Privacy Policy — bos555

1 Definitions

The following terms carry the meanings defined below throughout this Privacy Policy:

2 Data Controller

bos555, operating the platform at https://bos555.cam, acts as the Data Controller for all personal data collected from members and visitors. If you have any questions about how your data is handled, or wish to exercise any of your data rights set out in Section 11, please contact us using the details in Section 15.

bos555 is committed to processing personal data in accordance with applicable international data protection principles, including the principles of lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity, and confidentiality.

3 Data We Collect

bos555 collects the following categories of personal data in connection with the registration and operation of member accounts:

3.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Residential address in Indonesia (city, province, postal code)
• Email address (used as the primary account identifier and for communications)
• Phone number (used for two-factor authentication and urgent account notifications)

3.2 Identity Verification (KYC) Data

• Copy of a valid government-issued photo ID (KTP — Indonesian National Identity Card, or passport)
• Proof of residential address (utility bill or bank statement dated within three months)
• Live selfie photograph taken holding the submitted ID document

3.3 Financial Data

• Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga) registered for withdrawals
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals
• Transaction history: deposit amounts, withdrawal requests, bet amounts, and game results

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from the IP address
• Device type, operating system, and browser information
• Session logs: login timestamps, pages visited, features used, and session duration
• Cookies and similar tracking identifiers (see Section 10 for full details)

3.5 Communications Data

• Content of customer support tickets, live chat transcripts, and email correspondence submitted to bos555
• Responses to surveys or feedback forms, where voluntarily provided

4 How We Collect Data

bos555 collects personal data through the following channels:

• Account Registration: Data you submit directly when creating a bos555 account, including name, date of birth, email address, and phone number.
• KYC Verification: Identity documents and selfies uploaded during the mandatory verification process.
• Financial Transactions: Payment details entered when making deposits or requesting withdrawals via Indonesian bank transfer or e-wallet.
• Platform Interaction: Data generated automatically as you browse the bos555 website, place bets, play casino games, and use platform features — captured via server logs and analytics tools.
• Customer Support: Information you provide when contacting the bos555 support team through any channel.
• Third-Party Sources: In limited circumstances, bos555 may receive supplementary identity verification data from licensed KYC providers or fraud prevention databases to confirm the accuracy of information you have submitted.

5 Purposes of Processing

bos555 processes personal data for the specific purposes set out in the table below. We do not process data for any purpose incompatible with those listed without first obtaining your explicit consent.

6 Legal Basis for Processing

bos555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfill our obligations under the bos555 Terms & Conditions — including account management, payment processing, and delivering betting and gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) rules, KYC obligations, and tax reporting requirements.
• Legitimate Interests: Processing necessary for bos555's legitimate business interests — including fraud prevention, platform security, product improvement, and responsible gaming monitoring — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional analytics, where you have given clear, specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Sharing Your Data

bos555 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• KYC & Identity Verification Providers: Licensed third-party identity verification services that process your ID documents and selfie on our behalf to confirm your identity and age eligibility. These providers act as Data Processors under contractual data processing agreements with bos555.
• Payment Processors & Financial Institutions: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) require sufficient financial and identity information to process your deposits and withdrawals in accordance with their own regulatory obligations.
• Cloud Infrastructure & Hosting Providers: Secure, enterprise-grade cloud service providers that store and process platform data on bos555's behalf. All such providers are contractually bound to process data only on bos555's documented instructions.
• Fraud Prevention & AML Databases: Shared industry databases and screening services used to detect and prevent fraudulent account activity, money laundering, and other financial crime. Disclosure to these services is limited to the data elements strictly required for screening purposes.
• Game Content Providers: Licensed game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Pocket Games Soft — receive session-level technical data (e.g., session tokens, game round IDs) necessary to deliver and audit game outcomes. These providers do not receive your personal identity or financial account details.
• Regulatory & Law Enforcement Authorities: bos555 will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or binding regulatory direction — and only to the extent required by such obligation.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations, where disclosure is required in connection with legal proceedings, regulatory examinations, or corporate transactions.

8 Data Retention

bos555 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applicable to each category of data are as follows:

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

9 Security Measures

bos555 implements a layered security architecture designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our key technical and organizational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the bos555 platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this connection is active.
• Encrypted Data Storage: Sensitive data at rest — including KYC documents, financial account details, and authentication credentials — is stored using AES-256 encryption in access-controlled, enterprise-grade cloud infrastructure.
• Access Controls: Access to personal data within bos555's internal systems is granted on a strict need-to-know basis. All staff with data access undergo background screening and receive regular data protection training.
• Multi-Factor Authentication (MFA): bos555 offers two-factor authentication (2FA) for member accounts and mandates MFA for all internal staff accessing production systems containing personal data.
• Penetration Testing & Vulnerability Management: The bos555 platform undergoes regular independent security assessments, including penetration tests and vulnerability scans, to identify and remediate security weaknesses proactively.
• Incident Response Plan: bos555 maintains a documented data breach response procedure. In the event of a confirmed data breach affecting your personal data, we will notify affected members and relevant authorities within the timeframes required by applicable law.

10 Cookies & Tracking Technologies

bos555 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your authenticated session, and analyze how the platform is used. We do not use third-party advertising or behavioral tracking cookies.

10.1 Types of Cookies We Use

10.2 Managing Cookies

You can control and delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging into your bos555 account. Disabling functional or analytics cookies will not affect your ability to use core platform features but may reduce the personalization of your experience. Please refer to your browser's help documentation for instructions on managing cookie preferences.

11 Your Data Rights

As a member of bos555, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected]. We will acknowledge your request within 48 hours (WIB) and respond in full within 30 days.

• Right of Access: You may request a copy of all personal data bos555 holds about you, along with information about the purposes for which it is processed and the third parties with whom it is shared.
• Right to Rectification: If any personal data bos555 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that bos555 delete your personal data. Note that this right is subject to exceptions — in particular, we are required by law to retain certain financial and identity records for a minimum period after account closure (see Section 8).
• Right to Restriction of Processing: You may request that bos555 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request a copy of the personal data you have provided to bos555 in a structured, commonly used, machine-readable format (e.g., CSV), and request that it be transferred directly to another service provider where technically feasible.
• Right to Object: You may object at any time to processing based on bos555's legitimate interests, including direct marketing. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

12 Minors & Age Verification

bos555 is an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is performed at the point of registration and again during the KYC process for all members.

If bos555 discovers that personal data has been collected from a member who is under 21 years of age, we will immediately suspend the account, delete all associated personal data to the extent permitted by law, and — where required — report the matter to the relevant authorities. Any balance held in such an account will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child has registered an account on bos555, please contact us immediately at [email protected] so we can take prompt remedial action. Please visit our Responsible Gaming page for guidance on parental controls and protecting minors from online gambling environments.

13 International Data Transfers

bos555's primary servers and data processing infrastructure are located in jurisdictions with high standards of data protection. In the course of providing its services, some personal data may be transferred to and processed in countries outside Indonesia — for example, when data is processed by our cloud hosting provider or KYC verification partner.

Where such international transfers occur, bos555 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements incorporating recognized standard data protection clauses between bos555 and the receiving third party.
• Transfers only to countries or organizations that provide an adequate level of data protection as assessed by bos555's compliance team.
• Technical safeguards — including end-to-end encryption of data in transit — to protect data during cross-border transfers.

You may request further information about the international transfer safeguards applicable to your personal data by contacting us at [email protected].

14 Policy Amendments

bos555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When we make material changes — such as introducing a new category of data collection or a new third-party data sharing arrangement — we will notify you by email to your registered address at least 14 days before the change takes effect.

Minor administrative updates (such as correcting typographical errors or clarifying existing practices without substantive change) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the bos555 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material change, you should close your account before the amendment takes effect and submit a data deletion request under Section 11.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or bos555's handling of your personal data, please contact our Data Protection team using the details below. All privacy-related queries will be acknowledged within 48 hours (WIB) and resolved within 30 calendar days.

For answers to common questions about your account, deposits, and withdrawals, please also consult our FAQ page.