bos56 Privacy Policy

1. Introduction

bos56 ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at bos56.lat. We are committed to protecting the privacy and personal data of every individual who registers, browses, or interacts with our platform, including users across Jakarta, Surabaya, Bandung, Medan, Bali, and all regions of Indonesia.

This Privacy Policy ("Policy") sets out in full detail the types of personal data bos56 collects, the purposes for which that data is used, the third parties with whom it may be shared, the security measures applied to protect it, and the rights available to you as a data subject. This Policy should be read in conjunction with our Terms & Conditions.

By registering an account on bos56, making a deposit, placing a bet, or otherwise using the platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the bos56 platform.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings given below:

• "Personal Data" — any information relating to an identified or identifiable natural person. This includes names, identity card numbers, email addresses, phone numbers, IP addresses, device identifiers, and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — bos56, as the entity that determines the purposes and means by which your personal data is processed.
• "Data Processor" — any third-party service provider that processes personal data on behalf of bos56, such as payment processors, KYC verification providers, and fraud detection services.
• "User" — any individual who registers an account on, or otherwise accesses or uses, the bos56 platform.
• "KYC" — Know Your Customer; the identity and document verification process required by bos56 before processing withdrawals and at other points during the account lifecycle.
• "Cookies" — small text files placed on your device by the bos56 platform to store session information, preferences, and analytics data.
• "Sensitive Data" — a subset of personal data requiring heightened protection, including government-issued identity numbers (KTP/NIK), financial account details, and any health-related information submitted in connection with Responsible Gaming requests.

3. Data We Collect

bos56 collects personal data across several categories, depending on how you interact with the platform. The table below summarises the categories of data collected and the primary reason for collection:

4. How We Collect Your Data

bos56 collects personal data through the following channels:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated technical collection: Data collected automatically when you visit or use the bos56 platform, including IP address, device identifiers, browser fingerprint, and session behaviour, gathered via server logs, cookies, and similar tracking technologies.
• Third-party sources: Data received from identity verification and fraud-screening partners (such as KYC document verification services) to supplement and verify the information you have provided directly. bos56 may also receive limited data from payment processors when a deposit or withdrawal is initiated.
• Responsible Gaming interactions: Any limits, exclusions, or self-reported concerns you communicate through the platform's Responsible Gaming tools or via the support team are recorded as part of your account record.

5. Legal Basis for Processing

bos56 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between bos56 and you as a registered User — including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification mandates, and fraud prevention duties.
• Legitimate interests: Processing carried out for the legitimate interests of bos56, including fraud detection, platform security, abuse prevention, and internal analytics — provided those interests are not overridden by your privacy rights.
• Consent: Where bos56 relies on your consent as the legal basis for a specific processing activity (for example, sending promotional communications), you may withdraw that consent at any time by contacting support or adjusting your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. How We Use Your Personal Data

bos56 uses the personal data it collects for the following specific purposes:

• Account management: Creating, maintaining, and securing your bos56 account, including identity verification, password management, and session authentication.
• Transaction processing: Facilitating deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and any other payment methods available on the platform. All transaction amounts are denominated in Indonesian Rupiah (IDR/Rp).
• KYC and compliance: Verifying your identity and age (you must be 21 or older), screening against sanctions and politically exposed persons (PEP) lists, and fulfilling anti-money laundering (AML) obligations.
• Fraud prevention and security: Detecting and investigating suspicious activity, multiple-account registrations, bonus abuse, and unauthorised access attempts. bos56 uses automated fraud-scoring systems as well as manual review for high-risk cases.
• Customer support: Responding to your support enquiries, resolving disputes, and maintaining records of interactions for quality assurance and training purposes.
• Responsible Gaming: Monitoring account activity for signs of problem gambling, enforcing deposit limits and self-exclusion requests, and communicating with Users who have activated Responsible Gaming tools.
• Platform improvement: Analysing aggregate usage patterns, game performance, and navigation behaviour to improve the bos56 product experience. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing communications: Sending you information about promotions, bonuses, and seasonal offers — only where you have consented to receive such communications or where bos56 has a legitimate interest in informing existing customers about relevant offers. You may opt out at any time.
• Legal and regulatory compliance: Retaining and disclosing data as required by applicable law, court order, or regulatory authority direction.

7. Data Sharing & Disclosure

bos56 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be disclosed only in the following limited circumstances:

• Payment service providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the minimum data required to process your requested transaction.
• KYC and identity verification providers: Third-party document verification services receive your submitted identity documents and personal details solely for the purpose of completing the verification process on behalf of bos56.
• Fraud detection and security services: Specialised fraud-screening partners may receive technical data (IP address, device fingerprint, transaction metadata) to assess risk scores. No unnecessary personal identifiers are shared beyond what is required for the screening process.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session and game-play data necessary to deliver their gaming content within the bos56 platform. These providers operate under data processing agreements that prohibit the use of data for purposes beyond content delivery.
• Legal and regulatory authorities: bos56 may disclose personal data to competent authorities, law enforcement bodies, or regulatory agencies where required to do so by applicable law, valid legal process, or a binding regulatory direction.
• Corporate transactions: In the event of a merger, acquisition, asset sale, or restructuring involving bos56, personal data held by bos56 may be transferred to the acquiring or successor entity, subject to equivalent privacy protections being maintained.

8. Cookies & Tracking Technologies

bos56 uses cookies and similar tracking technologies to operate the platform securely, maintain your session, and improve your experience. The following cookie categories are used:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the bos56 platform from functioning correctly. For most Users, the default browser settings for the platform will provide an appropriate balance of functionality and privacy.

9. Data Retention

bos56 retains personal data only for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. The following retention guidelines apply:

• Active account data (identity, contact, financial, account, and usage data) is retained for the full duration of your active account relationship with bos56, plus a minimum of 5 years following account closure, to meet AML and financial record-keeping obligations.
• KYC documents (copies of identity cards, passports, proof of payment method) are retained for a minimum of 5 years from the date of verification, consistent with standard financial compliance requirements.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of 5 years from the date of each transaction.
• Support communications (chat transcripts, email records) are retained for 2 years from the date of the interaction, or longer if the interaction is relevant to an ongoing dispute or legal matter.
• Responsible Gaming records (self-exclusion orders, deposit limit histories) are retained for the full period of any active restriction plus 5 years thereafter, to ensure that exclusions are honoured in the event of a re-registration attempt.
• Analytics and usage data (pseudonymised) is retained for up to 13 months in identifiable form, after which it is aggregated and fully anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10. Data Security

bos56 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and bos56 servers.
• Encryption at rest for sensitive data fields including identity document data, financial account identifiers, and hashed passwords.
• Access controls restricting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging of all access events.
• Multi-factor authentication requirements for internal staff accessing production systems containing personal data.
• Regular security assessments including vulnerability scanning, penetration testing, and code review of platform components that handle personal data.
• Incident response procedures in place to detect, contain, and remediate data security incidents. In the event of a breach that is likely to result in a risk to your rights and freedoms, bos56 will notify affected Users without undue delay.

11. Your Privacy Rights

As a User of the bos56 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details in Section 15:

• Right of Access: You may request a copy of the personal data bos56 holds about you, together with information about the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. For certain data fields (such as your registered name), bos56 may require supporting KYC documentation before making corrections.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the legal basis), or where the processing is unlawful. This right is subject to bos56's legal obligations to retain certain data as set out in Section 9.
• Right to Restriction of Processing: You may request that bos56 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to legitimate-interest processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes, in which case bos56 will cease such processing immediately. You may also object to processing based on legitimate interests, subject to bos56 demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where bos56 relies on your consent as the legal basis for any processing activity, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bos56 will respond to all valid privacy rights requests within 30 days of receipt. Where a request is complex or numerous, bos56 may extend this period by up to a further 60 days, in which case you will be notified of the extension and the reasons for it within the initial 30-day window.

12. Minors & Age Restriction

bos56 is a strictly 21+ platform. We do not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the KYC process for every account registered on the platform.

If bos56 discovers or is informed that personal data belonging to a person under 21 years of age has been collected — whether through fraudulent registration or otherwise — bos56 will immediately suspend the relevant account, delete or anonymise any personal data associated with that account to the extent not required for legal retention obligations, and report the matter to relevant authorities where appropriate.

Parents and guardians who believe a minor has registered an account on bos56 should contact our support team immediately using the contact details in Section 15. We take such reports seriously and will investigate and act promptly.

13. Third-Party Links & Services

The bos56 platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers operate their own game servers and may process certain technical session data in order to deliver their content.

bos56 has entered into data processing agreements with all integrated game content providers, requiring them to process User data solely for the purpose of game delivery and to maintain appropriate security standards. bos56 does not control the privacy practices of these providers beyond the terms of those agreements.

Where the bos56 platform contains links to any external websites not operated by bos56, those sites are governed by their own privacy policies, for which bos56 accepts no responsibility. Users should review the privacy policy of any third-party website before providing personal data on that site.

14. Changes to This Privacy Policy

bos56 reserves the right to update or revise this Privacy Policy at any time to reflect changes in platform operations, applicable law, or data processing practices. When material changes are made, bos56 will notify registered Users by posting a prominent notice on the platform and, where practicable, by sending an email notification to the registered email address on file.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically so that you remain informed about how bos56 protects your personal data. Continued use of the bos56 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bos56 handles your personal data, please contact our Data Privacy team using the following details:

• Email: support@bos56.lat (plain text — not a clickable link)
• Live Chat: Available 24/7 via the live chat widget on the bos56 platform, staffed by Indonesian- and English-speaking agents.
• Subject Line: Please use "Privacy Request — [Your Username]" in the subject line of any email privacy enquiry to ensure prompt routing to the correct team.
• Response Time: bos56 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a full substantive response within 30 days as required by applicable data protection standards.
• Languages: Privacy requests may be submitted in English or Indonesian (Bahasa Indonesia).