bos88 is committed to protecting the personal information you share with us. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used, and the rights you hold over your own information.
bos88 is an internationally licensed online gaming platform serving members primarily based in Indonesia. We understand that the personal data you share with us is sensitive — it includes financial information, identity documents, and your gaming activity history. This Privacy Policy sets out a clear, transparent account of how bos88 collects, uses, stores, shares, and ultimately disposes of that data, in compliance with applicable international data-protection standards.
This policy should be read alongside the bos88 Terms & Conditions, which govern the overall relationship between bos88 and its members. Definitions used in the Terms & Conditions and not re-stated here carry the same meaning in this Privacy Policy.
If you have any questions about how bos88 handles your personal data, or if you wish to exercise any of the rights described in Section 12, please contact our Data Protection team using the details provided in Section 16.
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person ("data subject"), including name, email address, date of birth, financial account details, device identifiers, and IP address. |
| Processing | Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, and deletion. |
| Data Controller | bos88, the entity that determines the purposes and means of processing your Personal Data. |
| Data Processor | A third party that processes Personal Data on behalf of and under the instructions of bos88 (e.g., payment gateways, KYC verification providers, cloud hosting providers). |
| Consent | A freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data for a stated purpose. |
| KYC | Know Your Customer — the identity and address verification process bos88 conducts prior to processing withdrawal requests. |
| Member | A natural person who has registered and holds an active bos88 Account. |
bos88 collects the following categories of Personal Data from Members and visitors:
bos88 collects your Personal Data through the following channels:
You provide data directly to bos88 when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in a promotional offer.
When you access and use the bos88 platform, our servers and analytics tools automatically collect Technical & Usage Data (Section 3.4). This collection is facilitated through cookies, web beacons, pixel tags, and server log files. See Section 10 for full details on our cookie practices.
bos88 may receive Personal Data about you from the following third-party sources:
bos88 relies on the following legal bases for processing your Personal Data:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account registration, identity verification (KYC), processing deposits and withdrawals, settling wagers, administering bonuses, and providing customer support. Without this processing, bos88 cannot deliver the services described in the Terms & Conditions. |
| Legal Obligation | Anti-money-laundering (AML) screening, counter-terrorist financing checks, record-keeping for regulatory compliance, and responding to lawful requests from competent authorities. |
| Legitimate Interests | Fraud detection and prevention, platform security monitoring, product improvement through aggregated analytics, and sending service-related communications (e.g., transaction confirmations, account security alerts). bos88 has assessed that these interests are not overridden by Member privacy rights. |
| Consent | Sending marketing communications (promotional offers, bonus announcements, seasonal promotions tied to Idul Fitri, Ramadhan, Indonesian Independence Day (17 August), and other local events). You may withdraw consent for marketing communications at any time via your Account dashboard or by contacting support. |
bos88 uses your Personal Data for the following specific purposes:
To create, maintain, and manage your Member account, including verifying your identity at registration and at every subsequent KYC review, authenticating your login sessions, and communicating essential account information such as password reset confirmations and deposit receipts.
To process deposits and withdrawals in IDR via your chosen local payment method, to settle sportsbook wagers and casino game sessions, and to calculate and credit bonus entitlements in accordance with applicable promotion terms.
To screen account holders and transactions against AML watchlists, to investigate and resolve suspected fraud or multi-accounting, to comply with the reporting requirements of our international gaming licence, and to respond to lawful orders issued by competent authorities.
To implement and enforce deposit limits, session time reminders, cooling-off periods, and self-exclusion requests as configured by the Member. Where our responsible gaming monitoring systems detect patterns consistent with problem gambling behaviour, we may use your account data to proactively reach out and offer support resources.
To analyse aggregated, anonymised usage data in order to improve the user experience, optimise product offerings, and identify and resolve technical issues. Individual Member data is not used for these purposes without anonymisation where feasible.
Where you have provided consent, to send promotional offers, loyalty rewards, and news about new games or features via email or in-platform notification. You retain the right to withdraw this consent at any time without affecting the legality of processing carried out before withdrawal.
bos88 shares your Personal Data only in the following circumstances and only to the extent necessary for each stated purpose:
To process your deposits and withdrawals, bos88 shares the minimum necessary financial identifiers (your name, account number, and transaction amount in IDR) with the relevant local bank or e-wallet operator — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja. These providers act as independent data controllers for their own services and are subject to their own privacy policies.
To complete the mandatory identity verification process, bos88 shares identity document images and biometric selfie data with contracted KYC verification providers. These providers act as Data Processors and process your data solely under bos88's documented instructions.
bos88 shares relevant transaction and identity data with fraud detection and AML screening services to protect the platform and its members from financial crime. These services are engaged under data processing agreements that restrict use to the stated purpose.
bos88 uses third-party cloud hosting, content delivery, and database management services to operate the platform. These providers may have access to data stored on their infrastructure but are contractually prohibited from processing it for any purpose other than platform operation.
bos88 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, by the order of a competent court, or in connection with our obligations under our international gaming licence. We will notify the affected Member of such a disclosure where we are legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of the bos88 business, Member Personal Data may be transferred to the acquiring entity. We will provide advance notice of any such transfer and the new entity's privacy commitments before the transfer takes effect.
bos88's primary server infrastructure is located in the jurisdiction of our international gaming licence. This means that your Personal Data may be transferred to, stored in, and processed in a country other than Indonesia. bos88 takes the following steps to ensure that such transfers are carried out with appropriate safeguards:
By creating a bos88 Account, you acknowledge that your Personal Data may be processed outside Indonesia and consent to such transfer subject to the safeguards described above.
bos88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by our licensing obligations or applicable law. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account plus 5 years post-closure | AML regulatory requirement |
| KYC Documents (KTP, selfie) | Duration of Account plus 5 years post-closure | AML / licensing obligation |
| Financial Transaction Records | Duration of Account plus 7 years post-closure | AML / tax record-keeping |
| Gaming Activity History | Duration of Account plus 3 years post-closure | Dispute resolution / licensing |
| Support Communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Cookie & Usage Data | Up to 13 months from collection | Analytics / platform improvement |
| Marketing Consent Records | Until withdrawal of consent plus 3 years | Legal compliance (proof of consent) |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual Member.
bos88 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage objects) to operate the platform, improve user experience, and — where consent has been provided — to deliver relevant promotional content. The following categories of cookies are used:
These cookies are essential for the platform to function. They enable secure login sessions, maintain your authenticated state as you navigate between pages, and remember your preferred settings such as language and time zone (WIB, UTC+7). These cookies cannot be disabled without impairing platform functionality.
These cookies collect aggregated, anonymised information about how Members use the bos88 platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used exclusively to improve platform performance and user experience. No individual Member is identified through analytical cookies.
These cookies remember choices you make on the platform — such as your preferred deposit method, your last-visited game category, or your responsible gaming limit settings — so that you do not need to reconfigure them on every visit.
Where you have provided consent, marketing cookies track your browsing behaviour on the bos88 platform to enable us to show you promotional offers and bonus reminders that are relevant to your gaming interests. You may withdraw consent for marketing cookies at any time via your Account dashboard.
bos88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure:
Whilst bos88 takes all reasonable steps to protect your data, no internet-based system is completely immune to security risks. You play an important role in keeping your account secure: use a strong, unique password; do not share your login credentials; and contact bos88 support immediately if you suspect unauthorised access to your Account.
Subject to applicable international data-protection standards and the limitations imposed by our regulatory and licensing obligations, you hold the following rights over your Personal Data held by bos88:
You have the right to request a copy of the Personal Data bos88 holds about you, together with information about the purposes for which it is processed, the categories of data involved, and the third parties with whom it has been shared. We will respond to valid access requests within 30 days.
You have the right to request that inaccurate or incomplete Personal Data be corrected. Where the data in question affects KYC verification or financial records, we may require supporting documentation before making any changes.
You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that bos88 is subject to mandatory retention obligations (see Section 9) that may prevent immediate or complete erasure of certain data categories.
You have the right to request that bos88 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interests and that objection is under review.
Where processing is based on your consent or on contractual necessity, and processing is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) and to transmit that data to another controller.
You have the right to object to processing carried out on the basis of bos88's legitimate interests (see Section 5), including profiling for fraud detection. You also have an unconditional right to object to processing for direct marketing purposes at any time.
Where processing is based solely on your consent (e.g., marketing communications, marketing cookies), you may withdraw that consent at any time via your Account dashboard or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
The bos88 platform is strictly for persons aged 21 years and above. bos88 does not knowingly collect Personal Data from individuals under the age of 21. If you are a parent or guardian and you believe that a person under 21 in your care has provided Personal Data to bos88 or created an Account, please contact us immediately at [email protected]. Upon verification, we will promptly delete all relevant data and close the Account.
The bos88 platform does not contain links to third-party websites. In the event that any informational content on the platform references a third-party service provider by name (e.g., BCA, Pragmatic Play, Evolution Gaming), bos88 is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policy of any third-party service you use in connection with your bos88 Account (in particular, your local bank or e-wallet provider).
bos88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, new regulatory requirements, or improvements to the platform. When material changes are made, bos88 will:
Your continued use of the bos88 platform after the effective date of any amended Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised terms, you must stop using the platform and request Account closure in accordance with Section 13.3 of the Terms & Conditions.
If you have any questions, concerns, or complaints relating to this Privacy Policy or the way bos88 handles your Personal Data, please contact us through the following channels:
For formal data rights requests (access, erasure, portability, etc.), use the subject line "Data Rights Request — [your Account username]" and we will route your enquiry directly to our Data Protection team. We will acknowledge receipt within one business day and provide a substantive response within 30 days.
If you are not satisfied with bos88's response to your privacy complaint, you have the right to escalate the matter to the data-protection supervisory authority of the jurisdiction in which bos88 holds its primary international gaming licence, or to bos88's licensing authority through its published dispute-resolution procedure.
Every data transmission between your device and the bos88 platform is protected by industry-standard TLS encryption. Your financial details, identity documents, and account credentials are never sent in plain text.
Sensitive information stored in bos88 databases — including KYC documents, bank account details for BCA, BRI, BNI, and Mandiri, and password hashes — is protected with AES-256 encryption at the storage level.
Access to Member Personal Data is restricted to authorised personnel on a need-to-know basis. All internal data access events are logged and subject to regular security audits to prevent unauthorised disclosure.
bos88 does not sell, rent, or license your Personal Data to third-party marketers under any circumstances. Data sharing is limited to payment processors, KYC partners, and legally mandated disclosures — nothing more.
You can request access to, correction of, or deletion of your Personal Data at any time. bos88 commits to responding to all valid data rights requests within 30 days, in full compliance with applicable international data-protection standards.
In the unlikely event of a security incident affecting your Personal Data, bos88 will notify you and the relevant regulatory authorities promptly in accordance with our documented incident response procedure and licensing obligations.
Now that you know exactly how bos88 handles your data, you can enjoy Indonesia's premier online gaming platform with complete peace of mind. Browse our full game library, or head to the bos88 Casino for live tables, slots, and more.