bos14 Privacy Policy

01 Definitions

Throughout this Privacy Policy, the following capitalised terms carry the meanings defined below:

02 Scope & Application

This Privacy Policy applies to all Personal Data collected by bos14 in connection with your use of the bos14 platform, including data collected through the website at bos14.app, any native mobile application released by bos14, and any direct communications you initiate with the bos14 support team.

This Policy applies equally to all Members regardless of the Indonesian city or region from which they access the platform — including Jakarta, Surabaya, Bandung, Medan, Bali, Makassar, Semarang, Yogyakarta, and Palembang — and to all devices used to access bos14, whether desktop, mobile, or tablet.

By registering an Account and using the bos14 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your Personal Data as described herein. If you do not agree to the terms of this Policy, you must refrain from using the platform and may request account closure by contacting our support team.

03 Data We Collect

bos14 collects Personal Data across several categories depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify the 21+ age requirement);
• Residential address in Indonesia;
• Email address and mobile phone number;
• National identity card number (KTP) or passport number, as provided during KYC verification.

3.2 Financial & Transaction Data

• Bank account details for the Indonesian bank accounts you register for deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata);
• E-wallet account identifiers associated with OVO, DANA, GoPay, ShopeePay, and LinkAja;
• Transaction history including deposit amounts, withdrawal requests, bet placement records, and account balance history.

3.3 Technical & Device Data

• IP address and approximate geolocation derived from it;
• Browser type, version, and operating system;
• Device identifiers and mobile device model;
• Session timestamps, login history, and platform interaction logs.

3.4 Communications Data

• The content of live chat sessions, support emails, and any other written communications you send to the bos14 team;
• Records of any complaints, disputes, or responsible gaming requests submitted to bos14.

3.5 KYC Document Data

• Copies of government-issued identity documents, proof-of-address documents, and payment method verification documents submitted as part of the Know Your Customer process.

04 How Data is Collected

bos14 collects Personal Data through the following channels:

• Directly from you — when you complete the account registration form, submit KYC documents, deposit or withdraw funds, contact the support team, or update your account settings.
• Automatically — through cookies, web analytics tools, and server logs that record technical data about your device and your interactions with the platform each time you access bos14.
• From third-party processors — identity verification providers may return enriched data about the identity documents you submit; payment processors provide transaction confirmation data; fraud detection services may flag anomalous activity associated with your session.

bos14 does not collect Personal Data from social media platforms or purchase data lists from third-party data brokers.

05 Purposes of Processing

bos14 processes your Personal Data for the following purposes:

06 Legal Basis for Processing

bos14 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity — processing required to perform the contract between bos14 and the Member, including account creation, payment processing, and the provision of betting and gaming services.
• Legitimate interests — processing carried out in the legitimate interests of bos14 or its Members, including fraud prevention, platform security, and improving service quality, where those interests are not overridden by the Member's privacy rights.
• Legal obligation — processing necessary to comply with applicable laws and regulations, including AML record-keeping, age verification, and responses to lawful authority requests.
• Consent — processing based on your freely given and specific consent, including sending marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Sharing of Personal Data

bos14 does not sell, rent, or trade your Personal Data. We may share Personal Data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors — Indonesian bank transfer gateways and e-wallet partners (including those supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive the account and transaction data necessary to process your deposits and withdrawals.
• Identity verification providers — third-party KYC service providers receive copies of your identity documents and return a verification result to bos14. These providers operate under strict data processing agreements.
• Fraud prevention services — device fingerprinting and fraud analytics services receive technical session data to identify and prevent fraudulent account activity.
• Platform analytics providers — aggregated and anonymised usage data may be shared with analytics platforms to support platform performance monitoring. No individually identifiable data is included in these transfers.
• Regulatory and law enforcement authorities — where required by applicable law or by a valid legal order, bos14 will disclose Personal Data to the relevant competent authority.
• Professional advisers — legal, audit, and compliance advisers may access Personal Data in the context of providing professional services to bos14, subject to confidentiality obligations.

08 Cookies & Tracking Technologies

bos14 uses cookies and similar tracking technologies to operate the platform, maintain your authenticated session, remember your preferences, and collect aggregated analytics data. The main categories of cookies used are as follows:

You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling functional cookies may affect your experience on the platform, including the retention of login state between sessions.

09 Data Retention

bos14 retains Personal Data for no longer than is necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:

• Account and identity data — retained for a minimum of five (5) years from the date of account closure, in accordance with AML record-keeping obligations.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction.
• KYC documents — retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later.
• Support communications — retained for two (2) years from the date of last interaction, unless the communication relates to an unresolved dispute, in which case retention continues until the dispute is resolved.
• Technical logs and analytics data — aggregated analytics data is retained for up to twenty-four (24) months; raw session logs are retained for ninety (90) days for security monitoring purposes.
• Marketing consent records — retained for the duration of your account membership plus two (2) years following account closure, to evidence prior consent in the event of a dispute.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with bos14's internal data destruction procedures.

10 Security Measures

bos14 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit — all data exchanged between your device and the bos14 platform is encrypted using TLS 1.3, including the bos14 Login flow, payment requests, and all account management pages.
• Encryption at rest — Personal Data stored on bos14 servers is encrypted using AES-256 encryption.
• Password hashing — account passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm with an individual salt per account.
• Access controls — access to Personal Data is restricted to bos14 employees and contractors who require it to perform their role. All access is logged and subject to regular review.
• Two-factor authentication (2FA) — Members are strongly encouraged to enable 2FA on their bos14 account. Support staff accounts are required to use 2FA.
• Penetration testing and audits — bos14 engages independent security professionals to conduct periodic penetration testing and security audits of the platform.
• Incident response — bos14 maintains a documented data breach response procedure. In the event of a security incident affecting Member data, affected Members will be notified in a timely manner with details of the nature of the incident and recommended protective actions.

11 Your Rights

As a Member of the bos14 platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact the bos14 privacy team at [email protected] with the subject line "Privacy Request":

• Right of Access — you may request a copy of the Personal Data bos14 holds about you.
• Right to Rectification — you may request correction of inaccurate or incomplete Personal Data. Note that corrections to identity data will require re-submission of supporting KYC documents.
• Right to Erasure — you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to bos14's legal retention obligations (see Section 9).
• Right to Restriction — you may request that bos14 restrict the processing of your Personal Data in certain circumstances, such as when accuracy is contested or when an objection is pending.
• Right to Data Portability — you may request a machine-readable copy of the Personal Data you have provided to bos14 for transmission to another service provider where technically feasible.
• Right to Object — you may object to the processing of your Personal Data where bos14 relies on legitimate interests as the legal basis, including profiling for marketing purposes.
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

bos14 will respond to verified privacy requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.

12 Minors

The bos14 platform is strictly restricted to individuals aged 21 years and over. bos14 does not knowingly collect Personal Data from individuals under the age of 21. If bos14 becomes aware that Personal Data has been submitted by or on behalf of a minor, that data will be deleted immediately and the associated account closed.

If you are a parent or guardian and believe that a minor in your care has registered an account or submitted Personal Data to bos14, please contact us immediately at [email protected] so that we can take prompt remedial action.

13 International Data Transfers

Some of the Third-Party Processors engaged by bos14 — including identity verification providers and fraud analytics services — may be located outside of Indonesia and may process Personal Data in data centres situated in other countries. Where such transfers occur, bos14 ensures that appropriate contractual safeguards are in place, including data processing agreements that require the recipient to apply a standard of protection equivalent to that described in this Policy.

By accepting this Privacy Policy and using the bos14 platform, you consent to the transfer of your Personal Data to third-party processors located outside Indonesia where such transfers are necessary to deliver the services described in this Policy.

14 Changes to this Policy

bos14 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services offered on the platform. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they affect how bos14 uses your Personal Data in a way that may have a significant impact on your privacy — bos14 will notify affected Members by email to the address registered on their account, or by a prominent notice on the platform, at least fourteen (14) days before the change takes effect. Continued use of the platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

We recommend that you review this Privacy Policy each time you access the bos14 platform to remain informed of how your Personal Data is being handled.

15 Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bos14 handles your Personal Data, please reach out to the privacy team using the following contact details:

This Privacy Policy was last reviewed and updated in January 2026.