bos55 ("we", "us", "our") operates the online gaming platform accessible at bos55.vip and is committed to protecting the privacy of every individual who visits or registers on the Platform. This Privacy Policy describes the personal data we collect from players in Indonesia and elsewhere, the purposes for which we process that data, the circumstances under which we may share it, and the rights available to you as a data subject.
This Privacy Policy forms part of the bos55 Terms & Conditions. By creating an account on bos55 or continuing to use the Platform after this Policy has been updated, you acknowledge
that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
If you do not agree with any part of this Privacy Policy, you must discontinue use of the Platform and contact our support team to request Account closure.
Scope: This Privacy Policy applies to all personal data collected through bos55.vip, including data collected during registration, gameplay, deposits and withdrawals, customer support interactions, and any other activity conducted on the Platform. It does not apply to third-party websites or services that may be linked from the Platform.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
- "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either directly (such as a full name or national ID number) or indirectly (such as a device identifier or IP address combined with other data).
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
- "Data Controller" means bos55, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
- "Data Processor" means a third party that processes Personal Data on behalf of bos55 under a written data processing agreement, such as a payment gateway provider or cloud infrastructure provider.
- "Player" or "You" means any individual who registers an account on bos55 or accesses the Platform in any capacity.
- "Platform" means the online gaming services operated by bos55 at bos55.vip, including all games, tools, and features accessible through that domain.
- "KYC" means Know Your Customer — the identity and age verification process bos55 applies to confirm a Player's eligibility before processing withdrawals or investigating account disputes.
- "Cookie" means a small text file placed on your device by the Platform for the purposes of session management, preference storage, analytics, or fraud prevention.
bos55 collects Personal Data through multiple channels during your use of the Platform. The categories of data we collect are described below.
3.1 Registration Data
When you create a bos55 account, we collect the following information you provide directly:
- Full legal name
- Date of birth (to verify you are at least 21 years of age)
- Residential address in Indonesia (city, province, postal code)
- Email address and/or mobile phone number
- Username and encrypted password
3.2 KYC Verification Data
To comply with our identity verification obligations and to process withdrawals, bos55 may request:
- A copy of a government-issued photo identification document (Indonesian national ID card / KTP, or passport)
- Proof of residential address (utility bill, bank statement dated within 90 days)
- A selfie photograph holding the submitted ID document
- Proof of ownership of the payment method used for deposit (e.g., screenshot of the registered BCA, BRI, BNI, or Mandiri account, or the OVO / DANA / GoPay account)
3.3 Financial Transaction Data
When you make a deposit or withdrawal, we record:
- The payment method used (bank name, masked account number, e-wallet name)
- Transaction amount in Indonesian Rupiah (IDR)
- Transaction date, time (WIB, UTC+7), and reference number
- Transaction status and any error codes returned by the payment processor
3.4 Gameplay Data
bos55 logs all gaming activity on the Platform, including:
- Games played, bet amounts, win/loss outcomes, and session duration
- Bonus activations, wagering progress, and bonus expiry events
- Live dealer game participation records
- Sportsbook bet selections, odds accepted, and settlement outcomes
3.5 Technical and Device Data
When you access the Platform, our servers and analytics tools automatically collect:
- IP address and approximate geographic location derived from it
- Device type, operating system version, and browser type/version
- Screen resolution and language preferences
- Referring URL and pages visited within bos55.vip
- Session timestamps and click-path data
3.6 Communications Data
If you contact bos55 via live chat, email, or any other support channel, we retain records of that correspondence, including the content of messages, the date and time of contact, and any resolution actions taken. This data is used for quality assurance, dispute resolution, and staff training.
Data You Choose Not to Provide: Where bos55 requests Personal Data that is not strictly mandatory (such as optional profile preferences), you may decline to provide it without affecting your ability to use the Platform's core services. However, failure to provide mandatory data — particularly KYC documentation — may result in withdrawal processing being placed on hold until verification is complete.
3.7 Summary Table
| Data Category |
Examples |
Collected At |
| Registration Data |
Name, DOB, email, address |
Account creation |
| KYC Data |
ID document, selfie, address proof |
On withdrawal / verification request |
| Financial Data |
Payment method, transaction amount |
Each deposit / withdrawal |
| Gameplay Data |
Bets placed, game sessions, outcomes |
Continuously during play |
| Technical Data |
IP address, device type, browser |
Each Platform visit |
| Communications Data |
Support chat transcripts, emails |
Each support interaction |
bos55 processes your Personal Data only for specific, clearly defined purposes. We do not use your data in ways that are incompatible with those purposes without first informing you. The primary purposes for which we process Personal Data are:
- Account Management: Creating, maintaining, and securing your bos55 account, including verifying your identity and age at registration and at subsequent verification checkpoints.
- Platform Delivery: Enabling you to access and use all bos55 gaming services, including slots, live casino, sportsbook markets, and specialty games, and to make deposits and withdrawals in IDR.
- Payment Processing: Facilitating deposits and withdrawals via supported Indonesian payment channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
- KYC and Fraud Prevention: Verifying the identity and eligibility of Players, detecting and preventing money laundering, fraudulent account activity, bonus abuse, and other prohibited conduct.
- Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, applying deposit limits and self-exclusion measures, and contacting Players who may need responsible gaming support.
- Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining support interaction records for quality assurance.
- Marketing Communications: Sending promotional emails and notifications about bonuses, seasonal promotions (such as Idul Fitri, Ramadhan, and Indonesian Independence Day specials), and new game launches — only where you have opted in to receive such communications.
- Platform Improvement: Analysing aggregated usage data to understand how Players interact with the Platform, identify technical issues, and improve the overall gaming experience.
- Legal and Regulatory Compliance: Meeting our obligations under applicable international gaming regulations, responding to lawful requests from authorities, and maintaining records as required by our licensing conditions.
bos55 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing that is necessary to perform our contract with you — namely, the bos55 Terms & Conditions — including account creation, game delivery, and payment processing.
- Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC identity verification, anti-money-laundering record-keeping, and responding to lawful authority requests.
- Legitimate Interests: Processing carried out in pursuit of bos55's legitimate business interests — such as fraud detection, platform security, and analytics — where those interests are not overridden by your rights and interests as a data subject.
- Consent: Processing for which you have given specific, informed consent — principally, the sending of marketing communications. You may withdraw marketing consent at any time by contacting support or using the unsubscribe link in any marketing email.
Withdrawal of Consent: Withdrawing consent for marketing communications does not affect the lawfulness of processing carried out before the withdrawal. It also does not affect processing based on contractual necessity, legal obligation, or legitimate interests — those bases exist independently of consent.
bos55 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We share Personal Data only in the circumstances described below, and only to the extent necessary for the stated purpose.
6.1 Payment Processors
To facilitate deposits and withdrawals, bos55 shares transaction-relevant data — including your name, payment method details, and transaction amount — with licensed payment processing partners that support our Indonesian banking and e-wallet integrations (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja). These partners process your data solely to complete the requested transaction and are contractually prohibited from using it for any other purpose.
6.2 Game Providers
Third-party game studios whose titles are hosted on bos55 — including Pragmatic Play, Evolution Gaming, PG Soft (Pocket Games Soft), NetEnt, Microgaming, Habanero, and Spribe — may receive a minimal set of session identifiers necessary to launch and authenticate your game session. These studios do not receive your full profile data or payment information.
6.3 KYC and Fraud Prevention Partners
bos55 may use specialist third-party identity verification and fraud detection services to assist with KYC document review and real-time transaction monitoring. These partners process your verification documents and transaction data under strict contractual obligations and may not use that data beyond the scope of the services they provide to bos55.
6.4 Legal and Regulatory Authorities
bos55 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal order, or our licensing obligations. We will inform you of any such disclosure where we are legally permitted to do so.
6.5 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of all or part of bos55's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure that the receiving entity is bound by privacy commitments no less protective than those set out in this Policy.
bos55 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The general retention periods we apply are:
| Data Category |
Retention Period |
Basis |
| Account & Registration Data |
Duration of account + 5 years after closure |
Legal obligation / AML compliance |
| KYC Documents |
5 years from date of submission |
Legal obligation / AML compliance |
| Financial Transaction Records |
5 years from transaction date |
Legal obligation |
| Gameplay Logs |
3 years from session date |
Legitimate interests / dispute resolution |
| Support Communications |
2 years from last interaction |
Legitimate interests / quality assurance |
| Marketing Consent Records |
Until consent withdrawn + 1 year |
Legal obligation (consent records) |
| Technical / Server Logs |
90 days on live systems; 12 months in archive |
Legitimate interests / security |
After the applicable retention period has elapsed, Personal Data is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
bos55.vip uses cookies and similar technologies — including local storage objects and session tokens — to operate the Platform effectively, remember your preferences, and analyse how users interact with our site. The table below describes the categories of cookies we deploy.
| Cookie Type |
Purpose |
Duration |
| Strictly Necessary |
Maintain your login session, prevent CSRF attacks, enable core Platform functionality |
Session |
| Functional |
Remember your language preference, game lobby filters, and display settings |
Up to 12 months |
| Analytics |
Understand how Players navigate the Platform, identify popular games, and detect technical errors |
Up to 24 months |
| Fraud Prevention |
Device fingerprinting to detect suspicious login patterns and multi-account activity |
Up to 12 months |
8.1 Managing Cookies
You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies entirely, or to block third-party cookies while allowing first-party cookies. Please note that disabling Strictly Necessary cookies will prevent you from logging in and using the Platform. Disabling Functional cookies may reset your preferences on each visit. Disabling Analytics cookies will not affect your ability to play but will limit our ability to improve the Platform based on usage data.
Guidance on managing cookies in popular browsers:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
- Safari (iOS / macOS): Settings → Safari → Privacy & Security
- Samsung Internet: Settings → Privacy → Cookie preferences
bos55 implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes:
- 256-bit SSL/TLS Encryption: All data in transit between your device and bos55's servers is encrypted using TLS 1.2 or higher. Sensitive fields — including passwords — are further hashed using industry-standard algorithms and are never stored in plain text.
- Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff who handle Player data receive mandatory data protection training and are bound by confidentiality obligations.
- Infrastructure Security: bos55's Platform is hosted on secure, redundant cloud infrastructure with firewall protection, intrusion detection systems, and regular third-party penetration testing.
- Payment Security: Financial transaction data processed via Indonesian payment channels (BCA, BRI, OVO, DANA, and others) passes through PCI-DSS-compliant payment gateways. bos55 does not store full card numbers or full bank account numbers on its own servers.
- Incident Response: In the event of a confirmed data security breach that poses a risk to Player rights, bos55 will notify affected Players and, where required by applicable regulation, notify the relevant authority without undue delay and in any case within the period required by law.
Your Role in Security: While bos55 takes extensive measures to protect your data on the platform side, the security of your account also depends on the strength and confidentiality of your login credentials. Use a unique, strong password for bos55, enable two-factor authentication where available, and never share your login details with anyone. bos55 will never ask for your password via email or chat.
As a Player on bos55, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We will respond within 30 days.
- Right of Access: You have the right to request a copy of the Personal Data bos55 holds about you, along with information about how it is being processed. We will provide this in a clear, structured format.
- Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic profile information directly from your Account settings; for KYC-level changes, a support request is required.
- Right to Erasure: You may request deletion of your Personal Data where we no longer have a lawful basis to hold it. Please note that we are required to retain certain data — particularly KYC and financial records — for regulatory compliance purposes. In those cases, deletion requests may be partially fulfilled, with retained data clearly explained to you.
- Right to Restriction: You may ask bos55 to restrict processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis we rely on for processing.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, machine-readable format (such as JSON or CSV).
- Right to Object: You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
- Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Identity Verification for Rights Requests: To protect your privacy and prevent unauthorised access to your data, bos55 will verify your identity before processing any data rights request. We may ask you to confirm account details or provide a copy of identification before proceeding. This verification step is a security measure for your protection.
Adults Only (21+): bos55 is strictly an adults-only platform. Access is limited to individuals who are at least 21 years of age. We do not knowingly collect Personal Data from anyone under the age of 21.
bos55 uses age verification procedures at registration and during KYC review to enforce the 21+ requirement. If bos55 discovers or is notified that Personal Data has been collected from an individual under the age of 21, we will immediately close the associated account, delete the collected data, and refund any deposits to the extent technically feasible. Any winnings generated on an underage account will be forfeited.
If you are a parent or guardian and believe that a minor has registered on bos55, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
bos55 operates as an internationally licensed platform. Your Personal Data may be transferred to and processed in countries outside Indonesia — for example, where our cloud infrastructure, game studio partners, or KYC verification providers are located. These countries may have data protection laws that differ from those of Indonesia.
Where such transfers occur, bos55 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to apply data protection standards equivalent to those described in this Privacy Policy. By using the bos55 Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Indonesia for the purposes described herein.
The bos55 Platform may contain references to third-party services — such as game studios or payment processors — whose own privacy practices may differ from those of bos55. This Privacy Policy applies solely to data collected and processed by bos55 through bos55.vip. bos55 is not responsible for the privacy practices of any third-party services accessed through or referenced from the Platform.
We encourage you to review the privacy policies of any third-party service providers whose services you use in connection with your bos55 account, particularly your chosen payment method provider (for example, the OVO, DANA, or GoPay privacy policies) and your device's operating system vendor.
bos55 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Platform. The date of the most recent revision is displayed in the "Last Updated" notice at the top of this document.
Where a change to this Privacy Policy is material — meaning it significantly affects how we use your Personal Data or your rights as a data subject — bos55 will provide notice of the change via a prominent announcement on the Platform and, where practicable, by direct communication to your registered contact address. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.
We recommend reviewing this page periodically to stay informed of how bos55 protects and manages your personal information.
If you have any questions, concerns, or complaints about this Privacy Policy or the way bos55 handles your Personal Data, please contact our Data Protection team through the following channel:
- Email: [email protected] (plain text — not a clickable link). Use the subject line "Privacy Enquiry" for fastest routing.
- Live Chat: Available 24/7 via the chat widget on bos55.vip. Indonesian-speaking support agents are available at all times.
- Response Target: bos55 aims to acknowledge all privacy-related email enquiries within 24 hours (WIB, UTC+7) and to resolve the majority of requests within 30 calendar days of receipt.
Data Rights Requests: To submit a formal data rights request — including access, rectification, erasure, or portability requests — email
[email protected] with the subject line "Data Rights Request". Please include your registered username and a clear description of the right you wish to exercise. We will verify your identity before processing the request.