Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by bos33 through our website at bos33.cam, mobile applications, and any other digital platforms we operate. This policy governs data collection from Indonesian residents who register accounts and use our online gaming services, including sports betting, live casino games, slot machines, and lottery games such as togel.

bos33 operates as a data controller with respect to the personal information we collect. We process your data in accordance with international data protection standards and applicable Indonesian privacy regulations. If you have any questions about this Privacy Policy or how we handle your data, please contact us using the information provided at the end of this document.

2. Information We Collect

2.1 Personal Information You Provide

When you register an account with bos33, we collect personal information that you voluntarily provide, including:

• Identity Information: Full legal name as it appears on your Indonesian identification document (KTP), date of birth, gender, and nationality.
• Contact Information: Email address, mobile phone number, residential address including street, city, postal code, and province within Indonesia.
• Account Credentials: Username, password, and security questions/answers used to access your account.
• Financial Information: Bank account details for deposits and withdrawals (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay), and transaction history.
• Verification Documents: Copies of government-issued identification documents (KTP), proof of address (utility bills, bank statements), and photographs for identity verification purposes.
• Communication Content: Messages you send to our customer support team via live chat, email, or WhatsApp, including inquiries, complaints, and feedback.

2.2 Information We Collect Automatically

When you use bos33 services, we automatically collect certain technical and behavioral data:

• Device Information: Type of device (smartphone, tablet, desktop), operating system and version, browser type and version, screen resolution, and unique device identifiers.
• Connection Data: IP address, internet service provider, connection type (Wi-Fi, mobile data), and geographic location based on IP geolocation.
• Usage Data: Pages visited, games played, bet amounts and outcomes, time spent on platform, clickstream data, and navigation patterns.
• Cookies and Tracking Technologies: Session cookies for authentication, persistent cookies for preferences, analytics cookies for usage patterns, and local storage for performance optimization.
• Gaming Activity: Complete history of bets placed on sports events (including BRI Liga 1, English Premier League, La Liga), casino games, slots, and togel draws, including stakes, odds, and payouts.

2.3 Information from Third-Party Sources

bos33 may receive information about you from third-party sources to verify your identity and prevent fraud:

• Identity verification services that confirm the authenticity of submitted documents.
• Payment processors that validate bank account ownership and transaction legitimacy.
• Fraud prevention databases that flag known patterns of suspicious activity.
• Marketing partners (only if you consent to receive promotional communications).

3. How We Use Your Information

bos33 uses your personal data for the following legitimate purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account.
• Processing your bets, calculating winnings, and managing your account balance.
• Facilitating deposits and withdrawals through BCA, BRI, BNI, Mandiri, and e-wallet providers.
• Verifying your identity and age (21+ requirement) to comply with legal obligations.
• Providing customer support and responding to your inquiries via live chat, email, and WhatsApp.

3.2 Legal and Compliance Obligations

• Conducting Know Your Customer (KYC) verification as required by anti-money laundering regulations.
• Detecting and preventing fraud, collusion, money laundering, and other illegal activities.
• Enforcing our Terms & Conditions and investigating suspected violations.
• Complying with legal requests from law enforcement and regulatory authorities.
• Maintaining records for audit and dispute resolution purposes.

3.3 Service Improvement and Analytics

• Analyzing usage patterns to improve platform performance, game selection, and user experience.
• Conducting market research to understand Indonesian player preferences.
• Testing new features, payment methods, and gaming products.
• Optimizing website speed, mobile app functionality, and payment processing times.

3.4 Marketing and Communications (With Your Consent)

• Sending promotional emails about bonuses, tournaments, and special offers.
• Providing personalized game recommendations based on your playing history.
• Notifying you about updates to our services, new game launches, and platform improvements.
• Sending transactional messages such as deposit confirmations, withdrawal notifications, and account security alerts.

3.5 Responsible Gaming Support

• Monitoring for signs of problem gambling behavior.
• Implementing deposit limits, loss limits, and self-exclusion requests.
• Providing reality check reminders and session time alerts.
• Offering access to responsible gaming tools and support resources.

4. Legal Basis for Processing

bos33 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and bos33 (i.e., providing gaming services).
• Legal Compliance: Processing is required to comply with legal obligations such as age verification, anti-money laundering, and financial record-keeping.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests do not override your privacy rights.
• Consent: For marketing communications and optional data collection, we rely on your explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

bos33 does not sell your personal data to third parties. However, we may share your information with the following categories of recipients for the purposes described in this policy:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) that facilitate deposits and withdrawals.
• Game Providers: Licensed gaming studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe that deliver casino games and slots.
• Identity Verification Services: Third-party KYC providers that verify the authenticity of identification documents.
• Cloud Hosting Providers: Secure data centers that host our platform infrastructure and databases.
• Customer Support Tools: Live chat platforms and ticketing systems used to manage customer inquiries.
• Analytics Providers: Services that help us understand usage patterns and improve our platform.

5.2 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, and courts when required by law or when we believe disclosure is necessary to:

• Comply with legal processes such as court orders, subpoenas, or government investigations.
• Protect our legal rights and enforce our Terms & Conditions.
• Prevent fraud, money laundering, or other illegal activities.
• Protect the safety and security of our players and platform.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you via email and prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

6. Data Security Measures

bos33 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmission is protected using 256-bit SSL (Secure Socket Layer) encryption, the same standard used by international banks.
• Secure Storage: Personal data is stored on secure servers with encrypted databases and strict access controls.
• Access Restrictions: Only authorized personnel with legitimate business needs can access personal data, and all access is logged and monitored.
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and address vulnerabilities.
• Employee Training: All staff members receive training on data protection principles and security best practices.
• Incident Response Plan: We maintain procedures for detecting, responding to, and recovering from security breaches.

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately if you suspect unauthorized access to your account.

7. Data Retention

bos33 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: Personal data is retained for the duration of your account's active status and for a reasonable period thereafter to handle any disputes or claims.
• Transaction Records: Financial transaction records are retained for a minimum of seven years to comply with anti-money laundering regulations and tax laws.
• Identification Documents: KYC documents are retained for five years after account closure as required by regulatory standards.
• Marketing Data: If you consent to marketing communications, we retain your contact information until you withdraw consent or your account is closed.
• Closed Accounts: After you close your account, we may retain certain data for legal, security, and fraud prevention purposes, but we will delete or anonymize unnecessary personal information.

8. Your Privacy Rights

As a bos33 user, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal information.
• Right to Erasure: You can request deletion of your personal data, subject to legal retention requirements.
• Right to Restriction: You can request that we limit the processing of your data under certain circumstances.
• Right to Data Portability: You can request a machine-readable copy of your data to transfer to another service provider.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: If processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided at the end of this policy. We will respond to your request within 30 days. Please note that certain rights may be limited by legal obligations or the need to maintain platform security and integrity.

9. Cookies and Tracking Technologies

bos33 uses cookies and similar tracking technologies to enhance your experience and analyze platform usage:

Cookie Type	Purpose	Duration
Essential Cookies	Required for login authentication, session management, and security. Cannot be disabled.	Session / 30 days
Functional Cookies	Remember your preferences such as language, currency, and favorite games.	90 days
Analytics Cookies	Track usage patterns to improve platform performance and user experience.	1 year
Marketing Cookies	Deliver personalized promotional content based on your interests (requires consent).	1 year

You can manage cookie preferences through your browser settings. However, disabling essential cookies may prevent you from accessing certain features of our platform.

10. International Data Transfers

While bos33 primarily serves Indonesian residents, your personal data may be transferred to and processed in countries outside Indonesia where our service providers and data centers are located. These countries may have different data protection laws than Indonesia. When we transfer your data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities.
• Ensuring that recipients are certified under recognized data protection frameworks.
• Obtaining your explicit consent for sensitive data transfers where required.

11. Children's Privacy

bos33 services are strictly intended for adults aged 21 and older. We do not knowingly collect personal data from individuals under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will immediately delete that data and close the associated account. Parents or guardians who believe their child has provided personal information to bos33 should contact us immediately.

12. Changes to This Privacy Policy

bos33 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated policy on our website with a new "Last Updated" date.
• Sending an email notification to your registered email address.
• Displaying a prominent notice on our platform before the changes take effect.

Your continued use of bos33 services after the effective date of the updated policy constitutes acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how bos33 handles your personal data, please contact us:

• Email: [email protected] (please include "Privacy Inquiry" in the subject line)
• Live Chat: Available 24/7 through our website
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours

Our Data Protection Officer oversees compliance with this Privacy Policy and applicable data protection laws. You may contact the DPO directly for matters related to your privacy rights, data processing concerns, or data security incidents.

Last Updated: January 2026