Privacy Policy

1. Introduction

bos27 is committed to protecting the privacy and security of all users. We recognize that when you choose to provide us with information about yourself, you trust us to act responsibly. This Privacy Policy explains our information practices, the types of personal data we collect, how we process and protect that data, and your rights under applicable data protection laws.

This policy applies to all services offered by bos27, including our website, mobile applications, and any related services. We are the data controller for the personal information we collect and process in connection with our services. Our platform is designed for users who are residents of Indonesia and other jurisdictions where online gambling is legally permitted. All users must be at least 21 years of age in accordance with Indonesian gambling age restrictions and the requirements of our licensing jurisdiction.

2. Information We Collect

bos27 collects several types of information to provide and improve our services, ensure platform security, comply with legal obligations, and deliver a personalized user experience. The categories of personal data we collect include:

2.1 Information You Provide Directly

• Account Registration Data: When you create an account, we collect your full name, date of birth, email address, phone number, residential address, username, and password. This information is necessary to establish your account and verify your eligibility to use our services.
• Identity Verification Data: To comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations, we collect copies of government-issued identification documents (Indonesian KTP or passport), proof of address (utility bills or bank statements), and in some cases, selfie photographs holding your identification. This verification is required before your first withdrawal and helps prevent fraud, underage gambling, and money laundering.
• Payment Information: We collect payment details necessary to process deposits and withdrawals, including bank account numbers for BCA, BRI, BNI, Mandiri, CIMB Niaga, and other Indonesian banks; e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja; and credit/debit card details for Visa and Mastercard transactions. Payment card data is processed through secure third-party payment processors certified to PCI-DSS standards; bos27 does not store complete card numbers on our servers.
• Communications: When you contact customer support via live chat, email, WhatsApp, or in-app messaging, we collect the content of your communications, including your questions, complaints, and the responses provided by our support team. This data helps us improve service quality and resolve disputes.
• Marketing Preferences: If you opt in to receive promotional communications, we collect your consent and preferences regarding marketing emails, SMS messages, and push notifications.

2.2 Information We Collect Automatically

• Transaction History: We automatically record all account activity, including deposits, withdrawals, wagers placed, game outcomes, bonus claims, and balance changes. This transaction history is maintained for regulatory compliance and to provide you with accurate account statements.
• Device and Technical Data: When you access bos27, we collect information about your device and connection, including IP address, device type (Android, iOS, desktop), operating system version, browser type and version, screen resolution, device identifiers, mobile network information, and time zone setting. This data helps us optimize platform performance across different devices and detect suspicious login activity.
• Usage Data: We collect information about how you interact with the bos27 platform, including pages visited, games played, session duration, click patterns, navigation paths, and timestamps. This usage data allows us to improve platform design, identify popular features, and detect potential technical issues.
• Cookies and Tracking Technologies: bos27 uses cookies, web beacons, and similar tracking technologies to remember your preferences, maintain your login session, analyze platform traffic, and deliver targeted content. You can control cookie settings through your browser, though disabling certain cookies may limit platform functionality. Our cookie usage includes essential cookies (required for login and security), functional cookies (remember your preferences and settings), and analytical cookies (understand how users interact with our platform). We do not use third-party advertising cookies or sell your data to advertising networks.

2.3 Information from Third Parties

• Payment Processors: Our payment partners (banks, e-wallet providers, card processors) share transaction confirmation data, payment success/failure notifications, and fraud detection signals with us to facilitate deposits and withdrawals.
• Identity Verification Services: We use third-party verification services to authenticate identity documents and perform age verification checks. These services provide validation results and fraud risk scores based on government databases and document analysis.
• Game Providers: Casino game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) provide us with aggregated gameplay data, including game outcomes, RTP statistics, and jackpot information. Individual player data from game sessions is processed in accordance with this Privacy Policy and the providers' own data protection obligations.

3. How We Use Your Information

bos27 uses the personal data we collect for the following specific purposes, all of which are necessary to provide our services, comply with legal obligations, or pursue legitimate business interests:

3.1 Service Delivery

• Create and manage your bos27 account
• Process deposits, withdrawals, and other financial transactions
• Enable you to place wagers and participate in games
• Calculate and credit winnings to your account
• Apply bonuses and promotional offers
• Provide customer support and respond to your inquiries
• Send transactional communications (account confirmations, withdrawal notifications, password resets)

3.2 Security and Compliance

• Verify your age and identity to prevent underage gambling
• Detect and prevent fraud, money laundering, and other illegal activity
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Monitor for problem gambling behaviors and enforce responsible gaming limits
• Investigate disputes, violations of our Terms and Conditions, and potential security breaches
• Maintain audit logs for regulatory authorities in our licensing jurisdiction
• Protect the rights, property, and safety of bos27, our users, and the public

3.3 Platform Improvement

• Analyze usage patterns to optimize platform design and user experience
• Identify and fix technical issues, bugs, and performance problems
• Develop new features and services based on user behavior and feedback
• Conduct internal research and statistical analysis on player preferences and trends
• Test platform changes and measure the effectiveness of new features

3.4 Marketing and Communications

• Send promotional emails about bonuses, new games, and special offers (only if you have opted in)
• Display personalized content and game recommendations based on your play history
• Notify you of platform updates, policy changes, and service announcements
• Invite you to participate in surveys and feedback programs

You may opt out of marketing communications at any time by clicking the unsubscribe link in any promotional email, adjusting your preferences in account settings, or contacting customer support.

4. How We Share Your Information

bos27 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We only share your data with trusted partners and service providers who assist us in operating the platform, and only under strict confidentiality and data protection obligations. The categories of third parties with whom we share data include:

4.1 Service Providers

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and card payment gateways process transactions on our behalf. We share payment details necessary to complete deposits and withdrawals.
• Game Studios: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive minimal user data (username, session tokens) necessary to deliver game content and track gameplay.
• Identity Verification Services: Third-party KYC providers verify your identity documents and age. We share name, date of birth, address, and identification document images with these services.
• Customer Support Tools: We use live chat software, email platforms, and ticketing systems to manage customer support. Support providers have access to communication history and account details necessary to resolve your inquiries.
• Cloud Infrastructure: bos27 uses secure cloud hosting services to store data and run our platform. These providers have access to data stored on their servers but are contractually prohibited from using it for any purpose other than providing hosting services to us.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, regulators, law enforcement agencies, or courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, or valid government request
• Cooperate with regulatory investigations or audits by our licensing authority
• Enforce our Terms and Conditions or other policies
• Detect, prevent, or address fraud, security breaches, or illegal activity
• Protect the rights, property, or safety of bos27, our users, or the public

4.3 Business Transfers

In the event that bos27 is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email or prominent notice on the platform before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

bos27 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Data: While your account is active, we retain all account information to provide ongoing service. If you close your account, we retain certain data (name, date of birth, transaction history, identity verification records) for a minimum of five years after account closure to comply with regulatory requirements and resolve potential disputes.
• Transaction Records: All deposit, withdrawal, and wager records are retained for a minimum of five years for tax, audit, and anti-money laundering compliance purposes.
• Communications: Customer support chat logs, emails, and other communications are retained for two years to improve service quality and resolve disputes.
• Technical Logs: Server logs, IP addresses, and device data are typically retained for 90 days, except where longer retention is necessary for security investigations or legal compliance.

After the applicable retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you.

6. Data Security

bos27 takes the security of your personal information seriously. We implement industry-standard technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is protected by SSL/TLS encryption. Payment card data is encrypted and tokenized by PCI-DSS certified payment processors.
• Access Controls: Personal data is accessible only to authorized bos27 employees and service providers who require access to perform their duties. All personnel with data access are bound by strict confidentiality obligations.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security audits conducted by independent third-party security firms.
• Account Security: User accounts are protected by password authentication. We strongly recommend using a unique, complex password and never sharing your login credentials with others.
• Monitoring: We continuously monitor platform activity for suspicious behavior, unusual login patterns, and potential security threats.

While we implement robust security measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to protecting your data and will notify you promptly in the event of any security breach that may affect your personal information.

7. Your Rights and Choices

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

• Access: You have the right to request a copy of the personal data we hold about you. You can view much of this information directly in your account dashboard.
• Correction: If any of your personal information is inaccurate or incomplete, you may update it through your account settings or by contacting customer support.
• Deletion: You may request deletion of your personal data, subject to our legal obligations to retain certain records for regulatory compliance. To request deletion, contact customer support with your account details.
• Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of disputed information.
• Objection: You may object to our processing of your personal data for direct marketing purposes at any time by opting out of marketing communications.
• Data Portability: You may request a copy of your personal data in a structured, machine-readable format where technically feasible.
• Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact bos27 customer support via email at [email protected] or through live chat. We will respond to all requests within 30 days and may require identity verification before processing your request.

8. International Data Transfers

bos27 is an internationally licensed platform and some of our service providers and data storage facilities are located outside Indonesia. When we transfer your personal data to other jurisdictions, we ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include standard contractual clauses approved by regulatory authorities or reliance on adequacy decisions regarding the data protection standards of the receiving jurisdiction.

9. Children's Privacy

bos27 services are strictly intended for individuals aged 21 and older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have inadvertently collected data from a user under 21, we will delete that information immediately and close the associated account. All funds in accounts belonging to underage individuals are forfeited in accordance with our Terms and Conditions. Parents or guardians who believe their child has provided personal information to bos27 should contact us immediately.

10. Changes to This Privacy Policy

bos27 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. We will notify users of any material changes by posting a prominent notice on the platform or sending an email to your registered address at least 14 days before the changes take effect. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of the bos27 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact bos27 customer support:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon on any page after login
• WhatsApp: +62 811 2750 027

We are committed to resolving privacy concerns promptly and transparently. Our customer support team is available around the clock to assist Indonesian players with privacy-related inquiries.