bom888 Privacy Policy

1. Introduction

bom888 is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our online gaming platform and services.

This policy applies to all users of bom888, including residents of Indonesia who access our services from Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and other Indonesian cities. By creating an account and using bom888, you consent to the data practices described in this Privacy Policy.

We process personal data in accordance with applicable data protection laws and regulations, including international standards such as the General Data Protection Regulation (GDPR) principles, even though bom888 operates under international licensing jurisdiction.

2. Data Controller

bom888 acts as the data controller for all personal information collected through our platform. This means we determine the purposes and means of processing your personal data. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently.

For questions regarding data processing or to exercise your privacy rights, you may contact our Data Protection Officer at the contact details provided in Section 13 of this policy.

3. Information We Collect

bom888 collects several types of information from and about users of our platform. The categories of personal data we collect include:

3.1 Information You Provide Directly

When you register for a bom888 account, we collect:

• Identity Information: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address (city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form)
• Identity Verification Documents: Indonesian National Identity Card (KTP), proof of address documents, bank account statements (as required for KYC compliance)
• Financial Information: Bank account details for deposits and withdrawals (bank name, account number, account holder name), payment transaction history
• Communication Data: Messages sent to customer support, feedback, and survey responses

3.2 Information Collected Automatically

When you access and use bom888, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution
• Usage Data: Pages visited, time spent on pages, betting history, game play records, login times, features used
• Location Data: General geographic location based on IP address (city and country level)
• Cookies and Similar Technologies: Session identifiers, preferences, and authentication tokens (see Section 9 for details)

3.3 Information from Third Parties

We may receive information about you from third-party service providers, including:

• Payment processors who facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, and other Indonesian banks
• Identity verification services that help us confirm your age and identity
• Fraud prevention and security services that help detect suspicious activity
• Marketing analytics providers (with your consent where required)

4. How We Use Your Data

bom888 processes your personal data for the following purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your user account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to sports betting, casino games, slots, and togel lottery services
• Managing bonuses, promotions, and loyalty programs
• Providing customer support and responding to your inquiries

4.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement)
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Complying with international licensing and regulatory obligations
• Preventing fraud, money laundering, and other illegal activities
• Maintaining transaction records as required by financial regulations

4.3 Platform Security and Integrity

• Monitoring for fraudulent activity, multi-accounting, collusion, and bonus abuse
• Detecting and preventing security threats and system abuse
• Maintaining platform stability and performance
• Enforcing our Terms and Conditions

4.4 Marketing and Communications (With Consent)

• Sending promotional emails about new games, bonuses, and special offers (you may opt out at any time)
• Personalizing your platform experience based on your betting preferences
• Conducting customer satisfaction surveys and market research

4.5 Responsible Gaming

• Monitoring betting patterns to identify potential problem gambling behavior
• Implementing deposit limits, loss limits, and self-exclusion requests
• Providing access to responsible gaming tools and resources

5. Data Sharing and Disclosure

bom888 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients in limited circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our platform, including:

• Payment processors and financial institutions (BCA, BRI, BNI, Mandiri, etc.) to process deposits and withdrawals
• Identity verification services to conduct KYC checks
• Cloud hosting and IT infrastructure providers to store and secure data
• Customer support software providers to manage support tickets
• Marketing and analytics platforms (only with your consent)

All service providers are contractually bound to process your data only for specified purposes and to maintain appropriate security measures.

5.2 Game Providers

We share limited data with casino game and slot providers (Pragmatic Play, Evolution Gaming, and others) to enable gameplay. This typically includes only your username, bet amounts, and game session data—not your full personal or financial details.

5.3 Regulatory Authorities

We may disclose your information to licensing authorities, regulators, and law enforcement agencies when required by law or when necessary to comply with legal obligations, court orders, or regulatory investigations.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of bom888's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

5.5 With Your Consent

We may share your data with other third parties where you have provided explicit consent for us to do so.

6. Data Security Measures

bom888 takes data security seriously and employs a comprehensive range of technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmission between your device and our servers is encrypted using SSL/TLS protocols (minimum TLS 1.2). Sensitive data at rest, including passwords and financial information, is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on job role and necessity. All staff with data access undergo security training.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security controls, firewalls, intrusion detection systems, and regular security audits.
• Password Security: User passwords are hashed using strong one-way cryptographic functions and are never stored in plain text.
• Regular Security Assessments: We conduct vulnerability scans, penetration testing, and third-party security audits to identify and address potential weaknesses.
• Incident Response: We maintain a data breach response plan to quickly detect, contain, and notify affected users in the event of a security incident.

While we implement robust security measures, no system is completely secure. You also play a role in protecting your account by choosing a strong password, not sharing your login credentials, and logging out after each session on shared devices.

7. Data Retention

bom888 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, and resolve disputes. Specific retention periods include:

• Active Accounts: Data is retained for the duration of your account being active.
• Closed Accounts: After account closure, we retain identification documents, transaction records, and betting history for a minimum of 5-7 years to comply with AML regulations and licensing requirements.
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you again.
• Legal Claims: Data may be retained longer if necessary to defend against legal claims or comply with court orders.

After the retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with you.

8. Your Privacy Rights

Under international data protection standards, you have the following rights regarding your personal data:

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

8.2 Right to Rectification

If you believe any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent. However, we may be required to retain certain data to comply with legal obligations (e.g., AML record-keeping requirements).

8.4 Right to Restriction of Processing

You have the right to request that we limit how we use your data in certain situations, such as when you contest the accuracy of the data or object to processing.

8.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit it to another service provider, where technically feasible.

8.6 Right to Object

You may object to processing of your data for direct marketing purposes at any time. You can opt out of marketing emails by clicking the unsubscribe link in any promotional email or by adjusting your account settings.

8.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8.8 Right to Lodge a Complaint

If you believe bom888 has not handled your personal data in accordance with applicable laws, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction or our licensing jurisdiction.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 13. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

bom888 uses cookies and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device when you visit our website.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly, including authentication, security, and session management. These cannot be disabled.
• Performance Cookies: Collect information about how users interact with our platform, helping us identify and fix technical issues and improve performance.
• Functional Cookies: Remember your preferences and settings (language, currency, display options) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising. These require your consent.

9.2 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may impact platform functionality. Note that opting out of marketing cookies does not mean you will stop seeing advertisements—it means the ads you see will be less relevant to your interests.

10. Children's Privacy

bom888 is strictly an adult-only platform. We do not knowingly collect personal information from individuals under the age of 21. All users must be at least 21 years old to create an account and use our services, in accordance with Indonesian legal standards and our licensing requirements.

If we discover that we have inadvertently collected data from a person under 21, we will immediately delete that information and permanently close the associated account. If you believe a minor has created an account on bom888, please contact us immediately at the email address provided in Section 13.

11. International Data Transfers

bom888 operates as an international platform and may store and process your personal data on servers located outside of Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information, including:

• Transferring data only to countries recognized as providing adequate data protection standards
• Using contractual agreements that impose data protection obligations on recipients
• Implementing technical security measures equivalent to those used for domestic data storage

By using bom888, you acknowledge and consent to the international transfer and processing of your personal data as described in this policy.

12. Changes to This Privacy Policy

bom888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational needs. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify users via email or through an on-platform notification
• Where required by law, seek your consent to the updated policy

Your continued use of bom888 after changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how bom888 handles your personal data, please contact us:

• Data Protection Officer Email: [email protected] (plain text, not a clickable link)
• General Customer Support Email: [email protected] (plain text, not a clickable link)
• Live Chat: Available 24/7 through the bom888 platform
• WhatsApp: +62 812 3456 7890 (plain text, not a clickable link)

We aim to respond to all privacy-related inquiries within 30 days. For urgent security concerns, please mark your message as "Urgent - Data Security."