Bom99 Privacy Policy – Our Commitment to Protecting Personal Data of Indonesian Users

1 Introduction

Bom99 understands that your trust in us depends greatly on how we handle your personal data. This Privacy Policy is written in clear, plain language — not a deliberately complex legal document designed to go unread.

We are the data controller for all personal information you provide when using the bom99 platform, whether through our website or mobile app. This policy applies to all services offered by bom99 and is binding on all registered users and visitors to our platform.

If anything in this policy is unclear, feel free to reach out to our support team — we're happy to explain it in plain language.

2 Data We Collect

Bom99 collects data from various sources while you use our services. Below are the categories of data we collect and how they are obtained:

Data you provide directly:

• Full name and date of birth for age and identity verification (KYC).
• Email address and phone number used as account identity and communication channel.
• Bank account or digital wallet information for the purpose of processing deposits and withdrawals.
• Identity documents such as a national ID or passport uploaded during the KYC verification process.
• A selfie with your identity document as part of the security verification process.

Automatically collected data:

• IP address, device type, operating system, and browser used to access the platform.
• Activity history on the platform — including games played, session duration, and access times.
• Broad location data (based on IP) for the purpose of detecting access from restricted regions.
• Complete transaction logs covering all deposit, withdrawal, and gaming activity on your account.
• Cookie data and similar tracking technologies as described in section 7 of this policy.

Summary table of data types collected:

3 How We Use Your Data

The data we collect is used exclusively for purposes directly related to the provision and improvement of bom99 services. Specifically, data is used to:

• Creating and managing your bom99 account, as well as verifying your identity and eligibility to use our services.
• Processing all financial transactions — including deposits, withdrawals, and bonus transfers — securely and accurately.
• Sending essential account-related communications, including transaction confirmations, security notifications, and policy updates.
• Detecting and preventing fraud, platform abuse, money laundering, and other illegal activities.
• Fulfilling applicable legal and regulatory obligations, including reporting to relevant authorities where required.
• Improving platform quality, developing new features, and personalizing your gaming experience based on detected preferences.
• Sending promotional information and special offers — only if you have given consent to receive marketing communications.

4 Legal Basis for Data Processing

Bom99 processes your personal data based on one or more of the following valid legal bases:

• Contract performance: Processing required to deliver the services you requested when registering at bom99.
• Legal obligation: Processing required by applicable laws and regulations, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Legitimate interest: Processing for fraud prevention, platform security, and service improvement purposes that does not override your fundamental rights.
• Consent: Processing for marketing and promotional communication purposes, carried out only after you have given explicit consent.

5 Data Storage & Retention

Your personal data is stored on servers located in data centers with high security standards. All servers use storage encryption and access is restricted to authorized personnel only.

Data retention periods follow the policy below:

• Active account data is retained for as long as the account remains active.
• After account closure, identity and transaction data are retained for a minimum of 5 years to meet legal and audit obligations.
• Technical log and activity data is retained for a maximum of 2 years from the date of recording.
• Marketing data and communication preferences are deleted immediately upon withdrawal of user consent.

6 Data Sharing with Third Parties

Bom99 does not sell or trade your personal data. However, in certain limited circumstances, data may be shared with:

• Payment service provider: Information required to securely process financial transactions, limited strictly to relevant data.
• KYC service provider: Identity information required for the verification process through trusted identity verification partners.
• Legal authority: Data lawfully requested by law enforcement authorities or regulators in accordance with applicable regulations.
• Technical infrastructure provider: Limited operational information required by cloud and infrastructure providers to run our services — all bound by strict confidentiality agreements.

All third parties that receive data from bom99 are bound by data processing agreements requiring them to maintain confidentiality and data security at standards no lower than our own.

7 Cookies & Tracking Technologies

Bom99 uses cookies and similar tracking technologies to ensure the platform runs smoothly and delivers a more personalized experience. Cookies are small text files stored on your device when you access the bom99 platform.

• Essential cookies: Required for the platform to function correctly, including login session management and security. These cookies cannot be disabled without disrupting the platform's core functions.
• Functional cookies: Storing user preferences such as language, theme, and display settings to provide a more comfortable experience.
• Analytics cookies: Helping us understand how users interact with the platform so we can make targeted, meaningful improvements.
• Security cookies: Used to detect suspicious activity and protect your account from unauthorized access.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect the functionality of the bom99 platform.

8 Data Security

Bom99 applies comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, disclosure, or accidental destruction.

• 256-bit SSL encryption for all data transmitted between your device and bom99 servers.
• AES-256 encryption for all data stored in our databases.
• Two-factor authentication (2FA) system for account access and sensitive transaction verification.
• Round-the-clock security monitoring with real-time anomaly detection to identify suspicious activity.
• Regular penetration testing by an independent security team to identify vulnerabilities before they can be exploited.
• Strict role-based access control — only personnel with specific authorization can access user data.

9 User Rights Over Personal Data

As a bom99 user, you have the following rights regarding your personal data, which you may exercise at any time: