86bos Privacy Policy

86bos ("we", "us", "our") operates the online casino and sports betting platform accessible at https://86bos.club (the "Platform"). We are committed to protecting the privacy and personal data of every player who accesses or uses our services, including players located in Jakarta, Surabaya, Medan, Bandung, Bali, and across all regions of Indonesia.

This Privacy Policy describes how 86bos collects, uses, discloses, stores, and protects the personal information you provide when you create an account, make deposits or withdrawals, interact with our games, contact customer support, or otherwise engage with the Platform. It also describes the rights you hold in relation to your personal data and the mechanisms available to exercise those rights.

This policy applies to all personal data processed by 86bos in connection with the Platform, regardless of the device or method used to access it. It should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which are incorporated herein by reference.

If you have questions about this policy or wish to exercise any of your data rights, please refer to Section 15 (Contact & Complaints) for the appropriate contact details.

The following terms have specific meanings throughout this Privacy Policy:

86bos collects personal data from you in the following categories, depending on how you interact with the Platform:

86bos uses the personal data collected from you for the following specific purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or where otherwise required by law:

1. Account Creation and Management: To create and maintain your player account, verify your identity through the KYC process, and enforce the one-account-per-player policy.
2. Transaction Processing: To process deposits and withdrawals via your chosen local payment method (bank transfer to BCA, BRI, BNI, Mandiri, or e-wallet via OVO, DANA, GoPay, etc.), reconcile your IDR account balance, and maintain accurate financial records.
3. Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access. Technical data including IP address and device fingerprint is used to identify anomalous login patterns.
4. Regulatory Compliance: To fulfil 86bos's obligations under applicable anti-money laundering (AML) frameworks, including maintaining records of player identity and transaction history for audit purposes.
5. Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and deliver Indonesian-speaking support service across WIB, WITA, and WIT time zones.
6. Responsible Gaming: To monitor gambling behaviour for signs of problematic play, enforce self-exclusion elections and deposit limits, and route player welfare concerns to the dedicated responsible gaming team.
7. Platform Improvement: To analyse aggregate, anonymised usage data in order to improve game selection, site navigation, deposit flow efficiency, and overall player experience. Individual-level data is not used for this purpose without anonymisation.
8. Promotional Communications: Where you have opted in to receive marketing communications, to send you information about bonuses, promotions, and seasonal campaigns (including those tied to Indonesian cultural events such as Idul Fitri and Ramadhan). You may withdraw your consent to marketing communications at any time by contacting support.

86bos processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary for the performance of the agreement between you and 86bos — specifically, to operate your account, process transactions, and deliver the services you have requested.
• Legal Obligation: Processing is required for compliance with applicable legal and regulatory obligations, including anti-money laundering (AML) record-keeping, age verification, and fraud reporting duties.
• Legitimate Interests: Processing is in the legitimate interests of 86bos to maintain platform security, prevent fraud and abuse, improve service quality, and conduct aggregate analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For optional processing activities (such as sending marketing communications), we rely on your freely given, specific, and informed consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

86bos does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors and Banking Partners: To process your deposits and withdrawals, we share the minimum necessary financial data with your chosen payment channel (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, QRIS). These parties act as independent data controllers under their own privacy policies.
• Game Technology Providers: To deliver casino games, we share session identifiers with certified game providers (including Pragmatic Play, Evolution Gaming, PG Soft, Habanero, Spribe, and Pocket Games Soft). These providers receive only the technical data necessary to authenticate your session and record game outcomes. They do not receive your identity documents or financial details.
• Identity Verification Services: To fulfil KYC obligations, we may use third-party identity verification platforms that process your identity documents on our behalf under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by a lawful order, court direction, or applicable regulation, 86bos may disclose personal data to competent authorities. We will notify you of any such disclosure where legally permitted to do so.
• Group Companies and Corporate Transactions: In the event of a corporate restructuring, merger, or acquisition, personal data held by 86bos may be transferred to the successor entity, subject to equivalent privacy protections remaining in place.

Due to the global nature of the online gaming industry, some of the third-party providers we engage — particularly game studios and infrastructure providers — operate servers outside of Indonesia. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to the protections afforded in Indonesia, 86bos implements appropriate safeguards to ensure your data remains protected, including:

• Standard contractual clauses incorporated into data processing agreements with overseas processors.
• Restricting data transfers to processors who maintain internationally recognised security certifications (e.g., ISO/IEC 27001).
• Conducting due diligence on the data protection practices of overseas processors prior to engagement.

By using the 86bos platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia, subject to the safeguards described above.

86bos retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised such that it can no longer be attributed to an identified individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

86bos uses cookies and similar tracking technologies to enhance the functionality, security, and performance of the Platform. The following categories of cookies are deployed:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, enforce security policies, and remember your authenticated state between page loads. These cookies cannot be disabled without impairing core functionality.
• Preference Cookies: These cookies remember your settings and preferences — such as your preferred language display or time zone (WIB/WITA/WIT) — so you do not need to re-enter them on subsequent visits.
• Analytics Cookies: We use first-party analytics cookies to understand aggregate patterns of platform usage, including which game categories are most visited, typical session lengths, and deposit funnel completion rates. This data is used in aggregate form only and is not linked to individual identity.
• Security Cookies: These cookies help detect and prevent fraudulent activity, including identifying unusual login patterns, device spoofing, and bot traffic.

You may manage your cookie preferences at any time through your browser's settings. Please note that disabling strictly necessary cookies may impair your ability to log in and use core platform features. For most browsers, instructions for managing cookies are available under Settings → Privacy and Security → Cookies and Site Data.

86bos employs a multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• Transport Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that your credentials, payment details, and personal information cannot be intercepted in transit.
• Data-at-Rest Encryption: Sensitive fields in our database — including payment account identifiers and identity document data — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 86bos is restricted on a strict need-to-know basis. Staff accessing player data undergo background checks and are bound by confidentiality obligations. Administrative access to production systems requires multi-factor authentication.
• Intrusion Detection: Our infrastructure is protected by automated intrusion detection and prevention systems that monitor for anomalous access patterns and potential security incidents in real time.
• Regular Security Audits: 86bos conducts periodic security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in our systems before they can be exploited.
• Data Breach Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 86bos will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

While 86bos takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. If you suspect that your 86bos account has been compromised, please contact [email protected] immediately.

Age verification is a mandatory component of the KYC process. Any player found to have misrepresented their age during registration will have their account permanently closed, all funds forfeited, and — where warranted — the matter referred to appropriate authorities.

If you become aware that a minor has accessed the 86bos platform or submitted personal data through it, please contact us immediately at [email protected]. Upon receiving a verified report, we will promptly delete all personal data associated with the minor's access and close any associated account.

86bos supports parental control solutions that allow parents and guardians to restrict minor access to online gambling platforms. We recommend enabling parental control software on any device that may be accessible to persons under 21.

You hold the following rights in respect of the personal data that 86bos holds about you. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and your registered account username.

86bos will acknowledge your data rights request within 5 business days and will fulfil it within 30 calendar days of receipt, subject to identity verification. Where a request is complex or voluminous, we may extend this period by a further 30 days with prior notification.

Please note that certain rights are subject to limitations where processing is required by law or is necessary for the establishment, exercise, or defence of legal claims — for example, we are legally required to retain AML transaction records for a minimum of 5 years and cannot delete them on request during this period.

The 86bos platform does not contain links to external third-party websites for commercial or advertising purposes. However, game providers embedded within the platform (such as Pragmatic Play, Evolution Gaming, PG Soft, and others) operate their own software environments. While 86bos takes reasonable steps to vet the security of these integrations, we are not responsible for the data practices of third-party game studios operating within their own server environments.

If you are redirected to a third-party site in connection with a payment processor (for example, a bank's authentication page for BCA, BRI, BNI, or Mandiri), that site is governed by the third party's own privacy policy. We encourage you to review the privacy notices of any third-party service you interact with in connection with your 86bos account.

86bos reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players via email or a prominent notice on the platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the 86bos platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you must discontinue use of the platform and may request account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically to stay informed of how 86bos protects your personal data. All previous versions of this Privacy Policy are available on request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 86bos handles your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy enquiries promptly and transparently.

When submitting a data rights request or privacy complaint, please include your registered username, the email address associated with your account, and a clear description of your request or concern. This will allow us to locate your records efficiently and respond without unnecessary delay.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. 86bos takes all escalated complaints seriously and will cooperate fully with any regulatory investigation.