bos991 Privacy Policy — Your Data Protection Rights

1. Introduction and Scope

bos991 ("we", "us", "our", "Platform") is committed to protecting the privacy and personal data of all individuals who use our online gaming services. This Privacy Policy ("Policy") describes in detail how we collect, use, store, share, and protect personal information provided by our members ("you", "Member", "User", "Player") when you register an account, access our website, place wagers, or otherwise interact with the bos991 Platform.

This Policy applies to all personal data collected through the bos991 website (accessible at bos991.cam), our mobile-optimized interface, customer support channels (email, live chat, WhatsApp), and any affiliated services we operate. By creating an account or using any bos991 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal information as described herein.

bos991 operates as an international online gaming platform serving primarily Indonesian players. We process personal data in compliance with international data protection principles, including standards analogous to the General Data Protection Regulation (GDPR) and applicable Indonesian data protection norms. We respect your fundamental rights to privacy, transparency, and control over your personal information.

If you do not agree with any aspect of this Privacy Policy, you must immediately cease using the bos991 Platform and contact us to request account closure and data deletion. Continued use of our services constitutes your acceptance of this Policy and any future amendments we may make from time to time.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a bos991 account, we collect the following categories of personal information directly from you:

• Identity Information: Full legal name (as it appears on your national identity card / Kartu Tanda Penduduk / KTP), date of birth, nationality, and a copy of your KTP or other government-issued photo identification for Know Your Customer (KYC) verification.
• Contact Information: Email address, mobile phone number (in Indonesian format), and residential address including city, province, and postal code.
• Account Credentials: Username and encrypted password (we never store passwords in plain text).
• Financial Information: Bank account details (bank name, account number, account holder name) or e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers) for processing deposits and withdrawals. We do not store full credit or debit card numbers.
• Communication Records: Any information you provide when contacting our customer support team, including the content of live chat transcripts, emails, WhatsApp messages, and support tickets.

2.2 Information Automatically Collected

When you access the bos991 Platform, we automatically collect certain technical and behavioral data through cookies, log files, and similar tracking technologies:

• Device Information: Device type (mobile phone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers.
• Connection Information: Internet Protocol (IP) address, Internet Service Provider (ISP), geographic location (country, region, city — derived from IP address, not GPS), time zone, and connection timestamps.
• Usage Data: Pages viewed, games played, betting history, session duration, navigation paths through the website, referral sources (how you arrived at bos991), and interaction with promotional content.
• Performance Data: Page load times, error messages, technical faults, and crash reports to help us diagnose and improve Platform performance.

2.3 Information from Third Parties

In certain circumstances, we may receive personal information about you from third-party sources:

• Payment Processors: Our banking and e-wallet partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, etc.) may share transaction data, verification status, and fraud alerts related to your deposits and withdrawals.
• Identity Verification Services: We may use third-party KYC and anti-fraud verification providers to validate your identity documents, check against sanctions lists, and prevent duplicate accounts.
• Affiliate Partners: If you arrived at bos991 through an affiliate referral link, we may receive information about the referring website or affiliate code to credit the referrer appropriately.

3. How We Use Your Personal Data

bos991 processes your personal information for the following legitimate purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your bos991 Account
• Processing deposits, wagers, and withdrawal requests
• Verifying your identity and age (21+ requirement) through KYC procedures
• Providing customer support and responding to your inquiries
• Managing bonus claims, promotions, and VIP program benefits
• Communicating important account updates, transaction confirmations, and policy changes

3.2 Legal and Regulatory Compliance

• Complying with international gaming regulations, licensing requirements, and anti-money laundering (AML) laws
• Detecting and preventing fraud, money laundering, underage gambling, and other illegal activities
• Responding to law enforcement requests, court orders, and regulatory investigations where legally required
• Maintaining records of transactions and gameplay for audit and dispute resolution purposes
• Enforcing our Terms & Conditions and protecting the integrity of the Platform

3.3 Platform Improvement and Analytics

• Analyzing user behavior and gameplay patterns to improve game selection, user interface, and mobile experience
• Conducting A/B testing to optimize promotional campaigns and website features
• Monitoring Platform performance, identifying technical issues, and enhancing security measures
• Developing new products, features, and services based on player feedback and usage trends

3.4 Marketing and Personalization

With your consent (where required by law) or based on legitimate interest, we may use your data to:

• Send promotional emails about new games, bonuses, tournaments, and special offers
• Personalize game recommendations and promotional content based on your gameplay preferences
• Display targeted advertisements (if you opt in to marketing communications)
• Invite you to participate in player surveys and feedback initiatives

You can opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email or by updating your communication preferences in your Account settings.

4. Data Sharing and Disclosure

bos991 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality and data protection agreements:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals.
• Game Providers: Third-party software studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, etc.) that power our casino games, live dealer tables, and sports betting platform.
• Identity Verification Services: KYC/AML compliance vendors that verify your identity documents and screen against sanctions lists.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers that host our website, databases, and backup systems.
• Customer Support Tools: Live chat software, email management platforms, and helpdesk systems that enable our support team to assist you efficiently.
• Marketing and Analytics Partners: Email delivery services, analytics platforms (for anonymized aggregated statistics), and advertising networks (only if you consent to targeted ads).

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulators, or courts if required by law or in response to valid legal processes such as subpoenas, court orders, or regulatory investigations. We may also share data to protect the rights, property, or safety of bos991, our members, or the public (for example, in cases of suspected fraud or criminal activity).

4.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving bos991, your personal data may be transferred to the successor entity or acquiring company. We will notify you via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit a website. They allow the website to recognize your device on subsequent visits and remember your preferences, login status, and other settings. bos991 uses cookies and similar technologies (web beacons, pixels, local storage) to enhance your user experience and improve Platform functionality.

5.2 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality including login authentication, session management, security features, and load balancing. These cookies cannot be disabled without severely impairing your ability to use the Platform.
• Performance Cookies: Collect anonymous data about how visitors use bos991, such as which pages are most popular, average session duration, and sources of traffic. This helps us identify technical issues and optimize performance.
• Functional Cookies: Remember your preferences (language, currency, display settings) and personalize your experience (recently played games, favorite sports teams for betting).
• Advertising Cookies: Track your browsing behavior across websites to deliver targeted advertisements. These cookies are only used if you opt in to personalized advertising. You can disable them through your browser settings or our cookie consent banner.

5.3 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, but doing so may affect your ability to use certain features of bos991 (for example, you may need to log in repeatedly or lose your saved preferences). To learn how to manage cookies in your specific browser, consult your browser's help documentation or visit allaboutcookies.org for general guidance.

6. Data Security Measures

bos991 takes the security of your personal information extremely seriously. We have implemented multiple layers of technical, administrative, and physical safeguards to protect your data against unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols. This is the same level of encryption used by banks and e-commerce platforms worldwide.
• Firewall Protection: Our servers are protected by advanced firewall systems that block unauthorized access attempts and malicious traffic.
• DDoS Mitigation: Distributed Denial of Service (DDoS) protection ensures Platform availability even during large-scale cyberattacks.
• Password Hashing: All user passwords are hashed using industry-standard algorithms (bcrypt or stronger) before storage. We never store passwords in plain text, and even bos991 staff cannot view your password.
• Two-Factor Authentication (2FA): Optional 2FA adds an extra layer of security to your account by requiring a verification code from your mobile phone in addition to your password.

6.2 Administrative Security Controls

• Access Restrictions: Only authorized bos991 personnel with a legitimate business need can access member data, and all access is logged and monitored.
• Employee Training: Our staff receive regular training on data protection principles, phishing awareness, and secure handling of personal information.
• Confidentiality Agreements: All employees and contractors are bound by strict confidentiality obligations and face disciplinary action (including termination) for data breaches.
• Security Audits: We conduct periodic internal security audits and may engage third-party cybersecurity firms to perform penetration testing and vulnerability assessments.

6.3 Physical Security Controls

• Our data centers are located in secure facilities with 24/7 surveillance, biometric access controls, and environmental safeguards (fire suppression, climate control, uninterruptible power supplies).
• Data is backed up regularly to geographically distributed locations to ensure business continuity in case of hardware failure or natural disaster.

While we strive to protect your data using industry-leading security measures, no method of transmission over the Internet or electronic storage is 100% secure. You also play a critical role in protecting your account by choosing a strong password, not sharing your login credentials, and logging out of shared devices. If you suspect unauthorized access to your account, contact our support team immediately.

7. Data Retention

bos991 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods vary by data category:

• Account and Transaction Data: We retain account information (name, contact details, KYC documents) and transaction records (deposits, withdrawals, betting history) for a minimum of 7 years after account closure, as required by international anti-money laundering regulations and tax laws.
• Communication Records: Customer support transcripts, emails, and live chat logs are retained for 3 years to resolve disputes and improve service quality.
• Technical Logs: Server logs, IP addresses, and device information are retained for 12-24 months for security monitoring, fraud detection, and troubleshooting purposes.
• Marketing Data: If you unsubscribe from marketing communications, your email address is retained on a suppression list indefinitely to ensure we do not contact you again.

After the applicable retention period expires, personal data is securely deleted or anonymized (stripped of all personally identifiable elements) so that it can no longer be linked back to you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

8. Your Privacy Rights

As a bos991 member, you have the following rights regarding your personal data. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request."

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (typically a CSV or PDF file) within 30 days of your request.

8.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you can update it directly in your Account settings or request that we correct it on your behalf. It is your responsibility to keep your contact details and payment information up to date.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as if you withdraw consent, object to processing, or if the data is no longer necessary for the purposes it was collected. However, we may be legally required to retain certain data (e.g., transaction records for AML compliance) even after you request deletion. We will inform you if legal obligations prevent complete erasure.

8.4 Right to Restriction of Processing

You can ask us to temporarily suspend processing of your personal data if you contest its accuracy, object to processing, or need the data preserved for legal claims while we investigate your request.

8.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider (for example, if you want to move your gaming history to a different platform). This right applies only to data you provided to us based on consent or contractual necessity, and only where processing is automated.

8.6 Right to Object

You can object to processing of your data for direct marketing purposes at any time (opt out of promotional emails). You may also object to processing based on legitimate interests, in which case we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

8.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

8.8 Right to Lodge a Complaint

If you believe bos991 has violated your privacy rights or mishandled your personal data, you have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction. While we hope to resolve any concerns directly with you, we respect your right to escalate matters to regulatory authorities.

9. Children's Privacy

The bos991 Platform is intended exclusively for adults aged 21 years or older. We do not knowingly collect personal information from individuals under the age of 21. If we discover that a person under 21 has created an account or provided us with personal data, we will immediately close the account, void all wagers, forfeit any winnings, and delete the individual's data from our systems (subject to legal retention obligations).

If you are a parent or guardian and believe your child has provided personal information to bos991, please contact us immediately at [email protected] so we can take appropriate action. We take underage gambling prevention seriously and employ age verification tools, KYC document review, and behavioral monitoring to detect and prevent underage access.

10. International Data Transfers

bos991 operates internationally and may transfer, store, and process your personal data in countries outside Indonesia. Some of these countries may have data protection laws that differ from Indonesian standards. When we transfer data internationally, we ensure that:

• The receiving country provides an adequate level of data protection as recognized by international standards, OR
• We implement appropriate safeguards such as Standard Contractual Clauses (SCCs), binding corporate rules, or certification under recognized data protection frameworks, OR
• The transfer is necessary for the performance of our contract with you (e.g., processing payments through international banking networks).

If you have questions about international data transfers or the specific safeguards we use, please contact our Data Protection Officer.

11. Changes to This Privacy Policy

bos991 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Policy, we will notify you by:

• Sending an email to the address registered on your account (at least 7 days before the changes take effect)
• Displaying a prominent notice on the bos991 homepage and login screen
• Updating the "Last Updated" date at the top of this Policy

Your continued use of the bos991 Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information. If you do not agree with the updated Policy, you must cease using our services and may request account closure and data deletion.

12. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or bos991's data protection practices, please contact us:

• Email: [email protected] (for general inquiries and privacy rights requests)
• Subject Line for Privacy Requests: "Privacy Rights Request" or "Data Protection Inquiry"
• Response Time: We will acknowledge your inquiry within 48 hours and provide a substantive response within 30 days (or notify you if additional time is needed due to the complexity of your request)

Our Data Protection Officer oversees compliance with this Privacy Policy and is available to assist with privacy-related concerns. For serious data protection issues or complaints, you may request escalation to the Data Protection Officer by clearly indicating this in your email subject line.