Privacy Policy

1. Introduction

boba59 ("we," "us," "our," or "boba59") operates the online betting and casino platform accessible at https://boba59.cam (the "Platform"). This Privacy Policy describes how boba59 collects, uses, stores, protects, and shares personal data obtained from users of the Platform, with particular reference to our primary audience of players located in Indonesia.

By registering an Account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the Platform.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, which together form the complete legal framework governing your use of boba59.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to your name, email address, phone number, date of birth, financial details, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, or deletion.
• "Controller" means boba59, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means any third party that processes Personal Data on behalf of boba59, such as payment processors and cloud-hosting providers.
• "Data Subject" means you — the individual whose Personal Data is being processed.
• "Cookies" means small data files placed on your device by the Platform to enable certain functionality and analytics features.
• "KYC" means Know Your Customer — the identity verification process required before processing withdrawals from your boba59 Account.

3. Personal Data We Collect

boba59 collects the following categories of Personal Data, depending on how you interact with the Platform:

3.1 Registration Data

When you create an Account, we collect:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) regulations and verify your identity before processing withdrawals, we collect:

• Government-issued photo identification (Indonesian KTP, passport, or driver's license)
• Proof of residential address (utility bill, bank statement, or government letter dated within the last 3 months)
• Proof of payment method ownership (bank statement or e-wallet screenshot confirming your name and account number)
• Selfie or video verification where required

3.3 Financial Transaction Data

When you make deposits or withdrawals, we collect:

• Payment method type (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, etc.)
• Account number or e-wallet identifier (partially masked)
• Transaction amounts in Indonesian Rupiah (IDR)
• Transaction timestamps and reference numbers

3.4 Betting and Gaming Activity Data

To provide the Platform and detect fraud, we record:

• Sports bets placed (market, stake, odds, outcome)
• Casino game sessions (game title, duration, wager amounts, wins and losses)
• Bonus offers claimed and wagering progress
• Account balance history

3.5 Technical and Device Data

Automatically collected when you access the Platform:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited, clicks, and navigation paths
• Referring URL (where you came from before visiting boba59)

3.6 Communications Data

When you contact our support team, we retain:

• The content of your messages and any attachments
• The channel used (live chat, email)
• Resolution notes and timestamps

4. How We Collect Your Data

boba59 collects Personal Data through the following channels:

Collection Method	Data Collected
Account Registration Form	Name, date of birth, email, phone, address, password
KYC Verification Upload	Government ID, proof of address, payment method proof
Deposit / Withdrawal Transactions	Payment method details, transaction amounts and timestamps
Platform Usage (Automatic)	IP address, device info, session data, click tracking via cookies
Customer Support Interactions	Chat transcripts, email content, issue resolution notes
Third-Party Payment Processors	Transaction confirmation data, fraud screening flags

5. How We Use Your Personal Data

boba59 uses your Personal Data for the following purposes:

5.1 Account Management

To create, maintain, and secure your Account; to authenticate your identity at login; and to apply account settings such as responsible-gaming limits and communication preferences.

5.2 Transaction Processing

To process deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment methods; to verify withdrawal eligibility; and to maintain accurate transaction records in Indonesian Rupiah (IDR).

5.3 KYC and AML Compliance

To verify your identity and age (21+ requirement) before approving withdrawals; to screen transactions for money laundering and fraud; and to maintain compliance with international AML regulatio ns and the anti-money laundering standards applicable to internationally licensed gaming operators.

5.4 Platform Improvement and Analytics

To analyze usage patterns, identify technical errors, optimize page performance, and improve the overall user experience. Analytics data is processed in aggregate where possible to minimize privacy impact.

5.5 Customer Support

To respond to your inquiries, resolve disputes, investigate complaints, and maintain a record of support interactions for quality-assurance purposes. Our support team includes native Indonesian-speaking agents available 24/7 across WIB, WITA, and WIT time zones.

5.6 Promotions and Bonuses

To administer bonus offers, track wagering requirement progress, detect bonus abuse, and communicate promotional offers to users who have opted in to marketing communications. You may opt out of promotional communications at any time by contacting support.

5.7 Fraud Prevention and Security

To detect and prevent unauthorized access, duplicate accounts, collusion, money laundering, and other fraudulent or prohibited activities. This includes automated risk-scoring systems that may flag unusual betting patterns or transaction behavior for manual review.

5.8 Responsible Gaming

To monitor gambling activity for indicators of problem gambling; to apply and enforce deposit limits, loss limits, session time limits, and self-exclusion periods requested by users; and to comply with our duty of care obligations to vulnerable players.

6. Legal Basis for Processing

boba59 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and boba59 — including account creation, bet settlement, deposits, withdrawals, and customer support.
• Legal Obligation: Processing required to comply with applicable legal requirements — including KYC, AML screening, age verification, and the retention of financial transaction records.
• Legitimate Interests: Processing carried out for boba59's legitimate business interests — including fraud prevention, security monitoring, platform analytics, and responsible-gaming compliance — where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — including sending marketing communications and depositing non-essential cookies on your device. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

boba59 does not sell your Personal Data. We may share your data with the following categories of third parties only where strictly necessary and under appropriate contractual protections:

7.1 Payment Processors

We share transaction data with payment gateway providers and local Indonesian banks and e-wallets (including BCA, BRI, BNI, Mandiri, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja) to facilitate deposits and withdrawals. These providers process your data solely for payment-execution purposes and are bound by their own regulatory obligations.

7.2 Identity Verification Providers

We share KYC documentation with accredited identity-verification service providers to automate the verification of government-issued IDs and proof-of-address documents. These providers are contractually prohibited from using your data for any purpose other than identity verification on our behalf.

7.3 Cloud Hosting and Infrastructure

The boba59 Platform operates on internationally hosted cloud infrastructure. Our hosting providers process your data solely to provide server and storage services and are bound by strict data-processing agreements that prohibit independent use of your data.

7.4 Game Studios and Software Providers

Where you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, limited session data (such as player ID and stake amounts) may be transmitted to the game server. No personally identifiable information such as your full name or address is shared with game studios.

7.5 Legal and Regulatory Authorities

We may disclose Personal Data to law-enforcement agencies, regulatory authorities, or courts where we are legally required to do so — for example, in response to a valid court order, subpoena, or regulatory investigation. We will notify you of such disclosure where permitted by law.

7.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the boba59 business, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights in relation to it before it takes effect.

8. Cookies and Tracking Technologies

The boba59 Platform uses cookies and similar tracking technologies to enable core functionality, improve performance, and analyze user behavior. Cookies are small data files stored on your device when you visit the Platform.

8.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential	Maintain your login session, remember your Account preferences, and enable core Platform functionality. Cannot be disabled without breaking the Platform.	Session / up to 30 days
Analytics	Track page views, session duration, and navigation paths to help us identify and fix usability issues. Data is aggregated and anonymized where possible.	Up to 13 months
Fraud Prevention	Detect unusual patterns that may indicate account takeover, bot activity, or multi-accounting. These cookies are essential to platform integrity.	Up to 90 days
Preferences	Remember your display settings, language preferences, and responsible-gaming tool configurations between sessions.	Up to 12 months

8.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling essential cookies will prevent you from logging in or using core Platform features. Please refer to your browser's help documentation for instructions on managing cookie settings.

9. Data Retention

boba59 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Account and Registration Data: Retained for the duration of your Account's active status, plus 5 years following Account closure.
• KYC and Identity Documents: Retained for 5 years from the date of verification, as required by international AML standards.
• Financial Transaction Records: Retained for 7 years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Betting and Gaming History: Retained for 3 years from the date of each event, for dispute resolution and audit purposes.
• Customer Support Records: Retained for 3 years from the date of resolution.
• Marketing Consent Records: Retained for as long as you are opted in, plus 3 years after opt-out.
• Technical and Device Logs: Retained for up to 13 months on a rolling basis.

When Personal Data is no longer required, it is securely deleted or anonymized so that it can no longer be associated with you as an individual.

10. Data Security

boba59 employs a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit.
• Encrypted Data Storage: Sensitive fields including passwords, payment details, and identity documents are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data is strictly limited to boba59 staff who require it to perform their job functions. All internal access is logged and audited regularly.
• Two-Factor Authentication (2FA): Available for all user Accounts to provide an additional layer of login security beyond username and password.
• Regular Security Audits: The Platform undergoes regular penetration testing and security audits conducted by qualified third-party security specialists.
• Incident Response: In the event of a confirmed data breach affecting your Personal Data, boba59 will notify you within 72 hours of becoming aware of the breach, in accordance with international data-protection standards.

While we take all reasonable steps to protect your Personal Data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your boba59 Account and to enable two-factor authentication wherever possible.

11. Your Data Protection Rights

As a user of the boba59 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with a clear description of your request. We will acknowledge your request within 5 business days and provide a full response within 30 days.

Please note that certain rights may be limited where boba59 is required to retain data for legal compliance, fraud prevention, or dispute-resolution purposes. We will always explain our reasoning clearly if we are unable to fulfill a request in full.

12. Protection of Minors

The boba59 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we discover that an Account has been registered by a person under 21, we will immediately close that Account, void all associated bets, and securely delete or anonymize all related Personal Data.

Parents and guardians who believe a minor may have registered on the Platform are encouraged to contact us immediately at [email protected]. We will investigate and take corrective action as a matter of priority.

13. International Data Transfers

As an internationally operated platform, some of the Personal Data we collect may be transferred to and processed in countries outside Indonesia. In particular, our cloud-hosting infrastructure, certain third-party payment processors, and game-studio partners may be located in jurisdictions with different data-protection standards than those applicable in Indonesia.

Where such transfers occur, boba59 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Contractual data-processing agreements that require recipients to handle your data to the same standard as boba59
• Use of internationally recognized standard contractual clauses for cross-border data transfers
• Transfer only to jurisdictions that offer adequate data-protection standards

14. Changes to This Privacy Policy

boba59 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data-handling practices, legal obligations, or Platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document
• Display a prominent notice on the Platform informing users of the change
• Send an email notification to your registered email address for significant changes

Your continued use of the Platform following publication of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how boba59 is protecting your data.

15. Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how boba59 handles your Personal Data, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 on the Platform
• Response Time: Acknowledgment within 5 business days; full response within 30 days
• Operating Hours: 24 hours a day, 7 days a week
• Primary Time Zone: Western Indonesia Time (WIB, UTC+7)

By using the boba59 Platform you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your Personal Data as described herein. Thank you for trusting boba59 with your information — we take that trust seriously.