bos69 is committed to protecting the privacy and personal data of every player who uses our Platform. This Privacy Policy sets out what data we collect, how we use it, with whom we share it, how long we retain it, and what rights you have over your own information. Please read this document carefully before registering an account.
All data in transit is encrypted end-to-end
We never sell personal data to third parties
Access, correct, or delete your data on request
Data stored on audited, access-controlled servers
Unsubscribe from promotional emails at any time
Data kept only as long as legally necessary
The following terms have the meanings set out below wherever they appear in this Privacy Policy:
bos69 is the Data Controller responsible for the Personal Data of all Players who interact with the Platform. As Data Controller, bos69 determines the purposes for which your Personal Data is collected and the manner in which it is processed, stored, and shared with authorised third parties.
If you have questions about this Privacy Policy or wish to exercise any of your data rights described in Section 10, please contact our Data Protection team using the contact details provided in Section 14 of this document. All data rights requests addressed to bos69 are handled by a designated Privacy Officer and acknowledged within 5 business days (WIB).
This Privacy Policy applies exclusively to data collected and processed through the bos69 Platform. It does not govern the privacy practices of any third-party game studios, payment providers, or external websites that may be accessible through links from this Platform.
bos69 collects Personal Data across several categories depending on how you interact with the Platform. The table below summarises the categories of data collected and their purpose:
| Data Category | Examples | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, KTP Nasional number, selfie photograph | Account registration & KYC verification |
| Contact Data | Email address, phone number, residential address | Account registration & KYC verification |
| Financial Data | Bank account number (BCA, BRI, BNI, Mandiri, etc.), e-wallet ID (OVO, DANA, GoPay), transaction history, deposit/withdrawal amounts in IDR | Deposit & withdrawal processing |
| Usage Data | Pages visited, time on site, features accessed, games played, wagers placed, session duration | Platform analytics & responsible gaming monitoring |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone (WIB/WITA/WIT) | Automatic collection on every Platform visit |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opted-in or opted-out status for promotional emails, notification preferences | Account settings & email preference centre |
bos69 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes beyond the KYC selfie verification required by our licensing obligations.
The majority of Personal Data bos69 holds is provided by you directly during the following interactions:
When you access the Platform, certain Technical Data and Usage Data is collected automatically via server logs, cookies, and browser-side analytics tools. This includes your IP address, the time and date of your visit, which pages you navigated, the referral URL that brought you to the Platform, and device characteristics. This data is collected regardless of whether you are logged into an Account. For more detail on cookies, see Section 11.
bos69 may receive Personal Data about you from third-party sources in the following limited circumstances:
bos69 uses Personal Data only for the purposes stated at the time of collection or for purposes that are compatible with those original purposes. The primary uses are:
No Profiling for Third-Party Commercial Purposes: bos69 does not use your Personal Data to build commercial profiles that are shared with or sold to third-party advertisers, data brokers, or marketing agencies. Your data stays within the bos69 ecosystem.
bos69 processes your Personal Data only where a valid legal basis exists. The applicable legal bases for our primary processing activities are:
bos69 does not sell, rent, or trade your Personal Data to any third party for their independent commercial use. We share Personal Data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:
All third-party Data Processors used by bos69 are contractually bound to process Personal Data only under our documented instructions, to maintain appropriate technical security measures, and to return or delete data upon the termination of their service agreement with bos69.
bos69 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of Account + 5 years post-closure | AML and gaming licence regulatory requirement |
| KYC identity documents | Duration of Account + 5 years post-closure | Regulatory compliance and fraud audit trail |
| Transaction records (deposits / withdrawals) | 7 years from transaction date | Financial record-keeping under international AML standards |
| Wagering history | 5 years from wager date | Dispute resolution and responsible gaming audit |
| Customer support correspondence | 3 years from last interaction | Quality assurance and dispute resolution |
| Technical / usage logs | 13 months from collection | Security monitoring and platform analytics |
| Marketing preferences | Until opt-out request or account closure | Consent management |
Upon the expiry of the relevant retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised, aggregated data (from which individual identities cannot be reconstructed) may be retained indefinitely for statistical and platform improvement purposes.
bos69 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our current security architecture includes:
No system is 100% secure. While bos69 uses industry-standard measures to protect your data, we cannot guarantee absolute security against all threats. In the event of a data breach that materially affects your rights and freedoms, we will notify you and relevant authorities in accordance with our legal obligations, within the timeframes required by applicable law.
As a Player whose Personal Data is processed by bos69, you have the following rights over your information. To exercise any of these rights, contact our Privacy Officer using the details in Section 14. We will respond to all valid requests within 30 calendar days.
You may request a copy of all Personal Data bos69 holds about you, along with information about how it is processed, stored, and shared.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it promptly.
You may request deletion of your Personal Data where it is no longer needed for the purpose it was collected, subject to our legal retention obligations.
You may ask us to restrict processing of your data in certain circumstances, such as where you contest its accuracy while we investigate a rectification request.
Where processing is based on your consent or a contract, you may request your Personal Data in a structured, commonly used, machine-readable format for transfer to another controller.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease that processing unless we can demonstrate compelling legitimate grounds.
Please note that some rights are subject to exceptions — for example, we cannot erase data that we are legally required to retain under our AML and gaming licence obligations. Where a right cannot be fully exercised, we will explain the reason clearly and in writing.
bos69 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve performance, and — where you have consented — analyse usage patterns. The categories of cookies used are:
You may manage or delete cookies at any time through your browser's settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bos69 Account. Withdrawing analytics cookie consent does not affect the lawfulness of processing that occurred before withdrawal.
21+ Age Restriction: The bos69 Platform is strictly for adults aged 21 and above. We do not knowingly collect Personal Data from any individual under the age of 21. If we become aware that Personal Data has been submitted by or on behalf of a person under 21, we will delete that data immediately and permanently close the associated Account.
bos69 employs age verification as part of its mandatory KYC process. All Players are required to submit documentary proof of age — specifically their KTP Nasional — before any withdrawal is authorised. Accounts where the Player's age cannot be verified to our satisfaction will be suspended pending further verification or permanently closed.
If you are a parent or guardian and believe that a person under 21 in your care has registered on bos69, please contact our support team immediately at [email protected]. We will investigate and take prompt action to close the account and return any deposited funds to the original payment source.
bos69 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or Platform functionality. When material changes are made — such as a new category of data being collected, a new third-party processor being engaged, or a significant change to how we use existing data — we will notify registered Players by email to the address on their Account at least 14 calendar days before the change takes effect.
Non-material changes (such as typographical corrections, clarifications, or restructuring with no substantive change in meaning) may be made without advance notice but will be reflected in the "Last Updated" date at the top of this page.
Your continued use of the bos69 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, please cease using the Platform and contact us to request Account closure and data deletion, subject to our retention obligations.
For any questions, concerns, or formal data rights requests relating to this Privacy Policy or the processing of your Personal Data by bos69, please use the following contact details. All details are provided as plain text only and are not clickable links.
Our Terms & Conditions detail your account obligations, while our Responsible Gaming page outlines the tools available to help you stay in control. The FAQ covers the most common account and security questions.