Privacy Policy

The following terms carry the meanings set out below throughout this Privacy Policy:

2.1 This Privacy Policy applies to all Personal Data collected by bos4d in connection with the operation of the Platform, regardless of the device or method used to access it — including desktop browsers, mobile browsers, and any future dedicated applications.

2.2 This Policy applies to all Players, including registered account holders and unregistered visitors who browse the Platform without creating an account.

2.3 The bos4d Platform is designed and marketed primarily for players resident in Indonesia. Where Indonesian data protection norms and international best-practice standards differ, bos4d applies the higher standard of protection in all cases.

2.4 This Privacy Policy should be read alongside the bos4d Terms & Conditions, which set out the broader contractual relationship between bos4d and each Player. In the event of any conflict between the two documents on a privacy matter, this Privacy Policy takes precedence.

bos4d collects personal data across several categories. The table below summarises the categories of data collected and a representative example of each:

4.1 Directly from You. The majority of your personal data is provided directly by you when you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact our support team, or submit a feedback form on the Platform.

4.2 Automatically. When you visit or use the Platform, our servers and analytics systems automatically record Technical Data and Usage Data, including your IP address, browser fingerprint, device identifiers, and session activity. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 8.

4.3 From Third Parties. bos4d may receive supplementary identity and fraud-risk data from third-party identity verification providers and fraud prevention agencies engaged to support the KYC process. Payment data may also be received from partner payment processors when transactions are initiated or completed.

4.4 From Public Sources. In specific cases where fraud prevention or compliance obligations require it, bos4d may cross-reference data against publicly available records, including publicly accessible commercial registry data.

bos4d processes your personal data only for the following defined purposes:

• Account Registration & Management: Creating, maintaining, and securing your bos4d account; enabling login authentication; processing account closure requests.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and confirming your identity to satisfy anti-money-laundering and responsible gaming obligations.
• Payment Processing: Facilitating deposits and withdrawals in Indonesian Rupiah (IDR) via local banks and e-wallets; detecting and preventing payment fraud.
• Platform Operation & Improvement: Diagnosing technical issues, optimising page performance, personalising the player experience, and developing new features based on aggregated usage patterns.
• Customer Support: Responding to inquiries, resolving disputes, processing responsible gaming requests such as deposit limits and self-exclusion, and maintaining a record of support interactions.
• Responsible Gaming: Monitoring for indicators of problem gambling, applying player-requested account restrictions, and directing at-risk players to appropriate support resources.
• Marketing & Promotions: Sending you information about promotions, bonuses, and seasonal offers (such as Idul Fitri / Lebaran and Ramadhan specials) where you have provided consent to receive such communications. You may withdraw consent at any time.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable international gaming, anti-money-laundering, and data protection regulations; responding to lawful requests from competent authorities.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, account abuse, bonus misuse, collusion, and other prohibited conduct as defined in the Terms & Conditions.

For each processing purpose identified in Section 5, bos4d relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil the Terms & Conditions you agreed to when registering your account, including account management, payment processing, and KYC verification.
• Legitimate Interests: Processing necessary for bos4d's legitimate business interests, including fraud prevention, platform security, and product improvement — where those interests do not override your fundamental privacy rights.
• Legal Obligation: Processing required to comply with applicable international gaming regulations, anti-money-laundering requirements, or lawful requests from regulatory or law enforcement authorities.
• Consent: Processing based on your explicit consent, most notably for marketing communications. You may withdraw consent at any time without affecting the legality of any processing performed prior to withdrawal.

7.1 Principle of Minimum Disclosure. bos4d shares your personal data with third parties only to the extent strictly necessary for the purposes described in this Policy. All third-party recipients are contractually obligated to handle your data securely and in accordance with applicable data protection standards.

7.2 Categories of Recipients. Your data may be shared with the following categories of third parties:

• Payment Processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and age-verification services engaged to validate the identity documents you submit.
• Fraud Prevention Agencies: Organisations that provide fraud scoring, device intelligence, and risk-assessment services to protect the Platform from abuse.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe may receive session-level technical data necessary to render and settle games correctly.
• Legal & Regulatory Authorities: Competent authorities where disclosure is required by law or in response to a valid legal instrument. bos4d will, where legally permitted, notify affected players before such disclosure.
• Platform Analytics Providers: Aggregated, anonymised Usage Data may be shared with analytics providers to assist with Platform performance analysis. No individually identifiable data is shared for this purpose.

7.3 No Sale of Data. bos4d does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes under any circumstances.

8.1 bos4d uses cookies and similar client-side storage technologies to operate and improve the Platform. The following categories of cookies are in use:

8.2 You may manage your cookie preferences through your browser settings. Disabling analytics or preference cookies will not prevent you from accessing the Platform but may affect some personalised features.

8.3 bos4d does not use third-party advertising cookies or cross-site behavioural tracking technologies for the purpose of delivering targeted advertising on external websites.

9.1 bos4d retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and no longer than required by applicable legal and regulatory obligations.

9.2 The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, to satisfy anti-money-laundering regulatory requirements.
• Transaction and Betting Records: Retained for a minimum of five (5) years from the date of each transaction to support regulatory audits, dispute resolution, and responsible gaming monitoring.
• KYC Verification Documents: Retained for the period required by applicable international gaming regulations, typically five (5) years following the end of the customer relationship.
• Customer Support Communications: Retained for a maximum of three (3) years from the date of the interaction unless a longer period is required in connection with an unresolved dispute.
• Technical and Usage Data (Logs): Retained for a maximum of thirteen (13) months from the date of collection, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent lifecycle.

9.3 Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to any individual.

As a bos4d player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the support team via live chat or at [email protected]. bos4d will respond within 30 days of receiving a valid request.

11.1 bos4d implements a layered suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all Platform pages and API endpoints
• Encrypted storage of passwords using industry-standard hashing algorithms — bos4d staff cannot read your password
• Access controls restricting internal system access to authorised personnel only, on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Real-time fraud and anomaly detection systems monitoring for suspicious account activity
• Secure data centres with physical access controls and environmental safeguards

11.2 Despite these measures, no internet transmission or electronic storage system is 100% secure. If you have reason to believe that your account has been compromised, contact bos4d support immediately via live chat so that protective measures can be applied without delay.

11.3 In the event of a data security incident that poses a risk to your rights and freedoms, bos4d will notify affected players without undue delay and will take all necessary steps to contain the incident, assess its impact, and prevent recurrence.

12.1 The bos4d Platform is strictly for adults aged 21 and over. bos4d does not knowingly collect, store, or process personal data belonging to persons under the age of 21.

12.2 If bos4d discovers or has reasonable grounds to suspect that a registered account belongs to a person under 21, the account will be suspended immediately. Any balance will be withheld pending investigation and, where confirmed, returned to the originating payment method after deducting any bonuses received.

12.3 If you believe a minor has accessed the Platform using your account or another account, please contact bos4d support immediately. Refer to the Responsible Gaming page for guidance on parental controls and access prevention tools.

13.1 bos4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, Platform functionality, or applicable legal and regulatory requirements.

13.2 When material changes are made to this Policy, bos4d will notify registered Players via the email address on file and/or via a prominent notice on the Platform homepage. The updated Policy will be published at https://bos4d.bio/privacy-policy with the revised effective date clearly displayed at the top of the document.

13.3 Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to remain informed about how your data is protected.

14.1 For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the bos4d Data Support team through the following channels: