Privacy Policy

1. Introduction

boss67 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect the personal data of users ("you", "your") of our online gaming platform at https://boss67.cam. This Policy applies to all services offered by boss67 to residents of Indonesia, including sports betting, casino games, slot games, togel (lottery-style prediction games), and related entertainment services.

By creating an account with boss67, accessing our Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our privacy practices, you must not use boss67 services.

boss67 processes personal data in accordance with Indonesian data protection regulations and international best practices. We implement bank-level security measures to safeguard your information and maintain strict policies regarding data access, retention, and deletion. Your trust is our highest priority.

2. Data Controller Information

For the purposes of data protection law, the data controller responsible for your personal information is:

• Entity Name: boss67
• Website: https://boss67.cam
• Email Contact: [email protected]
• Data Protection Officer Email: [email protected]
• General Support: [email protected]

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us using the information provided above. We aim to respond to all privacy inquiries within 7 business days.

3. Information We Collect

boss67 collects several categories of personal information necessary to provide gaming services, process transactions, comply with regulatory requirements, prevent fraud, and improve user experience. The types of data we collect include:

3.1 Information You Provide Directly

When you register for a boss67 account, you provide the following information:

• Personal Identification: Full legal name (as shown on your Indonesian KTP), date of birth, place of birth, Indonesian national identity card (KTP) number
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted hash form only)
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), payment transaction records
• Identity Verification Documents: Clear photograph or scan of your KTP (front and back), proof of address documents if requested (utility bills, bank statements), selfie photographs holding your KTP if additional verification is required
• Communication Data: Content of messages you send to customer support, feedback you provide, survey responses, complaints or dispute information

3.2 Information We Collect Automatically

When you access and use boss67 services, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, Android, iOS, macOS), browser type and version, screen resolution, device identifiers
• Connection Data: IP address, internet service provider, connection type, approximate geographic location (city/province level based on IP address)
• Usage Data: Login times and frequency, pages visited, games played, bet history (amounts, outcomes, timestamps), deposit and withdrawal history, navigation paths through the website, time spent on pages, links clicked
• Performance Data: Error logs, loading times, technical issues encountered, crash reports

3.3 Information from Third Parties

In limited circumstances, we may receive information about you from third parties:

• Payment Processors: Transaction confirmation, payment method verification from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers
• Identity Verification Services: Verification of KTP authenticity, cross-checking identity information against government databases (where legally permitted)
• Fraud Prevention Services: Risk scoring, device fingerprinting, suspicious activity alerts from specialized security vendors

4. How We Use Your Information

boss67 uses your personal information for the following legitimate business purposes:

4.1 Account Management and Service Delivery

• Create, maintain, and manage your boss67 user account
• Verify your identity and age to comply with 21+ legal requirements
• Process your deposits, withdrawals, and other financial transactions
• Enable you to place bets, play games, and access all platform features
• Track your betting history and account balance
• Apply bonuses, promotions, and loyalty rewards to your account
• Process your participation in tournaments and special events

4.2 Customer Support and Communication

• Respond to your inquiries, questions, and support requests
• Provide technical assistance and troubleshooting
• Send you important account notifications (security alerts, policy updates, regulatory notices)
• Resolve disputes, investigate complaints, and handle account issues
• Conduct customer satisfaction surveys and gather feedback

4.3 Security, Fraud Prevention, and Compliance

• Verify the authenticity of identity documents to prevent underage gambling
• Detect and prevent fraudulent activity, money laundering, collusion, and bonus abuse
• Monitor for multiple accounts, shared accounts, and prohibited activities
• Investigate suspicious betting patterns and unusual transactions
• Comply with anti-money laundering (AML) and know-your-customer (KYC) regulations
• Maintain records as required by Indonesian law and gaming regulations
• Protect the integrity of games and prevent cheating
• Enforce our Terms and Conditions and Responsible Gaming policies

4.4 Platform Improvement and Analytics

• Analyze user behavior and preferences to improve our services
• Identify technical issues, bugs, and performance problems
• Optimize website speed, mobile responsiveness, and user interface
• Develop new features and games based on player interests
• Conduct internal research and statistical analysis
• Test new functionality before public release

4.5 Marketing and Personalization (With Your Consent)

• Send you promotional offers, bonus notifications, and special deals tailored to your gaming preferences
• Provide personalized game recommendations based on your play history
• Inform you about new features, tournaments, and platform updates
• Deliver targeted content relevant to Indonesian players (e.g., BRI Liga 1 betting markets, local payment method promotions)

Note: You may opt out of marketing communications at any time by clicking the unsubscribe link in any promotional email or adjusting your communication preferences in your account settings.

5. Legal Basis for Processing

boss67 processes your personal data based on one or more of the following legal grounds under Indonesian and international data protection law:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under the Terms and Conditions, including account creation, transaction processing, game provision, and customer support.
• Legal Obligation: Processing is required to comply with Indonesian legal requirements including age verification, identity verification (KYC), anti-money laundering regulations, financial record-keeping, and response to valid legal requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, platform security, service improvement, internal analytics, and protecting the rights and safety of boss67, our users, and third parties.
• Consent: For marketing communications and certain optional features, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Information Sharing and Disclosure

boss67 does not sell your personal information to third parties. We share your data only in the limited circumstances described below:

6.1 Service Providers

We engage trusted third-party companies to perform functions on our behalf, subject to strict confidentiality obligations:

• Payment Processors: To facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Identity Verification Services: To verify KTP authenticity and prevent underage gambling
• Game Providers: To deliver slot games, live casino tables, and other gaming content (providers access only the minimum data needed to operate games)
• Cloud Hosting Providers: To securely store data on servers with appropriate security certifications
• Customer Support Tools: To manage support tickets, live chat, and communication channels
• Analytics Services: To understand website usage and improve user experience (data is anonymized where possible)
• Security and Fraud Prevention Vendors: To detect suspicious activity and protect against fraudulent transactions

All service providers are contractually obligated to protect your data, use it only for specified purposes, and delete or return it when services are complete.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required by Indonesian law or in response to valid legal processes:

• To comply with legal obligations, court orders, or government regulations
• To respond to valid requests from law enforcement or regulatory authorities investigating criminal activity, money laundering, or other illegal conduct
• To enforce our Terms and Conditions or protect our legal rights
• To protect the safety, security, and rights of boss67, our users, or the public

6.3 Business Transfers

If boss67 is involved in a merger, acquisition, asset sale, or similar corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email and prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with other parties when you have explicitly consented to such sharing.

7. Data Security Measures

boss67 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

7.1 Technical Security

• Encryption: All data transmitted between your device and boss67 servers is encrypted using 256-bit SSL/TLS protocol—the same standard used by banks
• Password Security: Your password is hashed using advanced cryptographic algorithms (bcrypt or similar) and cannot be read by boss67 staff or database administrators
• Secure Servers: Data is stored on secure servers located in certified data centers with physical access controls, redundant power supplies, and environmental monitoring
• Firewall Protection: Our network infrastructure is protected by enterprise-grade firewalls and intrusion detection systems
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments on our systems
• Data Segregation: Different types of data are stored separately with appropriate access controls

7.2 Organizational Security

• Access Controls: Personal data is accessible only to authorized employees and contractors who require access to perform their duties, on a need-to-know basis
• Employee Training: All staff members handling personal data receive regular training on data protection principles and security best practices
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements prohibiting unauthorized disclosure of user data
• Incident Response Plan: We maintain documented procedures for responding to data breaches, including user notification within 72 hours if required by law

7.3 Payment Security

boss67 does not store your full bank account numbers, credit card details, or e-wallet login credentials on our servers. Payment information is transmitted directly to certified payment gateways operated by Indonesian banks and e-wallet providers. We retain only the minimum necessary information (such as the last four digits of account numbers) to facilitate future transactions.

8. Data Retention Period

boss67 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal obligations:

Data Category	Retention Period	Reason
Account Information	Duration of active account + 30 days after closure	Service provision, customer support
Identity Documents (KTP)	5 years after account closure	AML/KYC regulatory compliance
Transaction Records	7 years after transaction	Financial record-keeping, tax compliance, dispute resolution
Betting History	5 years after bet settlement	Regulatory compliance, dispute resolution
Communication Records	3 years after last communication	Customer service quality, dispute evidence
Marketing Consent	Until consent is withdrawn	Honoring user preferences
Security Logs	1 year	Fraud prevention, security monitoring

After the applicable retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

9. Your Privacy Rights

Under Indonesian data protection law, you have the following rights regarding your personal information. To exercise any of these rights, please contact our Data Protection Officer at [email protected]:

9.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a clear, structured format within 30 days of your verified request. You may access much of your data directly through your boss67 account dashboard, including betting history, transaction records, and account settings.

9.2 Right to Rectification

If any of your personal information held by boss67 is inaccurate or incomplete, you have the right to request correction. You can update most information (email address, phone number, residential address) directly in your account settings. For changes to your name or other KYC-verified information, you must contact customer support and may be required to submit updated documentation.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent (where consent was the legal basis for processing). However, we may be required to retain certain data to comply with legal obligations (e.g., financial records for 7 years, identity documents for 5 years). In such cases, we will restrict processing to the minimum necessary for legal compliance.

9.4 Right to Restriction of Processing

You have the right to request that we limit how we use your personal data in certain situations, such as while we verify the accuracy of data you have disputed, or while we determine whether we have legitimate grounds to process data you have objected to.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider. This applies to data you have provided to us based on consent or contractual necessity, and that we process by automated means.

9.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to marketing, we will immediately cease such processing. For objections based on legitimate interests, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where we process your data based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. You can withdraw consent by clicking "unsubscribe" in marketing emails, adjusting preferences in your account settings, or contacting customer support.

9.8 Right to Lodge a Complaint

If you believe boss67 has violated your privacy rights or Indonesian data protection law, you have the right to lodge a complaint with the relevant supervisory authority in Indonesia. We encourage you to contact us first so we can address your concerns directly.

10. Cookies and Tracking Technologies

boss67 uses cookies and similar tracking technologies to enhance your experience, improve platform functionality, and analyze usage patterns.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to remember your actions and preferences (such as login status, language selection, game filters) over time, so you don't have to re-enter them whenever you return to the site or navigate between pages.

10.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including login authentication, session management, security features, and load balancing. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies: Remember your preferences and settings such as language selection, currency display, game view preferences, and communication preferences. These enhance your user experience but are not strictly necessary.
• Analytics Cookies: Help us understand how visitors interact with boss67 by collecting anonymous information about pages visited, time spent on site, navigation paths, and errors encountered. We use this data to improve platform performance and user experience.
• Performance Cookies: Monitor website speed, loading times, and technical issues to help us optimize the platform's technical infrastructure.

10.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can configure your browser to reject all cookies, accept only certain cookies, or notify you when a cookie is set. However, blocking essential cookies will prevent you from using boss67 services. Blocking functional or analytics cookies may limit certain features but will not prevent basic platform use. Consult your browser's help documentation for instructions on managing cookies.

11. International Data Transfers

boss67 primarily stores data on servers located in secure data centers within or near Indonesia. However, some of our service providers (such as cloud hosting providers, payment processors, or game providers) may be located in other countries. When we transfer your personal data outside Indonesia, we ensure appropriate safeguards are in place:

• We use service providers in countries with adequate data protection laws recognized by Indonesian authorities
• We enter into data processing agreements with service providers that include standard contractual clauses approved by data protection authorities
• We ensure that transferred data is encrypted in transit and at rest
• We limit international transfers to the minimum necessary to provide services

If you have questions or concerns about international data transfers, please contact our Data Protection Officer at [email protected].

12. Children's Privacy

boss67 services are intended exclusively for adults aged 21 years or older. We do not knowingly collect, use, or retain personal information from individuals under 21 years of age. Our age verification process during account registration and KYC verification is designed to prevent underage individuals from creating accounts.

If we become aware that we have inadvertently collected personal information from someone under 21 years old, we will take immediate steps to delete that information and permanently close the associated account. All deposits made by the underage individual will be forfeited, and any winnings will not be paid out. We may report cases of underage gambling attempts to relevant authorities if required by law.

Parents or guardians who believe their child has created a boss67 account should contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Policy

boss67 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or technological standards. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this document
• Post the revised Policy on the boss67 website
• Notify you via email to the address associated with your account if changes are substantial and materially affect your rights
• Display a prominent notice on the website alerting you to the changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of boss67 services after changes have been posted constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you must stop using boss67 services and close your account.

14. Contact Information

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our data protection practices, please contact us: