Privacy Policy

This Privacy Policy ("Policy") is issued by bos56 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player", "the User") who access or use the bos56 website at bos56.cam, including all associated services, support channels, and promotional communications.

bos56 operates as an internationally licensed online sports betting and casino platform serving English-preference players across Indonesia. In the course of delivering our services — sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot gacor (high-payout slot) titles, and related gaming products — we necessarily collect and process certain personal information about you. We take that responsibility seriously.

This Policy is designed to give you a clear, plain-English account of our data practices. It is incorporated into, and should be read alongside, our Terms & Conditions and our Responsible Gaming Policy. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

In this Policy, the following terms carry the meanings set out below:

bos56 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, bos56 is responsible for determining the purposes for which your Personal Data is processed and for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data-related inquiries, rights requests, or complaints, you may contact our designated data protection point of contact using the details set out in Section 15 of this Policy.

bos56 collects Personal Data through several channels. The categories of data we collect are outlined below:

4.1 Registration Data

When you create an Account, we collect:

• Full legal name.
• Date of birth (to verify you are 21 or older).
• Email address.
• Indonesian mobile phone number.
• Chosen username and encrypted password.
• City and province of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Yogyakarta, Medan).

4.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and responsible gaming requirements, we collect:

• Copies of government-issued photo identification (Indonesian KTP / e-KTP or passport).
• Proof of address documents (utility bill, bank statement) dated within three months.
• Selfie photographs taken alongside identity documents.
• Source-of-funds documentation for Players with high transaction volumes.

4.3 Financial Data

• Bank account numbers and names for local bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP).
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Transaction history, including deposit amounts, withdrawal requests, and Bonus Fund usage.

4.4 Transactional & Betting Data

• Wagering history, game logs, betting markets accessed, and outcomes.
• Bonus and promotion participation records.
• Session duration, wagering patterns, and responsible gaming interactions (e.g., deposit limits set, self-exclusion requests).

4.5 Technical & Usage Data

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Pages visited, features used, and clickstream data within the Platform.
• Login timestamps and session duration.
• Cookie identifiers and analytics data (see Section 10).

4.6 Communications Data

• Records of communications with our customer support team, including live chat transcripts and email correspondence.
• Feedback, survey responses, and complaints submitted through the Platform.

bos56 processes your Personal Data only where a valid legal basis exists. The table below maps each primary processing purpose to its legal basis:

In practice, bos56 uses the Personal Data we collect to:

• Create, manage, and secure your Account throughout your relationship with the Platform.
• Verify your identity and age before enabling withdrawals, in accordance with our KYC obligations.
• Process your deposits and withdrawals to and from your preferred Indonesian bank or e-wallet account.
• Deliver the betting, gaming, and promotional services you have requested.
• Detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, and other prohibited activities.
• Monitor betting patterns and gameplay behaviour as part of our responsible gaming programme, and proactively reach out to Players who may show signs of problem gambling.
• Respond to your customer support inquiries and resolve disputes in a timely and informed manner.
• Send you service-critical communications — such as password reset emails, transaction confirmations, and account security alerts — which are not promotional in nature and cannot be opted out of while your Account is active.
• Send you promotional communications (bonus offers, tournament invitations, seasonal promotions tied to events such as Idul Fitri, Ramadhan, or Indonesian Independence Day) where you have given explicit consent. You may withdraw this consent at any time by contacting our support team.
• Analyse aggregated, anonymised usage data to understand how Players interact with the Platform and to improve features, navigation, and game offerings.
• Comply with applicable legal obligations, regulatory requirements, and lawful requests from competent authorities.

bos56 does not sell, rent, or trade your Personal Data with third parties for their own commercial purposes. We share your data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors and banking partners: We share the minimum financial and identity data required to execute your deposit and withdrawal requests through BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• KYC and identity verification providers: We engage certified third-party identity verification services to authenticate documents submitted during the KYC process. These providers act as Data Processors under contractual data protection obligations.
• Game content and software providers: Platform game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) may receive session and gameplay data necessary to deliver their games to you. Game providers are bound by confidentiality agreements and may not use this data for independent purposes.
• Fraud prevention and AML screening services: We may share transaction data and identity information with specialist third-party fraud detection and anti-money laundering screening providers to protect the Platform and its Players.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful request from a competent regulatory or law enforcement authority, bos56 will disclose the minimum Personal Data necessary to comply with the request. We will endeavour to notify affected Players where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of bos56's business, Player data may be transferred to a successor entity, subject to equivalent data protection obligations.

bos56 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in such a way that it can no longer be linked to any individual. Where anonymisation is applied, the resulting aggregate data may be retained indefinitely for statistical and analytical purposes.

bos56 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our current security controls include:

• 256-bit TLS encryption on all data transmitted between your device and bos56's servers.
• AES-256 encryption at rest for stored Personal Data, KYC documents, and financial records.
• Multi-factor authentication (MFA) options for Player Accounts and mandatory MFA for all internal administrative access.
• Role-based access controls (RBAC) limiting employee access to Personal Data strictly to what is required for their role.
• Regular penetration testing and security audits conducted by qualified independent security professionals.
• Segregated Player fund accounts ensuring that your financial Balance is held separately from bos56's operational funds.
• 24/7 security monitoring with automated anomaly detection for unusual login patterns, transaction irregularities, and potential data breaches.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, bos56 will notify affected Players without undue delay, providing a clear description of the nature of the breach, the data categories involved, and the remedial steps taken.

bos56 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse how the site is used. The categories of cookies we use are as follows:

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging into your Account. Disabling analytics or marketing cookies will not affect your ability to use any betting or gaming features.

As an internationally operated platform, bos56 may transfer your Personal Data to servers and processors located outside Indonesia, including in jurisdictions where data protection laws may differ from those applicable to Indonesian residents.

Wherever such transfers occur, bos56 takes appropriate safeguards to ensure your data receives a level of protection consistent with internationally recognised standards, including:

• Executing data processing agreements with all international Data Processors that incorporate appropriate contractual data protection clauses.
• Transferring data only to processors in jurisdictions assessed as providing adequate data protection, or where specific contractual safeguards are in place.
• Minimising the volume of data transferred internationally to what is strictly necessary for the stated processing purpose.

You may request further information about the specific safeguards in place for any international transfer of your Personal Data by contacting us using the details in Section 15.

Subject to applicable law and certain limited exceptions (such as where retaining your data is required by legal obligation), you hold the following rights with respect to the Personal Data bos56 processes about you:

• Right of Access: You may request a copy of the Personal Data bos56 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For basic account details, you can update these directly within your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. Note that certain data must be retained by law (e.g., financial transaction records) and cannot be erased on request.
• Right to Restriction of Processing: You may request that bos56 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interest, though bos56 may continue processing where compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. We may need to verify your identity before processing your request.

bos56 enforces a strict minimum age requirement of 21 years. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 21. Age verification is a mandatory step in our KYC process and is enforced before any withdrawal is permitted.

If bos56 becomes aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to close the associated Account, return any unencumbered funds to the depositing payment method following verification, and delete the underage individual's Personal Data, subject to any overriding legal retention obligations.

If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so we can investigate and act without delay. For additional guidance on preventing underage access to gambling platforms, please visit our Responsible Gaming page.

bos56 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When we make material changes, we will notify you by displaying a prominent notice on the Platform upon your next login, and where appropriate, by email to your registered address.

The revised Policy will be published on this page with an updated "Last Updated" date. We encourage you to review this Policy periodically. Your continued use of the Platform following publication of a revised Policy constitutes your acknowledgement of the changes.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact us through the following channel:

• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" to ensure your message is routed to the correct team.
• Live Chat: Available 24/7 through the Platform interface, including across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.
• Response time: bos56 aims to acknowledge all written privacy inquiries within 24 hours and to provide a substantive response within 30 calendar days.

If you are not satisfied with bos56's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. bos56 will cooperate fully with any investigation by a competent supervisory authority.