Privacy Policy

1. Introduction

Welcome to bos101's Privacy Policy. This document explains how bos101 ("we", "us", "our", "Platform") collects, uses, stores, protects, and discloses personal information from users ("you", "your", "User", "Player") of our online gaming services located at https://bos101.cam (the "Website" or "Services").

At bos101, we take your privacy seriously. As Indonesia's premier English-language online gambling platform serving over 2 million members across Jakarta, Surabaya, Medan, Bandung, Bali, and beyond, we are committed to protecting your personal data and maintaining transparent data practices. This Privacy Policy applies to all users of bos101 services, including sports betting, live casino, slots, togel (Indonesia's traditional numbers lottery), and sabung ayam (cockfighting) offerings.

By creating an account, accessing the Website, or using any of our Services, you acknowledge that you have read, understood, and agree to the data collection and processing practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you must immediately cease using our Services and close your account.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which are incorporated herein by reference. We reserve the right to modify this Privacy Policy at any time, and any changes will be effective immediately upon posting to the Website. Continued use of the Services following such changes constitutes your acceptance of the revised Privacy Policy.

2. Information We Collect

bos101 collects various categories of personal information necessary to provide, maintain, and improve our gaming services, ensure regulatory compliance, prevent fraud, and deliver personalized user experiences. The types of information we collect include:

2.1 Information You Provide Directly

When you register an account on bos101, you voluntarily provide the following information:

• Account Registration Data: Full legal name as it appears on your government-issued ID, date of birth, gender, residential address (street address, city, province, postal code), valid email address, and mobile phone number.
• Identity Verification Documents: Government-issued photo identification (Indonesian KTP, passport, or driver's license), proof of address documents (utility bills, bank statements, or government correspondence dated within the last 3 months), and proof of payment method ownership (bank account statements, screenshots of e-wallet account details).
• Financial Information: Bank account details for deposits and withdrawals (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja usernames or phone numbers), transaction history, deposit amounts, withdrawal amounts, and payment method preferences.
• Communication Data: Any information you provide when contacting customer support via live chat, email, or other communication channels, including support ticket content, chat transcripts, email correspondence, and feedback submissions.
• Preferences and Settings: Language preferences, notification settings, responsible gaming limits (deposit limits, loss limits, session time limits), self-exclusion selections, and other account customization choices.

2.2 Information We Collect Automatically

When you access and use bos101 Services, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version (Chrome, Firefox, Safari, Edge), screen resolution, device identifiers (IP address, device ID), and mobile carrier information.
• Usage Data: Pages visited, features accessed, games played, bet amounts and types, win/loss records, session duration, navigation paths through the Website, referral sources, search queries within the site, and click patterns.
• Location Data: IP address geolocation (country, region, city), timezone information, and language/locale settings. We use this data to ensure compliance with geographic restrictions and to deliver localized content.
• Cookies and Similar Technologies: We use cookies, web beacons, local storage, and similar tracking technologies to recognize returning users, maintain login sessions, store preferences, analyze site traffic patterns, and deliver targeted content. For detailed information about our cookie practices, see Section 8 below.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Identity Verification Services: Data from third-party KYC (Know Your Customer) and identity verification providers used to confirm your identity, age, and address.
• Payment Processors: Transaction confirmation data from BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment service providers.
• Fraud Prevention Services: Risk assessment data, fraud detection signals, and blacklist checks from specialized security and anti-fraud platforms.
• Marketing Partners: Referral source information and campaign performance data from authorized marketing affiliates (only when you have consented to such data sharing with the third party).

3. How We Use Your Information

bos101 processes your personal information for the following legitimate business purposes:

3.1 Service Delivery and Account Management

• Creating and maintaining your gaming account
• Processing deposits and withdrawals to BCA, BRI, BNI, Mandiri, and e-wallet accounts
• Facilitating gameplay across sports betting, live casino, slots, and other gaming products
• Managing your VIP tier status and loyalty rewards
• Applying bonuses, promotions, and tournament prizes to your account
• Providing customer support and responding to your inquiries
• Communicating important account notifications, security alerts, and service updates

3.2 Regulatory Compliance and Security

• Verifying your identity and age to comply with legal requirements (21+ age restriction)
• Conducting KYC checks and ongoing due diligence as required by anti-money laundering regulations
• Preventing, detecting, and investigating fraud, cheating, collusion, and other prohibited activities
• Monitoring for problem gambling behaviors and implementing responsible gaming protections
• Complying with legal obligations, regulatory requests, and law enforcement inquiries
• Enforcing our Terms & Conditions and other policies
• Protecting the security and integrity of the Platform and Games

3.3 Service Improvement and Personalization

• Analyzing user behavior and preferences to improve Website functionality and user experience
• Personalizing content, game recommendations, and promotional offers based on your gaming history
• Conducting market research and gathering feedback to develop new features
• Testing new games, features, and services with selected user groups
• Generating aggregate statistics and analytics for business intelligence purposes

3.4 Marketing and Communications

• Sending promotional emails about bonuses, tournaments, and new games (only if you have opted in)
• Delivering targeted marketing content based on your gaming preferences and activity
• Notifying you about VIP rewards, cashback offers, and loyalty program benefits
• Providing updates about platform improvements and new features

4. Legal Basis for Processing (Indonesian Context)

bos101 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms & Conditions, including account creation, payment processing, game provision, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including age verification, KYC requirements, anti-money laundering procedures, and regulatory reporting obligations.
• Legitimate Interests: Processing serves our legitimate business interests in fraud prevention, security maintenance, service improvement, and direct marketing (where permitted and balanced against your privacy rights).
• Consent: For certain non-essential processing activities such as optional marketing communications and non-critical cookies, we rely on your explicit consent, which you may withdraw at any time.

5. How We Share Your Information

bos101 does not sell your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

5.1 Service Providers and Business Partners

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and other financial institutions receive transaction data necessary to process your deposits and withdrawals.
• Game Providers: Premium casino and slot game studios (Pragmatic Play, Evolution Gaming, Pocket Games Soft, and others) receive limited gameplay data to deliver their games through our platform.
• Identity Verification Services: Third-party KYC providers receive identification documents and personal information necessary to verify your identity and age.
• Cloud Hosting Providers: Technology infrastructure providers host our servers, databases, and applications, with strict data protection agreements in place.
• Customer Support Tools: Live chat software providers and helpdesk platforms process support communications to facilitate customer service.
• Analytics and Marketing Services: Web analytics tools, email service providers, and advertising platforms receive usage data to help us improve services and deliver relevant marketing (only where you have consented).

5.2 Legal and Regulatory Disclosures

We may disclose your information to government authorities, regulators, law enforcement agencies, or other third parties when required by law or when we believe disclosure is necessary to:

• Comply with valid legal processes such as court orders, subpoenas, or regulatory requests
• Enforce our Terms & Conditions and other agreements
• Protect the rights, property, or safety of bos101, our users, or the public
• Investigate and prevent fraud, security breaches, or illegal activities
• Respond to claims that content violates the rights of third parties

5.3 Business Transfers

In the event that bos101 undergoes a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email and/or prominent notice on the Website before your information is transferred and becomes subject to a different Privacy Policy.

6. Data Security Measures

bos101 employs industry-leading security technologies and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology with 256-bit encryption keys, the same standard used by international banks.
• Secure Data Storage: Personal information is stored on secure servers with restricted physical and logical access controls. Sensitive data such as passwords are hashed using industry-standard algorithms.
• Access Controls: Only authorized bos101 personnel with legitimate business needs can access your personal information, and all access is logged and monitored.
• Two-Factor Authentication: Account login is protected by optional two-factor authentication (2FA) to prevent unauthorized access even if credentials are compromised.
• Regular Security Audits: We conduct periodic security assessments, vulnerability testing, and penetration testing to identify and address potential weaknesses.
• Employee Training: All staff members receive mandatory data protection and security awareness training.
• Incident Response Plan: We maintain comprehensive procedures for detecting, responding to, and recovering from data security incidents.

Despite these measures, no internet transmission or electronic storage method is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security. You also play a role in protecting your data by maintaining the confidentiality of your account credentials and notifying us immediately of any suspected unauthorized access.

7. Data Retention

bos101 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, accounting, and reporting obligations. Specific retention periods vary by data type:

Data Category	Retention Period	Reason
Account Information	Duration of account plus 7 years after closure	Regulatory compliance, dispute resolution, fraud prevention
Transaction Records	7 years from transaction date	Financial auditing, tax compliance, anti-money laundering requirements
Identity Verification Documents	7 years after last use	KYC compliance, regulatory obligations
Gameplay History	5 years from game date	Dispute resolution, game integrity monitoring, fraud investigation
Marketing Communications Consent	Until withdrawal of consent or account closure	Compliance with opt-out requests
Customer Support Records	3 years from last interaction	Service quality improvement, dispute resolution
Website Usage Logs	12 months	Security monitoring, analytics, service improvement

After the applicable retention period expires, we securely delete or anonymize your personal information. Anonymized data that cannot be linked back to you may be retained indefinitely for statistical analysis and research purposes.

8. Cookies and Tracking Technologies

bos101 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your user experience, analyze site usage, and deliver personalized content. A cookie is a small text file stored on your device that allows the Website to recognize you on subsequent visits.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Website to function properly, including maintaining login sessions, processing transactions, and enabling core features. These cannot be disabled without affecting site functionality.
• Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with the Website and identify areas for improvement.
• Functionality Cookies: Remember your preferences (language, region, display settings) to provide a more personalized experience.
• Advertising Cookies: Track your visits across websites to deliver relevant advertisements and measure marketing campaign effectiveness (only with your consent).

8.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling cookies may impact your ability to use certain features of the Website. You can manage cookie preferences through your browser settings:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions > Cookies and site data

9. Your Data Protection Rights

As a bos101 user, you have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you. Log in to your account to view most of your data, or contact support for a comprehensive data export.
• Right to Correction: You can update or correct inaccurate personal information through your account settings or by contacting customer support.
• Right to Deletion: You can request deletion of your personal information, subject to legal retention obligations. Account closure does not automatically delete all data; you must specifically request deletion.
• Right to Object: You can object to processing of your personal information for direct marketing purposes at any time by opting out of marketing communications.
• Right to Data Portability: You can request your personal information in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw consent at any time, though this does not affect the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you can file a complaint with relevant data protection authorities in your jurisdiction.

10. International Data Transfers

bos101 primarily serves Indonesian players, but some of our service providers and technology infrastructure may be located outside Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions confirming the destination country provides adequate data protection
• Binding corporate rules for transfers within our corporate group
• Explicit consent for specific transfers where required

11. Children's Privacy

bos101 services are strictly restricted to individuals 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If you are under 21, you must not register an account or use our Services. If we become aware that we have collected information from someone under 21, we will immediately delete the account and all associated data.

Parents and guardians should monitor their children's internet activity and prevent access to online gambling websites. If you believe a minor has registered an account on bos101, please contact us immediately at [email protected] so we can take appropriate action.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the Website homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Services after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

13. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Email: [email protected]
Subject Line: Privacy Inquiry
Response Time: We aim to respond to all privacy-related inquiries within 48 hours

For data access requests, correction requests, deletion requests, or other data subject rights exercises, please include "Data Rights Request" in the subject line and provide sufficient information to verify your identity. We may request additional documentation to confirm your identity before processing your request.