This Privacy Policy describes how boss77 collects, uses, stores, and protects your personal information. We are committed to safeguarding your privacy and ensuring that your personal data is handled responsibly and in accordance with international data protection standards. By using our Platform, you consent to the practices described in this document.
boss77 (referred to as "We", "Us", "Our", or the "Company") is the data controller responsible for the collection, processing, and protection of your personal information when you use our online betting platform at https://boss77.cam. As the data controller, we determine the purposes and means of processing your personal data and are committed to ensuring compliance with applicable data protection laws.
Our platform serves the Indonesian market, providing sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) to adult members aged 21 and over. All personal data collected is processed in accordance with international data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
boss77 collects several categories of personal information to provide, maintain, secure, and improve our betting services. The data we collect falls into three primary categories:
Information You Provide Directly:
Information Collected Automatically:
Information from Third Parties:
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Name, date of birth, ID documents | Direct submission during registration and KYC |
| Contact Data | Email, phone number, address | Direct submission during registration |
| Financial Data | Bank accounts, transaction history | Direct submission + payment processor reports |
| Technical Data | IP address, device info, browser type | Automatic collection via cookies and server logs |
| Behavioral Data | Betting patterns, game preferences | Automatic collection during platform usage |
boss77 processes your personal information for the following legitimate business purposes:
Service Delivery and Account Management:
Legal and Regulatory Compliance:
Platform Improvement and Analytics:
Marketing and Promotional Communications (with your consent):
Legal Basis for Processing: We process your personal data based on (1) contractual necessity — to fulfill our agreement to provide betting services; (2) legal obligation — to comply with KYC, AML, and age verification laws; (3) legitimate interests — to prevent fraud, improve our platform, and maintain security; and (4) consent — for optional marketing communications that you can opt out of at any time.
boss77 does not sell your personal information to third parties. However, we do share limited personal data with trusted service providers and partners under strict contractual safeguards:
Payment Processors: We share transaction details with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These providers receive only the information necessary to complete the transaction (account name, account number, transaction amount, timestamp).
Game Studio Partners: When you play games from third-party providers (Evolution Gaming, Pragmatic Play, Pocket Games Soft, NetEnt, Microgaming, Spribe), your username and betting activity on those specific games are shared with the game provider for gameplay functionality and RTP monitoring. These providers operate under their own privacy policies and security standards.
Identity Verification Services: We use third-party KYC and identity verification services to validate the authenticity of submitted ID documents, cross-check against government databases, and perform fraud detection screening. These services receive copies of your ID documents and selfie photos for verification purposes only.
Cloud Infrastructure and Hosting Providers: boss77 stores data on secure cloud servers provided by certified hosting companies. These providers have access to the physical servers but are contractually prohibited from accessing or using your personal data.
Legal and Regulatory Authorities: We may disclose personal information to law enforcement agencies, regulatory bodies, courts, or government authorities when required by law, court order, or legal process, or when necessary to protect our rights, safety, or property, or that of our users.
Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified via email if such a transfer occurs, and the new entity will remain bound by this Privacy Policy.
All third-party service providers are required to sign Data Processing Agreements (DPAs) that obligate them to maintain the same level of data protection as boss77 and to use your information solely for the purposes specified in their service agreement with us.
boss77 employs industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:
Data Breach Notification: In the unlikely event of a data breach that compromises your personal information, boss77 will notify affected members via email within 72 hours of discovering the breach, detailing what data was affected and what steps we are taking to mitigate the damage. We will also notify relevant data protection authorities as required by law.
boss77 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:
After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.
As a boss77 member, you have the following rights regarding your personal data:
To exercise any of these rights, contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond to all legitimate requests within 30 days. For security purposes, we may require proof of identity before processing your request.
boss77 uses cookies, web beacons, and similar technologies to enhance your user experience, maintain session states, and analyze platform usage. A cookie is a small text file stored on your device that allows us to recognize your browser and remember certain information.
Types of Cookies We Use:
Managing Cookie Preferences: Most web browsers allow you to control cookies through their settings. You can typically set your browser to refuse all cookies, accept only first-party cookies, or notify you when a cookie is being sent. However, disabling essential cookies may prevent you from accessing certain features of the platform. Consult your browser's help documentation for specific instructions on managing cookies.
boss77 is an adults-only platform. We do not knowingly collect personal information from individuals under the age of 21. All members must be at least 21 years of age to register an account, as verified through our mandatory KYC process.
If we discover that we have inadvertently collected personal data from a person under 21, we will immediately delete that information and permanently close the associated account. All funds will be forfeited as underage gambling is strictly prohibited under our Terms & Conditions and applicable laws.
Parents and guardians: If you believe your child has created an account on boss77, please contact us immediately at [email protected] so we can take appropriate action.
boss77 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you through one or more of the following methods:
Material changes will take effect 14 days after notification. Non-material changes (typo corrections, formatting updates, clarifications) will take effect immediately upon posting. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. The "Last Updated" date at the top of this document indicates when the policy was last revised.
Continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must discontinue use of boss77 and may request account closure.
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer:
Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Protection Request"
Live Chat: Available 24/7 via the platform (for general inquiries)
Response Time: We aim to respond to all privacy-related inquiries within 48 business hours. For data subject access requests (DSARs), we will provide a substantive response within 30 days as required by data protection laws.
Related Documents: This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform, and our Responsible Gaming page, which outlines our commitment to player welfare.
Six core security measures that safeguard your personal data on the boss77 platform every single day.
All data transmitted between your device and our servers is protected by bank-grade 256-bit SSL/TLS encryption — the same standard used by major financial institutions worldwide.
Independent third-party security firms audit our infrastructure quarterly to identify vulnerabilities. All findings are remediated within 30 days of discovery.
Enable 2FA on your account for an extra layer of security. Even if someone obtains your password, they cannot access your account without your authentication code.
boss77 will never sell, rent, or trade your personal information to third parties for marketing purposes. Your data is yours, and it stays that way.
All personal data is stored on encrypted servers in certified data centers with 24/7 physical security, biometric access controls, and redundant power and cooling systems.
Only authorized personnel with a legitimate business need can access personal data. All access is logged, monitored, and audited to detect unauthorized activity.
You have full control over your personal information. Here are the rights you can exercise at any time.
Request a complete copy of all personal information we hold about you in a portable, machine-readable format. We will deliver this within 30 days at no charge.
If any of your personal data is incorrect or outdated, you can update it directly through your account settings or request corrections via customer support.
Request deletion of your personal information, subject to legal retention requirements. Certain financial and KYC records must be retained for 5–7 years by law.
Unsubscribe from promotional emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email or by updating preferences in your account settings.
Receive your data in a structured format and transfer it to another service provider without interference. Useful if you decide to move to a different betting platform.
If you believe we have mishandled your personal data, you have the right to file a complaint with the relevant data protection authority in your jurisdiction.
Our Data Protection Officer is available to answer any questions about how we collect, use, and protect your personal information on boss77.