Privacy Policy — bo555

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, including but not limited to name, date of birth, email address, phone number, residential address, device identifiers, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Controller" refers to bo555, the entity that determines the purposes and means of processing your Personal Data.
• "Member" / "User" / "You" refers to any individual who registers an account on the bo555 platform or otherwise interacts with the bo555 website, mobile interface, or support channels.
• "Platform" refers to the bo555 website at bo555.pro, its subdomains, mobile interfaces, game libraries, sportsbook, live casino, and all associated digital services.
• "Third-Party Processor" refers to any external company or service provider engaged by bo555 to process Personal Data on bo555's behalf, including payment processors, identity verification providers, analytics platforms, and cloud infrastructure providers.
• "KYC" (Know Your Customer) refers to the identity verification process bo555 conducts to confirm a Member's identity, age, and source of funds prior to processing withdrawals or as part of ongoing compliance obligations.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Sensitive Personal Data" refers to categories of data requiring heightened protection, including financial account details, government-issued identity document numbers, and health-related information provided voluntarily in the context of Responsible Gaming tools.

bo555 collects Personal Data across several categories depending on your level of interaction with the Platform. The table below summarizes what we collect and in what context:

bo555 does not intentionally collect data beyond what is necessary for the purposes listed in Section 4. If you believe we hold data about you that was collected in error, please contact us using the details in Section 14.

bo555 collects Personal Data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, communicate with our support team, or interact with any feature of the Platform that requires you to input information.
• Automatically via the Platform: Our servers automatically log technical and device data every time a device connects to the Platform. This includes IP address, session timestamps, pages visited, and actions taken during a session.
• Via cookies and similar technologies: We use first-party cookies and third-party analytics tools to understand how Members navigate the Platform and to maintain session state. See Section 6 for full details.
• From payment providers: When you initiate a financial transaction, the relevant payment provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, GoPay, DANA, ShopeePay, LinkAja) transmits transaction confirmation data to bo555, including the transaction reference number and account details necessary to reconcile the payment.
• From identity verification providers: Where bo555 engages a third-party KYC or anti-fraud provider to assist with identity verification, that provider may supply verification outcomes and risk scores to bo555 based on the documents you submit.
• From publicly available sources: In limited circumstances and solely for fraud prevention and compliance purposes, bo555 may cross-reference information against publicly available records or sanctions screening databases.

bo555 processes your Personal Data only where there is a clear, legitimate purpose and a lawful basis for doing so. The table below outlines each processing purpose and its corresponding legal basis:

Where processing is based on your Consent, you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal, and it does not affect processing carried out on other legal bases.

bo555 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share Personal Data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: We transmit the minimum necessary financial and identity data to Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, GoPay, DANA, ShopeePay, LinkAja) to process your deposit and withdrawal transactions. These providers are bound by their own privacy obligations and by contractual data processing agreements with bo555.
• KYC and identity verification providers: We share identity documents and personal details with our contracted verification partners for the sole purpose of confirming your identity and age (21+) in compliance with our anti-money-laundering obligations.
• Game content providers: Software studios such as Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and Spribe may receive session-level technical data (such as a session token and bet amount) necessary to serve game content. These studios do not receive your registration details or financial account information.
• Cloud infrastructure and hosting providers: bo555's Platform runs on third-party cloud infrastructure. Provider staff may have incidental access to server-stored data subject to strict confidentiality agreements and access controls.
• Legal and regulatory authorities: We will disclose Personal Data to government bodies, regulators, law enforcement agencies, or courts when required to do so by applicable law, court order, or regulatory direction. bo555 will notify the affected Member of such disclosure where legally permitted to do so.
• Professional advisors: In connection with audits, legal proceedings, or financing transactions, bo555 may disclose Personal Data to lawyers, accountants, or financial advisors under strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of bo555's assets, your Personal Data may be transferred to the acquiring entity. We will notify affected Members prior to any such transfer taking place and will ensure that the receiving entity is bound by privacy standards at least equivalent to those in this Policy.

bo555 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and analyze how Members interact with the site. A cookie is a small text file stored in your browser; it does not contain executable code and cannot access other files on your device.

The cookies used on the bo555 Platform fall into the following categories:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, security tokens, and load-balancing cookies. You cannot opt out of strictly necessary cookies while using the Platform.
• Functional / preference cookies: Remember your language preference, time-zone setting (WIB, WITA, or WIT), and display preferences so you do not need to reconfigure them on each visit.
• Analytics cookies: Collect aggregate, anonymized data about how Members navigate the Platform — which pages are visited most, where users drop off during registration, average session length. This data is used to improve the Platform and is not linked to your individual identity.
• Marketing / affiliate cookies: If you arrived at bo555 via an affiliate link, a cookie may record which affiliate partner referred you. This cookie does not track your activity on other websites.

You can manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block third-party cookies or clear all cookies at any time. Please be aware that disabling cookies may affect the functionality of certain parts of the Platform, including the login session and game loading.

bo555 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international gaming license obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of the Member's active account relationship with bo555.
• Closed account data: Following account closure (voluntary or otherwise), core registration and transaction records are retained for a minimum of five (5) years to comply with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Gaming activity logs: Retained for a minimum of three (3) years from the date the activity was recorded.
• Support communications: Retained for three (3) years from the date of the last communication in a given support thread.
• Marketing and analytics data: Retained for up to two (2) years in aggregated or pseudonymized form.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded individuals.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized aggregate data (which cannot identify any individual) may be retained indefinitely for statistical and platform-improvement purposes.

bo555 applies a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between the Member's device and bo555 servers. The padlock icon visible in your browser's address bar confirms that your connection is encrypted.
• One-way cryptographic password hashing: Your password is never stored in plain text. bo555 stores only a salted cryptographic hash; even bo555 staff cannot retrieve your original password.
• Role-based access controls (RBAC): Staff access to Member Personal Data is granted on a strict need-to-know basis. Access rights are reviewed periodically and revoked immediately upon role change or employment termination.
• Intrusion detection and prevention systems (IDS/IPS): bo555's infrastructure is monitored 24/7 for anomalous activity. Automated alerts and response procedures are in place for suspected security incidents.
• Data minimization: bo555 collects only the Personal Data that is necessary for the stated purpose. Unnecessary data is not collected or is deleted promptly after its purpose has been fulfilled.
• Secure data centers: All data is stored on infrastructure hosted in secure, access-controlled data centers with physical security measures including biometric access, CCTV monitoring, and environmental controls.
• Regular security audits: bo555 conducts periodic internal and external security reviews, including penetration testing, to identify and remediate vulnerabilities.

Despite these measures, no internet-based system is entirely immune to security risks. bo555 encourages Members to use strong, unique passwords, enable any available two-factor authentication, and contact support immediately if they suspect unauthorized access to their account.

As a bo555 Member, you hold the following rights in respect of your Personal Data. These rights can be exercised at no cost by contacting our support team using the details in Section 14:

• Right of access: You may request a copy of all Personal Data bo555 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic registration details, you may also update them directly via your account dashboard.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to our legal retention obligations (see Section 7) — we may be unable to delete certain data, such as transaction records, that we are legally required to retain.
• Right to restrict processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while a dispute over accuracy is being resolved.
• Right to data portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.
• Right to object: You may object to processing based on legitimate interest, including direct marketing. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat (available 24/7 within the Platform) or by email at [email protected]. We may require you to verify your identity before acting on a request to ensure the security of your account data.

bo555 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and accounts that cannot confirm the Member's age upon request will be suspended pending verification.

If you are a parent or guardian and have reason to believe that a minor in your care has created a bo555 account or provided their personal data to bo555 without your consent, please contact us immediately at [email protected]. We will investigate the matter promptly and, if confirmed, delete all associated data and close the account.

We strongly encourage parents and guardians of minors who use shared devices to make use of internet filtering software and parental control tools to restrict access to gambling websites.

The bo555 Platform may display content sourced from third-party game studios (such as Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and Spribe) rendered within embedded frames or dedicated game launchers. When you play a game, a connection is established directly between your device and the relevant game server operated by that studio. The data transmitted in that connection (session token, bet data) is governed by the respective studio's privacy practices as well as by bo555's contractual requirements imposed on that studio.

The bo555 Platform does not contain outbound links to external websites. Should you independently navigate to any third-party website — for example by typing a URL directly into your browser — bo555 has no control over and accepts no responsibility for the privacy practices of that third party. We encourage you to review the privacy policy of any external service you interact with.

All payment processing is handled by regulated Indonesian payment service providers. bo555 does not store raw card numbers, full bank account credentials, or e-wallet passwords on its own servers. Payment tokenization and secure transmission are handled by the payment provider's own PCI-DSS-compliant infrastructure.

bo555 operates as an international online gaming platform. Your Personal Data may be transferred to, stored, and processed in countries other than Indonesia — including the jurisdiction in which bo555 holds its international gaming license and the countries in which our cloud infrastructure providers operate their data centers.

Whenever Personal Data is transferred outside Indonesia, bo555 takes steps to ensure that appropriate safeguards are in place to maintain a standard of protection equivalent to that described in this Policy. These safeguards include:

• Contractual data processing agreements incorporating standard data protection clauses with all Third-Party Processors who receive or process Personal Data on bo555's behalf.
• Transferring data only to Third-Party Processors that maintain their own certified security and privacy programs (e.g., ISO 27001 certification, SOC 2 compliance).
• Limiting the categories and volume of Personal Data transferred internationally to the minimum necessary for the stated processing purpose.

By registering an account and using the bo555 Platform, you acknowledge and agree that your Personal Data may be transferred internationally as described in this Section, subject to the safeguards outlined above.

bo555 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The most current version of this Policy will always be accessible at bo555.pro/privacy-policy, along with the effective date of the most recent revision.

Where a revision materially changes how we collect or use your Personal Data, bo555 will notify active Members via the registered email address or via an in-platform notification at least 14 days before the change takes effect. For non-material revisions (such as clarifications of existing language, formatting corrections, or updates to contact details), we may update the Policy without advance notification.

Your continued use of the bo555 Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with a revised Policy, you must stop using the Platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 9, or have a concern about how bo555 has handled your Personal Data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly within the bo555 Platform after logging in. Live chat is the fastest channel for urgent privacy or account-security matters.
• Email: [email protected] — please include "Privacy Request" in the subject line. Our team aims to acknowledge all privacy-related emails within 48 hours and to resolve requests within 30 days.

Our Indonesian-speaking support agents are available around the clock, including during Indonesian public holidays such as Idul Fitri, Nyepi, and Independence Day. If your privacy concern is not resolved to your satisfaction through our standard support channels, you may escalate in writing to our Compliance and Data Protection Officer via the same email address, marked "Attention: DPO".

bo555 is committed to resolving all privacy concerns promptly, transparently, and fairly. We take every data-related inquiry and complaint seriously, and we are dedicated to upholding the highest standards of personal data protection for all Members across Jakarta, Surabaya, Medan, Bandung, Bali, and throughout Indonesia.