Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how bo303 ("we," "us," or "our") collects, uses, discloses, and protects the personal information of users ("you" or "your") who access our website at https://bo303.cam and use our gaming services. This Policy applies to all personal data collected through our platform, including information provided during account registration, deposits, withdrawals, gameplay, and customer support interactions.

bo303 is committed to protecting your privacy and ensuring the security of your personal information in accordance with international data protection standards and best practices. By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of bo303 services.

2. Information We Collect

bo303 collects various types of personal information to provide, maintain, and improve our services, ensure security and compliance, and personalize your gaming experience. The categories of data we collect include:

2.1 Account Registration Information

When you create an account with bo303, we collect:

• Personal Identification: Full legal name as it appears on your Indonesian National Identity Card (KTP), date of birth, gender, and nationality
• Contact Information: Residential address (city, province, postal code), mobile phone number, and email address
• Account Credentials: Username, password (stored in encrypted hash form), and security questions
• Verification Documents: Copies of your KTP, proof of address documents (utility bills, bank statements), and selfie photographs holding your KTP for identity verification purposes

2.2 Financial and Transaction Data

To process deposits, withdrawals, and maintain accurate financial records, we collect:

• Banking Details: Bank account numbers, bank names (BCA, BRI, BNI, Mandiri, etc.), account holder names matching your registered identity
• E-wallet Information: OVO, DANA, GoPay, ShopeePay, or LinkAja account details used for transactions
• Transaction History: Records of all deposits, withdrawals, wagers placed, winnings received, bonuses claimed, and account balance changes
• Payment Verification Data: Transaction receipts, timestamps, amounts, and payment method identifiers for reconciliation and dispute resolution

2.3 Gaming Activity and Behavioral Data

To provide personalized services, ensure fair play, and detect fraud, we automatically collect:

• Gameplay Data: Games played (slots, sports bets, live casino), bet amounts, win/loss records, game session durations, and RTP (Return to Player) statistics
• Betting Patterns: Frequency of bets, favorite game types, sports markets preference (football, basketball, etc.), and wagering behavior patterns used for responsible gaming monitoring and fraud detection
• Bonus and Promotion Usage: Which promotional offers you claim, wagering requirement progress, and bonus conversion rates

2.4 Technical and Device Information

We automatically collect technical data when you access our platform:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution
• IP Address and Location: Your IP address, approximate geographic location (city-level), and timezone to verify Indonesian residency and prevent access from restricted jurisdictions
• Cookies and Tracking Technologies: Session cookies, preference cookies, analytics cookies, and device fingerprinting data to maintain login sessions, remember settings, and analyze platform usage
• Access Logs: Login timestamps, logout times, pages viewed, features used, and error logs for security monitoring and platform improvement

2.5 Customer Support Communications

When you contact our customer service team, we collect:

• Communication Content: Live chat transcripts, email correspondence, WhatsApp messages, and support ticket descriptions
• Support Metadata: Timestamps of communications, agent IDs, issue categories, resolution times, and satisfaction ratings
• Attachments: Any screenshots, documents, or files you provide to illustrate your support request

3. How We Use Your Information

bo303 uses your personal data for the following legitimate purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your gaming account
• Processing registration, login authentication, and account verification (KYC)
• Enabling gameplay on casino games, sports betting markets, and live dealer tables
• Maintaining accurate records of your gaming activity and transaction history
• Providing customer support and responding to your inquiries

3.2 Financial Transactions and Payment Processing

• Processing deposits from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay)
• Executing withdrawal requests to your verified bank account or e-wallet
• Reconciling payment discrepancies and resolving transaction disputes
• Preventing fraudulent transactions and unauthorized access to funds
• Complying with anti-money laundering (AML) regulations and financial reporting requirements

3.3 Security, Fraud Prevention, and Compliance

• Verifying your age (21+ requirement) and identity to prevent underage gambling
• Detecting and preventing multiple accounts (duplicate accounts) in violation of Terms and Conditions
• Monitoring for suspicious betting patterns, collusion, bonus abuse, and other fraudulent activities
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Responding to legal requests, court orders, or government investigations
• Enforcing our Terms and Conditions and protecting bo303's legal rights

3.4 Responsible Gaming and Player Protection

• Monitoring your gaming behavior for signs of problem gambling (excessive playtime, chasing losses, exceeding personal limits)
• Implementing deposit limits, loss limits, session time limits, and self-exclusion requests you set
• Providing reality check reminders and responsible gaming notifications
• Offering support resources and referrals to professional counseling services when needed

3.5 Platform Improvement and Personalization

• Analyzing platform usage to improve website design, navigation, and user experience
• Personalizing game recommendations based on your playing history and preferences
• Testing new features and conducting A/B testing to optimize performance
• Generating aggregated, anonymized statistics for business intelligence (no individual identification)

3.6 Marketing and Promotional Communications (With Consent)

• Sending promotional offers, bonus announcements, and special event notifications via email or SMS (only if you opt-in)
• Personalizing promotional content based on your gaming preferences and activity level
• You may opt-out of marketing communications at any time through account settings or by contacting customer support

4. Data Sharing and Disclosure

bo303 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data in the following limited circumstances:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who assist in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) receive transaction data necessary to process deposits and withdrawals
• Game Providers: Casino game studios (Pragmatic Play, Evolution Gaming, etc.) receive gameplay data to operate their games on our platform
• Identity Verification Services: Third-party KYC verification providers receive copies of your identification documents to verify your age and identity
• Cloud Hosting and IT Infrastructure: Data center providers securely host our servers and databases
• Customer Support Tools: Live chat and ticketing system providers process support communications

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with data protection standards equivalent to this Policy.

4.2 Legal and Regulatory Authorities

We may disclose your information when required by law or to protect legal rights:

• In response to court orders, subpoenas, or lawful government requests
• To comply with international gaming licensing requirements and regulatory reporting obligations
• To report suspicious transactions to financial intelligence units under AML regulations
• To enforce our Terms and Conditions and pursue legal remedies for violations
• To protect the safety and security of bo303, our users, and the public

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity. We will notify you via email or prominent website notice before your information becomes subject to a different privacy policy.

5. Data Security Measures

bo303 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Encryption Technologies

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS protocols, equivalent to banking-level security
• Password Hashing: Passwords are never stored in plain text; they are hashed using bcrypt or similar one-way cryptographic algorithms
• Database Encryption: Sensitive data stored in our databases is encrypted at rest using AES-256 encryption

5.2 Access Controls and Authentication

• Multi-factor authentication for administrative access to systems handling personal data
• Role-based access controls limiting employee access to data strictly necessary for their job functions
• Regular access audits to ensure no unauthorized personnel have data access
• Mandatory password complexity requirements and periodic password changes for staff accounts

5.3 Network and Infrastructure Security

• Firewalls and intrusion detection systems protecting against external threats
• Regular vulnerability scanning and penetration testing by independent security firms
• DDoS (Distributed Denial of Service) mitigation to ensure platform availability
• Secure data centers with physical access controls, surveillance, and redundancy systems

5.4 Security Monitoring and Incident Response

• 24/7 security monitoring for suspicious activity, unauthorized access attempts, and data breaches
• Automated alerts for unusual account behavior, large transactions, or multiple failed login attempts
• Incident response plan to contain, investigate, and remediate security breaches promptly
• Notification procedures to inform affected users in the event of a confirmed data breach

While we implement robust security measures, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your data using industry best practices.

6. Data Retention and Deletion

bo303 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

While your account remains active, we retain all personal data, transaction history, and gaming records to provide continuous services and maintain accurate financial records.

6.2 Account Closure and Data Deletion

If you close your account voluntarily or if we close it due to Terms violations, we will:

• Retain essential data for 7 years to comply with financial record-keeping and AML regulations
• Anonymize or delete non-essential data (marketing preferences, device information) within 90 days of account closure
• Maintain transaction records, identity verification documents, and compliance data for the legally required retention period

6.3 Inactive Account Policy

Accounts with no login activity for 24 consecutive months may be considered inactive. We will send email notifications before taking any action. After 36 months of inactivity, we may close the account and apply the retention schedule above.

7. Your Privacy Rights and Choices

Under international data protection principles, you have the following rights regarding your personal information:

7.1 Right to Access

You may request a copy of all personal data we hold about you. This includes your account details, transaction history, gameplay records, and communication logs. Requests can be submitted via email to [email protected] and will be fulfilled within 30 days.

7.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings. For changes to verified identity information (name, date of birth), you must contact customer support and provide supporting documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes it was collected, or if you withdraw consent. However, we may retain certain data if required by law (AML record-keeping obligations) or to establish, exercise, or defend legal claims.

7.4 Right to Restrict Processing

You may request that we temporarily restrict processing of your personal data in specific situations, such as while we verify the accuracy of disputed data or assess whether we have legitimate grounds to continue processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and transmit it to another service provider, where technically feasible.

7.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt-out of marketing emails by clicking the "unsubscribe" link in promotional messages or adjusting preferences in your account settings.

7.7 Right to Withdraw Consent

Where processing is based on your consent (such as for marketing communications), you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] or through customer support. We will respond to verified requests within 30 days. We may require additional information to verify your identity before fulfilling requests.

8. Cookies and Tracking Technologies

bo303 uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content. By using our website, you consent to our use of cookies as described below:

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block, delete, or receive warnings about cookies. However, disabling essential cookies may impair website functionality and prevent you from using certain features like logging in or placing bets. Consult your browser's help documentation for instructions on managing cookies.

9. International Data Transfers

bo303 operates internationally and may transfer your personal data to servers located outside Indonesia for processing and storage. When transferring data internationally, we ensure appropriate safeguards are in place to protect your information:

• Data processing agreements with service providers requiring equivalent data protection standards
• Use of secure data transfer mechanisms and encryption during transmission
• Compliance with international data protection frameworks and standards

By using bo303 services, you acknowledge and consent to international data transfers as necessary to provide gaming services to Indonesian users.

10. Children's Privacy

bo303 services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete the account and all associated personal information. Parents or guardians who believe their child has provided personal data to bo303 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

bo303 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email to the address registered on your account
• Display a prominent notice on our website homepage and in your account dashboard

Your continued use of bo303 services after receiving notice of changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact Information and Complaints

For questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact:

• Data Protection Officer: [email protected] (email displayed as plain text)
• Customer Support: Available 24/7 via live chat, WhatsApp, or email at [email protected]

We aim to address all privacy inquiries within 5 business days. If you are not satisfied with our response, you may escalate the matter to our management team by requesting a formal review. While bo303 operates internationally, Indonesian residents may also have rights to lodge complaints with local data protection authorities, though enforcement may be limited given our offshore structure.