Privacy Policy BOS10 – Your Data Is Safe With Us

This Privacy Policy applies to all services provided by bos10, including the official website at bos10.vu, the mobile app (Android and iOS), and all related services connected to our platform. This policy applies to all registered members and visitors who access the platform without an account.

We are committed to protecting every user's privacy and ensuring that the personal data you entrust to us is managed to the highest standards of security and integrity. This document is a reflection of our transparency — not merely a legal obligation.

If you are under 18 years of age, you are not permitted to use bos10 services, and we do not knowingly collect data from underage users. If we discover that data from a user under 18 has been collected, we will delete it immediately.

Bos10 collects various types of data to provide and improve our services. Below is a breakdown of the data categories we collect:

Your personal data is collected through several different mechanisms:

• Account Registration — when you complete the registration form on the bos10 platform, including your name, email, and phone number.
• KYC (Know Your Customer) Process — when you upload identity documents for verification prior to making your first withdrawal.
• Financial transactions — each time you make a deposit or withdrawal, your account details and transaction information are automatically recorded.
• Platform activity — our system automatically records gameplay activity, clicks, session duration, and preferences for service improvement purposes.
• Support Communications — when you contact the bos10 support team, conversations are stored for reference and service quality improvement purposes.
• Cookies and similar technologies — as described in section 7, we use cookies to enhance your browsing experience on the platform.

Bos10 uses your personal data only for legitimate purposes directly relevant to platform operations. We do not use your data for any purpose beyond what is stated below:

• Account Operations — manages your account, processes logins, and ensures you can access all available features.
• Transaction Processing — processes deposits, withdrawals, and all financial activities you carry out on the platform.
• Identity verification (KYC) — fulfills regulatory requirements to verify member identity prior to processing withdrawals.
• Fraud Prevention — detects and prevents suspicious activity, bot usage, fraud, or unauthorized access to your account.
• Service improvement — analyzes usage patterns in aggregate (not individually) to improve features and the user experience.
• Platform Communications — sends important notifications regarding your account, transactions, policy updates, and security information.
• Promotions and offers — sends relevant promotional information, only if you have not opted out (opt-out available).
• Regulatory Compliance — fulfills reporting obligations to competent authorities in accordance with applicable regulations, including AML (anti-money laundering) requirements.

Bos10 does not sell your personal data to any third party under any circumstances. However, in operating the platform, we work with partners who may require limited access to certain data:

• Payment providers — banks, digital wallets (GoPay, OVO, DANA), and payment gateways require account details to process transactions. They maintain their own privacy policies and security standards.
• Game providers — providers such as Evolution Gaming, Pragmatic Play, and others receive the account ID and session data required to run games. They do not receive your full identity data.
• KYC Verification Services — third-party partners that help verify the authenticity of identity documents you upload. Shared data is encrypted and used solely for verification purposes.
• Legal and Regulatory Authorities — bos10 is required to provide data to competent authorities upon receipt of a valid legal request. We will not share more than what is legally required.

We apply multiple layers of technical and operational security to protect your personal data from unauthorized access, loss, alteration, or disclosure:

• Data Encryption in Transit: All data transmitted between your device and bos10's servers is encrypted using TLS 1.3 protocol and 256-bit SSL certificates.
• Data Encryption at Rest: Data stored in our databases is encrypted using AES-256 — the encryption standard used by governments and military institutions worldwide.
• Strict Access Controls: Only staff with explicit authorization can access sensitive member data, with access logs monitored in real time.
• Two-factor authentication: Access to bos10's internal systems is protected by 2FA for all authorized personnel.
• Penetration testing: We conduct regular penetration tests with both internal and external security teams to identify and close potential vulnerabilities.
• 24/7 Monitoring: Our intrusion detection system operates around the clock, automatically blocking suspicious activity before it causes any impact.

Bos10 uses cookies and similar technologies to enhance your browsing experience on our platform. Cookies are small files stored on your device when you visit the bos10 platform.

Types of cookies we use:

• Essential cookies — required for the platform to function correctly, such as keeping your login session active. These cookies cannot be disabled.
• Functional cookies — stores your preferences such as language, display choices, and settings you have previously configured.
• Analytics cookies — helps us understand how visitors use the platform so we can make targeted improvements. Data collected is aggregated and anonymized.
• Security cookies — used to detect suspicious activity and protect your account from unauthorized access.

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect platform functionality.

Bos10 retains your personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law.

• Active account data — retained for as long as your account is active on the bos10 platform.
• Financial transaction data — retained for a minimum of 5 years in accordance with applicable financial regulations and AML requirements.
• KYC Data — retained for a minimum of 5 years after account closure to fulfill regulatory obligations.
• Support Communication Logs — retained for 2 years for reference and service quality purposes.
• Closed account data — after account closure, data not required by regulation will be deleted within 90 days.

Once the retention period ends, data will be securely deleted using methods that ensure it cannot be recovered.

As a data owner, you hold certain rights guaranteed by bos10. You may exercise these rights at any time by contacting our support team:

In the course of platform operations, your personal data may be processed on servers located outside Indonesia. This occurs because some of our game providers and infrastructure service providers operate servers across multiple countries.

Bos10 ensures that all international data transfers are carried out with adequate safeguards, including:

• Standard contractual clauses requiring data recipients to apply equivalent protection standards.
• Data is only transferred to countries with a recognized adequate level of data protection.
• Data is encrypted during transfer using the latest security protocols.

Bos10 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements, or service improvements. Any significant changes will be communicated to members via:

• A notification on the bos10 platform when you log in to your account.
• A notification email will be sent to the email address registered to your account.
• Update of the "Last Updated" date at the top of this page.

Continued use of the bos10 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or wish to exercise your privacy rights, our team is ready to help. You can reach us through:

• Live Chat: Available directly on the platform once you are logged in, 24 hours a day, 7 days a week.
• Email: [email protected] — dedicated to privacy inquiries and data management requests.
• Help Center: Visit the FAQ for general information about privacy at bos10.

Bos10 is committed to responding to all privacy-related requests within a maximum of 30 calendar days from the date the request is received. For complex cases, we will notify you if additional time is required.