At boss56, your privacy is not an afterthought — it is a foundational commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold as a player.
Six principles that govern how boss56 handles every piece of personal data entrusted to us by Indonesian players.
Every data transmission between your browser and the boss56 platform is encrypted using industry-standard 256-bit SSL technology, protecting your credentials and financial information from interception.
boss56 does not sell, rent, or trade your personal data to third-party marketing companies. Any data sharing with partners is strictly limited to what is necessary to operate the Platform and fulfill our legal obligations.
We collect only the data we need for specific, clearly stated purposes — account management, KYC compliance, payment processing, fraud prevention, and customer support. We do not collect data speculatively.
Where we process your data on the basis of consent — such as marketing communications — you may withdraw that consent at any time. Marketing opt-out requests are processed within 48 hours of receipt.
We do not keep your data indefinitely. Retention periods are defined per data category (see Section 7), and data is securely deleted or anonymized once it is no longer required for its original purpose or by law.
Our data practices are designed to comply with the requirements imposed by our international gaming license, including AML (anti-money-laundering) and KYC obligations applicable to Indonesian player accounts.
1.1 Boss56 is an internationally operated online betting and casino platform. We are committed to protecting the privacy and personal data of every player who uses our Platform, with particular care given to the Indonesian players who form the core of our user base across cities including Jakarta, Surabaya, Bandung, Medan, Bali, and Yogyakarta.
1.2 This Policy describes, in clear and plain English, the categories of personal data we collect from you, the purposes for which that data is processed, the legal grounds on which processing is based, the parties with whom data may be shared, and the rights you hold with respect to your personal data.
1.3 We encourage you to read this Policy in full before creating an Account. If you have any questions about our data practices, please contact our Data Protection team using the details set out in Section 14.
2.1 Depending on the nature of your interaction with the Platform, we may collect and process the following categories of personal data:
| Data Category | Specific Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, KTP (Indonesian National ID) or passport number and scan | At registration and during KYC verification |
| Contact Data | Email address, phone number, residential address in Indonesia | At registration; updated by the Player at any time |
| Financial Data | Bank account number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | At deposit/withdrawal; retained for AML and financial reporting obligations |
| Account Data | Username, hashed password, account status, bonus history, wagering activity, game preferences | Continuously throughout the account lifecycle |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, session timestamps, referral source | Automatically on each Platform visit |
| Usage Data | Pages visited, games launched (including slot gacor titles, togel draw participation, sports betting markets), bet amounts, session duration | Automatically during each session |
| Communications Data | Live chat transcripts, support email correspondence, any documents you submit to our support team | When you contact us |
| Marketing Preferences | Consent status for promotional email/SMS, preferred language, preferred notification channel | At registration or when updated by the Player |
2.2 Special Category Data. We do not intentionally collect any special category data (as defined under applicable data protection law), including health data, political opinions, religious beliefs, or biometric data. If you voluntarily disclose such information in a support chat, it will be treated with the highest level of confidentiality and will not be used for any purpose beyond resolving your immediate support request.
3.1 Directly from You. The majority of the personal data we hold is provided directly by you when you: register an Account on boss56; complete KYC identity verification; make a deposit or request a withdrawal; contact our support team via live chat or email; respond to a promotional survey; or update your Account profile settings.
3.2 Automatically. When you visit and use the Platform, certain technical and usage data is collected automatically through cookies, web beacons, server logs, and analytics tools integrated into the Platform. For full details on automated data collection, see Section 9 (Cookies & Tracking).
3.3 From Third Parties. We may receive data about you from trusted third-party sources, including:
4.1 We use the personal data we collect for the following purposes:
5.1 We process your personal data on the following legal bases, depending on the specific purpose and data category involved:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration & management | Performance of a contract — processing is necessary to provide the betting and gaming services you have requested by registering an Account. |
| KYC & age verification | Legal obligation — we are required to verify player identity and age under the terms of our international gaming license and applicable AML regulations. |
| Payment processing | Performance of a contract — processing is necessary to execute deposit and withdrawal transactions requested by you. |
| Fraud prevention & AML monitoring | Legitimate interests — we have a legitimate interest in protecting the Platform, its users, and our financial partners from fraud, money laundering, and other criminal activity. |
| Responsible Gaming enforcement | Legal obligation and legitimate interests — we are obligated under our license to implement responsible gaming measures and have a genuine interest in player welfare. |
| Marketing communications | Consent — we will only send you direct marketing where you have explicitly opted in. You may withdraw consent at any time with immediate effect. |
| Platform analytics & improvement | Legitimate interests — improving Platform performance benefits all users and does not override individual privacy rights when data is handled in aggregate or anonymized form. |
| Legal compliance & regulatory reporting | Legal obligation — we must retain and disclose certain data as required by our gaming license authority, financial regulators, or a valid court order. |
6.1 Boss56 does not sell your personal data to any third party. We may, however, share your data with the following categories of recipients where it is strictly necessary for the purposes described in Section 4:
7.1 We retain personal data only for as long as is necessary to fulfill the purpose for which it was collected, or to comply with applicable legal, regulatory, or licensing obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Identity & KYC documents | 5 years from Account closure, or longer if required by our gaming license authority or AML regulations. |
| Financial transaction records | 5 years from the date of each transaction, in compliance with AML record-keeping obligations. |
| Account & wagering history | Duration of the active Account, plus 5 years from closure for dispute resolution and compliance purposes. |
| Customer support communications | 3 years from the date of each interaction, unless the matter is subject to ongoing legal proceedings. |
| Marketing consent records | Until consent is withdrawn, plus 1 year thereafter as evidence of the consent history. |
| Technical & usage logs | Up to 13 months from the date of collection, after which logs are aggregated or deleted. |
| Cookie data | Varies by cookie type — session cookies expire immediately on browser close; persistent cookies expire within 12 months (see Section 9). |
7.2 Where an Account is subject to an ongoing fraud investigation, legal dispute, or regulatory inquiry at the time of the standard retention period's expiry, we will retain all relevant data until the matter is fully resolved, and for a further reasonable period thereafter.
7.3 Upon expiry of the applicable retention period, personal data is either permanently deleted from our systems or rendered irreversibly anonymous, such that it can no longer be associated with any identifiable individual.
8.1 Boss56 implements a layered approach to data security, combining technical, organizational, and procedural safeguards to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
8.2 In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, we will notify the relevant regulatory authority within the timeframes required by our licensing obligations. Where a breach is likely to result in a high risk to you personally, we will also notify you directly without undue delay.
9.1 The boss56 Platform uses cookies and similar tracking technologies to deliver its core functionality, enhance your user experience, and gather anonymized analytics data. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for Platform operation — maintain your logged-in session, remember your language preference, and enable secure payment flows. | Session (expire on browser close) |
| Functional | Remember your game preferences, display settings, and notification choices to personalize your experience on return visits. | Up to 12 months |
| Analytics | Collect anonymized data on page views, session duration, device types, and game popularity to help us improve Platform design and performance. | Up to 13 months |
| Marketing | Track conversion events (e.g., first deposit) for the purpose of evaluating the effectiveness of promotional campaigns. Only active where you have provided marketing consent. | Up to 30 days |
9.2 You can control and manage cookies through your browser settings at any time. Disabling strictly necessary cookies may impair the functionality of the Platform. Disabling analytics or marketing cookies will not affect your ability to place wagers or access your Account.
10.1 As a player on the boss56 Platform, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting our Data Protection team using the contact details in Section 14.
Request a copy of all personal data we hold about you, along with information about how it is being used and with whom it has been shared.
Request correction of any inaccurate or incomplete personal data we hold about you. We will action valid rectification requests within 30 days.
Request deletion of your personal data where it is no longer necessary for the original purpose, subject to our legal retention obligations described in Section 7.
Request that we limit how we use your data in certain circumstances — for example, while a rectification request is being verified or a legitimate-interests assessment is under review.
Receive a copy of data you have provided to us in a structured, commonly used, machine-readable format, where processing is based on your consent or on a contract.
Object to processing based on our legitimate interests, and to the use of your data for direct marketing purposes. Marketing objections are actioned within 48 hours.
10.2 We will respond to all valid privacy rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for it before the initial thirty-day period expires.
10.3 We will not charge a fee for processing a rights request unless it is manifestly unfounded or excessive in scope, in which case we reserve the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for our decision.
11.1 The boss56 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from any person under the age of 21. Our registration process requires users to confirm their date of birth, and our KYC process verifies this declaration against official identity documents.
11.2 If we discover or have reasonable grounds to suspect that an Account has been registered by, or is being used by, a person under 21 years of age, we will immediately suspend the Account, conduct a full investigation, and — where the suspicion is confirmed — permanently close the Account, forfeit all Bonus Funds, and report the incident as required by our licensing obligations.
11.3 If you are a parent or guardian and believe that a minor in your care has registered an Account on boss56, please contact us immediately via the support email address in Section 14. We will investigate and act on all such reports as a priority.
12.1 As an internationally operated platform, boss56 may transfer your personal data to servers and service providers located outside of Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to maintain the same standard of protection that would apply if the data remained within your home jurisdiction.
12.2 Safeguards we apply to international data transfers include: standard contractual clauses incorporated into data processing agreements with all receiving third parties; technical encryption of data in transit; and limiting the scope of transferred data to the minimum necessary for the specific processing purpose.
12.3 By registering an Account on boss56, you acknowledge that your personal data may be transferred to, stored on, and processed by servers and service providers in jurisdictions outside Indonesia, subject to the safeguards described in this Section.
13.1 Boss56 reserves the right to update or amend this Privacy Policy at any time. We will publish the revised Policy on this page and update the "Effective Date" shown at the top. Where changes are material — for example, where we propose to use your data in a fundamentally new way — we will notify you by email to your registered address at least seven (7) calendar days before the change takes effect.
13.2 Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should cease using the Platform and request Account closure in accordance with our Terms & Conditions.
13.3 We recommend that you review this Policy periodically to remain informed of how boss56 protects your personal data. The current version of this Policy is always accessible at https://boss56.cam/privacy-policy.
14.1 For any privacy-related inquiries, requests to exercise your data rights, or concerns about how boss56 handles your personal data, please reach out through the following channels:
Available 24 hours a day, 7 days a week directly through the Platform. Indonesian-speaking agents are on hand at all times. Typical first-response time is under 5 minutes during peak WIB hours.
For formal privacy requests and data rights inquiries, contact us at:
[email protected]Please include "Privacy Request" in your subject line. We aim to acknowledge all requests within 2 business days (WIB).
Have questions about how boss56 handles your personal information? Our support team is available around the clock. You can also review our Terms & Conditions, visit our FAQ, or return to the homepage.