How bos138 Collects, Uses, and Protects Your Personal Data — Last Updated: January 2026
Your Privacy Matters: bos138 is committed to protecting the privacy and security of your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data. By registering an account or using any service on the bos138 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
This Privacy Policy (the "Policy") governs the collection, processing, storage, and disclosure of personal data by bos138 (the "Company," "We," "Us," or "Platform"), an internationally licensed online betting platform serving the Indonesia market. This Policy applies to all users (the "User," "Member," "Player," or "You") who access or use the bos138 website, mobile site, or any associated services including sports betting, live casino games, slot games, togel (Indonesia's traditional numbers lottery), sabung ayam (traditional cockfighting), and any other wagering products offered on our platform.
bos138 operates in accordance with international data protection standards and best practices, including principles derived from the General Data Protection Regulation (GDPR) and other globally recognized privacy frameworks. While bos138 is not directly subject to Indonesian data protection legislation (as an offshore entity), we voluntarily apply high standards of data protection to respect the privacy expectations of our Indonesian user base.
This Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail to the extent of the inconsistency.
For the purposes of this Privacy Policy, bos138 is the data controller responsible for the processing of your personal data. The Company is headquartered offshore under the jurisdiction of our international gaming license. All data protection inquiries, requests to exercise privacy rights, or complaints regarding the handling of your personal data should be directed to our dedicated Data Protection Officer (DPO):
When contacting the DPO, please include your full name, registered email address, Account username (if applicable), and a detailed description of your inquiry or request. This enables us to verify your identity and respond appropriately.
bos138 collects several categories of personal data to provide, maintain, improve, and secure our services. The types of data we collect depend on how you interact with the Platform:
When you create an account with bos138, we collect the following mandatory information:
To comply with international anti-money laundering (AML) and responsible gaming regulations, bos138 requires identity verification documentation from all users. This may include:
All KYC documents are stored securely and accessed only by authorized compliance personnel.
When you deposit funds into or withdraw funds from your bos138 account, we collect:
Note: bos138 does not store full credit/debit card numbers or CVV codes, as we do not currently support card payments.
As you use the bos138 platform, we automatically collect technical and behavioral data including:
When you contact bos138 customer support or participate in surveys, we collect:
bos138 adheres to the principle of data minimization. We collect only the personal data that is necessary to fulfill the specific purposes outlined in this Policy. You are not required to provide additional personal information beyond what is mandatory for account registration, KYC verification, and payment processing.
bos138 processes your personal data for the following purposes, each grounded in a lawful basis under international data protection principles:
Purpose: To create and maintain your bos138 account, process deposits and withdrawals, enable you to place bets and play games, and provide customer support.
Lawful Basis: Performance of the contract between you and bos138 (as set out in our Terms and Conditions).
Purpose: To verify your identity, age, and address; to prevent underage gambling, money laundering, fraud, and other illegal activities; and to comply with international KYC/AML regulations.
Lawful Basis: Legal obligation and legitimate interest in protecting the Platform and its users from fraud and criminal activity.
Purpose: To process your deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate transaction records.
Lawful Basis: Performance of the contract and legal obligation to maintain financial records.
Purpose: To monitor your betting behavior for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide access to responsible gaming tools and support resources.
Lawful Basis: Legitimate interest in promoting responsible gambling and protecting vulnerable users.
Purpose: To analyze aggregated and anonymized usage data to improve the Platform's functionality, user experience, game offerings, and technical performance.
Lawful Basis: Legitimate interest in improving our services and maintaining competitive quality.
Purpose: To send you promotional emails, SMS messages, or push notifications about bonuses, new games, and special offers. Marketing communications are sent only to users who have explicitly opted in to receive them.
Lawful Basis: Your explicit consent, which you may withdraw at any time by clicking the unsubscribe link in any marketing email or adjusting your communication preferences in your Account settings.
Purpose: To comply with legal obligations, respond to lawful requests from government authorities, enforce our Terms and Conditions, resolve disputes, and protect the rights and safety of bos138 and its users.
Lawful Basis: Legal obligation and legitimate interest in defending legal claims.
bos138 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, we may share your data with the following categories of third parties in limited circumstances:
Your payment method details and transaction information are shared with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of processing your deposits and withdrawals. These third parties are bound by their own privacy policies and data protection obligations.
Technical data such as your username, session ID, bet amounts, and game outcomes may be shared with our certified game studio partners (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, PG Soft, Ezugi, Habanero, Play'n GO, Yggdrasil, Red Tiger, and others) to enable game functionality and maintain game integrity. These partners process data on our behalf under strict contractual data processing agreements.
KYC documents and identity information may be shared with specialized third-party identity verification services to authenticate your documents and prevent fraud. These providers operate under strict confidentiality and data protection agreements.
Customer support chat transcripts and email correspondence may be processed by third-party customer relationship management (CRM) platforms and live chat software providers. All such providers are contractually bound to protect your data and use it only for the purposes specified by bos138.
Aggregated, anonymized usage data (stripped of personally identifiable information) may be shared with analytics platforms to help us understand user behavior patterns, optimize website performance, and improve our services. Individual users cannot be re-identified from this aggregated data.
bos138 may disclose your personal data to law enforcement agencies, regulatory authorities, or government bodies if required by law, court order, subpoena, or if we reasonably believe such disclosure is necessary to prevent fraud, protect the rights and safety of bos138 or others, or comply with international AML/CTF obligations.
In the event of a merger, acquisition, sale of assets, or bankruptcy involving bos138, your personal data may be transferred to the successor entity as part of the business transaction. You will be notified of any such transfer via email and will have the opportunity to request deletion of your data before the transfer is finalized, subject to legal and contractual obligations.
All third-party service providers with whom bos138 shares your personal data are required to sign data processing agreements that impose strict confidentiality, security, and data protection obligations consistent with this Privacy Policy and international data protection standards.
bos138 employs industry-standard technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security infrastructure includes:
While bos138 takes all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. If you suspect unauthorized access to your account, you must notify bos138 immediately via live chat or email.
bos138 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be associated with an identifiable individual. Anonymized data may be retained indefinitely for statistical and analytical purposes.
Under international data protection principles, you have the following rights regarding your personal data. To exercise any of these rights, please contact our Data Protection Officer at [email protected].
You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly in your Account settings, or contact support for assistance with changes to verified identity information.
You have the right to request deletion of your personal data, subject to legal retention requirements (e.g., financial records must be retained for 7 years). To request data deletion, close your account and submit a deletion request to our DPO.
You have the right to request that we restrict the processing of your personal data in certain circumstances (e.g., while we verify the accuracy of disputed data, or during investigation of a complaint).
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.
You have the right to object to the processing of your personal data for direct marketing purposes (opt-out of promotional communications) or where processing is based on legitimate interests rather than legal obligation or contract performance.
bos138 will respond to all valid rights requests within 30 days. In complex cases, we may extend this period by an additional 60 days, in which case we will notify you of the extension and the reasons for it. If we are unable to fulfill your request (e.g., due to legal obligations to retain certain data), we will explain the reasons for our refusal.
bos138 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, analyze site traffic, and personalize content. A cookie is a small text file stored on your device that allows us to recognize your browser and remember certain information about your preferences and activities.
Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies; however, doing so may affect your ability to use certain features of the bos138 platform. For instructions on managing cookies, consult your browser's help documentation.
bos138 is an adults-only platform. You must be at least 21 years of age to register an account or use any service on the Platform. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will immediately delete that data and close the associated account. Parents and guardians are encouraged to monitor their children's internet usage and to use parental control software to prevent minors from accessing gambling websites.
bos138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Any material changes will be announced via email to all registered users and prominently posted on the Platform homepage. The "Last Updated" date at the top of this Policy will be revised to reflect the date of the most recent changes.
Your continued use of the bos138 platform after any changes to this Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and request deletion of your account and personal data.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:
When contacting us regarding privacy matters, please include your full name, registered email address, and a detailed description of your inquiry or request to enable us to respond promptly and accurately.
This Privacy Policy is effective as of January 1, 2026 and supersedes all previous versions. Document Version: 2026.01
Last Updated: January 1, 2026
Document Version: 2026.01
If you need further clarification on how bos138 handles your personal data, our dedicated Data Protection Officer and customer support team are here to help. Visit our FAQ page or reach out directly.
Visit FAQ Page