bos989 Casino & Sportsbook Data Care

This page describes what we collect when you use bos989 and how we keep that data protected. We at bos989 collect personal information—your name, email, payment details, government ID—only to verify your identity, comply with anti-money-laundering law, and operate your account. We do not sell your data to marketing companies or use it for purposes beyond what we describe here.

Our privacy commitments are straightforward. We encrypt all data in transit and at rest. We share data with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) only to process your deposits and withdrawals. We share data with government authorities only when required by Indonesian law. We retain your data for as long as your account is active and for five years after closure to comply with financial record-keeping rules.

You have rights over your data. You can request access, correction, or deletion at any time. We process these requests within 30 days. This policy explains all of that and answers the questions most members ask about privacy on bos989.

What We Collect When You Use bos989

We collect the following categories of data from you:

  • Account information: email address, username, password hash, account creation date
  • Identity verification: full name, date of birth, government ID number, ID type (national ID, passport, driver's license)
  • Address verification: residential address, city, province, postal code
  • Payment information: payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank details for mobile banking, local payment, online payment, e-wallet), transaction history with amounts and dates
  • Game activity: wager history, game type, bet amounts, outcomes, timestamps
  • Device and access data: IP address, device type, browser type, operating system, login timestamps
  • Communications: support tickets, emails to our team, chat logs with our staff

We collect this data through your registration form, identity verification uploads, deposit and withdrawal flows, and automatic tracking during gameplay. Some data we collect automatically via cookies and tracking pixels (see the Cookies section below).

We do not collect special category data (health, biometric, racial, religious information) except where government ID verification requires it and only to the extent shown on your ID.

How We Use Your Data on bos989

We use your data for the following purposes:

  • Account operation: to create and manage your account, authenticate your login, process deposits and withdrawals
  • Regulatory compliance: to verify your identity, comply with anti-money-laundering and know-your-customer rules, report to Indonesian authorities if required
  • Fraud detection: to detect and prevent duplicate accounts, unauthorised access, bonus abuse, and payment fraud
  • Customer support: to respond to your inquiries, investigate disputes, and manage your account questions
  • Service improvement: to analyse user behaviour patterns, identify technical issues, and improve our platform's features and performance
  • Legal obligations: to comply with court orders, subpoenas, and government investigations

We do not use your data for marketing without your explicit consent. We do not sell your data to third-party marketing companies or data brokers. We do not use your data to create user profiles for behavioural targeting.

Note: Our payment processors (mobile banking, local payment, online payment, e-wallet) receive your payment data directly when you initiate a deposit. We do not control how those services store or use your data; their own privacy policies apply.

Third-Party Processors and Data Sharing on bos989

We share your data with the following third parties only to provide bos989 services:

Payment processors: We transmit your payment method and transaction data to mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank partners (online payment, e-wallet, mobile banking, local payment) to process your deposits and withdrawals. These processors' privacy policies govern how they handle your data.

Identity verification services: We may use third-party verification platforms to check your government ID against official databases. These services receive your name, ID number, and ID type.

Hosting and analytics: Our servers and databases are hosted by cloud providers located in Indonesia and Singapore. Your data is encrypted and isolated from other customers. Our analytics tools track aggregate user behaviour (total sessions, average session length, popular games) but do not identify you individually.

Government authorities: We share data with Indonesian law enforcement, tax authorities, and financial-crime agencies only when compelled by law (court order, subpoena, or regulatory request).

We do not share your data with third-party advertisers, data brokers, or social media platforms.

Data Location and Retention on bos989

Our primary servers are located in Indonesia. Backup and disaster-recovery systems are located in Singapore. Your data is encrypted and isolated; it is not shared between regions without encryption.

We retain your account data for as long as your account is active. After you close your account, we retain transaction records, identity verification documents, and support communications for five years to comply with Indonesian financial record-keeping law. After five years, we delete or anonymise your data unless we are required to retain it by law or a court order.

If you request deletion of your account before the five-year period ends, we will delete your account immediately, but we must retain transaction records as required by law.

Your Rights Regarding Your Data on bos989

You have the following rights under Indonesian data-protection principles:

  • Access: You can request a copy of all data we hold about you. We provide it within 30 days.
  • Correction: You can request that we correct inaccurate data (e.g., misspelled name, wrong address).
  • Deletion: You can request deletion of your account and associated data. We delete immediately but retain transaction records as required by law.
  • Objection: You can object to specific uses of your data (e.g., analytics) by contacting our support team. We will process your objection within 30 days.

To exercise these rights, contact our support team in English with your account email and the specific right you are requesting. We verify your identity before processing your request.

Cookies and Tracking on bos989

We use cookies and similar tracking technologies for the following purposes:

Essential cookies: These are required for bos989 to function—they store your login session, preferences, and account security tokens. You cannot disable essential cookies without losing account access.

Performance cookies: These track how you use our platform (which games you play, how long you stay, where you click). We use this data to identify technical issues and improve our interface. You can disable performance cookies in your browser settings without affecting account access.

Analytics cookies: We use third-party analytics tools to track aggregate user behaviour and measure traffic to bos989. We do not track individual users across websites. You can disable analytics cookies in your browser settings.

You can manage all cookies via your browser settings. Instructions for disabling cookies vary by browser (Chrome, Firefox, Safari, Edge). Disabling essential cookies will prevent you from logging in to bos989.

Security of Your Data on bos989

We protect your data using industry-standard encryption and security controls. All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. All data stored in our databases is encrypted using AES-256.

We limit access to your data to authorised bos989 staff only. Our team members access your data only to process your requests, investigate disputes, or comply with legal obligations. We audit access logs regularly to detect unauthorised access.

We conduct regular security assessments and penetration testing. We have a responsible-disclosure policy; if you discover a security vulnerability in bos989, contact our support team with details so we can investigate and patch the issue.

However, no security system is perfect. We cannot guarantee that your data will never be breached. If we discover a breach affecting your personal data, we will notify you within 72 hours of discovery and describe what data was affected and what steps we are taking.

Changes to This Policy and How to Contact Us

We may update this privacy policy periodically. We will notify you of material changes via email at least 30 days before they take effect. Your continued use of bos989 after the notice period means you accept the updated policy. If you do not agree to changes, you can close your account.

If you have questions about this privacy policy, want to exercise your data rights, or have a privacy concern, contact us:

  • Email: [email protected]
  • Support channels: Available via your bos989 account dashboard
  • Response time: We respond to privacy inquiries within five business days

Our privacy practices are designed to respect your personal data while allowing us to operate bos989 safely and comply with Indonesian law. Your trust is important to us, and we take data protection seriously.