At bos898, your privacy is a fundamental right, not an afterthought. This policy explains exactly what data we collect, why we collect it, how we protect it, and what choices you have over your personal information.
Last Updated: January 1, 2026 | Effective Date: January 1, 2026
This Privacy Policy ("Policy") describes how bos898 ("bos898," "we," "us," or "our"), the online sports-betting and casino platform operating at bos898.cam, collects, uses, discloses, retains, and protects personal data relating to its users ("you" or "your") in connection with all services we offer — including sports betting (covering BRI Liga 1, EPL, La Liga, Champions League, and other competitions), live casino games, togel (Indonesia's traditional numbers lottery), sabung ayam (cockfighting betting), bandar bola (football betting operator markets), slot games, and any other gaming products accessible through our website or mobile applications.
This Policy applies to all personal data processed by bos898 regardless of the medium through which it is collected — our website, mobile app, customer support channels, email correspondence, WhatsApp, or live chat. By registering an account, using any bos898 service, or continuing to browse our platform after this Policy has been updated, you acknowledge that you have read and understood its contents.
If you are located in Indonesia, you have additional rights under Indonesian data protection legislation, including Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi / UU PDP). We are committed to full compliance with the UU PDP and all applicable regulations issued thereunder.
bos898 operates specifically for the Indonesian market. All data processing activities described in this Policy take place within the framework of Indonesian data protection law. You must be at least 21 years of age to create an account and use our services. If you are under 21, please do not submit any personal data to us.
If you have questions or concerns about this Policy or your personal data, contact our Data Protection team at: [email protected] (plain text — not a clickable link).
For the purposes of this Policy, the following definitions apply:
When you register an account, use our services, or contact our support team, you provide us with personal data including:
When you access bos898 through our website or mobile application, we automatically collect certain technical and behavioral data:
In some cases, bos898 receives personal data from trusted third parties, including:
bos898 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are:
bos898 uses the personal data we collect for the following clearly defined purposes:
bos898 does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent strictly necessary for each purpose:
| Recipient Category | Purpose of Sharing | Legal Basis |
|---|---|---|
| Payment Processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay networks) | Processing deposits and withdrawals in IDR | Contract Performance |
| KYC / Identity Verification Providers | Verifying age (21+) and identity against Indonesian national databases | Legal Obligation |
| Fraud Prevention & AML Services | Screening transactions and accounts against watchlists; detecting fraudulent activity | Legal Obligation / Legitimate Interests |
| Game Technology Providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe) | Delivering licensed game content; maintaining RNG certification records | Contract Performance |
| IT Infrastructure & Cloud Providers | Hosting platform data on secure servers; providing CDN and DDoS protection | Legitimate Interests |
| Customer Support Platform Providers | Operating live chat, ticketing, and WhatsApp support tools | Contract Performance |
| Regulatory / Law Enforcement Authorities | Responding to lawful requests, court orders, or regulatory investigations | Legal Obligation |
| Analytics Providers | Aggregated, pseudonymized platform usage analysis to improve services | Legitimate Interests / Consent |
All third parties with whom we share personal data are required to process that data solely for the stated purpose, to maintain appropriate technical and organizational security measures, and to comply with applicable Indonesian data protection law. We do not authorize any third party to use your personal data for their own independent marketing or commercial purposes.
Some of our third-party service providers — including cloud hosting infrastructure, game technology partners, and analytics platforms — may process personal data on servers located outside Indonesia. Where such transfers occur, bos898 takes appropriate safeguards to ensure your data receives an equivalent level of protection to that afforded under Indonesian law, including implementing contractual data transfer agreements with all overseas recipients that impose binding data protection obligations consistent with the UU PDP.
We only transfer data internationally where it is necessary to deliver our services or comply with legal obligations, and we maintain a register of all cross-border data flows. You may request information about specific transfer mechanisms by contacting our Data Protection team.
bos898 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention schedule is as follows:
When retention periods expire, personal data is securely deleted or permanently anonymized so that it can no longer be associated with any individual. Backup copies are purged on the same schedule as live data, with a maximum delay of 90 days for backup rotation cycles.
Under Indonesian data protection law (UU PDP) and bos898's own privacy commitments, you have the following rights in relation to your personal data:
You may request a copy of all personal data we hold about you, along with information about how it is being processed, its source, and with whom it has been shared.
If any personal data we hold is inaccurate or incomplete, you have the right to request its correction. You may update most account details directly in your profile settings.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
You may request that we temporarily restrict processing of your data — for example, while a rectification request is being assessed or a dispute is under investigation.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
You may object to processing based on legitimate interests or for direct marketing purposes. Marketing objections will be honored immediately upon receipt of your request.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the relevant Indonesian data protection authority.
To exercise any of these rights, contact our Data Protection team by email at [email protected] (plain text — not a clickable link) with the subject line "Data Subject Request." We will acknowledge your request within 3 business days and aim to fulfill it within 30 calendar days. In complex cases this may be extended by a further 30 days, of which we will notify you in advance.
We may need to verify your identity before processing a data subject request. Please include your registered email address, account username, and a copy of your Indonesian ID with your request to expedite verification.
bos898 uses the following categories of cookies and similar tracking technologies on our website and mobile platform:
You can control and manage cookie preferences through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or receive a notification before a cookie is set. Please be aware that blocking strictly necessary cookies will prevent you from logging in to your bos898 account and using core platform features.
For mobile app users, you can manage data collection preferences through your device's operating system privacy settings (iOS Privacy settings or Android app permissions).
bos898 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our security framework includes:
While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are also responsible for keeping your login credentials confidential and for using a strong, unique password for your bos898 account.
bos898 services are strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes date-of-birth verification, and our KYC process requires submission of government-issued identification to confirm age.
If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will immediately suspend the associated account, delete all personal data collected from that individual, and refund any deposits made (minus any bonuses received, which will be forfeited). If you have reason to believe that a minor is using a bos898 account, please contact us immediately at [email protected] (plain text — not a clickable link).
bos898 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, new services, evolving legal requirements, or regulatory guidance. When we make material changes, we will post the updated Policy on this page with a revised "Last Updated" date and, where the changes significantly affect your rights, notify you directly via email or in-app notification.
We encourage you to review this Policy periodically. Continued use of bos898 services after a revised Policy has been posted constitutes your acceptance of the updated terms. If you do not agree with a material change, you have the right to close your account and request deletion of your personal data in accordance with Section 9 of this Policy.
This Privacy Policy is governed by and construed in accordance with the laws of Indonesia, including Law No. 27 of 2022 on Personal Data Protection (UU PDP) and all subordinate regulations. Any dispute arising from or in connection with this Policy shall be subject to the exclusive jurisdiction of the Indonesian courts.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team through the following channels:
Our Data Protection team operates during Western Indonesia Time (WIB, UTC+7) business hours and aims to acknowledge all privacy-related inquiries within 3 business days and to resolve them within 30 calendar days.
Six core principles that underpin how bos898 handles your personal data
All data transmitted between your device and our servers is protected by TLS 1.3 encryption. Sensitive data at rest — including your KTP scan, bank account number, and payment history — is secured with AES-256 encryption, the same standard used by major Indonesian banks such as BCA and Mandiri.
bos898 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or any commercial entity for their own purposes. Your data is used solely to operate your account, deliver our services, comply with legal obligations, and — with your consent — send you relevant bos898 promotions.
We are fully committed to compliance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP). This means transparent processing, meaningful consent, enforceable data subject rights, and prompt notification in the unlikely event of a data breach that affects you.
Your bos898 account settings give you direct control over notification preferences, marketing opt-ins, and cookie choices. For more significant rights — data access, rectification, erasure, portability, or objection — simply contact our Data Protection team and we will fulfill your request within 30 days.
We keep your data only as long as necessary. Account and transaction records are retained for 5 years post-closure as required by AML law. Marketing data is deleted as soon as you withdraw consent. When retention periods end, data is securely deleted or permanently anonymized — no indefinite storage.
Our Data Protection team is available 24/7 to answer privacy questions, process data subject requests, and address any concerns about how your information is handled. We respond to all privacy inquiries within 3 business days and resolve most requests within 30 calendar days — faster than the legal minimum.
Our Data Protection team is ready to help. Whether you want to access your data, update your preferences, or simply learn more about how bos898 protects your information, we are here for you — 24 hours a day, 7 days a week.