bos77 Privacy Policy

bos77 ("bos77", "we", "us", or "our") operates the online gaming platform accessible at https://bos77.vu (the "Platform"). This Privacy Policy explains how we collect, use, store, share, and protect personal data belonging to individuals who visit, register on, or interact with the Platform, including members who access our sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) markets from Indonesia and other supported locations.

By registering an account on the Platform, accessing our services, or otherwise providing your personal data to bos77, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the Platform or its services.

This Privacy Policy is incorporated into and forms an integral part of bos77's Terms & Conditions. Any capitalized terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

bos77 collects personal data that falls into the following categories. We collect only the minimum data necessary for the stated purpose in each category.

bos77 collects personal data through the following channels and mechanisms:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or otherwise interact with the Platform, you directly supply personal data to bos77.
• Automated technologies: When you visit the Platform, our servers automatically record technical data including your IP address, browser type, device identifiers, and usage patterns. This occurs via server logs, cookies, pixel tags, and similar technologies (see Section 9 — Cookies for full details).
• Payment processors and banks: When you initiate a deposit or withdrawal via a supported Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the respective payment provider may share transaction confirmation data with us to reconcile your account balance.
• KYC and identity verification providers: If bos77 engages a third-party identity verification service to assist with document validation, that provider may return a verification result (pass/fail) and relevant extracted data fields (e.g., confirmed date of birth, confirmed name) to bos77.
• Fraud prevention and security services: Third-party fraud-detection tools may provide bos77 with risk scores or flagged signals associated with a device fingerprint or IP address, which bos77 uses to protect the Platform and its members.
• Publicly available sources: In limited circumstances, bos77 may cross-reference publicly available sanction lists, politically exposed persons (PEP) databases, or adverse media sources as part of its AML compliance program.

bos77 processes your personal data only where a valid legal basis exists. The primary bases on which we rely are:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to create and maintain your account, process your transactions, and deliver the gaming services you have contracted with bos77 to receive. Without this data, bos77 cannot provide the Services.
• Legal obligation: bos77 is required by applicable KYC, AML, and financial crime legislation to collect and retain identity and transaction data. This processing is non-negotiable and is not subject to withdrawal of consent.
• Legitimate interests: bos77 processes technical data and usage data on the basis of its legitimate interest in securing the Platform, preventing fraud, enforcing its Terms & Conditions, and continuously improving the quality of its services. We have assessed that these interests are not overridden by members' privacy interests in the context of a regulated gaming environment.
• Consent: Where bos77 processes personal data for optional purposes — such as sending promotional emails or SMS notifications about bonuses — we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time by updating your notification preferences within your account settings or by contacting [email protected].

bos77 uses the personal data it collects for the following specific purposes:

Account Management

We use your identity data and contact data to create, maintain, and manage your bos77 account — including authenticating your login, updating your profile, and communicating account-related notifications such as password changes, security alerts, and withdrawal confirmations.

Payment Processing

Your financial data is used to process deposits and withdrawals in Indonesian Rupiah (IDR) via Indonesian bank transfer and e-wallet channels. We verify that the payment account belongs to you (matching the name on your bos77 account) to prevent unauthorized transactions and comply with AML obligations.

Identity Verification & KYC

KYC documents and identity data are used to verify that you are who you claim to be, that you are at least 21 years of age, and that you are not subject to any sanctions that would prevent bos77 from providing services to you. KYC verification is required before any withdrawal is processed.

Fraud Prevention & Security

Technical data and usage data are analyzed — both manually and via automated systems — to detect and prevent fraud, bonus abuse, money laundering, prohibited-jurisdiction access, unauthorized account access, and other security threats. Suspicious activity may result in account restrictions, mandatory additional KYC, or referral to law enforcement.

Responsible Gaming

bos77 uses your usage data to monitor for signs of problem gambling — such as significantly increased bet frequency, large losses over a short period, or patterns consistent with chasing losses. Where such patterns are detected, our responsible gaming team may proactively reach out. Members may also use their usage data to set personal limits via the Responsible Gaming tools.

Customer Support

Communications data from your support interactions is used to investigate and resolve your queries, process complaints, and maintain a record of all support interactions for quality assurance and dispute resolution purposes.

Platform Improvement

Aggregated and anonymized usage data is used to analyze how members interact with the Platform, identify popular features, diagnose technical issues, and inform product development decisions. This analysis does not identify individual members.

Marketing & Promotions (With Consent Only)

Where you have consented, bos77 uses your contact data and preference data to send you information about relevant promotions, bonus offers, and platform news — for example, seasonal bonus campaigns around Idul Fitri, Ramadhan, or Chinese New Year (Imlek). You can opt out at any time.

bos77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below:

• Service providers acting on our behalf: We engage carefully selected third-party service providers — including KYC/identity verification companies, payment processors, fraud detection vendors, cloud hosting providers, and game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — solely to the extent necessary for them to perform services for bos77. These providers are bound by contractual obligations to protect your data and may not use it for their own independent purposes.
• Legal and regulatory disclosure: bos77 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by applicable law, a court order, or a binding regulatory direction. Where legally permissible, bos77 will endeavor to notify affected members of such disclosures in advance.
• Business transfers: In the event that bos77 undergoes a merger, acquisition, restructuring, or sale of all or a portion of its assets, your personal data may be transferred to the acquiring or successor entity. We will endeavor to notify affected members via the registered email address before any such transfer occurs and before your personal data becomes subject to a materially different privacy policy.
• Protection of rights: bos77 may disclose personal data where it believes in good faith that such disclosure is necessary to enforce its Terms & Conditions, investigate suspected fraud or AML violations, or protect the rights, property, or safety of bos77, its members, or third parties.

bos77 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as a general guide:

When personal data is no longer required and no legal basis for further retention exists, bos77 will securely delete or irreversibly anonymize the data in accordance with industry-standard data disposal procedures.

bos77 implements a layered security architecture to protect personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bos77 Platform. The connection is secured via HTTPS at all times.
• Encryption at rest for sensitive data fields stored in our databases, including financial data and identity document copies.
• Access control: Personal data is accessible only to bos77 personnel and authorized service providers who have a legitimate need to access it in order to perform their job function. All staff with access to personal data undergo data protection training.
• Multi-factor authentication for internal administrative access to systems that store personal data.
• Regular security audits and penetration testing conducted by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures: bos77 maintains a documented data breach response plan. In the event of a security incident that poses a significant risk to affected members, bos77 will notify impacted members via their registered email address as soon as practicable and within the timeframe required by applicable law.

bos77 uses cookies and similar technologies — including session tokens, local storage, and pixel tags — to operate, secure, and improve the Platform. This section explains what cookies bos77 uses and why.

What Is a Cookie?

A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the website to recognize your device on subsequent visits and recall certain preferences or session information. Cookies do not contain executable code and cannot access other data stored on your device.

Cookies bos77 Uses

Third-Party Advertising Cookies

bos77 does not deploy third-party advertising or behavioral retargeting cookies. You will not see bos77 advertisements follow you around the internet as a result of cookies set during your visit to the Platform.

Managing Cookies

You can control and delete cookies through your browser settings. However, disabling strictly necessary cookies will prevent you from logging in to or using the Platform. Disabling functional cookies will mean your preferences are not saved between sessions. bos77 is unable to provide a meaningful service without the strictly necessary cookies described above.

As a bos77 member, you have the following rights in relation to your personal data. bos77 will respond to all legitimate privacy rights requests within thirty (30) calendar days of receipt. In complex cases, bos77 may extend this period by a further thirty (30) days, with notice.

• Right of access: You may request a copy of the personal data bos77 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data bos77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. You can update many data fields directly within your account profile; for others, please contact support.
• Right to erasure ("right to be forgotten"): You may request that bos77 delete your personal data. This right is subject to overriding legal retention obligations — in particular, bos77 is legally required to retain KYC and financial transaction records for a minimum of five years after account closure and cannot delete this data even upon request during that period.
• Right to restriction of processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that bos77 restrict (but not delete) the processing of your personal data.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that bos77 provide your personal data to you in a structured, commonly used, machine-readable format (e.g., CSV).
• Right to object: You may object to processing carried out on the basis of bos77's legitimate interests. bos77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to withdraw consent: Where processing is based solely on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact bos77 at [email protected] with the subject line "Privacy Rights Request". For your security, bos77 may require you to verify your identity before processing any privacy rights request.

The bos77 Platform and all its services are strictly intended for adults aged 21 and over. bos77 does not knowingly collect personal data from any person under the age of 21. If a person under 21 attempts to register on the Platform, their registration will be rejected upon KYC age verification.

If bos77 discovers — through KYC review, a parental complaint, or any other means — that it has inadvertently collected personal data from a person under 21 years of age, it will immediately:

• Close the associated account and freeze any balance pending investigation.
• Delete all personal data associated with the underage registration as soon as legally permissible.
• Refund any net deposits made by the underage member (minus any bonuses claimed) to the original payment method.
• Where required by applicable law, report the matter to the relevant regulatory or child protection authority.

If you are a parent or guardian and believe that your child under 21 has registered on the bos77 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

bos77 operates on a globally distributed infrastructure. As a result, your personal data may be transferred to and stored on servers located outside Indonesia. Where such transfers occur, bos77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to, or higher than, that which applies in the jurisdiction from which the data originates. These safeguards may include:

• Standard contractual clauses approved by a recognized data protection authority.
• Binding data processing agreements with all third-party service providers who receive personal data.
• Transfers to jurisdictions recognized as providing an adequate level of data protection by relevant international standards.

By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia for the purposes described in this Privacy Policy. If you have questions about the specific safeguards applied to any particular transfer, please contact us at [email protected].

The bos77 Platform may contain links to third-party websites — for example, links to game provider demonstration pages or payment processor information pages. This Privacy Policy does not apply to those third-party websites, and bos77 is not responsible for the privacy practices of any external site. We encourage you to review the privacy policy of every third-party website you visit before providing any personal data to that site.

The inclusion of a link to a third-party site on the bos77 Platform does not constitute an endorsement of that site or its privacy practices by bos77.

bos77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or the structure of our business. Where a change is material — for example, a change that affects your rights or the categories of data we collect — bos77 will provide at least fourteen (14) days' advance notice via the email address registered on your account and via a prominent notification on the Platform.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. The date of the most recent revision is displayed at the top of this page. The most current version of this Privacy Policy is always available at https://bos77.vu/privacy-policy.

If you do not agree with any material change to this Privacy Policy, you must discontinue use of the Platform and may request account closure by contacting [email protected] before the revised policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bos77 processes your personal data — including any request to exercise the privacy rights described in Section 10 — please contact the bos77 Privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy requests: "Privacy Rights Request" or "Privacy Policy Inquiry"
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays
• Response Time: Within 30 calendar days of receipt of your request

bos77 is committed to working with you to resolve any privacy concern fairly and transparently. If you are not satisfied with our response, you may have the right to escalate your complaint to a relevant data protection authority or supervisory body in your jurisdiction.