 will not use your personal data for any purpose that is incompatible with the purposes listed above without providing fresh notice and, where required, seeking your consent.

bos89 relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between bos89 and you (i.e., to provide the gaming services you have requested, process payments, and manage your Account).
• Legal Obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, and retention of financial records — are required by applicable law and regulatory standards under which bos89 holds its international licence.
• Legitimate Interests: Processing technical and usage data for fraud detection, platform security, and aggregated analytics is carried out on the basis of bos89's legitimate interest in operating a secure and compliant gaming platform. We conduct balancing tests to ensure that our legitimate interests do not override your privacy rights.
• Consent: Processing your data for direct marketing communications (promotional emails, SMS, in-platform notifications) and the use of non-essential cookies is carried out only where you have provided clear, informed, and freely given consent. You may withdraw this consent at any time without affecting any other aspect of your Account.

6.1 Service Providers. bos89 shares personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These providers include:

• Payment gateway operators and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) — for the sole purpose of executing your deposit and withdrawal transactions;
• KYC and identity verification vendors — to authenticate government-issued identity documents and perform age checks;
• Fraud and AML screening services — to flag suspicious transaction patterns;
• Game studios and content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) — who may process session data within their game engines to deliver certified fair-play outcomes;
• Cloud infrastructure and hosting providers — who store platform data in secured, access-controlled data centres.

6.2 Regulatory and Law Enforcement Disclosure. bos89 may disclose personal data to regulatory bodies, law enforcement agencies, or financial intelligence units where required to do so by a lawful order, court directive, or applicable legal obligation. We will notify you of such a disclosure where we are legally permitted to do so.

6.3 Corporate Transactions. In the event of a merger, acquisition, or sale of substantially all assets of bos89, player data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and describe the privacy rights available to you under the new entity's terms before the transfer takes effect.

6.4 No Sale of Data. bos89 does not sell, license, or trade your personal data to unaffiliated third parties for their independent marketing or commercial purposes under any circumstances.

bos89 uses cookies and similar technologies to ensure the platform functions correctly, to maintain your session state, and to gather analytics information that helps us improve your experience.

You may manage your cookie preferences at any time through your Account settings or your browser's built-in cookie controls. Disabling analytics or marketing cookies will not prevent you from using any core bos89 gaming or payment feature.

bos89 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory standards. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your Account's active status plus a minimum of five years following Account closure, to satisfy AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in accordance with internationally recognised financial compliance standards.
• KYC Documentation: Retained for five years following Account closure or the completion of a KYC review, whichever is later.
• Support Communications: Retained for three years from the date of the final communication in a support thread, unless the communication relates to an ongoing dispute or regulatory inquiry.
• Technical and Usage Logs: Standard server access logs are retained for 12 months. Anonymised aggregated analytics data may be retained indefinitely for platform improvement purposes.
• Marketing Preference Records: Consent and opt-out records are retained for the duration of your Account plus two years, to demonstrate compliance with marketing regulations.

When data reaches the end of its retention period and there is no legal or regulatory reason to retain it further, bos89 will securely delete or anonymise that data in accordance with our internal data lifecycle procedures.

As a bos89 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us as described in Clause 13. We will respond to all valid requests within 30 days of receipt.

bos89 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the bos89 platform is encrypted using current-generation TLS protocols, preventing interception in transit.
• Access Controls: Internal access to player data is governed by role-based access control (RBAC). Only staff members with a documented, legitimate operational need may view personally identifiable information, and all access events are logged.
• Infrastructure Security: bos89's servers are hosted in access-controlled data centres with physical security controls, network firewalls, intrusion detection systems, and regular vulnerability assessments.
• Password Security: Player account passwords are stored in hashed form using industry-standard cryptographic algorithms. bos89 staff never have access to your plaintext password.
• Fraud Monitoring: Real-time transaction monitoring systems flag unusual deposit or withdrawal patterns, abnormal login locations, and suspicious device fingerprints for manual review by our security team.
• Incident Response: bos89 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay.

While bos89 takes all reasonable and practicable steps to protect your data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. You are encouraged to use a strong, unique password for your bos89 Account and to enable any available two-factor authentication features.

bos89 enforces a strict minimum age of 21 years for all players. The platform is not directed at, and we do not knowingly collect personal data from, any person under 21 years of age. Our registration process requires a date-of-birth declaration, and accounts flagged as potentially underage are subject to immediate KYC review.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on bos89 or has accessed our platform without your consent, please contact us immediately at [email protected]. We will investigate promptly and, if confirmed, will close the account and delete all associated personal data without undue delay.

bos89 may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal and regulatory requirements. When material changes are made, we will notify registered players via the email address associated with their Account and display a prominent notice on the bos89 platform homepage.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the bos89 platform following the effective date of any update constitutes your acknowledgement of the revised policy. If you do not agree with a material change, you should cease using the platform and request Account closure in accordance with our Terms & Conditions before the update takes effect.

We recommend bookmarking this page and reviewing it periodically. The version of this policy currently displayed at https://bos89.cam/privacy-policy is always the authoritative and current version.

For any privacy-related questions, data subject access requests, or concerns about how bos89 handles your personal data, please contact our data team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line, along with your registered username and a clear description of your request.
• Live Chat: Available 24/7 via the bos89 platform in both English and Bahasa Indonesia. Our support agents can log a formal privacy request on your behalf and escalate it to the data team.
• Response Time: We acknowledge all formal privacy requests within 48 hours (WIB) and aim to provide a substantive response within 30 calendar days. Complex requests (such as full data exports) may require up to 60 days, in which case we will notify you of the extended timeline.

For responsible gaming support — including self-exclusion requests, deposit limit adjustments, and cooling-off periods — please visit our dedicated Responsible Gaming page, where you will find specific tools and helpline resources available to Indonesian players.