bo177 Privacy Policy

1 Definitions

The following definitions apply throughout this Privacy Policy:

• "bo177" / "we" / "us" / "our" — the online betting and gaming platform operated at bo177.net, together with its operators, affiliates, and service providers.
• "Player" / "you" / "your" — any individual who registers for, accesses, browses, or uses the bo177 platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, date of birth, Indonesian national identity number (NIK), mobile number, email address, IP address, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, transmission, disclosure, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; in this context, bo177.
• "Data Processor" — a third party that processes Personal Data on behalf of bo177 under a contractual obligation to do so in accordance with this Policy.
• "KYC" — Know Your Customer: the identity and age verification procedures required of all bo177 players prior to withdrawal.
• "Cookies" — small text files stored on a Player's device by the bo177 platform for session management and analytics purposes.
• "Applicable Law" — all laws and regulations governing the processing of personal data that apply to bo177 and/or to a Player's use of the platform, including Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and the laws of bo177's licensing jurisdiction.

2 Data Controller

bo177, operating via bo177.net, acts as the Data Controller for all Personal Data collected through the platform. As Data Controller, bo177 determines the purposes for which your Personal Data is processed and is responsible for ensuring that processing complies with Applicable Law. Inquiries regarding data protection, including requests to exercise your rights under clause 12, should be directed to our support team at the contact details provided in clause 15.

3 Personal Data We Collect

bo177 collects the following categories of Personal Data:

3.1 Registration Data

When you open a bo177 account, we collect your full legal name, date of birth, Indonesian mobile number, email address, preferred username, and a hashed version of your password. This information is mandatory; without it, we cannot create or maintain your account.

3.2 Identity Verification Data (KYC)

To comply with our anti-money-laundering obligations and to confirm that you are at least 21 years of age, we collect a copy of your Indonesian KTP (Kartu Tanda Penduduk), and where required, a selfie photograph holding your KTP, proof of residential address (such as a utility bill or bank statement issued within the past three months), and screenshots of any e-wallet profile used for deposits or withdrawals.

3.3 Financial Data

We collect the details of the payment methods you use to deposit and withdraw funds — including local bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon) and e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja). We do not store full card numbers or CVV codes. All financial data is transmitted and stored using 256-bit SSL encryption.

3.4 Transaction Data

We maintain a complete record of all deposits, withdrawals, bonuses credited, bets placed, games played, wager amounts, and outcomes associated with your account. Transaction records are retained for a minimum of five years from the date of the transaction in accordance with our anti-money-laundering compliance obligations.

3.5 Technical and Usage Data

When you access bo177.net, our servers automatically record your IP address, browser type and version, device type and operating system, referring URL, pages visited within the platform, session duration, and the time and date of each visit. This data is collected automatically and cannot be meaningfully disabled without preventing access to the platform.

3.6 Communications Data

If you contact bo177 via live chat, WhatsApp, or email, we retain records of those communications, including the content of the messages, the date and time, and any case reference numbers assigned. These records are used to resolve disputes, improve our support quality, and fulfil regulatory obligations.

3.7 Responsible Gaming Data

Where you voluntarily apply deposit limits, cooling-off periods, or self-exclusion through your bo177 account settings, we record those preferences and the dates on which they were set or modified. This data is used exclusively to enforce your responsible gaming choices and is not shared with third parties for marketing purposes.

4 How We Collect Your Data

bo177 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or update your account profile.
• Automatically — through server logs, session cookies, and first-party analytics tools that record technical and usage data whenever you access bo177.net.
• From payment processors — Indonesian banks and e-wallet providers may transmit transaction confirmation data to bo177 to facilitate deposit crediting and withdrawal processing.
• From identity verification partners — where bo177 uses a third-party KYC service to cross-reference identity documents, that provider may supply verification status data to bo177.

5 Purposes of Processing

bo177 processes your Personal Data only for the purposes set out in the table below. We do not process your data for any purpose incompatible with those listed without first obtaining your explicit consent.

6 Legal Basis for Processing

6.1 Contract Performance

The majority of bo177's processing activities are necessary to fulfil our contractual obligations to you under the bo177 Terms & Conditions — including creating your account, processing your bets, and handling deposits and withdrawals. Without processing the relevant categories of Personal Data, bo177 cannot provide these services.

6.2 Legal Obligation

bo177 is required by applicable anti-money-laundering regulations, responsible gaming obligations, and the requirements of our international gaming licence to collect, verify, and retain certain categories of Personal Data. This includes KYC documentation, transaction records, and responsible gaming preferences. We do not require your consent for processing carried out under a legal obligation.

6.3 Legitimate Interests

Where bo177 processes data on the basis of legitimate interests — such as fraud prevention, platform security, and first-party analytics — we have assessed that our interests do not override your fundamental rights and freedoms. You may object to processing based on legitimate interests at any time by contacting our support team; however, such an objection may affect your ability to use certain platform features.

6.4 Consent

Where bo177 processes your data on the basis of consent — primarily for promotional email and WhatsApp communications — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

7 Data Sharing

7.1 Service Providers

bo177 shares Personal Data with carefully selected third-party service providers who process data on our behalf as Data Processors. These include payment processors and Indonesian bank partners (for deposit and withdrawal handling), KYC verification providers (for identity and age verification), cloud infrastructure providers (for secure data hosting), game studios (Pragmatic Play, Evolution Gaming, Spribe, and others — solely for the purpose of delivering their games), and customer support platform providers. All Data Processors are contractually bound to process your data only on bo177's documented instructions and in compliance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities

bo177 may disclose Personal Data to competent regulatory, law enforcement, tax, or judicial authorities where required to do so by applicable law, court order, or regulatory direction. bo177 will, where legally permissible, notify affected players of such disclosures.

7.3 Business Transfers

In the event that bo177's business or a substantial part of its assets are transferred to a third party — whether by merger, acquisition, or otherwise — player Personal Data may form part of that transfer. Where such a transfer occurs, we will notify affected players via email or a prominent platform notice at least 30 days in advance, and the acquiring entity will be required to honour this Privacy Policy or provide players with an equivalent level of protection.

7.4 No Sale of Personal Data

bo177 does not sell, rent, or trade your Personal Data to any third party for their own independent marketing or commercial purposes. This prohibition applies regardless of any commercial arrangement bo177 may have with any affiliate, partner, or advertising network.

8 International Data Transfers

bo177's primary data infrastructure is hosted in servers located in the Asia-Pacific region. Some of our third-party service providers — including certain game studios and cloud infrastructure providers — may process data in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, bo177 ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to apply a standard of protection equivalent to that required under Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP). By using the bo177 platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia.

9 Data Retention

bo177 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the lifetime of your account plus five years after account closure.
• KYC documents: Retained for a minimum of five years from the date of verification, in accordance with anti-money-laundering regulations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the last communication in each support case.
• Technical and usage logs: Retained for 12 months on a rolling basis.
• Responsible gaming preferences: Retained for the duration of any active restriction plus three years following account closure.
• Marketing consent records: Retained for three years from the date of consent or withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where bo177 is required by law or ongoing legal proceedings to retain data beyond these periods, we will do so and notify you where possible.

10 Security Measures

bo177 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bo177.net.
• Encryption at rest for all Personal Data and financial records stored on bo177's servers.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access Personal Data.
• Multi-factor authentication for all internal administrative systems that have access to player data.
• Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals.
• Incident response procedures that require bo177 to notify affected players and relevant authorities of any confirmed data breach within 72 hours of discovery, where technically feasible.

11 Cookies & Tracking Technologies

11.1 What Cookies We Use

bo177 uses the following categories of first-party cookies on bo177.net:

11.2 No Third-Party Tracking Cookies

bo177 does not deploy third-party advertising or tracking cookies. No data collected via cookies on bo177.net is transmitted to advertising networks, social media platforms, or data brokers. Game studios integrated into the bo177 platform may set their own strictly necessary cookies to deliver game content; these are governed by the respective studio's own privacy documentation.

11.3 Managing Cookies

Strictly necessary cookies cannot be disabled without impairing core platform functionality, including your ability to log in and place bets. Functional and analytics cookies may be disabled via your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies through their privacy or security settings menus. Disabling functional cookies may affect your experience on the platform; disabling analytics cookies has no effect on your ability to bet or withdraw funds.

12 Your Data Rights

As a player on the bo177 platform, you are entitled to the following rights with respect to your Personal Data. To exercise any of these rights, contact bo177 support via the details in clause 15. We will respond to all valid requests within 30 days of receipt. In cases of particular complexity or volume, we may extend this period by a further 30 days, subject to notifying you of the extension within the initial 30-day window.

13 Minors

The bo177 platform is intended exclusively for individuals aged 21 years and above. bo177 does not knowingly collect Personal Data from persons under the age of 21. If you believe that bo177 has inadvertently collected data from a minor, please contact us immediately using the details in clause 15. Upon confirmation, bo177 will promptly delete all Personal Data associated with the minor's account and block any associated payment methods from future use on the platform.

14 Policy Amendments

bo177 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email and/or via a prominent notice on the bo177 platform at least 14 days before the revised Policy takes effect. The date of the most recent revision is always displayed in the "Last Updated" badge at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the bo177 platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure and withdrawal of your Real Money Balance in accordance with the bo177 Terms & Conditions.

15 Contact & Complaints

For all data protection inquiries, requests to exercise your rights under clause 12, or complaints regarding bo177's handling of your Personal Data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week at bo177.net
• WhatsApp: Available 24/7 — contact details provided after login

Please include your registered email address, account username, and a clear description of your request or concern. bo177 will acknowledge receipt of all data-related requests within 48 hours and will endeavour to resolve them within 30 days (WIB business days), subject to the extension provision described in clause 12.

If you are unsatisfied with bo177's response to a data protection complaint, you have the right to escalate the matter to the competent data protection supervisory authority in bo177's licensing jurisdiction, or to seek an independent legal remedy in a court of competent jurisdiction.