Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by bos178 ("we," "us," "our") through our website located at https://bos178.cam (the "Platform") and all related services. By accessing or using the Platform, creating an account, or engaging with our services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

bos178 operates as an internationally licensed online gaming platform serving users in Indonesia and other permitted jurisdictions. We are committed to compliance with applicable data protection laws and regulations, including international standards for data privacy and security. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming guidelines.

If you do not agree with the terms of this Privacy Policy, you should not use the Platform or provide us with any personal information. We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting to the Platform, and your continued use following such changes constitutes acceptance of the updated Privacy Policy.

2. Information We Collect

bos178 collects various types of information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and deliver a personalized gaming experience. The categories of information we collect include:

2.1 Account Registration Information

When you create an account on the bos178 Platform, we collect the following personal information:

• Full Legal Name: Your complete name as it appears on official identification documents
• Date of Birth: To verify you meet the minimum age requirement of 21 years
• Email Address: For account communications, verification, and support
• Mobile Phone Number: For account security, two-factor authentication, and customer support via WhatsApp
• Residential Address: Including street address, city, postal code, and country
• Username and Password: Your chosen credentials for account access
• Preferred Currency: Indonesian Rupiah (IDR) for all transactions

2.2 Identity Verification Documents (KYC)

To comply with international anti-money laundering (AML) regulations, responsible gaming standards, and age verification requirements, we collect identity verification documents through our Know Your Customer (KYC) process:

• Government-Issued Photo ID: Indonesian KTP (Kartu Tanda Penduduk), passport, or driver's license showing your photo, full name, date of birth, and identification number
• Proof of Address: Recent utility bill, bank statement, or government correspondence dated within the last three months showing your current residential address
• Selfie Verification Photo: A photograph of you holding your identification document next to your face for identity confirmation
• Additional Documents: In some cases, we may request source-of-funds documentation, bank account verification, or additional identity proofs to comply with regulatory requirements

2.3 Financial and Transaction Information

When you deposit funds, request withdrawals, or engage in transactions on the Platform, we collect:

• Banking Information: Indonesian bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, etc.) for deposit and withdrawal processing
• E-Wallet Details: Account information for OVO, DANA, GoPay, ShopeePay, LinkAja, and other e-wallet services
• Transaction History: Records of all deposits, withdrawals, bonuses claimed, wagering activity, and account balance changes
• Payment Method Verification: Documentation proving ownership of payment methods to prevent fraud

Note: bos178 does not directly store credit card numbers or sensitive payment card information. Payment processing is handled by certified third-party payment processors compliant with PCI DSS (Payment Card Industry Data Security Standards).

2.4 Gaming Activity and Behavior Data

To provide gaming services, detect fraudulent activity, and improve user experience, we collect information about your activity on the Platform:

• Betting and Gaming History: Details of all bets placed, games played, win/loss records, and game outcomes
• Bonus and Promotion Activity: Bonuses claimed, wagering progress, and fulfillment of promotional terms
• Account Preferences: Game favorites, betting preferences, notification settings, and user interface customizations
• Session Information: Login times, session duration, frequency of visits, and active/inactive periods
• Responsible Gaming Data: Deposit limits set, self-exclusion requests, time-out periods, and reality check settings

2.5 Technical and Device Information

When you access the bos178 Platform, we automatically collect certain technical information:

• IP Address: Your internet protocol address for security, fraud prevention, and geographic location verification
• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies for authentication, preference storage, and analytics
• Log Data: Server logs recording page requests, error messages, system performance, and technical diagnostics
• Geolocation Data: Approximate geographic location based on IP address to ensure compliance with territorial restrictions

2.6 Communications and Customer Support

When you contact our customer support team or communicate with us, we collect:

• Support Inquiries: Content of live chat conversations, WhatsApp messages, and email correspondence
• Feedback and Surveys: Your responses to satisfaction surveys, product feedback, and feature requests
• Complaint Records: Details of any complaints, disputes, or issues reported, along with resolution outcomes

3. How We Use Your Information

bos178 uses the personal information we collect for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Processing deposits, withdrawals, and financial transactions
• Providing access to sports betting, casino games, slots, and other gaming products
• Maintaining game history, bet tracking, and account balance records
• Delivering customer support and responding to inquiries

3.2 Legal Compliance and Security

• Verifying your identity and age to ensure compliance with 21+ age restrictions
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Detecting and preventing fraud, money laundering, collusion, and other illegal activities
• Enforcing our Terms & Conditions and identifying violations
• Responding to legal requests, court orders, or regulatory inquiries
• Maintaining audit trails and transaction records as required by licensing authorities

3.3 Responsible Gaming and Player Protection

• Implementing and monitoring deposit limits, time-out periods, and self-exclusion requests
• Identifying patterns of problem gambling behavior and providing appropriate resources
• Delivering responsible gaming communications and reality check reminders
• Enforcing age restrictions and preventing underage gambling

3.4 Marketing and Promotional Communications

• Sending promotional offers, bonus notifications, and special event announcements via email, SMS, or platform notifications (with your consent where required)
• Personalizing marketing content based on your gaming preferences and activity
• Informing you about new games, features, and platform updates
• Administering loyalty programs, VIP tiers, and reward schemes

You may opt out of marketing communications at any time by adjusting your account settings or contacting customer support. Note that you will continue to receive essential transactional and account-related communications regardless of marketing preferences.

3.5 Platform Improvement and Analytics

• Analyzing user behavior and preferences to improve platform functionality
• Conducting research and development for new games and features
• Testing, troubleshooting, and optimizing platform performance
• Generating aggregated and anonymized statistics for business intelligence (no personally identifiable information is shared in aggregate reports)

4. How We Protect Your Information

bos178 implements industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

4.1 Technical Security Measures

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) with 256-bit encryption—the same standard used by major financial institutions
• Secure Data Storage: Personal information is stored on encrypted servers in secure data centers with restricted physical access, fire suppression systems, and 24/7 monitoring
• Database Encryption: Sensitive data fields, including identification documents and financial information, are encrypted at rest using AES-256 encryption
• Firewall Protection: Multi-layered firewalls and intrusion detection systems prevent unauthorized network access
• Regular Security Audits: Third-party cybersecurity firms conduct periodic penetration testing and vulnerability assessments

4.2 Access Controls and Authentication

• Role-Based Access: Only authorized personnel with legitimate business needs can access personal data, and all access is logged and monitored
• Two-Factor Authentication (2FA): Available for user accounts to add an additional layer of login security
• Strong Password Requirements: Passwords must meet minimum complexity standards and are stored using irreversible cryptographic hashing (bcrypt)
• Session Management: Automatic logout after periods of inactivity and secure session token handling

4.3 Employee Training and Policies

• All employees with access to personal data undergo mandatory privacy and security training
• Staff are bound by confidentiality agreements and strict data handling policies
• Background checks are conducted for employees handling sensitive information

4.4 Limitations

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security against all potential threats, including sophisticated cyberattacks, zero-day vulnerabilities, or unauthorized access resulting from user negligence (such as sharing passwords or falling victim to phishing). You are responsible for maintaining the confidentiality of your account credentials and for all activity occurring under your account.

5. How We Share Your Information

bos178 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: To facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Game Providers: Pragmatic Play, Microgaming, NetEnt, Evolution Gaming, and other software developers who power our casino games and live dealer tables
• Identity Verification Services: Third-party KYC and AML screening providers for identity verification and fraud prevention
• Customer Support Platforms: Live chat, email, and ticketing systems that facilitate customer service operations
• Cloud Hosting Providers: Secure server and database hosting services
• Analytics and Marketing Tools: Platforms for website analytics, email marketing, and user behavior analysis

All service providers are contractually bound to protect your information, use it only for the purposes specified by bos178, and comply with applicable data protection laws. We conduct due diligence to ensure service providers maintain adequate security standards.

5.2 Legal and Regulatory Requirements

We may disclose your personal information when required or permitted by law, including:

• In response to court orders, subpoenas, or other legal processes
• To comply with regulatory requirements or investigations by licensing authorities
• To report suspected illegal activity to law enforcement agencies
• To cooperate with anti-money laundering investigations or financial crime prevention efforts
• To enforce our Terms & Conditions or protect our legal rights

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will provide notice before your information becomes subject to a different privacy policy and will ensure the acquiring party commits to protecting your data with standards no less stringent than those described in this Privacy Policy.

5.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as participation in third-party promotions or integration with external services you authorize.

6. International Data Transfers

bos178 operates internationally and may transfer personal information to servers located outside Indonesia, including jurisdictions where data protection laws may differ from those in your country of residence. When we transfer data internationally, we implement appropriate safeguards to ensure your information receives an adequate level of protection, including:

• Standard contractual clauses approved by international data protection authorities
• Ensuring service providers in destination countries maintain equivalent security standards
• Implementing additional technical and organizational measures to protect data in transit and at rest

By using the bos178 Platform, you acknowledge and consent to the transfer of your personal information to countries outside Indonesia for the purposes described in this Privacy Policy.

7. Data Retention

bos178 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your account activity plus the periods specified below
• Transaction Records: Financial transaction data is retained for a minimum of 7 years to comply with anti-money laundering regulations and tax laws
• Identity Verification Documents: KYC documents are retained for 7 years following account closure as required by regulatory obligations
• Gaming Activity: Bet history and game records are retained for 7 years for dispute resolution and regulatory compliance
• Marketing Communications: Communication preferences and opt-out records are retained indefinitely to ensure we respect your choices
• Closed or Inactive Accounts: Accounts closed by user request or due to inactivity may have data anonymized or deleted after regulatory retention periods expire, except where longer retention is required for legal, audit, or security purposes

8. Your Privacy Rights

You have certain rights regarding your personal information, subject to applicable laws:

8.1 Right to Access

You have the right to request access to the personal information we hold about you. You may view and update much of your account information directly through your account settings. For additional information, contact our privacy team at [email protected].

8.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update your profile, contact details, and payment information through your account settings or by contacting customer support.

8.3 Right to Deletion

You may request deletion of your personal information by closing your account. Please note that we may retain certain information as required by law or for legitimate business purposes (such as fraud prevention, regulatory compliance, and dispute resolution). Anonymized data may be retained indefinitely for statistical purposes.

8.4 Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your personal information, such as during an investigation of data accuracy or while a legal claim is pending.

8.5 Right to Data Portability

You may request a copy of your personal information in a structured, commonly used, and machine-readable format for transfer to another service provider, where technically feasible.

8.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You may opt out of marketing communications at any time through account settings or by clicking unsubscribe links in emails.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time. This will not affect the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, please contact our privacy team at [email protected]. We will respond to requests within 30 days. Identity verification may be required to protect your information from unauthorized access.

9. Cookies and Tracking Technologies

The bos178 Platform uses cookies and similar tracking technologies to enhance user experience, maintain security, and analyze platform usage. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality, including authentication, session management, and security features. These cannot be disabled without affecting platform operation.
• Preference Cookies: Remember your settings, language preferences, and user interface customizations to provide a personalized experience.
• Analytics Cookies: Collect anonymized information about how users interact with the platform, helping us improve design and functionality.
• Marketing Cookies: Track your activity to deliver relevant promotional content and measure campaign effectiveness.

You can manage cookie preferences through your browser settings. However, disabling essential cookies may impair platform functionality and prevent you from accessing certain features.

10. Third-Party Links and Services

The bos178 Platform may contain links to third-party websites or integrate third-party services (such as payment processors and game providers). This Privacy Policy applies only to information collected by bos178. We are not responsible for the privacy practices of third-party sites or services. We encourage you to review the privacy policies of any third-party services you access through our Platform.

11. Children's Privacy

The bos178 Platform is strictly restricted to individuals 21 years of age or older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected information from a person under 21, we will delete that information immediately and close the associated account. If you believe we have collected information from a minor, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

bos178 may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. We will post the updated Privacy Policy on this page with a revised "Last Updated" date. Material changes will be communicated through email notification or prominent notice on the Platform. Your continued use of the Platform after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Privacy Team Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the Platform
• WhatsApp: Available during business hours (08:00-23:00 WIB)

We aim to respond to privacy inquiries within 5 business days. For data access, deletion, or other rights requests, we will respond within 30 days as required by applicable law.