bos86 is committed to protecting the privacy of every Member. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information.
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that directly or indirectly identifies a living individual, including name, national ID number (NIK), date of birth, email address, phone number, IP address, device identifiers, bank account details, and e-wallet credentials. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, erasure, or destruction — whether automated or manual. |
| "Member" / "You" | Any individual who accesses or registers on the bos86 platform. |
| "bos86" / "we" / "us" | The bos86 platform and the legal entity that operates it, as identified in the Data Controller section below. |
| "Third-Party Processor" | An external service provider that processes Personal Data on behalf of bos86 under a binding data processing agreement, including payment processors, KYC providers , and fraud prevention services. |
| "Cookies" | Small text files placed on your device by the bos86 platform to store session state, preferences, and anonymised analytics data. |
bos86 is the data controller responsible for the Personal Data collected through this platform. As data controller, bos86 determines the purposes and means of processing your Personal Data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.
All data-related enquiries, access requests, and complaints should be directed to the bos86 Data Protection contact at [email protected] with the subject line "Data Privacy Request — [Your Username]".
bos86 collects only the Personal Data that is necessary for the legitimate purposes described in Section 5. The categories of data we collect are set out below.
3.1 Registration Data. When you create a bos86 account, we collect your full legal name, date of birth, gender, residential city (e.g., Jakarta, Surabaya, Bandung, Bali, Yogyakarta), email address, and mobile phone number. This data is required to create and maintain your account.
3.2 Identity Verification (KYC) Data. Where required by our fraud prevention or regulatory obligations, we may collect a copy of your government-issued photo identity document (Indonesian KTP, SIM, or passport), a live selfie photograph, and proof of ownership of the payment method in use. KYC data is handled by our accredited verification partner and is stored in encrypted form.
3.3 Financial Data. We collect the bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet identifiers (GoPay, OVO, DANA, ShopeePay, LinkAja) that you register for deposits and withdrawals. We do not store full credit or debit card numbers on our servers. All financial data is tokenised at the point of entry.
3.4 Transaction Data. We maintain records of all deposits, withdrawals, bets placed, game results, bonus credits, and promotional offers claimed, including timestamps in WIB (UTC+7) and transaction amounts in Indonesian Rupiah (IDR).
3.5 Technical and Device Data. When you access bos86, we automatically collect your IP address, browser type and version, operating system, device model, screen resolution, referring URL, and session timestamps. This data is collected via server logs and first-party cookies.
3.6 Behavioural and Usage Data. We collect anonymised data about how you navigate and interact with the bos86 platform — pages visited, games launched, time spent per section, click paths, and search queries. This data is aggregated and used exclusively for platform improvement and personalisation.
3.7 Communications Data. If you contact bos86 customer support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution provided. This data is used for quality assurance and dispute resolution.
bos86 collects Personal Data through the following channels:
bos86 does not purchase, rent, or obtain Personal Data from data brokers or unaffiliated marketing lists. All data we hold has been collected through one of the four channels listed above.
bos86 processes your Personal Data only where a lawful basis exists. The primary purposes and their corresponding legal bases are summarised below.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration Data | Performance of contract |
| Age and identity verification (KYC) | KYC Data, Registration Data | Legal obligation; legitimate interest |
| Processing deposits and withdrawals | Financial Data, Transaction Data | Performance of contract |
| Fraud detection and prevention | Technical Data, Financial Data, Behavioural Data | Legitimate interest; legal obligation |
| Anti-money laundering (AML) compliance | Financial Data, Transaction Data, KYC Data | Legal obligation |
| Customer support and dispute resolution | Communications Data, Transaction Data | Performance of contract; legitimate interest |
| Personalisation and platform improvement | Behavioural Data, Technical Data | Legitimate interest |
| Promotional communications | Registration Data (email, phone) | Consent (opt-in) |
| Responsible gaming monitoring | Transaction Data, Behavioural Data | Legal obligation; legitimate interest |
Where processing is based on your consent (for example, receiving promotional communications about seasonal offers such as Idul Fitri bonuses or Ramadhan reload campaigns), you may withdraw that consent at any time by contacting support or updating your notification preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
bos86 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing purposes under any circumstances. We share Personal Data only in the following limited situations:
6.1 Third-Party Processors. We engage carefully selected service providers to perform specific functions on our behalf. Each Third-Party Processor is bound by a written data processing agreement that restricts their use of your data to the specific service they provide. Categories of processors include:
6.2 Regulatory and Law Enforcement Disclosure. bos86 may disclose Personal Data to governmental authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or valid legal process. bos86 will, where legally permissible, notify the affected Member of any such disclosure request.
6.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bos86's assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer via a prominent notice on the platform homepage at least 30 days before it takes effect, and you will be given the option to close your account and withdraw your balance before the transfer completes.
6.4 Protection of Rights. bos86 may share data with legal counsel, dispute resolution bodies, or arbitration panels where necessary to establish, exercise, or defend legal claims arising under the bos86 Terms & Conditions.
bos86 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods we apply are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration Data | Duration of account + 5 years post-closure | AML / regulatory obligation |
| KYC Documents | Duration of account + 5 years post-closure | AML / regulatory obligation |
| Financial & Transaction Data | Duration of account + 5 years post-closure | AML / accounting obligation |
| Communications Data | 3 years from date of communication | Dispute resolution; quality assurance |
| Technical & Device Data | 13 months from collection | Analytics and security monitoring |
| Behavioural & Usage Data | 13 months from collection (aggregated thereafter) | Platform improvement |
| Marketing Consent Records | Until withdrawal of consent + 3 years | Evidence of lawful processing |
When data reaches the end of its applicable retention period, it is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical analysis.
bos86 takes the security of your Personal Data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.
8.1 Encryption in Transit. All data transmitted between your browser or device and the bos86 platform is protected by 256-bit SSL/TLS encryption. This applies to every page of the platform, including the login flow, deposit forms, and withdrawal requests.
8.2 Encryption at Rest. Sensitive Personal Data — including KYC documents, bank account details, and e-wallet identifiers — is encrypted at rest using AES-256 encryption within our database infrastructure.
8.3 Access Controls. Access to Personal Data held by bos86 is restricted on a strict need-to-know basis using role-based access controls (RBAC). All staff with access to Personal Data are subject to confidentiality obligations and undergo regular data protection training.
8.4 Intrusion Detection and Monitoring. bos86's infrastructure is protected by continuous intrusion detection systems (IDS), web application firewalls (WAF), and 24/7 security monitoring. Anomalous activity triggers automated alerts and manual review.
8.5 Penetration Testing. bos86 conducts regular independent security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
8.6 Data Breach Response. In the event of a confirmed Personal Data breach that poses a risk to your rights and freedoms, bos86 will notify affected Members without undue delay and will take immediate steps to contain and remediate the breach. Notification will be provided via your registered email address and via a notice on the platform homepage.
bos86 uses first-party cookies and similar tracking technologies to operate and improve the platform. We do not use third-party advertising cookies or cross-site tracking technologies.
9.1 Essential Cookies. These cookies are strictly necessary for the platform to function. They manage your login session, maintain your account state across page navigations, and protect against cross-site request forgery (CSRF). Essential cookies cannot be disabled without severely impairing platform functionality.
9.2 Analytics Cookies. bos86 uses first-party analytics cookies to understand how Members use the platform — which pages are visited most frequently, how long Members spend on each section, and where users encounter difficulties. All analytics data is anonymised before storage and is not shared with external analytics providers.
9.3 Preference Cookies. These cookies store your platform preferences, such as display settings and notification options, so that your choices persist across sessions.
9.4 Security Cookies. Short-lived security cookies are used for fraud detection purposes, such as identifying unusual login behaviour or detecting automated bot activity. These cookies do not track your activity outside the bos86 platform.
9.5 Managing Cookies. You may configure your browser to refuse or delete cookies at any time. Please note that disabling essential cookies will prevent you from logging into your bos86 account. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help centre. bos86 does not respond to browser-level "Do Not Track" signals, as no industry-wide standard for such signals has been established.
As a Member whose Personal Data is processed by bos86, you hold the following rights. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 30 days of receiving a valid request.
Request a copy of the Personal Data we hold about you and information on how it is being processed.
Request correction of any inaccurate or incomplete Personal Data we hold about you.
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Request that we restrict processing of your data while a dispute about its accuracy or the lawfulness of processing is resolved.
Receive your Personal Data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests, including profiling for personalisation purposes. You may also withdraw marketing consent at any time.
Where we are unable to fully comply with a request — for example, because legal retention obligations prevent deletion — we will explain the reason in our response and describe any steps we are able to take in the interim.
If bos86 discovers or is notified that Personal Data belonging to a person under 21 has been collected — for example, because a minor has misrepresented their age during registration — we will immediately suspend the relevant account, delete all associated Personal Data to the extent permitted by legal retention obligations, and return any real-money deposits to the payment method used.
If you are a parent or guardian and believe your child has registered on bos86, please contact us immediately at [email protected]. We treat all such reports as urgent and will investigate within 24 hours.
bos86 primarily processes Member data within Indonesia and in the international jurisdiction where it holds its gaming licence. Where Personal Data is transferred to a Third-Party Processor located outside Indonesia, bos86 ensures that appropriate safeguards are in place to maintain a standard of data protection equivalent to that described in this Policy.
Safeguards used for international transfers include:
You may request information about the specific safeguards in place for any international data transfer by contacting us at [email protected].
bos86 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. The "Last Updated" date at the top of this page will be revised whenever a change is made.
For material changes — such as new categories of data being collected, new Third-Party Processors being engaged, or changes to the legal basis for processing — bos86 will provide at least 14 days' advance notice via a prominent banner on the platform homepage and, where reasonably practicable, via your registered email address.
For non-material changes — such as typographical corrections or clarifications that do not alter the substance of the Policy — the updated version will take effect immediately upon publication.
Your continued use of the bos86 platform following the effective date of any update constitutes acceptance of the revised Privacy Policy. If you disagree with any material change, you may close your account before the change takes effect by contacting customer support.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to raise a privacy concern, please reach out through one of the following channels:
Six core principles that guide every data decision we make at bos86.
Every byte of data exchanged between your device and the bos86 platform travels through a 256-bit SSL-encrypted channel. Your personal details, financial data, and login credentials are protected at every step.
bos86 collects only the data that is genuinely necessary to operate your account and comply with our legal obligations. We do not ask for information we do not need, and we do not retain data beyond its required purpose.
bos86 has never sold Member data to third parties and never will. Your information is used exclusively to operate your account and deliver the services you have requested. It is not an advertising product.
Internal access to Member Personal Data is restricted to staff who genuinely need it to perform their role. All access is logged, audited, and subject to strict confidentiality agreements. No broad or unrestricted internal data access is permitted.
Independent security professionals conduct regular penetration tests and vulnerability assessments on the bos86 infrastructure. Any finding is triaged and remediated on a risk-prioritised basis before it can be exploited.
Access, correct, port, restrict, or delete your Personal Data at any time by contacting our support team. All data-rights requests are acknowledged within 24 hours and resolved within 30 days, with no charge to the Member.
Now that you know how we protect your data, dive into the full bos86 experience. From live sportsbook action and slot gacor (high-payout slots) to live casino tables and togel (Indonesia's traditional numbers lottery) — it's all here.