Privacy Policy

1. Introduction and Scope

boba55 is committed to protecting the privacy and security of your personal information. This Privacy Policy sets out in detail the categories of personal data we collect from users of the boba55 online gaming platform, the purposes for which we process that data, the legal bases that justify our processing activities, and the rights you hold in relation to your personal information. This policy applies to all users of the boba55 platform, including individuals who visit our website without registering, registered account holders, and individuals who contact our customer support team. It covers all personal data collected through our website at https://boba55.cam, our mobile applications, and any other digital interfaces through which we deliver our services to Indonesian players.

boba55 operates primarily for Indonesian residents and processes personal data in the context of providing online gaming entertainment services to individuals aged 21 and above who are domiciled in Indonesia. We process personal data in accordance with applicable Indonesian data protection legislation, including Law Number 11 of 2008 on Electronic Information and Transactions (UU ITE) as amended by Law Number 19 of 2016, Government Regulation Number 71 of 2019 on the Implementation of Electronic Systems and Transactions (PP PSTE), and other applicable Indonesian regulations governing the processing of personal data.

2. Definitions

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "boba55", "we", "us", "our" — the online gaming platform operated at https://boba55.cam and its affiliated entities responsible for processing personal data.
• "Personal Data" — any information that identifies or could reasonably identify a natural person, including name, national identification number, email address, phone number, banking details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "User", "you", "your" — any individual who accesses the boba55 platform, whether as a registered account holder or as an anonymous visitor.
• "KYC" — Know Your Customer procedures undertaken to verify the identity, age, and residency of users in compliance with legal and regulatory obligations.
• "Sensitive Personal Data" — categories of Personal Data warranting heightened protection, including financial account details, national identity documents, and biometric data where applicable.
• "Third Party" — any natural person or legal entity that is not boba55, not a user of boba55, and not a data processor acting on behalf of boba55.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your wishes by which you agree to the processing of your Personal Data.

3. Information We Collect

3.1 Information You Provide Directly

boba55 collects personal information that you voluntarily submit when you interact with our platform. This includes information provided during account registration, identity verification, customer support interactions, and promotional activities. Specifically, we collect:

• Registration Data: Full legal name, date of birth, Indonesian national ID card number (KTP number), email address, mobile phone number, and preferred password.
• Identity Verification Documents: Scanned copy or photograph of your Indonesian national identity card (KTP), a live selfie photograph, and proof of residential address when required for enhanced KYC procedures.
• Financial Data: Bank account details including bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), account holder name, and account number necessary to process deposits and withdrawals in Indonesian Rupiah (IDR).
• Communication Data: Content of messages, queries, and complaints submitted to our customer support team via live chat, email, or other communication channels.
• Responsible Gaming Data: Information you provide when setting deposit limits, loss limits, session time limits, or initiating self-exclusion requests.

3.2 Information Collected Automatically

When you access and use the boba55 platform, we automatically collect certain technical and behavioral data, including:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, device language settings, and unique device identifiers.
• Usage Data: Pages visited, features accessed, games played, time spent on each section, click patterns, search queries within the platform, and session duration.
• Transaction Data: Records of all deposits, withdrawals, bets placed, games played, bonus transactions, and account balance changes.
• Geolocation Data: General geographic location derived from your IP address, used to verify that you are accessing our services from Indonesia.
• Log Data: Server logs recording access timestamps, pages requested, error codes, and other diagnostic information generated during your use of the platform.

3.3 Information from Third Parties

In certain circumstances, boba55 may receive personal information about you from trusted third-party sources, including payment processors that facilitate your deposits and withdrawals via Indonesian banks and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), fraud detection and identity verification service providers, and data analytics partners who help us understand aggregate usage patterns on our platform. We handle all third-party sourced data in accordance with this Privacy Policy and applicable law.

4. Legal Basis for Processing

boba55 processes your personal data on one or more of the following legal bases:

5. How We Use Your Information

boba55 uses the personal data we collect for the following purposes, always limited to what is necessary and proportionate for each stated purpose:

5.1 Service Delivery and Account Management

We use your registration and identity data to create and maintain your boba55 account, verify your identity and age eligibility (21+), process deposits and withdrawals via BCA, BRI, BNI, Mandiri, and other approved Indonesian payment channels, deliver gaming content and services, and respond to your customer support requests. These processing activities are necessary for the performance of our contract with you and cannot be opted out of without terminating your account.

5.2 Legal Compliance and Fraud Prevention

boba55 processes your personal data to fulfil legal obligations, including conducting mandatory KYC verification, screening against applicable sanctions lists, monitoring transactions for suspicious patterns indicating money laundering or fraud, enforcing our responsible gaming policies and self-exclusion commitments, and maintaining records required by applicable Indonesian regulations. These activities are non-negotiable conditions of providing our services.

5.3 Platform Improvement and Analytics

We analyze aggregated and, where necessary, individual usage data to understand how the boba55 platform is used, identify technical issues and performance bottlenecks, improve the user interface and gaming experience, develop new features and game categories, and optimize our payment processing workflows for Indonesian users.

5.4 Marketing and Personalization

With your consent, boba55 may use your data to send promotional offers, bonus notifications, and updates about new games or features relevant to your interests. You may withdraw consent for marketing communications at any time by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing activities conducted prior to withdrawal.

6. Sharing and Disclosure of Information

boba55 does not sell your personal data to third parties. We share your information only in the limited circumstances described below:

• Payment Processors: We share necessary financial data with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your transactions.
• Game Providers: We share a pseudonymous player identifier with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming to deliver their games within our platform. These providers do not receive your full identity data.
• Identity Verification Services: We may share identity document images with certified KYC verification partners to validate the authenticity of documents submitted during account verification.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to Indonesian government authorities, law enforcement agencies, or courts when required to do so by applicable law or valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
• Professional Advisers: We may share data with legal advisers, auditors, and accountants on a need-to-know basis under strict confidentiality obligations.

7. Cookies and Tracking Technologies

boba55 uses cookies and similar technologies to operate the platform, remember your preferences, maintain your login session, detect fraud, and analyze platform performance. Cookies are small text files placed on your device by your browser when you visit our website. We use the following categories of cookies:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. Disabling analytics or functional cookies will not prevent you from using the core gaming services.

8. Data Retention

boba55 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable Indonesian law. Our general retention guidelines are as follows:

• Account and Registration Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required by applicable financial regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with anti-money laundering regulations.
• Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the conclusion of any related legal proceedings.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, unless retention for a longer period is required for dispute resolution.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration by self-excluded users, as required by our responsible gaming commitments.

When personal data is no longer required for its stated purpose and no legal retention obligation applies, boba55 will securely delete or anonymize the data so that it can no longer be associated with any identifiable individual.

9. Security Measures

boba55 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), ensuring that your personal and financial information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored in our databases, including identity documents and financial account details, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized boba55 personnel and service providers on a strict need-to-know basis. All access is logged and subject to periodic review.
• Multi-Factor Authentication: boba55 staff who access production systems containing personal data are required to authenticate using multi-factor authentication (MFA).
• Intrusion Detection and Monitoring: Our platform is continuously monitored for suspicious activity, unauthorized access attempts, and anomalous transaction patterns using automated detection systems.
• Regular Security Audits: We commission independent third-party security assessments and penetration tests on a regular basis to identify and remediate vulnerabilities in our systems.
• Incident Response: boba55 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify affected users and relevant authorities in accordance with applicable Indonesian law and within the timeframes prescribed by regulation.

While we take all reasonable steps to safeguard your personal data, no digital system is entirely immune to risk. We encourage you to use a strong, unique password for your boba55 account, enable any available two-factor authentication options, and contact our support team immediately if you suspect unauthorized access to your account.

10. Your Rights and Choices

As a user of boba55 and as a data subject under applicable Indonesian data protection regulations, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link) or through our live chat service:

• Right of Access: You have the right to request a copy of the personal data boba55 holds about you, along with information about how that data is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to legal retention obligations that may require us to retain certain data even after account closure.
• Right to Restrict Processing: You may request that we restrict processing of your personal data in certain circumstances, for example while a rectification request is being investigated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes. Upon receipt of such an objection, boba55 will cease marketing communications promptly.

boba55 will respond to all valid rights requests within thirty (30) calendar days of receipt. In complex cases we may extend this period by a further thirty (30) days and will notify you accordingly. We may require verification of your identity before processing a rights request to prevent unauthorized disclosure of your data.

11. Children's Privacy

The boba55 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a user who is under 21 years of age, we will immediately suspend the relevant account, delete or destroy all associated personal data, and take steps to prevent re-registration. If you are a parent or guardian and believe that your child may have accessed the boba55 platform or provided us with personal data, please contact our support team immediately so that we may investigate and take appropriate action.

12. Changes to This Policy

boba55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our processing activities, applicable law, or regulatory guidance. When we make material changes to this policy, we will post the updated version on our website with a revised effective date and, where appropriate, notify registered users by means of an on-platform notification. Your continued use of boba55 services following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend that you review this page periodically to stay informed of how we are protecting your information.

13. Governing Law

This Privacy Policy is governed by and shall be construed in accordance with the laws of the Republic of Indonesia, including Law Number 11 of 2008 on Electronic Information and Transactions (UU ITE) as amended, Government Regulation Number 71 of 2019 on the Implementation of Electronic Systems and Transactions, and any subsequent data protection legislation enacted by the Indonesian government. Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Indonesia.

14. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way boba55 handles your personal data, please reach out to us through any of the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week through the on-platform support widget
• Language: Indonesian-speaking support agents are available at all times to assist you with privacy-related queries