Privacy Policy

1. Introduction

bos78 ("we", "us", "our") operates the online gaming platform at https://bos78.cam, providing sports betting, casino games, and related gaming services to players in Indonesia. We are committed to protecting your privacy and handling your personal data with transparency, security, and in compliance with applicable international data protection laws.

This Privacy Policy explains what personal information we collect from you, how we use it, who we share it with, how we protect it, and what rights you have regarding your data. By creating an account or using bos78's services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together govern your use of bos78's platform.

2. Information We Collect

bos78 collects various categories of personal information necessary to provide our gaming services, comply with legal obligations, and improve our platform. The types of data we collect include:

2.1 Account Registration Information

When you register an account on bos78, we collect:

• Full legal name (as it appears on your Indonesian KTP identity card)
• Date of birth (to verify you are 21 years or older)
• Residential address in Indonesia
• Email address
• Indonesian mobile phone number (+62 prefix)
• Username and encrypted password
• Preferred currency (Indonesian Rupiah)

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and verify your identity, we collect:

• Photograph of your Indonesian KTP (Kartu Tanda Penduduk - national identity card)
• Selfie photograph of you holding your KTP
• In some cases, proof of address documents (utility bills, bank statements)
• Source of funds documentation for high-value transactions

2.3 Financial and Transaction Data

When you deposit, withdraw, or transact on bos78, we collect:

• Bank account details (bank name, account number, account holder name) for deposits and withdrawals
• E-wallet account information (OVO, DANA, GoPay account identifiers)
• Transaction history (deposits, withdrawals, amounts, dates, payment methods)
• Betting history (games played, bets placed, stakes, outcomes, winnings, losses)
• Bonus claims and wagering activity

2.4 Technical and Usage Data

We automatically collect technical information when you access our platform:

• IP address and approximate geographic location
• Device information (device type, operating system, browser type and version)
• Login timestamps and session duration
• Pages viewed, features used, links clicked
• Game play statistics and behavior patterns
• Cookies and similar tracking technologies (see Section 8)

2.5 Communications and Support Data

When you contact bos78's customer support, we collect:

• Content of your messages, emails, live chat conversations
• WhatsApp chat logs if you contact us via WhatsApp
• Feedback, complaints, and survey responses
• Any additional information you voluntarily provide

3. How We Use Your Personal Data

bos78 processes your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Authenticating your identity when you log in
• Processing deposits, withdrawals, and financial transactions
• Enabling you to place bets and play games
• Crediting winnings and bonuses to your account
• Providing customer support and resolving disputes

3.2 Legal Compliance and Security

• Verifying your age (21+ requirement) and identity (KYC compliance)
• Complying with anti-money laundering (AML) regulations
• Preventing fraud, unauthorized access, and illegal activity
• Detecting and investigating suspicious betting patterns or account abuse
• Enforcing our Terms & Conditions and house rules
• Responding to legal requests from authorities or courts

3.3 Responsible Gaming and Player Protection

• Monitoring gambling behavior to identify potential problem gambling
• Implementing deposit limits, loss limits, and self-exclusion requests
• Providing responsible gaming tools and resources
• Contacting players showing signs of problematic gambling behavior

3.4 Marketing and Communications (With Your Consent)

• Sending promotional offers, bonuses, and tournament announcements
• Notifying you of new games, features, or platform updates
• Delivering personalized gaming recommendations based on your play history
• Conducting surveys to improve our services

Note: You can opt out of marketing communications at any time by adjusting your account preferences or clicking "unsubscribe" in emails. Opting out does not affect transactional or service-related communications (e.g., withdrawal confirmations, security alerts).

3.5 Platform Improvement and Analytics

• Analyzing user behavior to improve website design and functionality
• Identifying technical issues and optimizing performance
• Testing new features and gaming products
• Conducting statistical analysis and research (using anonymized data)

4. Data Sharing and Third-Party Disclosure

bos78 does not sell your personal data to third parties. However, we may share your information with the following categories of recipients for legitimate business purposes:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who assist in operating our platform:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay), and payment gateways that process deposits and withdrawals
• Game providers: Software suppliers such as Pragmatic Play, Evolution Gaming, PG Soft, and others who deliver game content
• KYC verification services: Third-party identity verification providers that authenticate Indonesian identity documents
• Cloud hosting providers: Companies that host our servers and databases
• Customer support platforms: Live chat software and email service providers
• Analytics providers: Services that help us analyze website traffic and user behavior

All service providers are contractually bound to process your data only as instructed by bos78 and to maintain appropriate security measures.

4.2 Legal and Regulatory Authorities

We may disclose your personal data to government agencies, courts, or law enforcement when:

• Required by law, court order, or legal process
• Necessary to investigate fraud, money laundering, or other illegal activity
• Requested by our licensing authority as part of regulatory compliance
• Needed to protect our rights, property, or safety, or that of other users

4.3 Business Transfers

In the event bos78 is acquired by another company, merges with another entity, or undergoes bankruptcy proceedings, your personal data may be transferred to the acquiring or successor entity as part of the business assets. You will be notified of any such transfer.

4.4 Affiliates and Group Companies

We may share data with affiliated companies within our corporate group for administrative purposes, shared infrastructure, or consolidated services, always subject to the same privacy protections described in this policy.

5. Data Security Measures

bos78 employs industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks
• Database Encryption: Sensitive data stored in our databases is encrypted at rest
• Password Protection: User passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text
• Firewall Protection: Our servers are protected by advanced firewalls and intrusion detection systems
• DDoS Protection: We employ DDoS mitigation services to protect against distributed denial-of-service attacks

5.2 Organizational Security

• Access Controls: Only authorized personnel have access to personal data, and access is granted on a need-to-know basis
• Employee Training: All staff handling personal data receive regular privacy and security training
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements
• Security Audits: We conduct regular security audits and vulnerability assessments
• Incident Response Plan: We maintain procedures for responding to data breaches

5.3 Your Responsibility

While we implement robust security measures, you also play a role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Log out of your account when using shared or public devices
• Do not share your account credentials via email, chat, or phone
• Report any suspicious activity on your account immediately
• Keep your contact information (email, phone) updated so we can reach you about security issues

6. Data Retention Period

bos78 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected:

6.1 Active Accounts

While your account is active, we retain all personal data, transaction history, and betting records to provide ongoing service and comply with legal obligations.

6.2 Closed or Inactive Accounts

• Self-closed accounts: Data is retained for 5 years after closure to comply with anti-money laundering regulations and resolve potential disputes
• Inactive accounts: Accounts with no login activity for 24+ months may be closed, with data retained for 5 years thereafter
• Self-excluded accounts: Data is retained for the self-exclusion period plus 5 years to prevent re-registration attempts
• Accounts closed for violations: Data may be retained indefinitely to prevent re-registration and protect platform integrity

6.3 Legal and Regulatory Requirements

Some data must be retained for longer periods to comply with Indonesian tax law, international gaming regulations, and legal statutes of limitations. This includes:

• Financial transaction records: 7 years minimum
• KYC documents: 5 years after account closure
• Responsible gaming records: 5 years after self-exclusion expires
• Tax-related documentation: As required by Indonesian law

6.4 Data Deletion

Once the retention period expires and legal obligations are satisfied, personal data is securely deleted or anonymized so it can no longer be linked to an individual player.

7. Your Privacy Rights

As a bos78 user, you have the following rights regarding your personal data:

7.1 Right to Access

You can request a copy of the personal data we hold about you. Contact our support team to request a data access report, which will be provided within 30 days.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you can update it directly in your account settings or contact support to correct it.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to our legal obligation to retain certain records for regulatory compliance. If we cannot delete data due to legal requirements, we will explain why.

7.4 Right to Restriction of Processing

You can request that we limit how we process your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

7.5 Right to Data Portability

You can request a copy of your data in a structured, machine-readable format (e.g., CSV or JSON) to transfer to another service provider.

7.6 Right to Object

You can object to processing of your data for direct marketing purposes at any time. You can also object to processing based on legitimate interests in certain circumstances.

7.7 Right to Withdraw Consent

Where we process data based on your consent (e.g., marketing communications), you can withdraw consent at any time. This does not affect the lawfulness of processing before consent was withdrawn.

7.8 How to Exercise Your Rights

To exercise any of these rights, contact bos78 customer support at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days. You may need to verify your identity before we process your request.

8. Cookies and Tracking Technologies

bos78 uses cookies and similar tracking technologies to enhance your browsing experience and improve our services.

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They allow websites to recognize your device and remember information about your visit.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., maintaining your login session, processing transactions). These cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use our site (pages visited, error messages) to help us improve functionality.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
• Advertising Cookies: Used to deliver relevant promotional offers based on your interests and track campaign effectiveness.

8.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Note that disabling cookies may affect your ability to use certain features of bos78's platform.

To manage cookies: Check your browser's Help menu for instructions on blocking, deleting, or receiving warnings before cookies are stored.

9. Children's Privacy

bos78's services are strictly intended for individuals 21 years of age or older, in compliance with Indonesian law. We do not knowingly collect personal data from anyone under 21 years of age.

10. International Data Transfers

bos78 operates internationally and may transfer your personal data to servers located outside Indonesia. These transfers occur when:

• Our cloud hosting infrastructure is located in other jurisdictions
• Game providers or payment processors operate from different countries
• We use third-party services (analytics, customer support) based abroad

When transferring data internationally, we ensure appropriate safeguards are in place, including:

• Data processing agreements with third parties
• Standard contractual clauses approved by international authorities
• Compliance with applicable data protection laws

By using bos78's services, you consent to the transfer of your data to jurisdictions that may have different data protection laws than Indonesia.

11. Changes to This Privacy Policy

bos78 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated to active users via:

• Email notification to your registered email address
• Prominent notice on our website homepage
• In-account notification when you log in

The "Last Revised" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically. Your continued use of bos78's services after changes are posted constitutes acceptance of the updated policy.

12. Contact Information for Privacy Matters

If you have questions, concerns, or requests regarding this Privacy Policy or how bos78 handles your personal data, please contact us:

• Email: [email protected] (Subject: "Privacy Policy Inquiry")
• Live Chat: Available 24/7 on our website
• Response Time: We aim to respond to all privacy inquiries within 10 business days

For formal complaints or unresolved privacy concerns, you may also have the right to lodge a complaint with the data protection authority in your jurisdiction.

Related Documents:

• Terms & Conditions - Full user agreement governing bos78 services
• Responsible Gaming Policy - Tools and resources for safe gambling
• Frequently Asked Questions - Common questions about bos78