Last Updated: January 1, 2026 | Effective Date: January 1, 2026
1. Introduction and Scope
boss88 ("we", "us", "our", or the "Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you access or use our website (boss88.cam), create an account, or engage with our online gambling services.
This Privacy Policy applies to all users of boss88 services, including individuals residing in Indonesia who access our internationally licensed platform. By using boss88, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.
We process your personal data in accordance with applicable international data protection standards, including principles derived from the General Data Protection Regulation (GDPR) where applicable, even though boss88 operates under a Curacao gaming license. For Indonesian users, we also respect data protection principles consistent with Indonesian Law No. 27 of 2022 on Personal Data Protection.
If you do not agree with the practices described in this Privacy Policy, you should immediately cease using our services and refrain from providing any personal information to boss88.
2. Data Controller Information
For the purposes of data protection law, the data controller responsible for your personal information is:
boss88
Licensed and regulated by the Government of Curacao
Gaming License #8048/JAZ
Website: boss88.cam
Email: [email protected]
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer at the email address above.
3. Information We Collect
boss88 collects various types of personal information to provide, maintain, and improve our services. The categories of information we collect include:
3.1 Information You Provide Directly
- Account Registration Information: Full legal name, date of birth, gender, residential address, email address, telephone number, username, and password.
- Identity Verification (KYC) Documents: Government-issued identification (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs, and any other documentation required for age verification, identity confirmation, and anti-money laundering compliance.
- Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay account details), payment card information (if applicable), transaction history, deposit amounts, withdrawal requests, and balance information.
- Communication Data: Content of your communications with our customer support team via live chat, email, WhatsApp, or other channels, including your inquiries, complaints, feedback, and support tickets.
- Marketing Preferences: Your consent to receive promotional communications, newsletter subscriptions, and marketing preference selections.
3.2 Information Collected Automatically
- Gaming Activity Data: Bets placed, games played, stake amounts, winnings, losses, betting patterns, game preferences, sports betting selections, casino game sessions, lottery entries (including togel number selections), and overall gaming behavior.
- Technical and Device Information: IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), mobile network information, and app version (if applicable).
- Usage Data: Pages visited, time spent on pages, navigation paths, click patterns, session duration, referral source (how you arrived at boss88.cam), search queries on our website, and features accessed.
- Location Data: General geographic location derived from IP address (country, region, city-level), and precise location data if you grant permission through your mobile device settings.
- Cookies and Similar Technologies: Data collected through cookies, web beacons, pixels, and other tracking technologies as described in Section 10 of this Privacy Policy.
3.3 Information from Third Parties
- Payment Processors: Transaction confirmation, payment status, and fraud risk indicators from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danaman) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
- Identity Verification Services: Age verification results, identity authentication data, and fraud screening information from third-party KYC service providers.
- Game Providers: Game play data, Random Number Generator (RNG) results, and session information from software providers like Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others.
- Affiliates and Marketing Partners: Referral information if you arrive at boss88 through an affiliate link or marketing campaign.
4. How We Use Your Information
boss88 uses your personal information for the following purposes:
4.1 Account Management and Service Provision
- Create, maintain, and manage your player account
- Process your registration and verify your eligibility to use our services
- Authenticate your identity and prevent fraudulent account creation
- Provide access to sports betting, casino games, lottery games, and other gambling services
- Manage your account balance, deposits, withdrawals, and transaction history
- Process and settle your bets, calculate winnings, and update your account balance
- Facilitate your participation in bonuses, promotions, and VIP loyalty programs
4.2 Compliance and Legal Obligations
- Conduct Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures as required by our Curacao gaming license
- Verify your age to prevent underage gambling (21+ requirement)
- Detect, prevent, and investigate money laundering, fraud, collusion, and other prohibited activities
- Comply with anti-money laundering (AML), counter-terrorism financing (CTF), and sanctions screening requirements
- Respond to lawful requests from law enforcement, regulators, or government authorities
- Enforce our Terms and Conditions and other legal agreements
- Maintain records for audit and regulatory compliance purposes
4.3 Customer Support and Communication
- Respond to your inquiries, complaints, and support requests
- Provide customer service via live chat, email, WhatsApp, and other channels
- Send transactional communications such as deposit confirmations, withdrawal status updates, bet settlement notifications, and security alerts
- Communicate important account updates, policy changes, and service announcements
4.4 Marketing and Promotions (With Your Consent)
- Send promotional offers, bonus announcements, and personalized marketing communications
- Deliver newsletters and updates about new games, features, or services
- Conduct market research and customer satisfaction surveys
- Tailor marketing content based on your gaming preferences and behavior
4.5 Platform Improvement and Analytics
- Analyze user behavior to improve website functionality, navigation, and user experience
- Conduct data analytics to understand gaming patterns and preferences
- Develop new features, games, and services based on user feedback and behavior
- Test and optimize website performance, speed, and reliability
- Generate aggregated and anonymized statistics for business intelligence purposes
4.6 Security and Fraud Prevention
- Monitor and detect suspicious activity, unauthorized access, and security threats
- Prevent fraud, collusion, bonus abuse, and other violations of our Terms and Conditions
- Implement risk management controls and responsible gaming safeguards
- Maintain system security, data integrity, and business continuity
4.7 Responsible Gaming
- Monitor gaming behavior to identify potential problem gambling indicators
- Implement and enforce deposit limits, loss limits, and self-exclusion requests
- Provide access to responsible gaming tools and resources
- Comply with player protection requirements under our gaming license
5. Legal Basis for Processing
boss88 processes your personal data based on the following legal grounds:
- Contractual Necessity: Processing is necessary to perform our contract with you (i.e., providing online gambling services as outlined in our Terms and Conditions). This includes account management, payment processing, bet settlement, and customer support.
- Legal Compliance: Processing is required to comply with legal obligations under our Curacao gaming license, including KYC/AML requirements, age verification, fraud prevention, and regulatory reporting.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, conducting analytics, maintaining security, detecting fraud, and enforcing our Terms and Conditions, provided these interests do not override your fundamental rights and freedoms.
- Consent: Processing is based on your explicit consent for specific purposes such as marketing communications, newsletters, and optional data uses. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
- Vital Interests: In rare circumstances, processing may be necessary to protect your vital interests or those of another person (e.g., emergency situations).
6. Information Sharing and Disclosure
boss88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients for the purposes described below:
6.1 Service Providers and Business Partners
- Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
- Game Providers: Software suppliers like Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others to deliver casino games, slots, and live dealer experiences.
- KYC/AML Service Providers: Third-party identity verification and fraud prevention services to conduct age checks, identity authentication, and risk assessments.
- Cloud and Hosting Providers: Infrastructure providers that host our website, databases, and store data securely.
- Customer Support Tools: Communication platforms for live chat, email management, and customer service operations.
- Analytics and Marketing Platforms: Services that help us analyze user behavior, conduct A/B testing, and deliver marketing campaigns (only with your consent).
6.2 Legal and Regulatory Authorities
We may disclose your information to law enforcement agencies, regulators, courts, or government bodies when required by law, legal process, or regulatory directive, or when we believe disclosure is necessary to:
- Comply with our gaming license obligations and reporting requirements
- Respond to lawful requests, subpoenas, or court orders
- Investigate suspected fraud, money laundering, or other criminal activity
- Protect the rights, property, or safety of boss88, our users, or the public
- Enforce our Terms and Conditions or other agreements
6.3 Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.
6.4 Aggregated and Anonymized Data
We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for business intelligence, market research, or public reporting purposes. Such data is not considered personal information and is not subject to this Privacy Policy.
7. Data Security Measures
boss88 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:
- Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS technology, the same encryption standard used by major banks and financial institutions.
- Secure Storage: Personal data is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems.
- Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis and protected by multi-factor authentication.
- Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential security risks.
- Employee Training: Staff members are trained on data protection principles, confidentiality obligations, and security best practices.
- Incident Response: We maintain a data breach response plan to quickly identify, contain, and remediate security incidents.
- Secure Payment Processing: Payment card data (if applicable) is processed through PCI DSS-compliant payment gateways and is not stored on our servers.
While we strive to use commercially reasonable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access to your account.
8. Data Retention and Storage
boss88 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, and resolve disputes.
8.1 Active Account Data
While your account is active, we retain all personal information necessary to provide services, maintain your account, process transactions, and comply with ongoing regulatory requirements.
8.2 Post-Closure Retention
After you close your account or request deletion of your data, we retain certain information for the following purposes and periods:
- Regulatory Compliance: KYC documents, transaction records, and gaming activity data are retained for a minimum of 5 years from account closure to comply with anti-money laundering regulations and gaming license requirements.
- Legal Claims: Information necessary to defend against potential legal claims may be retained for the applicable statute of limitations period in relevant jurisdictions.
- Fraud Prevention: Records of fraudulent activity, suspended accounts, and security incidents may be retained indefinitely to protect boss88 and other users.
- Anonymized Data: After the retention period, personal data may be anonymized and retained for analytical and statistical purposes.
8.3 Data Storage Locations
Your personal data is primarily stored on secure servers located in data centers compliant with international security standards. For Indonesian users, your data may be transferred to and stored in jurisdictions outside Indonesia, including Curacao and countries within the European Economic Area (EEA), subject to appropriate safeguards as described in Section 11.
9. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Right to Access: You have the right to request confirmation of whether we process your personal data and obtain a copy of the personal information we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal information. You may also update certain information directly through your account settings.
- Right to Erasure (Right to be Forgotten): You may request deletion of your personal data, subject to legal and regulatory retention requirements. Note that we must retain certain data to comply with gaming license obligations.
- Right to Restrict Processing: You may request that we limit how we use your personal information in certain circumstances, such as while we verify data accuracy or assess the legal grounds for processing.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller where technically feasible.
- Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing, we will cease such processing immediately.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory data protection authority in your jurisdiction if you believe we have violated your privacy rights.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. Please note that we may need to verify your identity before processing certain requests.
10. Cookies and Tracking Technologies
boss88 uses cookies, web beacons, pixels, and similar tracking technologies to enhance your user experience, analyze website performance, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you and remember your preferences.
10.1 Types of Cookies We Use
- Essential Cookies: Strictly necessary for website functionality, authentication, and security. These cannot be disabled without impairing core services.
- Performance Cookies: Collect anonymous information about how visitors use our website to help us improve site performance and user experience.
- Functionality Cookies: Remember your preferences (e.g., language, region) and provide enhanced features.
- Targeting/Advertising Cookies: Track your browsing activity to deliver personalized marketing content and measure campaign effectiveness (only with your consent).
10.2 Managing Cookie Preferences
Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling essential cookies may impair your ability to use certain features of our website. You can manage your cookie preferences through your browser settings:
- Google Chrome: Settings > Privacy and security > Cookies and other site data
- Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Cookies and website data
- Microsoft Edge: Settings > Cookies and site permissions
11. International Data Transfers
boss88 operates internationally under a Curacao gaming license. Your personal information may be transferred to, stored in, and processed in countries outside Indonesia, including Curacao and countries within the European Economic Area (EEA), where data protection laws may differ from those in Indonesia.
When we transfer your data internationally, we implement appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable data protection standards. These safeguards may include:
- Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to countries without adequate data protection laws
- Data processing agreements with third-party service providers requiring adherence to data protection standards
- Ensuring that data is transferred only to jurisdictions with adequate data protection frameworks or to entities certified under recognized privacy frameworks
By using boss88 services, you acknowledge and consent to the international transfer and processing of your personal information as described in this Privacy Policy.
12. Children's Privacy
boss88 services are strictly intended for individuals who are at least 21 years of age or the legal gambling age in their jurisdiction, whichever is higher. We do not knowingly collect, use, or disclose personal information from anyone under the age of 21.
Our account registration process includes date of birth verification, and we conduct KYC checks requiring government-issued identification to prevent underage access. If we discover that we have inadvertently collected personal information from an individual under 21 years of age, we will immediately delete that information and close the associated account.
If you believe that we have collected information from a minor, please contact us immediately at [email protected] or [email protected] so we can take appropriate action.
Parents and guardians are encouraged to monitor their children's internet usage and implement parental controls to prevent minors from accessing online gambling websites.
13. Changes to This Privacy Policy
boss88 reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of this page and notify you through one or more of the following methods:
- Prominent notice on the boss88 homepage or within your account dashboard
- Email notification to the email address associated with your account
- In-app notification if you access boss88 through a mobile application
- Pop-up or banner notification upon your next login
Your continued use of boss88 services following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should discontinue using our services and contact us to close your account.
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.
Privacy Protection Highlights
Key measures we take to protect your personal information
256-Bit SSL Encryption
All data transmitted between your device and boss88 servers is protected using bank-grade 256-bit SSL encryption technology.
Secure Data Storage
Personal information stored on secure servers with firewalls, intrusion detection, and restricted access controls. Regular security audits conducted.
No Data Selling
We never sell, rent, or trade your personal information to third parties for their marketing purposes. Your data belongs to you.
Minimal Data Collection
We collect only the information necessary to provide services, comply with regulations, and enhance your experience. No excessive data gathering.
Regulatory Compliance
Adherence to Curacao gaming license requirements, international AML/KYC standards, and data protection principles consistent with GDPR and Indonesian law.
Your Privacy Rights
Access, rectify, erase, or port your data. Withdraw consent or object to processing. Lodge complaints with data protection authorities.