bos01 Privacy Policy

In this Privacy Policy, the following terms have the meanings set out below:

• "bos01", "we", "us", "our" — the operator of the website located at bos01.club and all associated sub-domains and services.
• "Platform" — the bos01 website, mobile-optimised site, and all gaming, sportsbook, casino, and support services accessible through bos01.club.
• "User", "you", "your" — any individual who accesses, registers for, or uses the Platform.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, national ID number, email address, telephone number, IP address, payment details, and transaction history.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "KYC" — Know Your Customer — the identity and age verification process conducted by bos01 in accordance with its compliance obligations.
• "Cookies" — small text files placed on your device by the Platform to store preferences and session information.
• "Third-Party Processor" — any external entity engaged by bos01 to process Personal Data on bos01's behalf, subject to contractual data-protection obligations.

This Privacy Policy applies to all Personal Data collected by bos01 in connection with your use of the Platform, whether you are a registered Account holder, a visitor browsing the Platform without an Account, or a person interacting with bos01's customer support services.

This Policy applies to data collected through the bos01.club website, mobile-optimised web interface, and any communications you initiate with bos01 via Live Chat, email, or other supported channels.

This Privacy Policy should be read in conjunction with the bos01 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

bos01's primary market is Indonesia. Indonesian players are subject to the data-handling practices described in this Policy. bos01 operates with reference to applicable data protection principles including transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

bos01 collects Personal Data through several channels. The categories of data collected and the context of collection are set out below.

3.1 Registration Data. When you create a bos01 Account, we collect: your full legal name as it appears on your national ID (KTP), date of birth, email address, mobile telephone number, and a password of your choosing. This information is required to create and maintain your Account.

3.2 Identity Verification (KYC) Data. To comply with our age-verification and anti-fraud obligations, we may collect copies of government-issued identity documents — primarily the Indonesian national ID (KTP) — and supporting documentation such as utility bills or bank statements for address verification. KYC data is collected when you register, before your first withdrawal, or whenever bos01 has a reasonable compliance basis to re-verify your identity.

3.3 Financial Data. We collect details of deposits and withdrawal transactions, including the payment method used (bank name, masked account number, e-wallet identifier), transaction amounts in IDR, timestamps, and transaction reference numbers. We do not store full bank account credentials; payment processing is handled by our licensed payment partners.

3.4 Gameplay & Betting Data. We record your betting and gaming activity on the Platform, including games played, wagers placed, outcomes, session duration, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.5 Technical & Device Data. When you access the Platform, our servers automatically collect: your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session timestamps. This data is used to ensure Platform security, detect fraudulent access, and improve Platform performance.

3.6 Communications Data. If you contact bos01 via Live Chat, email, or any other support channel, we retain records of the communication, including the content of messages, timestamps, and the support agent who handled the interaction. This data is used for quality assurance, dispute resolution, and training purposes.

3.7 Voluntarily Submitted Data. From time to time you may voluntarily provide additional information — for example, when completing a survey, entering a promotion, or updating your Account profile. Such data is collected and used for the specific purpose stated at the time of collection.

bos01 uses your Personal Data for the following purposes:

bos01 does not use your Personal Data for automated decision-making processes that produce legal or similarly significant effects without human oversight, except where such processing is required by applicable law or explicitly consented to by you.

Marketing Communications. bos01 may send you promotional emails or SMS messages about new games, bonuses, and offers. You may opt out of marketing communications at any time by contacting bos01 support or by following the unsubscribe instructions included in each marketing message. Opting out of marketing communications does not affect transactional communications essential to your Account.

bos01 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the bos01 Terms & Conditions — including Account creation, payment processing, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC and anti-money-laundering (AML) obligations, and the retention of transaction records for the required statutory period.
• Legitimate Interests: Processing necessary for bos01's legitimate interests — including fraud prevention, Platform security, improving user experience, and responsible gaming monitoring — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — including sending promotional marketing communications. Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

bos01 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. Personal Data is shared only in the following limited circumstances:

• Payment Processors: bos01 shares financial data with licensed payment processors and banking partners — including Indonesian banks such as BCA, BRI, BNI, Mandiri, and CIMB Niaga, and e-wallet providers OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to process your deposits and withdrawals.
• Identity Verification Partners: bos01 may share KYC data with licensed identity verification service providers for the purpose of validating your identity documents and confirming your age and eligibility.
• Game Software Providers: Gameplay data may be shared with our game software partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to the extent necessary to deliver their games on the Platform and resolve technical disputes.
• Fraud Prevention Services: Technical and financial data may be shared with fraud-detection service providers to protect the Platform and its users from fraudulent activity.
• Legal and Regulatory Authorities: bos01 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction — or where bos01 reasonably believes disclosure is necessary to prevent, detect, or prosecute a crime.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or a material part of bos01's business assets, Personal Data held by bos01 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

All Third-Party Processors engaged by bos01 are required, by contract, to process Personal Data only on bos01's documented instructions, to implement appropriate technical and organisational security measures, and to maintain confidentiality of the data entrusted to them.

bos01 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform remember your session and preferences.

Categories of Cookies Used by bos01:

• Essential Cookies: Strictly necessary for the Platform to function — for example, maintaining your login session, storing your language or display preferences, and enabling security features such as CSRF protection. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Used to understand how users interact with the Platform — including pages visited, session duration, and navigation paths. This data is aggregated and anonymous and helps bos01 improve the user experience. You may opt out of analytics cookies via your browser settings.
• Functional Cookies: Used to remember choices you have made — such as preferred game categories or last-visited game lobby — to personalise your experience on return visits.

You can manage or delete cookies at any time through your browser settings. Disabling essential cookies may prevent certain features of the Platform from functioning correctly. bos01 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertising on external websites.

bos01 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, bos01 will securely delete or anonymise your Personal Data. Where anonymisation is technically feasible, anonymised data may be retained indefinitely for statistical and analytical purposes without further obligation under this Policy.

bos01 implements a comprehensive set of technical and organisational measures designed to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and bos01 servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Password Hashing: Account passwords are stored as one-way cryptographic hashes using a modern, salted hashing algorithm. bos01 staff cannot retrieve your password in plain text. bos01 will never ask you for your password via any channel.
• Access Controls: Access to systems holding Personal Data is restricted to authorised personnel with a documented need to access that data. Access is governed by role-based permissions, and access logs are maintained and reviewed regularly.
• Encrypted Storage: Sensitive data, including KYC documents and financial records, is stored on encrypted servers hosted in secure data centres with physical access controls.
• Intrusion Detection: bos01 operates automated intrusion detection and monitoring systems to identify and respond to potential security incidents in real time.
• Incident Response: bos01 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, bos01 will notify affected users without undue delay.

Notwithstanding these measures, no system of electronic data transmission or storage is completely secure. bos01 cannot guarantee absolute security against all conceivable threats. You are responsible for keeping your Account credentials confidential and for notifying bos01 immediately if you suspect unauthorised access to your Account.

Subject to applicable law, you have the following rights with respect to your Personal Data held by bos01:

• Right of Access: You have the right to request a copy of the Personal Data bos01 holds about you and information about how it is being processed.
• Right to Rectification: You have the right to request correction of any Personal Data that is inaccurate or incomplete. You may update basic Account information directly through your Account settings; for other corrections, contact bos01 support.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to bos01's legal obligations to retain certain data for regulatory compliance periods.
• Right to Restriction: You have the right to request that bos01 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your Personal Data where that processing is based on legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact the bos01 support team via Live Chat or by emailing [email protected] (plain text — not a clickable link). bos01 will respond to your request within 30 days. In complex cases, this period may be extended by a further 30 days with written notice to you.

bos01 may need to verify your identity before processing a rights request to ensure that Personal Data is not disclosed to an unauthorised person.

The bos01 Platform is strictly intended for adults aged 21 and over. bos01 does not knowingly collect Personal Data from persons under the age of 21. The bos01 registration process includes mandatory age verification, and Account holders are required to confirm their age and to undergo KYC verification prior to their first withdrawal.

If bos01 discovers or has reasonable grounds to believe that Personal Data has been collected from a person under the age of 21, bos01 will immediately close the associated Account, delete the relevant Personal Data to the extent not required to be retained for legal compliance purposes, and take appropriate corrective action.

Parents and guardians who believe that a minor in their care has submitted Personal Data to bos01 are encouraged to contact bos01 support immediately so that the matter can be investigated and resolved. We also encourage parents and guardians to install parental control software on shared devices to prevent underage access to gambling websites.

bos01's primary operations and data storage infrastructure are located in data centres that serve the Asia-Pacific region. In the course of delivering the Platform, your Personal Data may be transferred to and processed in countries other than Indonesia — for example, by game software providers or payment processing partners whose infrastructure is hosted in other jurisdictions.

Where Personal Data is transferred outside Indonesia, bos01 takes steps to ensure that an adequate level of data protection is maintained. These steps may include:

• Selecting Third-Party Processors that operate in jurisdictions with data protection standards deemed adequate by applicable regulatory guidance.
• Implementing data processing agreements with Third-Party Processors that include binding contractual data protection clauses.
• Ensuring that any transfer is limited to the minimum data necessary for the specific processing purpose.

By using the bos01 Platform and providing your Personal Data, you acknowledge and consent to the transfer of your data to other jurisdictions as described in this Section, subject to the safeguards outlined above.

bos01 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. Material changes will be communicated to registered Account holders via the email address on file or via a prominent notice on the Platform, not less than 7 days before the change takes effect.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept an amendment, you must stop using the Platform and may close your Account by contacting bos01 support.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how bos01 protects your data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please contact the bos01 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the bos01 Platform. This is the fastest channel for privacy requests and account-specific matters.
• Email: [email protected] — please include "Privacy Request" in the subject line to ensure your message is directed to the appropriate team. Responses are provided within 30 days.

bos01 is committed to resolving all privacy concerns promptly and in good faith. If you submit a request and do not receive a response within 30 days, or if you are dissatisfied with bos01's response, you have the right to escalate the matter to the relevant data protection authority in the jurisdiction where you reside.