Privacy Policy

1. Information We Collect

bosswd collects several types of personal information to provide, maintain, improve, and secure our Services. The categories of information we collect include:

1.1 Personal Identification Information

• Identity Data: Full legal name (as it appears on your Indonesian KTP or passport), date of birth, nationality, gender, and photograph (for KYC verification purposes).
• Contact Data: Email address, mobile phone number, residential address (street, city, province, postal code), and alternative contact details.
• Government-Issued ID: Indonesian KTP number, passport number, or other official identification documents required for age and identity verification.

1.2 Account & Authentication Information

• Username, password (stored in encrypted form), security questions and answers, two-factor authentication (2FA) codes, and login history.
• Account preferences, language settings, notification preferences, and communication preferences.

1.3 Financial & Transaction Information

• Payment Details: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), credit/debit card information (processed securely by payment processors—bosswd does not store full card numbers).
• Transaction History: Deposits, withdrawals, wagers, winnings, bonuses claimed, bonus wagering progress, and account balance changes.
• Financial Verification Documents: Bank statements, utility bills, or other documents submitted for proof of address or payment method verification.

1.4 Gameplay & Behavioral Information

• Games played (slots, live casino, sports betting, togel, sabung ayam, etc.), bet amounts, win/loss records, session durations, favorite games, and gameplay patterns.
• Sports betting activity including bets placed on bandar bola markets (football betting), mix parlay accumulators, Asian handicap wagers, BRI Liga 1, EPL, Champions League, and other sporting events.
• Responsible gaming tool usage (deposit limits, loss limits, self-exclusion status, session time limits).

1.5 Technical & Device Information

• Device Data: Device type (desktop, mobile, tablet), operating system (Windows, iOS, Android), browser type and version, screen resolution, and device identifiers (IMEI, MAC address).
• Network Data: IP address, internet service provider (ISP), geolocation data (country, city—derived from IP address), and connection timestamps.
• Usage Data: Pages visited, features used, clicks, navigation paths, time spent on pages, referral sources, and session recordings (for fraud detection and user experience improvement).

1.6 Communications & Support Data

• Live chat transcripts, email correspondence, WhatsApp messages, customer support tickets, complaints, feedback, and any other communications between you and bosswd staff.
• Survey responses, promotional preferences, and marketing consent records.

2. How We Collect Your Information

bosswd collects your personal information through multiple channels:

2.1 Information You Provide Directly

• During account registration when you create your bosswd account.
• When you submit KYC (Know Your Customer) verification documents for identity and address confirmation.
• When you make deposits or request withdrawals using our supported payment methods.
• When you contact customer support via live chat, email, or WhatsApp.
• When you opt into promotions, bonuses, newsletters, or marketing communications.
• When you configure responsible gaming limits or request self-exclusion.

2.2 Information Collected Automatically

• Cookies & Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to track your activity on our platform. See Section 6 for detailed cookie information.
• Log Files: Our servers automatically record technical information about your device and usage patterns each time you access bosswd.
• Analytics Tools: We use third-party analytics services (e.g., Google Analytics, Hotjar) to understand user behavior, measure performance, and improve Services. These tools may collect anonymized or aggregated data.

2.3 Information from Third Parties

• Payment Processors: Banks and e-wallet providers confirm transaction completion and may share limited information to prevent fraud.
• Identity Verification Services: Third-party KYC providers verify your identity against government databases and watchlists.
• Fraud Prevention Services: Security partners help us detect suspicious activity, multi-accounting, and fraudulent behavior.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, and other studios share gameplay data for RTP calculations, game integrity, and jackpot management.

3. How We Use Your Information

bosswd uses your personal information for the following lawful purposes:

3.1 Service Delivery & Account Management

• Creating, maintaining, and managing your bosswd account.
• Processing deposits, withdrawals, and financial transactions securely.
• Providing access to casino games, live dealer tables, sports betting markets, togel, and other gaming products.
• Calculating and distributing winnings, bonuses, and loyalty rewards.
• Enforcing wagering requirements and bonus terms.

3.2 Legal & Regulatory Compliance

• Verifying your age (21+ requirement) and identity to comply with Indonesian regulations and international gaming laws.
• Conducting KYC and anti-money laundering (AML) checks as required by law.
• Preventing fraud, money laundering, terrorist financing, and other illegal activities.
• Responding to legal requests, court orders, or investigations by law enforcement or regulatory authorities.
• Maintaining records as required by gaming licenses and financial regulations.

3.3 Security & Fraud Prevention

• Detecting and preventing multi-accounting, bonus abuse, collusion, cheating, and unauthorized access.
• Monitoring gameplay patterns for suspicious activity and responsible gaming concerns.
• Protecting bosswd systems and infrastructure from cyberattacks, hacking, and malware.
• Conducting security audits and vulnerability assessments.

3.4 Customer Support & Communications

• Responding to your inquiries, complaints, and support requests via live chat, email, or WhatsApp.
• Sending transactional notifications about deposits, withdrawals, account changes, and security alerts.
• Providing customer service and resolving disputes or technical issues.
• Communicating important updates about Terms & Conditions, Privacy Policy, or platform maintenance.

3.5 Marketing & Promotions (With Consent)

• Sending promotional emails, SMS messages, or push notifications about bonuses, tournaments, and special offers (only if you've opted in).
• Personalizing marketing content based on your gaming preferences and behavior.
• Conducting market research and user surveys to improve Services.
• You can opt out of marketing communications at any time by clicking "unsubscribe" in emails or adjusting your account settings.

3.6 Platform Improvement & Analytics

• Analyzing user behavior to improve website design, navigation, and functionality.
• Optimizing game performance, loading speeds, and mobile responsiveness.
• Testing new features and conducting A/B testing.
• Generating anonymized and aggregated reports for business intelligence and strategic planning.

3.7 Responsible Gaming & Player Protection

• Monitoring gameplay for signs of problem gambling or addiction.
• Enforcing deposit limits, loss limits, session time limits, and self-exclusion requests.
• Providing reality check reminders and responsible gaming resources.
• Intervening when patterns indicate a player may need assistance or support.

4. Sharing Your Information

bosswd does not sell your personal information to third parties. However, we may share your data with trusted partners under the following circumstances:

4.1 Service Providers & Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process your financial transactions.
• KYC & Identity Verification Partners: Third-party services verify your identity against official databases and sanctions lists.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and others receive limited information necessary to deliver games and calculate RTP.
• Cloud Hosting & IT Infrastructure: Secure servers and cloud storage providers host our platform and databases.
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms help us manage support requests.
• Analytics & Marketing Tools: Google Analytics, email marketing platforms, and advertising networks (only with your consent).

All third-party service providers are bound by strict confidentiality agreements and are prohibited from using your data for purposes other than providing services to bosswd.

4.2 Legal & Regulatory Authorities

• Law enforcement agencies, courts, or regulatory bodies if required by law, court order, subpoena, or legal process.
• Gaming license authorities as part of compliance audits or investigations.
• Financial intelligence units for anti-money laundering (AML) or fraud investigations.

4.3 Business Transfers

• In the event of a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the new entity. You will be notified of any such change via email or prominent notice on our website.

4.4 With Your Consent

• We may share your information with third parties if you explicitly consent (e.g., participating in third-party promotions or surveys).

5. Data Security Measures

bosswd implements industry-leading security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using military-grade SSL/TLS protocols (the same technology used by banks).
• Secure Data Storage: Personal information is stored on encrypted servers with restricted access controls. Only authorized personnel can access sensitive data.
• Password Protection: Passwords are hashed using bcrypt or similar one-way encryption algorithms. bosswd staff cannot view your password.
• Two-Factor Authentication (2FA): Available for all accounts to add an extra layer of login security.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments on our systems.
• Fraud Detection Systems: Advanced algorithms monitor for suspicious login attempts, unusual betting patterns, and account takeover attempts.
• Employee Training: All bosswd staff undergo data privacy and security training. Access to personal data is role-based and logged.
• Data Breach Response Plan: In the unlikely event of a data breach, we will notify affected users within 72 hours and take immediate corrective action.

6. Cookies & Tracking Technologies

bosswd uses cookies and similar tracking technologies to enhance your experience, improve performance, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on return visits.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform functionality, including login authentication, security, and fraud prevention. These cannot be disabled.
• Performance Cookies: Collect anonymized data about how you use bosswd (pages visited, errors encountered) to help us improve the platform.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising (only with your consent). Used to measure ad campaign effectiveness.

6.2 Managing Cookie Preferences

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling necessary cookies may prevent you from accessing certain features or using bosswd Services. Note that opting out of marketing cookies does not opt you out of transactional emails (deposit confirmations, withdrawal notifications, security alerts).

6.3 Third-Party Cookies

Some cookies are placed by third-party services we use (e.g., Google Analytics, advertising networks). These parties have their own privacy policies governing cookie usage. We do not control third-party cookies.

7. Data Retention Periods

bosswd retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

• Active Accounts: Personal and account data are retained for the duration of your active membership plus 5 years after account closure (for regulatory compliance, dispute resolution, and legal obligations).
• Financial Records: Transaction history, deposit/withdrawal records, and KYC documents are retained for 7 years to comply with anti-money laundering laws and tax regulations.
• Marketing Data: If you unsubscribe from marketing communications, your data is removed from marketing databases within 30 days but may remain in backup systems for up to 90 days.
• Anonymized Data: Aggregated, anonymized data (stripped of personally identifiable information) may be retained indefinitely for analytics and research purposes.
• Legal Holds: If your data is subject to ongoing litigation, investigation, or regulatory inquiry, retention periods may be extended until the matter is resolved.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of all personal information bosswd holds about you. We will provide this data in a structured, commonly used format within 30 days of your request.

8.2 Right to Rectification

If any information we hold is inaccurate or incomplete, you can request corrections. Update your profile information directly in your account settings or contact support for assistance.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances (e.g., data no longer necessary, withdrawal of consent). Note that we may be legally required to retain certain records (financial transactions, KYC documents) even after you request deletion.

8.4 Right to Restrict Processing

You can request that we limit how we use your data if you contest its accuracy, object to processing, or need data preserved for legal claims.

8.5 Right to Data Portability

You can request your data in a portable format (e.g., CSV, JSON) to transfer to another service provider.

8.6 Right to Object

You can object to data processing for marketing purposes at any time. You can also object to processing based on legitimate interests unless we have compelling legal grounds to continue.

8.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] or via live chat. We will respond within 30 days. Proof of identity may be required to prevent unauthorized access to your data.

9. International Data Transfers

bosswd operates under international gaming licenses and may transfer your personal information to servers or service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Transfers to countries recognized as providing adequate data protection under international standards.
• Use of standard contractual clauses (SCCs) approved by data protection authorities.
• Binding corporate rules for intra-company data transfers.
• Consent-based transfers where you explicitly agree to international processing.

All international data transfers comply with applicable privacy laws and bosswd's internal data protection policies.

10. Protection of Minors

bosswd is strictly for users aged 21 years or older. We do not knowingly collect personal information from minors. If you are under 21, you are prohibited from using our Services.

If we discover that a minor has provided personal information or created an account, we will immediately:

• Permanently close the account.
• Delete all associated personal information from our systems (except records required by law).
• Forfeit any deposits or winnings.
• Notify relevant authorities if required.

Parents or guardians who believe their child has accessed bosswd should contact us immediately at [email protected].

11. Third-Party Links & Services

bosswd may contain links to third-party websites, payment processors, or social media platforms. These external sites have their own privacy policies that govern how they collect and use your information. bosswd is not responsible for the privacy practices of third-party sites. We encourage you to review their policies before providing any personal information.

12. Changes to This Privacy Policy

bosswd reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Updates will be effective immediately upon posting on this page. We will notify users of material changes via email or prominent website notice.

Last Updated: January 15, 2026. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Our Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or your personal information, contact bosswd's Data Protection Officer:

• Email: [email protected]
• 24/7 Live Chat: Available on website
• WhatsApp: +62-812-3456-7890

We will respond to all privacy inquiries within 30 days. For urgent data security concerns (e.g., suspected data breach, unauthorized account access), contact support immediately via live chat.