Your privacy matters to boss99. Learn how we collect, use, protect, and manage your personal information in compliance with international data protection standards.
Last Updated: January 15, 2026 | Effective Date: January 15, 2026
Welcome to the boss99 Privacy Policy. This document explains how boss99 ("We", "Us", "Our") collects, uses, stores, shares, and protects your personal information when you use our online gaming platform at https://boss99.cam (the "Website") and related services.
At boss99, we are committed to protecting your privacy and ensuring the security of your personal data. We comply with international data protection regulations, including principles outlined in the European Union's General Data Protection Regulation (GDPR) and applicable Indonesian data protection laws, even though our primary operations are licensed under Curacao jurisdiction.
By creating an account on boss99 or using our services, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you should not use boss99 services.
We adhere to core privacy principles: Transparency (we clearly explain what data we collect and why), Purpose Limitation (we only use data for specified, legitimate purposes), Data Minimization (we collect only what is necessary), Accuracy (we keep data up-to-date), Storage Limitation (we retain data only as long as necessary), Security (we protect data with appropriate technical measures), and Accountability (we are responsible for demonstrating compliance).
boss99 collects various types of personal information from users to provide our services, comply with legal obligations, and enhance user experience. The categories of data we collect include:
When you create a boss99 account, we collect the following mandatory information:
To comply with anti-money laundering regulations and licensing requirements, we collect identity verification documents, including:
These documents are encrypted and stored securely. We use them solely for identity verification and fraud prevention purposes.
When you make deposits, place bets, or request withdrawals, we collect and process financial information, including:
To improve our services, detect fraud, and ensure responsible gaming, we collect data about your gaming activity:
We automatically collect technical information when you access boss99:
When you contact boss99 customer support or communicate with us, we collect:
boss99 uses your personal information for the following legitimate business purposes:
boss99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients for the purposes described below:
We share necessary financial information with payment processors and banks to facilitate deposits and withdrawals. This includes bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), account numbers, and transaction details. These third parties are contractually obligated to protect your data and use it only for transaction processing.
When you play games from providers like Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Ezugi, Spribe, and others, we share limited data (username, bet amounts, game results) to enable gameplay. Game providers process this data under their own privacy policies and are required to maintain confidentiality.
We use third-party KYC verification services to authenticate government-issued IDs (KTP, passport, driver's license) and proof of address documents. These services receive copies of your identity documents solely for verification purposes and are bound by strict data protection agreements.
Our customer support team uses live chat software, email platforms, and CRM (Customer Relationship Management) systems to assist you. Your support inquiries, chat transcripts, and account information are shared with these tools to provide efficient service.
We use analytics tools (such as Google Analytics or similar services) to understand website traffic, user behavior, and technical performance. These services receive anonymized or pseudonymized data and cannot identify you personally. You can opt out of analytics tracking through browser settings or third-party opt-out tools.
We may disclose your information to law enforcement, courts, government agencies, or regulatory bodies when:
In the event that boss99 undergoes a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company. We will notify you via email or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.
boss99 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 7 years after closure | Legal & regulatory compliance (AML, taxation, licensing requirements) |
| Identity documents (KYC) | Duration of account + 7 years after closure | Anti-money laundering regulations, licensing requirements |
| Transaction & financial data | 7 years after transaction date | Financial record-keeping, tax compliance, dispute resolution |
| Betting & gaming history | 7 years after bet placement | Regulatory compliance, dispute resolution, responsible gaming monitoring |
| Customer support communications | 3 years after last contact | Service improvement, dispute resolution, quality assurance |
| Marketing consent records | Duration of consent + 2 years after withdrawal | Demonstrate compliance with consent requirements |
| Technical logs (IP, device data) | 12 months | Security monitoring, fraud detection, technical troubleshooting |
After the retention period expires, we securely delete or anonymize your personal data so that it can no longer be linked to you. Anonymized data may be retained indefinitely for statistical and research purposes.
If you close your account and request immediate data deletion, we will honor your request to the extent possible under legal constraints. However, we are obligated to retain certain records (financial transactions, identity documents) for regulatory compliance purposes even after account closure.
boss99 takes data security seriously and implements industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:
Despite our best efforts, no system is 100% secure. In the unlikely event of a data breach that compromises your personal information, we will notify you promptly in accordance with applicable data protection laws and take immediate steps to mitigate harm.
As a boss99 user, you have the following rights regarding your personal data:
To exercise any of these rights, contact our Data Protection Officer at [email protected] (displayed as plain text, not a clickable link) with the subject line "Privacy Rights Request." We will respond within 30 days of receiving your request.
boss99 uses cookies and similar tracking technologies to enhance your experience, analyze website usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, but this may affect website functionality. For more information, visit your browser's help section or www.aboutcookies.org.
boss99 operates internationally and may transfer your personal data outside Indonesia to countries where our servers, payment processors, or service providers are located. These countries may have different data protection laws than Indonesia.
When we transfer data internationally, we ensure adequate protection through:
By using boss99 services, you consent to the transfer of your personal data to jurisdictions outside Indonesia for the purposes described in this Privacy Policy.
boss99 services are strictly for individuals aged 21 and above. We do not knowingly collect personal information from anyone under 21 years of age. If we discover that a user is underage, we will immediately close their account, forfeit all funds, and delete their personal data.
If you are a parent or guardian and believe your child has provided personal information to boss99, please contact us immediately at [email protected] so we can take appropriate action.
boss99 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:
Your continued use of boss99 services after the updated Privacy Policy takes effect constitutes acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
If you have questions, concerns, or requests regarding this Privacy Policy or how boss99 handles your personal data, please contact us:
We aim to respond to all privacy inquiries within 30 days of receipt. For urgent security concerns (e.g., suspected account breach), contact us immediately via live chat for fastest response.
At boss99, protecting your privacy is not just a legal obligation—it's fundamental to our relationship with you. We handle your personal information with the same care and security we would expect for our own data. If you ever have concerns about how your data is being used, we encourage you to reach out to our Data Protection Officer. We are here to address your questions, respect your rights, and maintain the trust you place in us.
All data transmitted and stored is protected with 256-bit SSL/TLS encryption, the same security standard used by major Indonesian banks like BCA, BRI, BNI, and Mandiri.
Your personal information is accessible only to authorized personnel who need it to provide services. All staff sign confidentiality agreements and undergo privacy training.
Independent cybersecurity firms conduct regular penetration tests and security assessments to identify and fix vulnerabilities before they can be exploited.
We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data stays with boss99 and trusted service providers only.
You have the right to access, correct, delete, or export your personal data at any time. Contact our Data Protection Officer to exercise these rights.
In the unlikely event of a data breach affecting your information, we will notify you promptly and take immediate action to minimize harm and prevent recurrence.
Our Data Protection Officer and customer support team are available 24/7 to answer questions about your data, privacy rights, and security practices.
View FAQ Read Terms & Conditions