Privacy Policy — bos500

Welcome to the bos500 Privacy Policy. This document explains how bos500 ("we", "us", "our") collects, uses, discloses, and protects the personal information of individuals ("you", "your") who access or use our online betting and gaming platform at https://bos500.cam (the "Platform").

By registering an account on bos500 or using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, please do not use the Platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policy. In the event of any conflict between this Privacy Policy and our Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.

For the purposes of applicable data protection laws, bos500 is the data controller responsible for the processing of your personal information. We determine the purposes and means of processing your data in accordance with this Privacy Policy.

If you have any questions, concerns, or requests regarding the handling of your personal data, please contact our Data Protection Officer at:

• Email: [email protected] (subject line: "Privacy Inquiry")
• Response Time: We aim to respond to all privacy-related inquiries within 14 business days.

bos500 collects several categories of personal information to provide, maintain, and improve our services. The types of data we collect include:

3.1 Account Registration Data

When you create a bos500 account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Email address or mobile phone number
• Residential address in Indonesia
• Username and encrypted password
• Preferred currency (IDR) and language (English)

3.2 Identity Verification (KYC) Documents

To comply with regulatory requirements and prevent fraud, we may request:

• Government-issued photo ID (Indonesian National Identity Card / KTP, passport, or driver's license / SIM)
• Proof of address (utility bill, bank statement, or official government correspondence issued within the past 90 days)
• Selfie photograph holding your ID document

3.3 Financial & Transaction Data

To process deposits and withdrawals, we collect:

• Bank account details (bank name, account holder name, account number) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Danamon
• E-wallet account details (registered phone number or account ID) for OVO, DANA, GoPay, ShopeePay, or LinkAja
• Transaction history (deposit amounts, withdrawal requests, timestamps, payment method used)
• IP address and device information associated with each transaction for fraud detection

3.4 Gameplay & Betting Data

To operate the Platform and monitor responsible gaming, we automatically collect:

• Betting history (bet amounts, selections, odds, outcomes, timestamps)
• Game session data (games played, session duration, win/loss records)
• Bonus usage and wagering progress
• Responsible gaming settings (deposit limits, self-exclusion periods)

3.5 Technical & Usage Data

When you access the Platform, we automatically collect:

• IP address, browser type, operating system, device model
• Pages visited, features used, time spent on each page
• Referral source (how you arrived at bos500.cam)
• Cookies and similar tracking technologies (see Section 10)

3.6 Communications & Support Data

If you contact our customer support team, we collect:

• Content of your inquiries, complaints, or feedback
• Live chat transcripts, email correspondence, or phone call recordings (with prior notice)
• Survey responses or feedback forms

bos500 processes your personal information for the following purposes:

• Account Management: To create, maintain, and secure your bos500 account; to authenticate your identity when you log in; to manage your account settings and preferences.
• Transaction Processing: To process deposits, withdrawals, and bet settlements; to verify that payment methods belong to you; to comply with anti-money laundering (AML) regulations.
• Identity Verification (KYC): To verify that you are at least 21 years of age and a resident of Indonesia; to prevent identity theft, fraud, and unauthorized account access; to comply with licensing and regulatory requirements.
• Service Provision: To provide access to sports betting, live casino, togel (numbers lottery), and slot gaming products; to calculate odds, settle bets, and credit winnings to your account.
• Responsible Gaming: To monitor your gambling behavior for signs of problem gambling; to enforce deposit limits, session time-outs, and self-exclusion requests; to provide access to responsible gaming tools and support resources.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, bonus abuse, collusion, and unauthorized access; to investigate suspected violations of our Terms & Conditions.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance; to improve the quality of our support services.
• Platform Improvement: To analyze usage patterns and optimize the user experience; to develop new features and gaming products; to conduct research and data analytics.
• Marketing Communications: To send you promotional offers, bonuses, and updates about bos500 services (only if you have opted in to receive marketing emails). You can unsubscribe at any time using the link provided in every marketing email.
• Legal Compliance: To comply with applicable laws, regulations, licensing conditions, court orders, and lawful requests from government authorities; to enforce our legal rights and defend against legal claims.

Under applicable data protection laws, bos500 processes your personal information on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions). This includes account creation, transaction processing, bet settlement, and customer support.
• Legal Obligation: Processing is necessary to comply with legal and regulatory obligations, such as KYC/AML requirements, age verification, tax reporting, and responding to lawful government requests.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, platform improvement, data analytics, and defending legal claims — provided that these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, we obtain your explicit consent before processing certain data categories, such as marketing communications, optional cookies, or sensitive personal information. You may withdraw consent at any time by contacting support.

bos500 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your data only with the following categories of third-party service providers, and only to the extent necessary to operate the Platform:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors have access to transaction data and bank/e-wallet details required to complete payments.
• Identity Verification Providers: To verify your KYC documents and confirm your identity. These providers process your name, date of birth, ID documents, and proof of address under strict confidentiality agreements.
• Game Providers: To deliver sports betting data, live casino streams (Evolution Gaming, Pragmatic Play Live), slot games (Pragmatic Play, NetEnt, Microgaming), and togel lottery results. These providers may receive anonymized or pseudonymized gameplay data.
• Cloud Hosting & Data Storage: To securely store your account data, transaction history, and KYC documents on cloud servers. Our hosting providers are contractually obligated to maintain strict security standards and comply with data protection laws.
• Customer Support Tools: To provide live chat and email support services. Support staff have access to your account details, transaction history, and communication records solely for the purpose of assisting you.
• Analytics & Performance Monitoring: To analyze platform usage, identify technical issues, and optimize user experience. We use anonymized or aggregated data wherever possible to protect your privacy.
• Legal & Regulatory Authorities: To comply with court orders, subpoenas, or lawful requests from government agencies. We disclose personal data only when legally required and to the minimum extent necessary.

All third-party service providers are required to sign data processing agreements that impose strict confidentiality and security obligations. They are prohibited from using your personal data for any purpose other than providing services to bos500.

bos500 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal data associated with active accounts is retained indefinitely while your account remains open and in use.
• Closed Accounts: After voluntary account closure or termination, we retain transaction history, KYC documents, and account records for a minimum of 5 years to comply with anti-money laundering (AML) regulations and tax reporting requirements.
• Financial Records: Deposit and withdrawal records are retained for at least 7 years from the date of the transaction, in accordance with Indonesian financial recordkeeping standards.
• Responsible Gaming Data: Self-exclusion records are retained for the duration of the exclusion period plus 5 additional years to prevent circumvention.
• Marketing Consent: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you in the future.
• Anonymization: After the applicable retention period expires, personal data is either securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

bos500 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. This prevents interception by third parties during transmission.
• Encrypted Data Storage: Sensitive personal information (passwords, KYC documents, payment details) is encrypted at rest using AES-256 encryption on our secure servers.
• Password Hashing: User passwords are never stored in plain text. We use industry-standard bcrypt hashing with salting to protect your login credentials.
• Access Controls: Access to personal data is restricted to authorized bos500 employees and contractors who require access to perform their job duties. All personnel are bound by strict confidentiality agreements.
• Two-Factor Authentication (2FA): Members can enable 2FA on their accounts to add an extra layer of security against unauthorized login attempts.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses.
• Incident Response Plan: In the event of a data breach, we have established procedures to promptly investigate the incident, notify affected users, and report to relevant authorities as required by law.

While we take all reasonable precautions to protect your data, no method of electronic storage or transmission is 100% secure. You are responsible for maintaining the confidentiality of your login credentials and for any activity that occurs under your account. Please notify us immediately at [email protected] if you suspect any unauthorized access to your account.

Subject to applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format upon request.
• Right to Rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most account details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data, subject to legal retention requirements. We will honor deletion requests to the extent permitted by law.
• Right to Restriction of Processing: You have the right to request that we limit the processing of your personal data in certain circumstances, such as while we investigate a data accuracy dispute.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to transmit it to another service provider, where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we have compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: If you believe we have mishandled your personal data, you have the right to lodge a complaint with your local data protection authority or supervisory body.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond to your request within 30 days and may require identity verification to prevent unauthorized access to your data.

bos500 uses cookies and similar tracking technologies to enhance your user experience, remember your login sessions, and analyze platform performance. A cookie is a small text file stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function properly. These cookies enable core features such as account login, session management, and secure transactions. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymized information about how you use the Platform, such as which pages you visit most frequently and whether you encounter errors. This data helps us optimize site performance.
• Functional Cookies: Remember your preferences and settings (e.g., language, currency, username) so you don't have to re-enter them on each visit.
• Analytics Cookies: Track user behavior to generate aggregate statistics about site usage. We use this data to understand traffic patterns and improve the user experience.

Managing Cookies:

You can manage or delete cookies through your browser settings. Most browsers allow you to block all cookies, accept only first-party cookies, or receive a notification before a cookie is set. Please note that disabling essential cookies may impair the functionality of the Platform and prevent you from accessing certain features.

For more information on how to manage cookies in popular browsers, visit:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Privacy, search, and services > Cookies and site permissions

bos500 operates internationally and may transfer your personal data to servers located outside of Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer data internationally, we implement appropriate safeguards to protect your information, including:

• Standard Contractual Clauses (SCCs) approved by international data protection authorities.
• Ensuring that third-party service providers adhere to recognized data protection frameworks and security standards.
• Encryption of data in transit and at rest to prevent unauthorized access during cross-border transfers.

By using the bos500 Platform, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

bos500 is an adult-only gambling platform. Our services are not directed to individuals under the age of 21, and we do not knowingly collect personal information from minors. If we become aware that a user is under 21 years of age, we will immediately close their account, void any bets, and delete their personal data in accordance with applicable law.

If you are a parent or guardian and believe your child has provided personal information to bos500, please contact us immediately at [email protected] so we can take appropriate action.

bos500 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on the bos500 homepage.
• Sending an email notification to the address associated with your account.
• Displaying an in-app notification when you next log in to your account.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. We encourage you to review this page periodically to stay informed about how we protect your personal information.

Continued use of the bos500 Platform after any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you must cease using the Platform and may request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer using the following methods:

• Email: [email protected] (subject line: "Privacy Inquiry" or "Data Protection Request")
• Live Chat: Available 24/7 on the bos500 website
• Response Time: We aim to respond to all privacy-related inquiries within 14 business days. Complex requests may require additional time, and we will keep you informed of our progress.

For data subject access requests (DSAR), deletion requests, or complaints about data handling, please provide the following information to expedite processing:

• Your full name and bos500 username
• The email address associated with your account
• A clear description of your request or concern
• Proof of identity (for security purposes, we may require a copy of your government-issued ID)