bso88 Privacy Policy

bso88 operates the online betting and casino platform accessible at https://bso88.bio. As part of delivering our services to players across Indonesia — including those in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Yogyakarta, and beyond — we necessarily process certain personal data about our players, visitors, and prospective users.

This Privacy Policy applies to:

• All registered bso88 Account holders and former Account holders.
• Visitors to the bso88.bio website who have not yet registered an Account.
• Any individual who contacts bso88 support via email, live chat, or any other channel.
• Individuals whose data is provided to bso88 in connection with a payment transaction (e.g., bank account holders making a deposit via BCA, BRI, BNI, Mandiri, CIMB Niaga, or BSI, or e-wallet users via OVO, DANA, GoPay, ShopeePay, or LinkAja).

This Policy does not apply to the data practices of third-party service providers, game studios, or payment processors who may have their own privacy policies. Where bso88 shares your data with such parties, we do so subject to data processing agreements that require them to protect your information to at least the same standard as bso88 itself.

bso88 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect are as follows:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID.
• Date of birth (used to verify you are 21 years of age or older).
• Gender (optional, collected for account personalization purposes).
• Indonesian National Identity Card number (NIK) or passport number, collected during KYC verification.
• Email address and Indonesian mobile phone number.

3.2 Financial & Transaction Data

• Bank account details for deposit and withdrawal processing (account holder name, bank name, account number) — covering BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata.
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• Deposit and withdrawal history, transaction amounts in IDR, and transaction timestamps.
• Bonus and promotional transaction records.

3.3 Gaming & Betting Activity Data

• Sportsbook bet history, including markets wagered, stake amounts, odds accepted, and settlement results across BRI Liga 1, EPL, La Liga, Champions League, AFF Cup, and other competitions.
• Casino game session data, including games played, session duration, and wagering amounts, across live casino games from Evolution Gaming and slot titles from Pragmatic Play, NetEnt, Microgaming, and Pocket Games Soft.
• Responsible gaming tool usage records (deposit limits set, self-exclusion requests, session reminder configurations).

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session tokens, login timestamps, and access logs.
• Cookie identifiers and analytics data (see Section 9).

3.5 Communications Data

• Content of emails, live chat transcripts, and any other communications you send to bso88 support.
• Formal complaint records and their resolution outcomes.
• Promotional communication preferences (opt-in / opt-out status for email and SMS marketing).

3.6 KYC Documentation

• Scanned or photographed copies of government-issued identity documents (KTP, passport, or SIM — Surat Izin Mengemudi).
• Proof of address documents (utility bills, bank statements) dated within the last three months.
• Source-of-funds documentation where required for enhanced due diligence on large transactions.

bso88 collects personal data through the following channels:

• Directly from you: When you register an Account, complete the KYC process, make a deposit or withdrawal, place a bet, contact support, or respond to a promotional offer.
• Automatically via the Platform: Through cookies, server logs, and analytics tools that record your browsing behavior, session activity, and device characteristics when you access bso88.bio.
• From payment service providers: When you initiate a deposit or withdrawal via your BCA, BRI, Mandiri, or other supported bank account, or via OVO, DANA, GoPay, ShopeePay, or LinkAja, our payment processing partners transmit transaction confirmation data to bso88.
• From identity verification partners: bso88 may use third-party KYC service providers to assist with document verification. These partners process your identity documents under strict data processing agreements and return a verification result to bso88.
• From publicly available sources: In cases involving AML screening or fraud prevention, bso88 may cross-reference information against publicly available databases or sanction lists.

bso88 processes your personal data for the following purposes:

bso88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or being required to do so by applicable law.

bso88 relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing that is required to deliver the services you have contracted with bso88 to receive — including Account management, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including AML/CFT obligations and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in bso88's legitimate business interests, including fraud prevention, platform security, IT infrastructure maintenance, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out only where you have given specific, informed, and freely revocable consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting bso88 support at [email protected] or using the unsubscribe mechanism in any marketing email.

bso88 does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. We may share your data in the following limited circumstances:

• Payment Processors & Banking Partners: We share transaction data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposits and withdrawals.
• KYC & Identity Verification Providers: We engage specialized third-party KYC service providers to assist with document verification. These providers act as Data Processors and are bound by strict data processing agreements.
• Game Studio Providers: Certain game platform data (e.g., session identifiers) is shared with game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe to enable real-time game delivery. These providers do not receive your full personal profile.
• Fraud Prevention & AML Services: We may share relevant data with industry-standard fraud screening and AML monitoring services to protect the integrity of the bso88 Platform.
• Professional Advisers: bso88 may disclose personal data to lawyers, auditors, accountants, and insurers where strictly necessary for obtaining professional advice or services.
• Regulatory & Law Enforcement Authorities: bso88 will disclose personal data to competent authorities when required to do so by a valid legal obligation, court order, or lawful request. bso88 will, where legally permissible, inform you of any such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bso88's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

The bso88 Platform serves players primarily based in Indonesia. Some of the third-party service providers and game studios with which bso88 works may be located or operate infrastructure in countries outside Indonesia. Where your personal data is transferred to a country that may not provide the same level of data protection as your home jurisdiction, bso88 ensures appropriate safeguards are in place, including:

• Binding contractual clauses in data processing agreements that impose equivalent data protection obligations on the recipient.
• Use of service providers that operate under internationally recognized data protection frameworks (e.g., ISO 27001 certified infrastructure).
• Encryption of data in transit using 256-bit SSL/TLS protocols so that any intercepted data is rendered unintelligible.

bso88 will not transfer your personal data to any jurisdiction in a manner that would reduce the protections guaranteed by this Privacy Policy.

bso88 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. Disabling analytics or marketing cookies will not affect your ability to use bso88 services but may result in less personalized content.

bso88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account & Registration Data: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, to satisfy AML record-keeping obligations.
• Financial & Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the Account relationship.
• Gaming & Betting Activity Data: Retained for the duration of the Account relationship and for two (2) years following Account closure, unless a longer period is required for dispute resolution or legal proceedings.
• Communications & Support Data: Retained for three (3) years from the date of each communication, unless a longer period is required for ongoing dispute resolution.
• Marketing Consent Records: Retained for three (3) years from the date consent was given or withdrawn, as evidence of consent status.
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud investigation purposes, after which it is anonymized or deleted.

When personal data is no longer required, bso88 will securely delete or anonymize it so that it can no longer be associated with any individual.

bso88 respects your rights over your own personal data. Subject to applicable law, you hold the following rights:

• Right of Access: You have the right to request a copy of the personal data bso88 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. For certain data categories (e.g., registered bank account details), bso88 may require supporting documentation before making changes.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to bso88's legal obligations to retain certain records — for example, AML retention requirements will take precedence.
• Right to Restriction of Processing: You may request that bso88 restrict processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that bso88 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of bso88's legitimate interests, including profiling. You also have an absolute right to object to processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The bso88 Platform is strictly intended for adults who are 21 years of age or older. bso88 does not knowingly collect, solicit, or process personal data from individuals under the age of 21. Age verification is a mandatory step in the bso88 Account registration and KYC process.

If bso88 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will promptly delete that data, close the relevant Account, and void any associated transactions and winnings.

If you believe that a minor has registered an Account on the bso88 Platform, please report this immediately to [email protected]. bso88 treats reports of underage access as a priority matter and will investigate and act within 24 hours of receiving a credible report.

bso88 implements a layered, defense-in-depth security framework to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bso88 Platform is encrypted using industry-standard TLS protocols, rendering it unreadable to any third party in transit.
• Encrypted Data Storage: Sensitive data fields — including payment method details and identity document scans — are stored in encrypted form in bso88's database systems. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within bso88's systems is restricted on a strict need-to-know basis. Staff access is subject to role-based access controls, multi-factor authentication, and regular access reviews.
• Brute-Force & Anomaly Detection: bso88's systems incorporate automated detection for unusual login patterns, brute-force attempts, and suspicious session behavior, with real-time alerting and automated blocking.
• Regular Security Assessments: bso88 conducts periodic vulnerability assessments and penetration testing on its Platform infrastructure to identify and remediate security weaknesses proactively.
• Incident Response Plan: bso88 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a high risk to your rights, bso88 will notify affected individuals without undue delay.

The bso88 Platform may contain references to third-party services — such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Pocket Games Soft), sports data providers, and payment processors. Where the Platform references or integrates with any such third-party service, bso88 is not responsible for the privacy practices of that third party.

bso88 strongly encourages you to review the privacy policies of any third-party service with which you interact. This Privacy Policy applies exclusively to data processed by bso88 in connection with the bso88.bio Platform and does not extend to any third-party data controller.

bso88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When material changes are made, bso88 will:

• Update the "Last updated" date at the top of this page.
• Display a notice on the bso88 Platform informing Players of the change.
• Where the changes are significant, send a notification to the email address registered on your Account with at least 14 days' advance notice before the revised Policy takes effect.

Your continued use of the bso88 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the updated Policy, you must cease using the Platform and contact support to close your Account; any real-money balance will be returned to your registered payment method.

For any questions, concerns, or requests relating to this Privacy Policy or bso88's handling of your personal data, please contact us using the details below:

• Data Enquiries Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 through the bso88 Platform; request to speak with a data or compliance team member.
• Response Time: bso88 acknowledges all privacy-related enquiries within 5 business days and provides a substantive response within 30 calendar days.
• Support Languages: English and Indonesian; native Indonesian-speaking agents are available around the clock.