Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below:

bos010 collects personal data through several channels: directly from you during registration and platform use, automatically through your device and browser, and from trusted third-party sources where necessary. The categories of data we collect are as follows:

2.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including city and province (e.g., Jakarta, Surabaya, Bandung, Bali).
• Email address and phone number for account communications and security alerts.
• Username and encrypted password hash.

2.2 Identity Verification (KYC) Data

• Scanned or photographed copy of a government-issued photo ID — KTP (Indonesian national ID card), passport, or SIM (driving licence).
• Proof of address document (utility bill, bank statement dated within 90 days).
• Selfie or live photo taken for facial verification purposes where required.
• Proof of ownership of the payment method used (e.g., screenshot of BCA, BRI, BNI, or Mandiri account in your name).

2.3 Financial & Transaction Data

• Deposit and withdrawal history, including amounts in IDR, timestamps, and payment method identifiers.
• Bank account details (account holder name, bank name — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata — and account number) used for withdrawals.
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) linked to your account for transactions.
• Betting and gaming activity records, including stakes placed, games accessed, win/loss outcomes, and bonus usage.

2.4 Technical & Device Data

• IP address at login and during active sessions.
• Browser type, version, and language settings.
• Device type (desktop, smartphone, tablet), operating system, and screen resolution.
• Session duration, pages visited, click-stream data, and referral source.
• Cookie identifiers and local storage values — see Section 6 for full details.

2.5 Communications Data

• Records of live chat conversations with our support team, including chat transcripts and timestamps.
• Email correspondence submitted to [email protected].
• Responses to surveys, feedback forms, or promotional opt-in confirmations.

bos010 uses personal data for clearly defined purposes only. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The table below maps each data category to its primary use:

bos010 processes personal data only where a valid legal basis exists. We rely on the following legal grounds:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you — including providing access to the platform, processing financial transactions, and delivering customer support services.
• Legal Obligation: bos010 is required to process certain data to comply with applicable laws, including anti-money-laundering regulations, KYC requirements, and obligations under our international gaming licence.
• Legitimate Interest: bos010 may process data where we have a legitimate business interest that does not override your fundamental rights — for example, fraud detection, platform security, responsible gaming monitoring, and aggregate analytics.
• Consent: For specific processing activities — such as sending promotional communications or using non-essential analytics cookies — bos010 will request your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bos010 does not sell, rent, or trade your personal data. We share data only with the categories of third party listed below, and only to the extent necessary for the stated purpose:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors receive only the transaction data required to execute the transfer and are contractually bound to handle it securely.
• Identity Verification Providers: To carry out KYC checks as required by our licensing obligations. These providers verify the authenticity of submitted documents and return a verification result; they do not retain your documents beyond their stated retention period.
• Fraud Prevention & Security Services: To detect and prevent fraudulent activity, money laundering, and account takeover attempts. These services receive anonymised or pseudonymised technical data and transaction signals.
• Game Studio Providers: When you access games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and other studios, limited session data (player identifier, stake amounts, game results) is shared with the relevant studio to operate the game and settle outcomes.
• Regulatory & Law Enforcement Authorities: bos010 will disclose personal data to competent authorities where required to do so by applicable law, court order, or valid regulatory demand. We will notify you of such disclosure where legally permitted.
• Professional Advisors: Legal counsel, auditors, and other professional advisors may access personal data as necessary to provide their services to bos010, under strict confidentiality obligations.

bos010 uses cookies and similar technologies to operate the platform, maintain your logged-in session, remember your preferences, and gather anonymised analytics data to improve platform performance. The cookies we use fall into the following categories:

bos010 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. Your browsing activity on the bos010 platform is not shared with any advertising network.

You may manage cookie preferences through your browser settings at any time. Disabling essential or security cookies will prevent you from accessing the platform. If you require assistance managing your cookie settings, contact our support team.

bos010 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your membership with bos010, plus a minimum of five (5) years after account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, as required by our international gaming licence conditions.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for AML and regulatory audit purposes.
• Customer Support Communications: Retained for up to three (3) years from the date of last interaction, to enable us to resolve any subsequent disputes or complaints.
• Analytics Data: Anonymised analytics data is retained for up to ninety (90) days, after which it is aggregated or deleted. No personally identifiable information is retained within the analytics dataset beyond this period.
• Dormant Account Data: If your account has had no activity for 365 consecutive days, it may be classified as dormant. Dormant account data is retained in line with the standard retention periods above but is flagged for review.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically possible immediately (for example, data held in encrypted backup archives), the data is isolated from active processing until deletion can be completed.

bos010 respects your rights over your personal data. Depending on your location and applicable law, you may have some or all of the following rights:

• Right of Access: You may request a copy of the personal data bos010 holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe.
• Right to Rectification: If any personal data held by bos010 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. Minor corrections (e.g., contact number updates) can be made directly via your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis exists), or where the data has been unlawfully processed. This right is subject to legal retention obligations — data that must be kept for AML or regulatory compliance cannot be erased until the mandatory retention period expires.
• Right to Restrict Processing: You may request that bos010 restrict the processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contract performance and carried out by automated means, you may request a copy of your data in a machine-readable format for transfer to another service.
• Right to Object: You may object at any time to processing based on legitimate interest, including profiling for personalised promotions. bos010 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

bos010 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures designed to protect against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and bos010's servers is encrypted using industry-standard SSL/TLS protocols. The connection is always secured — look for the padlock icon in your browser address bar.
• Encrypted Data Storage: Sensitive personal data — including passwords (stored as salted hashes), KYC documents, and financial records — is stored in encrypted form on access-controlled servers.
• Access Controls: Internal access to personal data is strictly limited by role. Support agents, compliance officers, and technical staff are granted the minimum access necessary for their function, with all access logged and audited.
• Two-Factor Authentication (2FA): bos010 supports optional 2FA for Member accounts, providing an additional layer of protection beyond your password. We strongly recommend enabling 2FA via your account security settings.
• Intrusion Detection & Monitoring: bos010's infrastructure is monitored around the clock for suspicious access patterns, unusual login attempts, and potential security threats. Automated alerts trigger immediate investigation by our security team.
• Penetration Testing: bos010 engages independent security professionals to conduct regular penetration tests of the platform. Identified vulnerabilities are remediated in accordance with a risk-prioritised patching schedule.

As an internationally operated platform serving Indonesian members, bos010 may transfer personal data to servers or service providers located outside Indonesia. Such transfers are necessary to deliver the platform's services — including payment processing, identity verification, and game studio integrations.

Whenever personal data is transferred internationally, bos010 ensures that appropriate safeguards are in place to maintain a level of protection equivalent to that afforded within Indonesia. These safeguards include:

• Contractual Protections: All third-party processors and service providers who receive personal data are bound by data processing agreements that impose obligations consistent with this Privacy Policy and applicable data protection standards.
• Adequacy Assessment: Before engaging a new international processor, bos010 conducts a due-diligence assessment of the processor's security practices, certifications, and data handling procedures.
• Encryption in Transit: All data transferred internationally is encrypted in transit using TLS protocols, ensuring that data cannot be intercepted or read by unauthorised parties during transmission.
• Minimisation: Only the minimum personal data required for the specific processing purpose is transferred. We do not transmit complete Member profiles to third parties where a subset of data is sufficient.

bos010 is strictly an adults-only platform. You must be at least 21 years of age to register an account or access any paid service on bos010. This age restriction applies to all users, including those accessing the platform from Jakarta, Surabaya, Bandung, Bali, Yogyakarta, Medan, and all other locations across Indonesia.

bos010 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed as part of the KYC process, and any account found to belong to a person under 21 will be immediately suspended and all funds returned in accordance with our Terms & Conditions.

bos010 also supports responsible gaming tools — including deposit limits, session time-outs, and self-exclusion options — that can help prevent underage or problem gambling. For a full overview of these tools, please visit our Responsible Gaming page.

bos010 reserves the right to update or amend this Privacy Policy at any time. Changes may be necessary to reflect updates to our platform, changes in applicable law, new third-party integrations, or evolving best practices in data protection.

When material changes are made to this Policy — that is, changes that meaningfully affect how your personal data is collected, used, or shared — bos010 will notify registered Members by:

• Displaying a prominent notice on the bos010 platform at your next login session.
• Sending a notification to the email address registered on your bos010 account.
• Updating the "Last Updated" date at the top of this page, which currently reads January 2026.

Your continued use of the bos010 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you should cease using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bos010 holds about you, please reach out through any of the following channels:

• Email: [email protected] — responses within 12–24 hours (WIB)
• Live Chat: Available 24/7 directly through the bos010 platform. Our Indonesian-speaking support agents are available around the clock to assist you.

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. This will allow our team to locate your records and respond as efficiently as possible.