Last Updated: January 1, 2026 | Effective Date: January 1, 2026

1. Introduction

Welcome to the bos189 Privacy Policy. This document explains how bos189 ("we," "us," "our") collects, uses, stores, shares, and protects your personal information when you use our online gaming platform and services. We are committed to protecting your privacy and handling your personal data in accordance with international data protection standards and applicable Indonesian regulations.

bos189 is an online gaming platform serving Indonesian players with sports betting, live casino games, slot machines, and lottery services including togel (Indonesia's traditional numbers lottery). We operate under international gaming licenses and process personal information as necessary to provide secure, compliant, and enjoyable entertainment services.

By creating an account, accessing our website, or using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, please do not use bos189 services. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.

2. Information We Collect

We collect several types of information from and about users of our services, including information by which you may be personally identified. The categories of personal data we collect include:

Personal Identification Information

  • Registration Data: Full legal name, date of birth, gender, email address, phone number, residential address (street, city, postal code, province), and username/password.
  • Identity Verification Documents: Government-issued identification (KTP, passport, or driver's license), selfie photographs holding identification documents, and any additional verification documents requested for KYC (Know Your Customer) compliance.
  • Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit amounts, withdrawal requests, and payment method preferences.

Technical & Usage Information

  • Device Information: IP address, device type (smartphone, tablet, computer), operating system, browser type and version, screen resolution, and device identifiers.
  • Gameplay Data: Games played, betting history, wager amounts, wins and losses, session duration, gameplay patterns, favorite games, and RTP (Return to Player) statistics for your account.
  • Website Usage Data: Pages visited, time spent on each page, clickstream data, referral sources, search queries within the site, and navigation patterns.
  • Communication Records: Customer support conversations (live chat transcripts, email correspondence, WhatsApp messages), feedback submissions, and complaint history.

Location Information

We collect approximate geographic location data based on your IP address to verify that you are accessing our services from Indonesia, as required by our service terms. We do not collect precise GPS location data unless you explicitly grant permission through your device settings.

Information from Third Parties

We may receive information about you from third-party sources, including payment processors (banks, e-wallet providers), identity verification services, fraud prevention agencies, and marketing partners who provide analytics data.

3. How We Use Your Information

bos189 uses the personal information we collect for the following specific purposes, all of which are necessary for providing and improving our services:

Account Management & Service Provision

  • Creating and managing your gaming account
  • Verifying your identity and age (21+ requirement) to comply with legal obligations
  • Processing deposits, withdrawals, and other financial transactions
  • Providing access to games and betting markets
  • Tracking your gameplay for accurate recordkeeping and dispute resolution
  • Calculating winnings, payouts, and bonus eligibility

Security & Fraud Prevention

  • Detecting and preventing fraudulent activity, bonus abuse, and money laundering
  • Monitoring for multiple accounts, collusion, and terms violations
  • Protecting against unauthorized access and security breaches
  • Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
  • Conducting internal audits and investigations when suspicious activity is detected

Customer Support & Communication

  • Responding to your inquiries, requests, and complaints
  • Providing technical support and troubleshooting assistance
  • Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts)
  • Notifying you of important service updates, terms changes, or security issues

Responsible Gaming & Player Protection

  • Monitoring gameplay patterns to identify potential problem gambling behavior
  • Implementing self-exclusion requests, deposit limits, and other responsible gaming tools
  • Providing intervention when concerning gambling patterns are detected
  • Enforcing our 21+ age restriction and preventing underage gambling

Service Improvement & Analytics

  • Analyzing user behavior to improve website functionality and user experience
  • Identifying popular games and betting markets to optimize our offering
  • Conducting internal research and statistical analysis
  • Testing new features and platform updates
  • Optimizing mobile responsiveness and performance

Marketing & Promotional Communications (With Consent)

  • Sending promotional emails about bonuses, special offers, and new games (only if you opt in)
  • Personalizing bonus offers based on your gaming preferences
  • Providing VIP program benefits and exclusive promotions for qualifying players

Note: You can opt out of marketing communications at any time by adjusting your account preferences or clicking "unsubscribe" in any promotional email.

4. Data Sharing & Third Parties

bos189 does not sell your personal information to third parties. However, we may share your data with select third-party service providers and partners who assist us in operating our platform and providing services. All third parties are contractually obligated to protect your data and use it only for the specified purposes.

Third Parties We Share Data With:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive payment information necessary to process transactions.
  • Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and other game studios receive minimal gameplay data to operate their games on our platform.
  • Identity Verification Services: Third-party KYC providers receive identification documents to verify your identity and age.
  • Fraud Prevention Partners: Security companies receive transaction and behavioral data to detect fraudulent activity and protect both players and the platform.
  • Customer Support Tools: Live chat and helpdesk software providers receive communication data to facilitate customer support.
  • Analytics Providers: We use analytics services to understand user behavior and improve our platform. These providers receive anonymized or aggregated data.

Legal Disclosure

We may disclose your personal information if required by law, court order, or government regulation, including:

  • Responding to lawful requests from law enforcement agencies
  • Complying with legal obligations under Indonesian law or international gaming regulations
  • Protecting bos189's legal rights in disputes or litigation
  • Preventing fraud, illegal activity, or violations of our Terms & Conditions

Business Transfers

In the event that bos189 is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity. You will be notified of any such change and given the opportunity to delete your account if desired.

5. Data Security Measures

Protecting your personal information is our highest priority. bos189 implements comprehensive security measures to prevent unauthorized access, disclosure, alteration, or destruction of your data:

Technical Security Measures

  • SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption.
  • Secure Data Storage: Personal information is stored in encrypted databases with restricted access controls.
  • Firewall Protection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems.
  • Two-Factor Authentication (2FA): Available for all users to add an extra layer of account security.
  • Regular Security Audits: Independent third-party security firms conduct regular penetration testing and vulnerability assessments.

Administrative Security Measures

  • Access Controls: Employee access to personal data is limited on a strict need-to-know basis.
  • Staff Training: All employees undergo data protection and privacy training.
  • Confidentiality Agreements: All staff, contractors, and partners sign confidentiality agreements.
  • Incident Response Plan: We maintain a comprehensive data breach response plan and will notify affected users within 72 hours of discovering any breach.

User Responsibilities

While we implement robust security measures, you also play a role in protecting your information. We recommend:

  • Using a strong, unique password for your bos189 account
  • Enabling two-factor authentication (2FA)
  • Never sharing your login credentials with anyone
  • Logging out when using shared or public devices
  • Keeping your email account and phone number secure
  • Contacting us immediately if you suspect unauthorized account access

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, bos189 will notify you via email within 72 hours of discovering the breach. The notification will include details about what data was compromised, steps we are taking to address the breach, and recommendations for protecting yourself from potential harm.

6. Data Retention Policy

bos189 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and business requirements.

Active Account Data

While your account is active, we retain all personal information, gameplay history, transaction records, and communication logs to provide continuous service and comply with gaming regulations.

Closed Account Data

After you voluntarily close your account or we terminate your account, we retain the following data for specified periods:

  • Financial Records (7 years): Transaction history, deposits, withdrawals, and payment information are retained for 7 years to comply with Indonesian financial record-keeping requirements and anti-money laundering regulations.
  • Identity Verification Documents (7 years): KYC documents including identification photos and verification records are retained for 7 years for regulatory compliance.
  • Gameplay History (5 years): Betting records, game outcomes, and winnings/losses are retained for 5 years for dispute resolution and auditing purposes.
  • Communication Records (3 years): Customer support conversations and correspondence are retained for 3 years for quality assurance and legal compliance.
  • Marketing Preferences (Until Unsubscribed): If you opted into marketing communications, we retain your consent status and preferences until you unsubscribe.

Data Deletion

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer identify you. You may request early deletion by contacting [email protected], but we may be legally required to retain certain data despite your request.

7. Cookies & Tracking Technologies

bos189 uses cookies and similar tracking technologies to enhance your experience, analyze site usage, and deliver personalized content.

What Are Cookies?

Cookies are small text files stored on your device by your web browser. They allow websites to remember your preferences, recognize returning users, and collect usage data.

Types of Cookies We Use

  • Essential Cookies: Required for the website to function properly. These cookies enable account login, maintain your session, and ensure secure transactions. You cannot opt out of essential cookies.
  • Functional Cookies: Remember your preferences such as language selection, timezone, and display settings to improve your user experience.
  • Analytics Cookies: Collect anonymized data about how users interact with the website, which pages are most popular, and where users experience technical issues. This helps us improve our platform.
  • Marketing Cookies (Optional): Track your activity across websites to deliver personalized advertisements and measure marketing campaign effectiveness. You can opt out of marketing cookies through your browser settings.

Managing Cookies

Most web browsers accept cookies automatically, but you can modify your browser settings to decline cookies if you prefer. However, disabling essential cookies may prevent you from using certain features of the bos189 website. To manage cookies, access your browser's settings menu and look for privacy or cookie preferences.

Do Not Track (DNT)

Some browsers include a "Do Not Track" (DNT) feature that signals websites not to track you. Currently, there is no industry standard for responding to DNT signals, and bos189 does not respond to DNT browser settings. You can control tracking through cookie settings as described above.

8. Your Privacy Rights

As a user of bos189 services, you have specific rights regarding your personal information. We are committed to facilitating the exercise of these rights in accordance with applicable data protection laws.

Right to Access

You have the right to request access to the personal information we hold about you. You can view most of your data by logging into your account dashboard. For a comprehensive data report, contact [email protected], and we will provide it within 30 days.

Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings. For information that cannot be self-edited (such as date of birth after verification), contact customer support with supporting documentation.

Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data under certain circumstances. However, we may be legally required to retain some information for specified periods to comply with financial recordkeeping, gaming regulations, and anti-money laundering laws. After the legal retention period expires, data will be permanently deleted.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations, such as if you contest the accuracy of the data or object to processing. During the restriction period, we will store your data but not actively process it, except with your consent or for legal claims.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another service provider. Contact [email protected] to request a data export.

Right to Object

You can object to processing of your personal data for marketing purposes at any time. Simply adjust your communication preferences in your account settings or click "unsubscribe" in any promotional email. You can also object to processing based on legitimate interests by contacting us with specific reasons.

Right to Withdraw Consent

Where we process your data based on consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

Exercising Your Rights

To exercise any of these rights, contact our Data Protection team at [email protected] or through the customer support live chat. We will respond to your request within 30 days and may ask for identity verification to protect your information.

9. Children's Privacy Protection

bos189 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect, maintain, or use personal information from anyone under the age of 21. Our registration process includes date of birth verification, and we request government-issued identification to confirm legal age before processing withdrawals.

If we discover that we have inadvertently collected personal information from someone under 21 years old, we will immediately delete that information from our systems and permanently close the associated account. Any deposits made by underage users will be returned to the payment source, but winnings will be forfeited.

Parents and guardians who believe their child has provided personal information to bos189 should contact us immediately at [email protected] so we can take appropriate action. We encourage parents to monitor their children's internet activity and use parental control software to prevent access to gambling websites.

10. International Data Transfers

bos189 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. These countries may have data protection laws that differ from Indonesian regulations.

Safeguards for International Transfers

When we transfer your data internationally, we implement appropriate safeguards to ensure your information remains protected:

  • Standard contractual clauses approved by data protection authorities
  • Data processing agreements with all third-party service providers
  • Encryption of data during transit and storage
  • Regular audits of international partners' security practices

By using bos189 services, you consent to the transfer of your information to countries outside Indonesia as necessary to provide our services. If you have concerns about international data transfers, contact [email protected] for more information about specific safeguards.

11. Policy Updates & Changes

bos189 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you through prominent means such as:

  • Email notification to your registered email address
  • Prominent notice on the website homepage
  • Pop-up notification upon your next login

The "Last Updated" date at the top of this policy indicates when changes were last made. Minor updates that do not materially affect your rights (such as formatting changes or clarifications) may be made without notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of bos189 services after a Privacy Policy update constitutes acceptance of the revised terms. If you do not agree with the updated policy, you may close your account by contacting customer support.

12. Contact Information for Privacy Matters

If you have questions, concerns, or requests regarding this Privacy Policy or how bos189 handles your personal information, please contact our Data Protection team:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 through the website (select "Privacy Inquiry" from the topic dropdown)
  • Response Time: We aim to respond to all privacy inquiries within 48 hours

For data access requests, deletion requests, or other privacy rights exercises, please include "Privacy Request" in the email subject line and provide sufficient information for us to verify your identity. We may ask for additional documentation to confirm you are the account holder before processing sensitive requests.

Privacy Commitment Summary

Your Data, Your Rights: bos189 respects your privacy rights and makes it easy to access, correct, or delete your personal information.

Security First: Bank-grade encryption, secure servers, and regular audits protect your data from unauthorized access.

No Data Selling: We never sell your personal information to third parties for marketing purposes.

Transparency: We clearly explain what data we collect, why we collect it, and how it's used.

21+ Only: Strict age verification protects minors and complies with legal requirements.

Your Control: Opt out of marketing anytime, set communication preferences, and request data deletion within legal limitations.

Bank-Grade Encryption

256-bit SSL/TLS encryption protects all data transmission between your device and our servers, ensuring your information stays confidential.

No Data Selling

We never sell your personal information to third parties. Your data is used exclusively to provide and improve bos189 services.

Full Transparency

Clear explanations of what data we collect, why we need it, how long we keep it, and who we share it with—no hidden practices.

Your Rights Respected

Easy access to your data, simple correction processes, and straightforward deletion requests—your privacy rights are honored.

Regular Security Audits

Independent third-party security firms conduct regular penetration testing and vulnerability assessments to ensure ongoing protection.

Breach Notification

If a data breach occurs, we notify affected users within 72 hours with details and protective recommendations.

Questions About Your Privacy?

Our data protection team is here to answer any privacy concerns or help you exercise your data rights