88bos Privacy Policy

88bos (referred to throughout this policy as "the Company", "we", "us", or "our") is the data controller responsible for the personal information collected through the platform accessible at https://88bos.cam.

As data controller, the Company determines the purposes and means of processing your personal data. This policy describes those purposes and means in full. If you have any questions about how we handle your data, please contact us using the details in Section 14.

This Privacy Policy applies to all personal data collected by 88bos through the following channels:

• The 88bos website at https://88bos.cam and any mobile-optimized version of that site.
• Account registration forms, identity verification (KYC) submissions, and support communications.
• Transactional data generated when you make deposits or withdrawals using local Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Cookies, device identifiers, and usage analytics collected automatically when you browse or use the platform.
• Communications you initiate with our customer support team via email, live chat, or any other channel we make available.

This policy does not apply to third-party websites, payment processors, or game studios whose services you may access via links or integrations on the 88bos platform. Those parties operate under their own privacy policies, and we encourage you to review those documents independently.

The personal data we collect falls into three broad categories: data you provide directly, data generated through your use of the platform, and data received from third parties.

3.1 Data You Provide Directly

3.2 Data Generated Through Platform Use

3.3 Data Received From Third Parties

We may receive limited personal data from third-party service providers in the following circumstances:

• Payment processors: Transaction confirmation data (amount, timestamp, payment method reference) returned when a deposit or withdrawal is processed via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja.
• Identity verification services: Confirmation results from any third-party KYC screening provider we engage to validate the authenticity of identity documents.
• Fraud prevention services: Risk scoring data used to detect suspicious account activity, multi-accounting, or potentially fraudulent transactions.

88bos processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to enter into or perform the membership agreement with you — for example, creating your account, processing deposits and withdrawals, and settling wagers.
• Legal obligation: Processing required to comply with applicable laws and regulations — for example, retaining financial transaction records, conducting KYC and anti-money-laundering checks, and responding to lawful requests from competent authorities.
• Legitimate interests: Processing that serves the Company's legitimate operational interests, provided those interests are not overridden by your rights — for example, fraud detection, platform security, abuse prevention, and internal analytics used to improve the member experience.
• Consent: Processing activities for which we have obtained your explicit opt-in consent — for example, sending you promotional communications about bonuses or new platform features. You may withdraw this consent at any time by contacting support or updating your communication preferences in your account settings.

The personal data we collect is used for the following clearly defined purposes:

• Account management: Creating, maintaining, and administering your 88bos member account, including processing login requests, password resets, and account preference changes.
• Transaction processing: Executing deposits via local Indonesian banks and e-wallets, processing withdrawal requests to your registered payment method, and maintaining an accurate transaction ledger.
• Identity verification (KYC): Verifying your identity and age (21+) to comply with our obligations as an internationally licensed operator and to protect the integrity of the platform.
• Fraud prevention and security: Detecting and investigating suspicious activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and delivering the support communications you have requested.
• Responsible gaming: Monitoring betting patterns for indicators of problem gambling and, where appropriate, proactively reaching out with responsible gaming resources or applying account controls in line with our Responsible Gaming policy.
• Platform improvement: Analysing aggregated and anonymised usage data to identify opportunities to improve the member experience, fix bugs, and develop new features.
• Marketing communications (with consent only): Sending you promotional offers, bonus notifications, and platform news, where you have opted in to receive such communications. These are always sent to your registered email address; we do not use your data for third-party advertising targeting.
• Legal compliance: Retaining records, responding to regulatory inquiries, and fulfilling any other obligation imposed by applicable law.

88bos does not sell your personal data. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the relevant purpose.

Service providers and technology partners: We engage carefully selected third-party companies to provide specific services on our behalf. These include cloud hosting and infrastructure providers, identity verification and KYC screening services, payment processing intermediaries (connecting to BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja), fraud detection platforms, and customer support tooling. Each provider is bound by a data processing agreement that prohibits them from using your data for any purpose other than providing the contracted service to 88bos.

Game studio providers: When you access a live casino, slot, or RNG game hosted by a third-party studio (such as Evolution Gaming, Pragmatic Play, or Pocket Games Soft), limited session data — such as a session token, your account currency (IDR), and bet amount — is transmitted to that studio to facilitate gameplay. No additional personal data beyond what is operationally necessary is shared with game studios.

Legal and regulatory disclosure: We may disclose your personal data to competent government bodies, law enforcement agencies, or courts where we are required to do so by applicable law or by a lawful order. We will notify you of any such disclosure where we are legally permitted to do so.

Business transfers: In the event of a merger, acquisition, or sale of all or part of the Company's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to the privacy practices that apply to your data before that transfer takes effect.

As an internationally operating platform serving members primarily in Indonesia, some of your personal data may be processed on servers or by service providers located outside of Indonesia. This may include transfers to countries in the Asia-Pacific region or to jurisdictions where our cloud infrastructure or technology partners are domiciled.

Where such transfers occur, 88bos ensures that adequate safeguards are in place to protect your data to a standard consistent with this Privacy Policy. These safeguards include contractual protections such as standard data protection clauses in agreements with our service providers, and our own internal data handling policies.

By using the 88bos platform, you acknowledge and consent to the transfer of your personal data to the locations described in this section, subject always to the protections set out in this policy.

We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with our legal, regulatory, or contractual obligations. The key retention periods applicable to 88bos are as follows:

When data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised and aggregated data may be retained indefinitely for statistical and platform improvement purposes.

88bos applies a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and our servers is encrypted using industry-standard TLS protocols with a minimum of 256-bit encryption.
• Data encryption at rest: Sensitive data stored on our servers — including KYC documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Password hashing: Account passwords are stored as one-way cryptographic hashes using a modern, salted hashing algorithm. No 88bos employee can access your password in plain text.
• Access controls: Access to personal data within the Company is restricted on a strict need-to-know basis. Staff are granted access only to the data required to perform their specific job function.
• Multi-factor authentication: Internal systems that hold member data require multi-factor authentication for staff access.
• Regular security assessments: We conduct periodic vulnerability assessments and penetration testing of our platform to identify and address potential security weaknesses.
• Incident response: We maintain a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights or freedoms, we will notify you without undue delay.

As a Member, you hold the following rights in relation to your personal data. These rights are not absolute in all circumstances — certain legal obligations or overriding legitimate interests may limit how or when they can be exercised — but we will always handle your requests fairly and transparently.

To exercise any of the above rights, please submit a written request to [email protected]. We will acknowledge your request within 72 hours and aim to fulfil it within 30 calendar days. Complex requests may require up to 90 days, in which case we will notify you of the extension and the reason for it.

We may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorized individual. This verification step is in place to protect you.

88bos uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. The following cookie categories are in use:

Most browsers allow you to manage cookie settings — including blocking or deleting cookies — through the browser's privacy or settings menu. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling analytics or functional cookies will not affect your core account access.

We do not use advertising cookies or place any cookies that track your behaviour on third-party websites.

The 88bos platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from any individual under the age of 21. Registration requires you to confirm your date of birth, and KYC verification requires submission of a government-issued photo ID proving your age.

If we discover — through KYC review, age-verification checks, or any other means — that a Member is under 21 years of age, the account will be closed immediately, all balances forfeited, and all associated personal data deleted to the extent permitted by our legal obligations.

If you believe that a minor may have registered an account on the platform, please contact us immediately at [email protected]. We take these reports seriously and will investigate promptly.

88bos reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this policy, we will notify registered Members by email to their registered address at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this page is revised each time the policy is amended. We recommend reviewing this page periodically. Your continued use of the 88bos platform following the effective date of any revision constitutes your acceptance of the updated policy.

If you do not agree with the revised Privacy Policy, you may close your account by contacting support. Closing your account does not affect data we are required to retain by law for the periods described in Section 8.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact our dedicated privacy support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please use "Privacy Request — [Your Account Username]" to ensure your message is routed to the correct team.
• Response time: We acknowledge all privacy-related inquiries within 72 hours and aim to resolve them within 30 calendar days.
• Language: Our support team includes Indonesian-speaking agents available around the clock (WIB, UTC+7). Privacy requests submitted in English will be handled by our English-language team.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. We will cooperate fully with any such inquiry.