Privacy Policy

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, including name, date of birth, national identity number, email address, phone number, IP address, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For users of bso88, the Data Controller is bso88 as described in Section 2.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a contractual obligation and subject to this policy.
• "User" / "You" — any natural person who accesses or registers an account on the bso88 platform.
• "Platform" — the bso88 website at https://bso88.cam and all associated interfaces, APIs, and services.
• "KYC" — Know Your Customer, the identity and age verification process required before withdrawal of funds.
• "Cookies" — small text files placed on your device by the Platform to enable functionality and collect usage information.

2 Data Controller

bso88 operates as the Data Controller for all Personal Data collected through the Platform. All inquiries relating to the processing of your Personal Data — including requests to exercise your rights under Section 12 — should be directed to bso88 using the contact details provided in Section 15 of this policy.

bso88 is an internationally operated online betting platform serving players primarily located in Indonesia. Where Indonesian data protection law applies and imposes obligations on data controllers, bso88 will comply with those obligations to the extent required by law.

3 Data We Collect

bso88 collects Personal Data through several channels in the ordinary course of operating the Platform. The categories of data we collect are set out in the table below:

bso88 does not collect sensitive categories of data such as racial or ethnic origin, religious beliefs, political opinions, biometric data (beyond the KYC selfie used solely for identity verification), or health data, unless you voluntarily disclose such information in the context of a responsible gaming or support interaction.

4 Legal Basis for Processing

bso88 processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and bso88 as set out in our Terms & Conditions — for example, operating your account, processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, or e-wallets such as OVO and DANA, and settling bets.
• Legal Obligation: Processing is required for bso88 to comply with applicable legal obligations, including anti-money laundering (AML) obligations, fraud prevention requirements, and age verification under the 21+ policy.
• Legitimate Interests: Processing is necessary for the legitimate interests of bso88, including platform security, fraud detection, responsible gaming monitoring, and improving the Platform's features — provided those interests are not overridden by your rights and interests.
• Consent: Where bso88 relies on your consent to process Personal Data (for example, for optional marketing communications), you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5 How We Use Your Data

bso88 uses Personal Data for the following specific purposes:

5.1 Account Management

To create, maintain, verify, and administer your bso88 account, including processing KYC verification, managing account security settings (two-factor authentication, password resets), and enabling access to all Platform features.

5.2 Transaction Processing

To process all deposits and withdrawals in Indonesian Rupiah (IDR / Rp) via your chosen payment channel — including local bank transfers to BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata, as well as e-wallet transactions via OVO, DANA, GoPay, ShopeePay, and LinkAja. Financial Data is also used to detect and prevent fraudulent transactions.

5.3 Regulatory Compliance & Fraud Prevention

To fulfill anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, conduct ongoing transaction monitoring, verify the source of funds where required, and report suspicious activity to competent authorities as mandated by applicable law.

5.4 Responsible Gaming

To implement and monitor responsible gaming tools including deposit limits, self-exclusion periods, session time-outs, and reality checks. Usage Data and betting history may be analyzed to identify patterns consistent with problem gambling, enabling proactive outreach to affected players. All such monitoring is conducted in accordance with our commitment to player welfare and the obligations described on our Responsible Gaming page.

5.5 Customer Support

To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through live chat, email, and other support channels. Communication Data from support interactions is retained for quality assurance and dispute resolution purposes.

5.6 Platform Security & Integrity

To monitor for unauthorized account access, detect multi-accounting, identify use of prohibited tools (such as bots or VPNs), and maintain the integrity of the betting markets and casino games offered on bso88.

5.7 Service Improvement

To analyze aggregated and anonymized Usage Data to understand how players interact with the Platform, identify popular features, diagnose technical issues, and inform product development decisions. This analysis does not involve identifying individual users.

5.8 Marketing Communications (Consent-Based)

Where you have provided explicit consent, bso88 may send you promotional communications about new features, bonus offers, and seasonal promotions — including promotions timed around events such as Idul Fitri, Ramadhan, or major football tournaments (BRI Liga 1, UEFA Champions League, AFF Cup). You may opt out of marketing communications at any time by contacting support.

6 Data Sharing & Disclosure

bso88 does not sell, rent, or trade your Personal Data to third parties. We may, however, share Personal Data with the following categories of recipient where necessary and proportionate:

• Payment Processors & Banking Partners: Indonesian banks (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum Financial Data necessary to process your transactions. These entities operate under their own privacy policies and applicable Indonesian banking regulations.
• Identity Verification Providers: Third-party KYC service providers may process identity documents and selfies on bso88's behalf under strict data processing agreements that prohibit independent use of your data.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe may receive anonymized session identifiers necessary to deliver game content. No personally identifiable information is shared with game studios beyond what is technically required.
• Fraud Prevention & AML Services: bso88 may share transaction data with specialist AML and fraud screening services operating as Data Processors under binding contractual obligations.
• Legal & Regulatory Authorities: bso88 will disclose Personal Data to competent law enforcement agencies, courts, regulators, or government bodies where required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of bso88's business, Personal Data may be transferred to the acquiring entity subject to equivalent privacy protections being maintained.

7 International Data Transfers

bso88 may process or store Personal Data on servers located outside of Indonesia, including in jurisdictions where the data protection laws may differ from those applicable in Indonesia. Where such transfers occur, bso88 takes appropriate safeguards to ensure that your Personal Data receives a level of protection consistent with this Privacy Policy, including:

• Entering into data processing agreements with all third-party processors that impose obligations equivalent to the protections described in this policy.
• Ensuring that servers and cloud infrastructure providers holding Personal Data operate under industry-standard security frameworks (ISO 27001 or equivalent).
• Limiting the categories of data transferred internationally to the minimum necessary for the relevant processing purpose.

By using the bso88 Platform, you acknowledge that your Personal Data may be transferred to and stored in jurisdictions outside Indonesia for the purposes described in this policy.

8 Data Retention

bso88 retains Personal Data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

9 Cookies & Tracking

bso88 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state, security tokens, and cookies that remember your language and currency preferences. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences across sessions — for example, your preferred sports markets, bet slip settings, and responsible gaming tool configurations. These cookies improve your experience but are not strictly essential.
• Analytics Cookies: bso88 uses first-party analytics to understand how users navigate the Platform in aggregate. This data is anonymized and not linked to individual accounts. No third-party advertising analytics platforms (such as Google Ads or Meta Pixel) are used.
• Security Cookies: Used to detect and prevent fraudulent activity, including multi-accounting, bot access, and unusual session behavior.

You may configure your browser to block or delete cookies. Note that disabling essential cookies will prevent you from logging into your bso88 account. bso88 does not use third-party advertising cookies, cross-site tracking pixels, or behavioral profiling cookies.

10 Security Measures

bso88 implements a range of technical and organizational security measures designed to protect your Personal Data against unauthorized access, loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the bso88 Platform is encrypted in transit using industry-standard TLS 1.2 or higher.
• Encrypted Data Storage: Sensitive Personal Data — including KYC documents, financial account details, and identity information — is stored in encrypted form on access-controlled servers.
• Two-Factor Authentication (2FA): Available on all bso88 accounts. Users are strongly encouraged to enable 2FA to add an additional layer of protection against unauthorized login.
• Access Controls: Access to Personal Data within bso88 is restricted on a strict need-to-know basis. Employees and contractors who handle Personal Data are subject to confidentiality obligations and receive data protection training.
• Penetration Testing: bso88's platform infrastructure undergoes regular security assessments by qualified third-party security professionals to identify and remediate vulnerabilities.
• Incident Response: bso88 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to the rights and freedoms of affected users, bso88 will notify affected users without undue delay.

11 Minors & Age Verification

The bso88 Platform is strictly for users aged 21 years and older. bso88 does not knowingly collect Personal Data from persons under the age of 21. Age verification is conducted during the KYC process prior to the processing of any withdrawal.

If bso88 discovers or has reasonable grounds to believe that an account is held by a person under 21, the account will be suspended immediately. Any real-money balance will be returned to the original deposit source after verification, and the account will be permanently closed. Any winnings generated by an underage account will be forfeited.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on bso88, please contact us immediately at [email protected] so that we may take appropriate action.

12 Your Rights

Subject to applicable law, you have the following rights with respect to your Personal Data held by bso88. To exercise any of these rights, contact us using the details in Section 15:

• Right of Access: You may request a copy of the Personal Data bso88 holds about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected. For name or date-of-birth corrections, additional KYC documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations (see Section 8). Note that AML-related data must be retained for the periods specified regardless of a deletion request.
• Right to Restrict Processing: You may request that bso88 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of the Personal Data you provided to bso88.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications. bso88 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

bso88 will respond to rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with notification to you of the extension and the reasons for it.

13 Third-Party Links

The bso88 Platform may contain links to third-party websites or services — for example, payment providers or game studio portals. This Privacy Policy applies solely to bso88 and does not extend to any third-party websites you may access via links on the Platform.

bso88 is not responsible for the privacy practices, content, or security of third-party websites. You should review the privacy policy of any third-party site before providing personal information to it.

14 Changes to This Policy

bso88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, bso88 will notify registered users by email and by posting a prominent notice on the Platform. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the bso88 Platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you disagree with the updated policy, you should cease using the Platform and may request account closure under Section 11 of the Terms & Conditions.

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact bso88 using the following details:

If you are not satisfied with bso88's response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority or competent court in your jurisdiction. bso88 will cooperate fully with any such regulatory inquiry.