Privacy Policy

1 Introduction

boz388 ("we", "us", "our") operates the online betting platform accessible at https://boz388.cam (the "Platform"). We are committed to protecting the personal information of all Users who interact with our Platform, whether during registration, active play, customer support, or any other engagement.

This Privacy Policy describes our information practices in connection with the boz388 Platform. It applies to all personal data we collect about you, regardless of the channel through which it is provided — including our website, mobile interface, live chat, and email communications.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between boz388 and its Users. By registering or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Definitions

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including name, identification number, location data, online identifiers, or factors specific to their physical, economic, or social identity.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means boz388, the entity that determines the purposes and means of processing Personal Data on the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of boz388 under a formal data processing agreement.
• "User" / "You" means any individual who accesses or uses the boz388 Platform.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and analytical data.
• "KYC" means Know Your Customer, the identity verification process required to confirm User eligibility and comply with anti-money-laundering obligations.

3 Data We Collect

boz388 collects the following categories of Personal Data:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (to verify you are 21 years of age or older).
• Residential address in Indonesia (including city — Jakarta, Surabaya, Bandung, Medan, Bali, and other regions).
• Email address and mobile phone number.
• Indonesian National Identity Card (KTP) number or passport number.

3.2 Financial Data

• Bank account details for supported Indonesian banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Transaction history including deposits, withdrawals, and bet settlements (all in IDR / Rp).

3.3 Account & Activity Data

• Username and encrypted password.
• Betting and gaming history, including sports markets, live casino sessions, and other Platform products used.
• Bonus and promotional activity.
• Customer support interaction logs.

3.4 Technical & Device Data

• IP address and approximate geolocation.
• Device type, operating system, browser type, and version.
• Session timestamps, page visit logs, and clickstream data.
• Cookie identifiers and similar tracking technologies.

3.5 KYC Documentation

• Copies of government-issued identity documents (KTP, passport).
• Proof of address documentation (utility bill, bank statement).
• Identity selfie photographs submitted during verification.

4 How We Collect Data

We collect Personal Data through the following channels and methods:

• Direct submission: Information you voluntarily provide during account registration, KYC verification, transaction processing, or when contacting our support team.
• Automated technologies: Data collected automatically as you navigate and interact with the Platform, including via cookies, web beacons, pixel tags, and server logs.
• Third-party payment processors: Financial transaction data relayed to us by our payment partners when you initiate a deposit or withdrawal.
• Identity verification services: Data returned by third-party KYC and anti-fraud service providers during the document verification process.
• Analytics platforms: Aggregated behavioral data from analytics tools used to improve Platform performance and user experience.

5 Purpose of Processing

boz388 processes your Personal Data for the following specific, explicit, and legitimate purposes:

6 Legal Basis for Processing

boz388 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to enter into and perform the User agreement — including account creation, payment processing, and bet settlement.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including KYC, anti-money-laundering (AML), and counter-terrorism-financing (CTF) obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where these interests are not overridden by your fundamental rights.
• Consent: Where we send you marketing communications or deploy non-essential cookies. You may withdraw consent at any time without affecting processing already carried out.

7 Sharing Your Personal Data

boz388 does not sell, rent, or trade your Personal Data to any third party. We share data only in the following limited circumstances:

• Payment processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial data necessary to process your transactions.
• KYC and fraud prevention providers: Third-party identity verification services receive document copies and identity data solely for the purpose of verifying your eligibility to use the Platform.
• Technology and hosting providers: Infrastructure and cloud service providers who host and maintain the Platform under binding data processing agreements that restrict their use of your data.
• Game and content providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and others) may receive your session identifier to deliver games and record outcomes. These providers do not receive your full identity data.
• Legal and regulatory authorities: We may disclose Personal Data to law enforcement, regulatory bodies, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights and safety of boz388 or its Users.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets, your Personal Data may be transferred to the acquiring entity, subject to the same protections described in this Policy.

8 International Data Transfers

As boz388 operates internationally, your Personal Data may be transferred to and stored on servers located outside Indonesia. Where such transfers occur, we take appropriate steps to ensure your data receives an equivalent level of protection, including:

• Entering into data processing agreements incorporating internationally recognized standard contractual clauses.
• Assessing the adequacy of data protection standards in the destination country before any transfer.
• Implementing additional technical safeguards such as end-to-end encryption where applicable.

By using the boz388 Platform, you acknowledge that your Personal Data may be transferred internationally in accordance with this clause.

9 Data Retention

boz388 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal retention requirements:

• Account data: Retained for the duration of your Account's existence and for a minimum of five (5) years following Account closure, to satisfy AML and legal record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulation.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support logs: Retained for three (3) years from the date of each interaction.
• Technical and device data: Retained for up to thirteen (13) months in identifiable form, after which it is anonymized or deleted.
• Marketing consent records: Retained for the duration of the consent and for two (2) years following withdrawal of consent.

When Personal Data is no longer required, we securely delete or anonymize it in accordance with our internal data lifecycle procedures.

10 Security Measures

boz388 employs a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive data fields including passwords (hashed using bcrypt), financial identifiers, and KYC documents.
• Firewalled and access-controlled server environments with role-based access controls limiting staff exposure to Personal Data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication enforced for administrative access to backend systems.
• 24/7 intrusion detection and monitoring systems that alert our security team to anomalous activity in real time.

Despite these measures, no internet transmission or electronic storage system is entirely immune to risk. In the event of a data breach that is likely to affect your rights and freedoms, boz388 will notify affected Users and relevant authorities promptly and in accordance with applicable legal requirements.

11 Cookies & Tracking Technologies

boz388 uses cookies and similar technologies to operate core Platform functionality, remember your preferences, analyze usage patterns, and, where you have consented, deliver relevant promotional content. The categories of cookies we use are as follows:

11.1 Strictly Necessary Cookies

These cookies are essential to the operation of the Platform and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. No consent is required for these cookies as they are functionally indispensable.

11.2 Performance & Analytics Cookies

These cookies collect aggregated, anonymized data about how Users interact with the Platform — including pages visited, time on page, and error events — to help us improve performance and usability. We only deploy these with your consent.

11.3 Functional Cookies

These cookies remember your preferences such as language settings, odds format, and display preferences to provide a more personalized experience. They require your consent and can be disabled without affecting core functionality.

11.4 Marketing Cookies

Where you have consented to receiving promotional communications, marketing cookies may be used to measure the effectiveness of our campaigns and tailor content to your demonstrated interests. These are never used for third-party advertising.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may limit some Platform functionality. Clearing cookies will also clear your active session and require you to log in again.

12 Your Privacy Rights

As a User of the boz388 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered Account email address for identity verification.

• Right of Access: You may request a copy of all Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you. For certain data fields, you can update information directly from your Account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that AML-mandated records cannot be erased within their statutory retention period.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while you contest its accuracy or object to its processing.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing already carried out.

We will respond to verified rights requests within 30 days. In complex cases, we may extend this by a further 30 days with prior notice. We will not charge a fee for reasonable requests; however, we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

13 Minors

The boz388 Platform is strictly for adults aged 21 and over. We do not knowingly collect Personal Data from persons under the age of 21. All registration submissions are subject to age verification during the KYC process.

If we become aware that we have inadvertently collected Personal Data from a minor, we will immediately suspend the associated Account, delete the collected data, and void any associated transactions. If you believe a minor has registered on the Platform, please notify us immediately at [email protected] so that we can take prompt corrective action.

14 Policy Amendments

boz388 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify registered Users via email and display a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.

The effective date at the top of this page will be updated to reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

Prior versions of this Privacy Policy are available on request by contacting us at [email protected].

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way boz388 handles your Personal Data, please reach out to our Data Privacy team through the following channels:

• Email: [email protected]
• Subject line for privacy requests: Privacy Rights Request
• Live Chat: Available 24/7 via the Platform interface.
• Response time: We aim to acknowledge all privacy enquiries within 48 hours and resolve substantive requests within 30 days.

When contacting us regarding a privacy matter, please include your registered Account email address and a clear description of your request to allow us to verify your identity and respond efficiently.