At wsboss, protecting the personal data of every player on our platform is not an afterthought — it is a core operational commitment. This Privacy Policy explains in clear terms what data we collect, why we collect it, how we use and store it, and what rights you hold over your own information.
wsboss ("we", "us", "our", or "the Operator") operates the online betting and gaming platform accessible at https://wsboss.cam (the "Platform"). In the course of providing our services — which include sports betting, live casino games, togel (Indonesia's traditional numbers lottery), slot games, and related promotional activities — we collect and process personal data about users ("you", "your") who register for and use our services.
This Privacy Policy is issued in accordance with internationally recognized data protection standards and explains our approach to the collection, use, storage, disclosure, and protection of your personal information. We are committed to handling your data with the highest standards of confidentiality, integrity, and transparency.
This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and wsboss. By creating an Account on the Platform, you confirm that you have read, understood, and accepted this Privacy Policy.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, location data, or any factor specific to that person's physical, economic, or social identity. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion. |
| "Data Controller" | wsboss, the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Subject" | The individual whose Personal Data is being processed — in most cases, you, the registered user. |
| "Third Party" | Any natural or legal person other than wsboss and the Data Subject, including payment processors, game studios, fraud-detection providers, and regulatory authorities. |
| "KYC" | Know Your Customer — the identity verification process conducted to confirm a user's identity, age, and legitimacy of funds. |
| "Cookies" | Small text files placed on your device by the Platform to recognize your browser, remember preferences, and support analytics functions. |
The categories of Personal Data we collect vary depending on how you interact with the Platform. The table below outlines the principal categories and specific data points we may collect:
| Category | Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Indonesian National ID (KTP) number, passport number, or driving license (SIM) number. |
| Contact Data | Email address, mobile phone number, residential address (province, city, district, postal code). |
| Account Data | Username, hashed password, account creation date, account status, loyalty tier, and communication preferences. |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction history denominated in IDR. |
| Gaming Data | Bet history, game preferences, session duration, wagering totals, win/loss records, and responsible gaming tool activations. |
| KYC Documents | Scanned or photographed copies of identity documents, proof-of-address documents, payment method verification screenshots, and selfie images submitted during the verification process. |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session timestamps, and referral URL. |
| Communications Data | Records of support interactions via email or live chat, including the content of messages and timestamps. |
Note: We do not collect or store complete payment card numbers (PAN), card verification values (CVV), or bank account PINs. Sensitive payment authentication data is handled exclusively by PCI-DSS-compliant payment processing partners.
wsboss collects Personal Data through the following channels and mechanisms:
You provide data directly when you register an Account, complete the KYC verification process, make a deposit or withdrawal request, contact our support team, or participate in promotions and surveys. The accuracy and completeness of directly submitted data is your responsibility.
When you access the Platform, our servers and analytics systems automatically collect Technical Data including your IP address, device fingerprint, browser configuration, and navigation behavior within the Platform. This data is collected via server logs, cookies, and similar tracking technologies described in Clause 10 of this Policy.
In certain circumstances, we may receive Personal Data about you from third parties, including:
We process your Personal Data only for the purposes set out below. We do not use your data for purposes that are incompatible with those originally specified without obtaining your explicit consent.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity Data, Contact Data, Account Data |
| Age and identity verification (KYC) | Identity Data, KYC Documents |
| Processing deposits and withdrawals | Financial Data, Identity Data |
| Delivering betting and gaming services | Account Data, Gaming Data, Technical Data |
| Fraud prevention and security monitoring | Technical Data, Financial Data, Gaming Data |
| Customer support and complaint resolution | Communications Data, Account Data, Identity Data |
| Responsible gaming monitoring and intervention | Gaming Data, Account Data, Contact Data |
| Sending promotional communications (where consented) | Contact Data, Account Data, Gaming Data |
| Platform analytics and performance improvement | Technical Data, Gaming Data |
| Compliance with legal and regulatory obligations | Identity Data, Financial Data, KYC Documents |
Every instance of Personal Data processing carried out by wsboss rests on at least one of the following recognized legal bases:
Withdrawal of Consent: Withdrawing consent for marketing communications does not affect the lawfulness of processing carried out prior to withdrawal, and does not impair your ability to use the core Platform services.
wsboss does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may, however, share your data with the categories of recipients listed below, strictly on a need-to-know basis and subject to appropriate confidentiality agreements:
To process deposits and withdrawals, we share relevant Identity and Financial Data with our local and international payment partners, including banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and BSI, and e-wallet operators OVO, DANA, GoPay, ShopeePay, and LinkAja. These partners receive only the minimum data required to authenticate and execute a specific transaction.
KYC documents and Technical Data may be shared with accredited identity verification and fraud-detection service providers for the purpose of confirming your identity, screening against sanctions lists, and assessing transaction risk. All such providers are contractually bound to process your data only for the specified purpose and to maintain appropriate technical and organizational security measures.
Certain Gaming Data (such as session tokens, account tier, and game-round identifiers) is shared with licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to the extent technically necessary to deliver and authenticate gameplay within their certified environments.
We may disclose Personal Data to competent governmental, judicial, or regulatory authorities where required to do so by applicable law, court order, or binding regulatory direction. We will, where legally permissible, endeavor to notify you of any such disclosure before it occurs.
In the event of a merger, acquisition, restructuring, or sale of all or part of wsboss's business assets, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material change to the privacy terms applicable to your data prior to the transaction completing.
All third-party data processors engaged by wsboss are required to execute data processing agreements that obligate them to process your Personal Data solely on our documented instructions and in accordance with standards no less protective than those set out in this Policy.
We retain your Personal Data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following specific retention periods:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account & Identity Data | Duration of active Account + 5 years post-closure | AML compliance, dispute resolution, audit trail |
| KYC Documents | Duration of active Account + 5 years post-closure | Regulatory record-keeping obligations |
| Financial Transaction Data | 7 years from transaction date | Financial record-keeping and audit requirements |
| Gaming & Betting History | 5 years from session date | Dispute resolution, responsible gaming monitoring |
| Communications Data | 3 years from last interaction | Complaint handling and quality assurance |
| Technical & Log Data | 12 months | Security monitoring and fraud investigation |
| Marketing Consent Records | Until consent withdrawn + 2 years | Evidence of consent and regulatory compliance |
Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymized such that it can no longer be associated with your identity. Anonymized, aggregated data may be retained indefinitely for statistical and business analysis purposes.
wsboss employs a multi-layered approach to data security, combining technical, organizational, and procedural controls designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure.
Despite our extensive security measures, no online system can guarantee absolute security. If you become aware of or suspect any unauthorized access to your wsboss Account, please notify us immediately at [email protected] so we can take prompt protective action.
The wsboss Platform uses cookies and similar technologies to ensure the platform functions correctly, to remember your preferences, and to understand how users interact with our services. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent cross-site request forgery, and ensure the Platform loads correctly. Cannot be disabled without breaking core functionality. | Session / up to 24 hours |
| Functional | Remember your language preference, display settings, and last-visited game category to personalize your experience. | Up to 30 days |
| Analytics | Collect aggregated, anonymized data on page views, navigation paths, and feature usage to help us improve Platform performance and user experience. | Up to 12 months |
| Security | Support fraud detection algorithms by tracking device consistency, behavioral patterns, and session anomalies across visits. | Up to 6 months |
You may manage or disable non-essential cookies via your browser settings. Note that disabling Strictly Necessary cookies will prevent you from logging in or using core platform features. We do not use third-party advertising or retargeting cookies.
As a Data Subject whose Personal Data is processed by wsboss, you hold the following rights in respect of your information. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 days of receipt.
Request a copy of the Personal Data we hold about you, along with information about how it is being processed.
Request correction of any inaccurate or incomplete Personal Data we hold about you without undue delay.
Request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
Request that we limit the processing of your Personal Data in certain circumstances, such as while a rectification request is being assessed.
Request a machine-readable export of Personal Data you provided to us directly, for the purpose of transferring it to another service provider.
Object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling for marketing purposes.
Please note that certain rights are subject to limitations under applicable law. For example, we may be unable to delete transaction records that we are legally required to retain under financial regulations. Where a limitation applies, we will explain the reason clearly in our response to your request.
The wsboss Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect Personal Data from or about individuals under the age of 21. Age verification is a mandatory component of our KYC process, and any account found to be operated by or on behalf of a person under 21 will be immediately closed, with all associated data scheduled for deletion in accordance with our retention obligations.
If you are a parent or guardian and believe that a minor has accessed or registered on our Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action, including account closure and data deletion, within 48 hours of verified notification.
wsboss operates as an internationally licensed platform and may store or process your Personal Data on servers located outside Indonesia. Where Personal Data is transferred to, or accessed from, a jurisdiction that may not provide a level of data protection equivalent to that applicable in your country of residence, we take the following safeguards to ensure your data remains protected:
By using the wsboss Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia for the purposes described in this Policy.
wsboss reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When we make material changes, we will notify registered users via email to the address on file and display a prominent notice on the Platform for a minimum of 7 days prior to the updated Policy taking effect.
The "Last Updated" date at the top of this document reflects the date the most recent version became effective. We encourage you to review this Policy periodically. Your continued use of the Platform after any revision constitutes your acceptance of the updated terms. If you do not agree with any change, you should discontinue use of the Platform and request account closure in accordance with our Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data security incident, please contact our dedicated data protection team using the details below:
Please use the subject line "Privacy Request — [Your Username]" for faster routing.
Within 30 days of receipt
Support available 24/7 (WIB). Indonesian-speaking agents on every shift.
Every aspect of how wsboss handles your personal data is guided by six foundational principles — applied consistently across every team, system, and third-party relationship.
We collect only the data we genuinely need and use it solely for the stated purposes. Your gaming history is never sold to advertisers. Your KYC documents are never used beyond identity verification and legal compliance.
All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Stored Personal Data and KYC documents are encrypted at rest using industry-standard cryptographic protocols.
Access to your Personal Data within wsboss is restricted on a strict least-privilege basis. Only staff members whose specific roles require access to a given data category are granted permission — and all access is logged and audited.
You can request access to, correction of, or deletion of your Personal Data at any time. Marketing consent can be withdrawn instantly. We respond to all data rights requests within 30 days and we never charge a fee for exercising your rights.
wsboss does not sell, rent, or trade your Personal Data to any third party for commercial gain — ever. Data shared with payment and identity partners is shared only to the minimum extent necessary to deliver the service you requested.
We keep your data for clearly defined periods tied to legitimate legal or operational requirements — and no longer. When retention periods expire, data is securely deleted or anonymized. Our retention schedule is published openly in Clause 8 of this Policy.
Our FAQ covers common questions on account security, data verification, and platform rules. For the full legal framework governing your use of wsboss, review our Terms & Conditions. Our support team is available around the clock to assist with any privacy-related inquiry.