Privacy Policy

1. Introduction and Scope

boba77 ("we," "us," "our") operates the online gaming platform accessible at https://boba77.cam and is committed to protecting the privacy and security of all personal information provided by our players. This Privacy Policy describes in detail what information we collect, why we collect it, how we use it, with whom we may share it, and what choices you have regarding our use of your information.

This Privacy Policy applies to all Indonesian residents who register accounts, access our website, or use any of our gaming services including casino games, live dealer experiences, sports betting markets, togel (Indonesian lottery), sabung ayam (cockfighting betting), and all other products offered through our platform. By creating an account or using boba77 services, you acknowledge that you have read, understood, and consent to the data practices described in this policy.

We recognize that privacy is critically important to our players, particularly when entrusting us with sensitive financial and personal information. We adhere to international data protection standards and implement technical, organizational, and administrative safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with boba77, we collect personal information that you voluntarily provide, including:

• Identity Information: Full legal name as it appears on your government-issued identification document, date of birth, Indonesian identity card (KTP) number or passport number, nationality, and gender.
• Contact Information: Residential address in Indonesia including street address, city, province, and postal code; active email address; and Indonesian mobile phone number with country code.
• Financial Information: Indonesian bank account details including bank name, account holder name, account number, and branch information; e-wallet account details for OVO, DANA, GoPay, ShopeePay, or LinkAja; and transaction history related to deposits and withdrawals.
• Account Credentials: Username, password (stored in encrypted form only), and security questions/answers for account recovery purposes.
• Verification Documents: Clear photographs or scans of your Indonesian identity card (KTP), proof of residence documents dated within the last three months (utility bill, bank statement, or government correspondence), and photographs of payment method ownership (bank card front, e-wallet screenshot showing your name).
• Communication Records: Content of messages you send to our customer support team via live chat, email, WhatsApp, or in-app messaging, including any attachments or supporting documentation.

2.2 Information Collected Automatically

When you access or use boba77 services, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device manufacturer and model, and unique device identifiers.
• Connection Information: Internet Protocol (IP) address, Internet Service Provider (ISP), approximate geographic location derived from IP address (city/region level only, not precise GPS coordinates), and connection timestamps.
• Usage Data: Pages visited on our website, features accessed, games played, betting history including stake amounts and outcomes, session duration, clickstream data showing navigation paths, time spent on each page, and search queries entered within our platform.
• Gaming Activity: Game preferences, wagering patterns, win/loss history, bonus claims and wagering progress, deposit and withdrawal patterns, and account balance history.
• Marketing Interactions: Whether you opened promotional emails sent by boba77, which links you clicked within those emails, and whether you opted in or out of marketing communications.

2.3 Information from Third Parties

We may receive limited information about you from third-party sources to verify your identity, prevent fraud, or comply with legal obligations:

• Payment Processors: Confirmation of successful or failed transactions, payment method validation, and fraud risk assessments from our banking and e-wallet integration partners.
• Identity Verification Services: Validation of identity documents against government databases where legally permitted and technically available in Indonesia.
• Game Providers: Gaming session data, game outcomes, and technical error reports from third-party software providers whose games appear on our platform.

3. How We Use Your Information

boba77 uses the personal information we collect for the following legitimate business purposes:

• Account Management: Creating and maintaining your gaming account, authenticating your identity when you log in, processing your registration, and enabling access to our gaming products.
• Transaction Processing: Processing deposits from your Indonesian bank account or e-wallet, executing withdrawal requests to your registered payment methods, maintaining accurate account balance records, and generating transaction receipts.
• Know Your Customer (KYC) Compliance: Verifying your identity and age to confirm you are at least 21 years old, validating that payment methods belong to you personally (not third parties), and maintaining compliance with international anti-money-laundering (AML) regulations.
• Game Provision: Delivering casino games, live dealer experiences, sports betting markets, and specialty games like togel and sabung ayam; ensuring game fairness through Random Number Generator (RNG) monitoring; and investigating game disputes or technical issues.
• Customer Support: Responding to your inquiries submitted via live chat, email, WhatsApp, or in-app messaging; troubleshooting technical problems; resolving account disputes; and providing assistance in Bahasa Indonesia or English based on your preference.
• Fraud Prevention and Security: Detecting and preventing fraudulent activities, unauthorized account access, bonus abuse, money laundering, or other violations of our Terms & Conditions; monitoring for unusual betting patterns or account behavior; and protecting the security and integrity of our platform.
• Legal Compliance: Meeting regulatory requirements imposed by our international gaming licenses, responding to lawful requests from law enforcement or regulatory authorities, maintaining records as required by applicable laws, and enforcing our Terms & Conditions.
• Marketing and Promotions: Sending promotional offers, bonus notifications, tournament invitations, and platform updates via email, SMS, or in-app notifications where you have consented to receive such communications; personalizing promotional offers based on your gaming preferences; and analyzing marketing campaign effectiveness.
• Platform Improvement: Analyzing usage patterns to identify popular games and features, troubleshooting technical issues and bugs, optimizing website performance and loading times, developing new features and gaming products, and enhancing user experience based on player feedback.
• Responsible Gaming: Implementing deposit limits, loss limits, and session time limits you have requested; enforcing self-exclusion periods; identifying potentially problematic gambling behavior patterns; and providing access to responsible gaming tools and resources.

4. How We Share Your Information

boba77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

• Payment Service Providers: We share necessary financial information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposit and withdrawal transactions. These providers are contractually obligated to use your information solely for transaction processing and to maintain confidentiality.
• Game Software Providers: When you play games on our platform, certain session data (username, bet amounts, game outcomes) is shared with the third-party software providers who operate those games. This is necessary for game functionality and ensuring fair play through their RNG systems.
• Identity Verification Services: To comply with KYC and AML regulations, we may share identity documents with specialized verification services that validate the authenticity of identification documents and check against fraud databases.
• Legal and Regulatory Authorities: We may disclose your information when required by law, in response to lawful requests from government authorities, to comply with court orders or subpoenas, or when we believe disclosure is necessary to protect our legal rights, prevent fraud, or protect the safety of our players or the public.
• Professional Advisors: We may share information with lawyers, accountants, auditors, and other professional advisors who assist us in operating our business, provided they are bound by confidentiality obligations.
• Business Transfers: In the event boba77 is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

5. Data Security Measures

boba77 implements comprehensive security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same technology used by banks and financial institutions worldwide.
• Secure Data Storage: Personal information is stored on secure servers located in data centers with physical security controls including 24/7 surveillance, biometric access controls, and environmental protections against fire, flood, and power failure.
• Password Protection: Account passwords are stored using one-way cryptographic hashing, meaning even our staff cannot view your actual password. We enforce strong password requirements and encourage periodic password changes.
• Access Controls: Access to personal information is restricted to authorized boba77 employees and contractors who require access to perform their job functions. All personnel with access are bound by strict confidentiality agreements.
• Network Security: Our systems are protected by enterprise-grade firewalls, intrusion detection systems, and regular security vulnerability assessments conducted by independent security firms.
• Regular Audits: We conduct periodic internal security audits and undergo third-party security assessments to identify and address potential vulnerabilities in our data protection practices.

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we continuously work to enhance our security infrastructure and respond promptly to any identified vulnerabilities.

6. Data Retention

boba77 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information for active accounts is retained for the duration of your relationship with boba77 plus any additional period required by law or regulation.
• Closed Accounts: After you close your account, we retain certain information for up to seven years to comply with financial record-keeping requirements, resolve any outstanding disputes, prevent fraud, and meet regulatory obligations.
• Transaction Records: Financial transaction data including deposits, withdrawals, and wagering history is retained for seven years in compliance with anti-money-laundering regulations and tax reporting requirements.
• Marketing Communications: If you opt out of marketing emails, we retain your email address on our suppression list indefinitely to ensure we do not inadvertently contact you in the future.
• Customer Support Records: Communication logs with customer support are retained for three years for quality assurance and dispute resolution purposes.

7. Your Privacy Rights

As a boba77 player, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format within 30 days of your verified request.
• Right to Correction: If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance.
• Right to Deletion: You may request deletion of your personal information, subject to our legal obligations to retain certain records for regulatory compliance. Account closure requests can be submitted through customer support.
• Right to Object: You may object to our processing of your personal information for marketing purposes at any time by clicking the unsubscribe link in promotional emails or adjusting your communication preferences in your account settings.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal information in a structured, machine-readable format that can be transferred to another service provider.
• Right to Withdraw Consent: Where we process your information based on your consent (such as for marketing communications), you may withdraw that consent at any time. This will not affect the lawfulness of processing conducted prior to your withdrawal.

To exercise any of these rights, please contact our Data Protection Officer through the channels listed in Section 11 of this policy. We may require verification of your identity before processing your request to protect against unauthorized access to your information.

8. Cookies and Tracking Technologies

boba77 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you when you return to our website.

We use the following types of cookies:

• Essential Cookies: Required for basic website functionality including user authentication, account access, and transaction processing. These cookies cannot be disabled without severely impacting your ability to use our services.
• Performance Cookies: Collect anonymous information about how visitors use our website, which pages are most popular, and where users encounter errors. This helps us improve website performance and user experience.
• Functionality Cookies: Remember your preferences such as language selection, timezone (WIB/WITA/WIT), and display settings to provide a more personalized experience.
• Marketing Cookies: Track your activity across our website to deliver relevant promotional offers and measure the effectiveness of our marketing campaigns.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may limit your ability to use certain features of our platform. For more information about managing cookies, consult your browser's help documentation.

9. International Data Transfers

While boba77 primarily serves Indonesian players and maintains operations focused on the Indonesia market, some of your personal information may be transferred to, processed, or stored on servers located outside of Indonesia. This may occur when we utilize cloud hosting services, payment processors, or game software providers that operate international data centers.

When we transfer personal information internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include standard contractual clauses, Privacy Shield certification (where applicable), or other legally recognized transfer mechanisms.

10. Children's Privacy

boba77 services are strictly intended for individuals who are 21 years of age or older, as required by Indonesian law and our operational licensing. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected information from someone under 21, we will take immediate steps to delete that information and close the associated account.

Parents and guardians are encouraged to monitor their children's internet usage and to help enforce our age restrictions by instructing their children never to provide personal information to online gaming platforms without permission. If you believe a minor has provided personal information to boba77, please contact us immediately through the channels listed below.

11. Changes to This Privacy Policy

boba77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any material changes will be communicated to registered players via email notification and/or prominent notice on our website. The "Last Updated" date at the top of this policy indicates when the most recent revision was made.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of boba77 services following any changes constitutes your acceptance of the revised Privacy Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Team through any of the following channels:

• Email: [email protected] (mark correspondence "Attention: Data Protection Officer")
• Live Chat: Available 24/7 through your account dashboard
• WhatsApp: +62 812-3456-7890

We will respond to all privacy-related inquiries within 30 days of receipt. For urgent security concerns such as suspected unauthorized account access, please contact us immediately through live chat for fastest response.