Privacy Policy

bos896 ("we", "us", "our", or "the Company") operates the online gaming and sports betting platform accessible at https://bos896.cam (the "Platform"). In providing our Services to players across Indonesia, we necessarily collect and process certain personal data. We take that responsibility seriously.

This Privacy Policy ("Policy") describes in clear terms:

• The categories of personal data we collect from registered Members and Platform visitors;
• The purposes for which that data is collected and processed;
• The legal bases on which we rely to process your data;
• How long we retain data and the security measures we apply;
• The circumstances in which data may be shared with third parties;
• Your individual data rights and how to exercise them.

This Policy should be read in conjunction with the bos896 Terms & Conditions, which govern your overall use of the Platform. By registering an Account on bos896, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies, or could be used to identify, a natural person — directly or indirectly. This includes name, email address, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, and any other handling of data.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, bos896.
• "Data Processor" means a third party that processes Personal Data on bos896's behalf under a data processing agreement (e.g., a KYC verification provider or payment gateway).
• "Member" means any individual who has completed registration and holds an active or inactive Account on the bos896 Platform.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of your Personal Data for one or more specific purposes.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection — including government-issued identity document numbers, financial account details, and data relevant to health or criminal records.

bos896 collects only the data necessary to deliver and improve our Services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of data we collect are as follows:

3.1 Registration Data

When you create an Account on bos896, we collect:

• Full legal name;
• Date of birth (to verify you meet the 21+ age requirement);
• Residential address in Indonesia;
• Email address;
• Mobile phone number;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To fulfil our KYC obligations, we may collect copies of:

• Indonesian National Identity Card (KTP) or passport;
• Proof of residential address (utility bill or bank statement);
• Selfie photograph holding your identity document;
• Proof of payment method ownership (bank statement showing name and account number for BCA, BRI, BNI, Mandiri, or CIMB Niaga; e-wallet registration screenshot for OVO, DANA, GoPay, or ShopeePay).

3.3 Financial Transaction Data

We record all financial transactions on your Account, including:

• Deposit amounts, timestamps, and payment methods used;
• Withdrawal requests, approval status, and payout methods;
• Bonus credits, wagering progress, and bonus forfeitures;
• Transaction reference numbers and confirmation codes;
• Payment provider account details (anonymized where possible).

3.4 Betting and Gaming Activity Data

We log your activity on the Platform to ensure fair play, comply with regulatory obligations, and improve our Services:

• Sports bets placed (event, market, odds, stake, outcome);
• Casino game sessions (game type, bet amounts, wins, losses, session duration);
• Togel (Indonesia's traditional numbers lottery) entries and results;
• Live casino interactions (table selection, dealer interactions, hand history);
• Responsible gaming limits set or modified;
• Self-exclusion requests and cooling-off periods.

3.5 Technical and Device Data

When you access the Platform, our servers automatically log certain technical data:

• IP address and approximate geolocation (to verify Indonesia residency);
• Device type, operating system, and browser type;
• Screen resolution and language settings;
• Referring URL and navigation path through the Platform;
• Timestamps of logins, logouts, and page requests;
• Unique device identifiers and cookies (see Section 10).

3.6 Communications Data

If you contact bos896 support via live chat or email, we retain a record of that correspondence, including the content of your message, attachments submitted, and the timestamp of each interaction. This helps us resolve your query efficiently and improve our customer service standards.

Personal Data is collected through the following channels:

• Direct Submission: You provide data directly when registering an Account, completing the KYC process, making a deposit, submitting a withdrawal request, or contacting support.
• Automated Collection: Our servers and third-party analytics tools automatically collect Technical and Device Data when you access or interact with the Platform.
• Cookies and Similar Technologies: Cookies, web beacons, and local storage are used to recognize returning users, remember preferences, and measure site performance (see Section 10 for details).
• Third-Party Sources: In limited circumstances, we may receive data from KYC verification providers, fraud prevention services, or payment processors to validate the accuracy of information you have provided or to detect suspicious activity.

bos896 processes your Personal Data for the following purposes:

bos896 relies on the following legal bases to process your Personal Data:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you agreed to when registering your Account — including providing access to Services, processing transactions, and ensuring fair play.
• Legal Obligation: Processing is required to comply with KYC regulations, anti-money laundering laws, and other statutory obligations applicable to online gaming operators.
• Legitimate Interest: Processing is necessary for our legitimate business interests — including fraud prevention, security monitoring, platform improvement, and business analytics — provided those interests do not override your fundamental rights and freedoms.
• Consent: Where required by law or where processing falls outside the above bases, we seek your explicit consent — for example, when sending promotional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

bos896 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We may, however, share your data with trusted third parties in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage specialist service providers to perform functions on our behalf, including:

• Payment Processors: To facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay).
• KYC & Identity Verification Providers: To verify your age, identity, and residential address against government databases and document registries.
• Fraud Detection Services: To screen transactions for signs of fraudulent activity, match betting, or money laundering.
• Cloud Hosting & Infrastructure Providers: To store data securely and ensure Platform availability and performance.
• Customer Support Platforms: To manage live chat interactions and support ticketing.

All service providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than the specific service they provide to bos896.

7.2 Game Providers

Certain Personal Data — primarily your username, Account Balance, and betting history — is shared with licensed game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to enable you to play their games on the bos896 Platform. Game providers are contractually obligated to protect your data and use it solely to deliver their gaming content.

7.3 Legal & Regulatory Authorities

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts if required to do so by law, court order, or legal process, or if we believe in good faith that disclosure is necessary to:

• Comply with anti-money laundering (AML) regulations or sanctions screening;
• Protect the rights, property, or safety of bos896, our Members, or the public;
• Investigate or prevent fraud, security breaches, or other unlawful activity;
• Respond to lawful requests from government authorities.

7.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving bos896, your Personal Data may be transferred to the acquiring entity. In such a scenario, we will notify affected Members via email and update this Privacy Policy accordingly. The successor entity will be bound by the commitments made in this Policy unless you are given the opportunity to opt out.

bos896 retains your Personal Data only for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law.

8.1 Active Accounts

While your Account remains active, we retain all associated data to provide ongoing Services, maintain Account security, and comply with legal obligations.

8.2 Closed Accounts

When you voluntarily close your Account or your Account is closed by bos896 for a breach of Terms, we retain certain data for a period of 7 years from the date of closure. This retention period reflects:

• Standard financial record-keeping requirements under Indonesian accounting regulations;
• AML compliance obligations that require retention of KYC and transaction records;
• Statute of limitations periods for civil claims and disputes;
• The need to defend against potential legal claims or regulatory inquiries.

After 7 years, Personal Data associated with closed Accounts is securely deleted or anonymized such that it can no longer be linked to an identifiable individual.

8.3 Marketing Data

If you opt out of marketing communications, we will cease sending promotional messages immediately but will retain your email address and opt-out status indefinitely to ensure we do not inadvertently re-contact you in the future.

8.4 Log Data

Server logs, IP addresses, and session data are typically retained for 12–24 months for security monitoring and fraud detection purposes, after which they are automatically purged from active systems.

bos896 employs industry-standard technical and organizational security measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using bank-grade 256-bit SSL/TLS protocols.
• Secure Data Storage: Personal Data is stored on encrypted servers located in secure, access-controlled data centers with 24/7 monitoring and redundancy systems.
• Access Controls: Only authorized bos896 personnel with a legitimate operational need — such as KYC verification specialists, fraud analysts, and senior customer support agents — may access Personal Data. All access is logged and audited.
• Password Hashing: User passwords are hashed using strong, one-way cryptographic algorithms (bcrypt or Argon2). bos896 staff cannot view or retrieve your plaintext password.
• Regular Security Audits: We conduct periodic penetration testing, vulnerability assessments, and code reviews to identify and remediate security weaknesses.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their Accounts for an additional layer of login security.
• Incident Response Plan: In the unlikely event of a data breach, bos896 maintains a documented incident response procedure to contain the breach, assess impact, notify affected Members, and report to relevant authorities as required by law.

bos896 uses cookies and similar technologies to enhance your experience on the Platform, maintain session state, and analyze site usage.

10.1 What Are Cookies?

Cookies are small text files placed on your device by a website. They enable the site to recognize your device, remember your preferences, and track your interactions with the site.

10.2 Types of Cookies We Use

• Essential Cookies: Required for basic Platform functionality, including user authentication, session management, and security. These cookies cannot be disabled without severely impairing your ability to use the Platform.
• Performance & Analytics Cookies: Used to measure site traffic, identify popular content, and understand how users navigate the Platform. This helps us optimize performance and improve user experience.
• Functionality Cookies: Remember your preferences (e.g., language setting, odds format) and personalize your experience across sessions.

10.3 Third-Party Cookies

bos896 does not allow third-party advertising networks or behavioral tracking platforms to place cookies on our site. Any third-party cookies present are limited to analytics providers (e.g., Google Analytics) and are configured to respect user privacy.

10.4 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, accept only certain cookies, or alert you when a cookie is being set. Note that disabling essential cookies will prevent you from logging into your Account.

As a Member of bos896, you hold the following data protection rights. You may exercise these rights at any time by contacting our support team:

11.1 Right to Access

You have the right to request a copy of all Personal Data we hold about you. We will provide this in a structured, commonly used, and machine-readable format (e.g., CSV or PDF) within 30 days of your request.

11.2 Right to Rectification

If any Personal Data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You can update most Account information directly through your Account settings.

11.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your Personal Data under certain circumstances — for example, if the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent where consent was the legal basis for processing. Note that we may be required to retain certain data to comply with legal obligations (e.g., AML record-keeping requirements).

11.4 Right to Restriction of Processing

You may request that we suspend processing of your Personal Data in specific situations — for example, if you contest the accuracy of the data or if you object to processing based on legitimate interests.

11.5 Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a portable format and to request that it be transmitted directly to another service provider where technically feasible.

11.6 Right to Object

You have the right to object to processing of your Personal Data where that processing is based on legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

11.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

The bos896 Platform is strictly for adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes mandatory date-of-birth verification, and our KYC procedure requires submission of a government-issued photo ID.

If we become aware that we have inadvertently collected Personal Data from a minor, we will take immediate steps to delete that data and suspend the associated Account. Any deposits made by a minor will be returned, and any winnings will be forfeited.

Parents and guardians are encouraged to monitor their children's online activity. If you believe a minor has registered an Account on bos896, please contact our support team immediately so we can investigate and take appropriate action.

bos896 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify registered Members by:

• Displaying a prominent notice on the Platform homepage;
• Sending an email notification to the registered Account address;
• Updating the "Last Updated" date at the top of this Policy.

Your continued use of the Platform after the revised Policy takes effect constitutes acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed of how we protect your data.

If you do not agree with a revised Privacy Policy, you may close your Account in accordance with the procedure described in the Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the bos896 Data Protection team:

• Live Chat: Available 24/7 through the bos896 Platform. Average response time under two minutes. Our support agents can escalate data protection queries to specialist personnel.
• Email: [email protected] (plain text — not a clickable link). When submitting a data rights request or privacy inquiry, please include your registered username and clearly state the nature of your request. We aim to respond to all privacy-related inquiries within 30 days.

For formal complaints regarding data protection practices, you may also have the right to lodge a complaint with a supervisory authority in your jurisdiction, although we encourage you to contact us first so we have an opportunity to resolve your concerns directly.