bom29 Privacy Policy

1. Introduction

bom29 is committed to protecting the privacy and security of our users' personal information. As a leading online betting platform serving Indonesian players, we recognize the trust you place in us when you share your personal data. This Privacy Policy outlines our data collection, processing, and protection practices in accordance with international data protection standards and applicable Indonesian regulations.

We collect only the information necessary to provide, maintain, and improve our services, ensure platform security, verify your identity, process transactions, comply with legal obligations, and communicate with you about your account and our services. We handle all personal data with the utmost care and employ industry-standard security measures to prevent unauthorized access, disclosure, or misuse.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a bom29 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, and nationality as they appear on your government-issued identification documents.
• Contact Information: Residential address, email address, and mobile phone number. All contact details must be accurate and up-to-date for account verification and communication purposes.
• Account Credentials: Username, password, and security questions that you create during registration. We store passwords in encrypted format and never have access to your plaintext password.
• Financial Information: Bank account details (account number, account holder name, bank name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), and transaction history. This information is necessary to process deposits and withdrawals.
• Verification Documents: Government-issued ID (Indonesian KTP or national identity card), proof of address (utility bills, bank statements), and selfie photographs submitted as part of our Know Your Customer (KYC) verification process.

2.2 Information Collected Automatically

When you access and use bom29, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers. This helps us optimize the platform for different devices and detect suspicious access patterns.
• Connection Data: IP address, internet service provider, geographic location (city and country level, not precise GPS coordinates), and connection timestamps. Location data helps us comply with geographic restrictions and detect fraudulent access attempts.
• Usage Data: Pages visited, features used, time spent on the platform, betting history, game preferences, search queries, and clickstream data. We analyze this data to improve user experience and personalize content.
• Cookie Data: We use cookies and similar tracking technologies to maintain your login session, remember your preferences, analyze platform performance, and deliver personalized content. See Section 7 for detailed cookie information.

2.3 Information from Third Parties

We may receive additional information about you from third-party service providers:

• Payment Processors: Transaction confirmations, payment status updates, and fraud risk assessments from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Verification results and fraud risk scores from third-party KYC and anti-money laundering (AML) service providers that validate your identity documents.
• Marketing Partners: If you access bom29 through an affiliate link, we may receive referral information and attribution data to track marketing campaign effectiveness.

3. How We Use Your Information

bom29 uses your personal information for the following purposes:

3.1 Service Provision and Account Management

• Create, maintain, and manage your bom29 account
• Process deposits, withdrawals, and bet placements
• Verify your identity and age (21+ requirement for Indonesian users)
• Authenticate your login and maintain account security
• Provide customer support and respond to inquiries
• Send transactional notifications (deposits confirmed, withdrawals processed, account updates)

3.2 Legal and Regulatory Compliance

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Verify that you meet eligibility requirements (age 21+, Indonesian residency)
• Detect and prevent fraud, money laundering, collusion, and other prohibited activities
• Respond to legal requests from law enforcement or regulatory authorities
• Maintain records as required by applicable gaming and financial regulations

3.3 Platform Improvement and Personalization

• Analyze user behavior to improve platform functionality and user experience
• Personalize content, game recommendations, and promotional offers based on your preferences
• Conduct research and analytics to understand betting patterns and optimize our services
• Test new features and troubleshoot technical issues

3.4 Marketing and Communication

• Send promotional emails about bonuses, new games, and special offers (you can opt out anytime)
• Display personalized advertisements on our platform and partner websites
• Communicate platform updates, policy changes, and important announcements
• Conduct customer satisfaction surveys and gather feedback

4. How We Share Your Information

bom29 does not sell your personal information to third parties. However, we may share your data with trusted service providers and partners under the following circumstances:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive necessary financial information to process your transactions. These partners are bound by strict confidentiality agreements and may only use your data to provide payment services.
• Identity Verification Providers: Third-party KYC and AML compliance services that verify your identity documents and assess fraud risk. These providers operate under data protection agreements and cannot use your information for any purpose other than verification.
• Cloud Hosting and IT Services: We use secure cloud infrastructure providers to store data and maintain platform operations. All data is encrypted at rest and in transit, and hosting providers have no access to unencrypted customer data.
• Customer Support Tools: Live chat, email support, and help desk systems that enable our customer service team to assist you. Support agents can access only the information necessary to resolve your inquiry.

4.2 Legal Requirements and Protection

We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or regulatory requests
• Enforce our Terms and Conditions and investigate violations
• Protect the rights, property, or safety of bom29, our users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Respond to claims of illegal activity or intellectual property infringement

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

bom29 employs comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and bom29 servers is encrypted using 256-bit SSL/TLS encryption, the same standard used by international banks.
• Encrypted Data Storage: Personal information and financial data are stored in encrypted databases. Sensitive data such as passwords and payment details are encrypted using industry-standard cryptographic algorithms.
• Secure Access Controls: Access to customer data is restricted to authorized personnel only, protected by multi-factor authentication and role-based access controls.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans performed by independent third-party security firms.
• Firewall and Intrusion Detection: Advanced firewall systems and intrusion detection tools monitor network traffic 24/7 to identify and block suspicious activity.

5.2 Organizational Security Measures

• Strict employee confidentiality agreements and data protection training
• Background checks for all employees with access to customer data
• Incident response plan and data breach notification procedures
• Regular security awareness training for all staff members

6. Data Retention

bom29 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

• Account Information: Retained for the duration of your account's active status plus 7 years after account closure, as required by financial regulations and anti-money laundering laws.
• Transaction Records: Retained for 7 years after the transaction date to comply with tax and financial auditing requirements.
• KYC Documents: Retained for 7 years after account closure as required by Know Your Customer and anti-money laundering regulations.
• Communication Records: Customer support chat logs and email correspondence are retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Data: If you opt out of marketing communications, we retain only the minimum information necessary to honor your opt-out request (email address and opt-out status).

After the applicable retention period expires, we securely delete or anonymize your personal information so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

7. Cookies and Tracking Technologies

bom29 uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience and analyze platform usage. Cookies are small text files stored on your device that help us recognize you on return visits and remember your preferences.

7.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, including login authentication, session management, and security features. These cookies cannot be disabled without affecting core platform features.
• Performance Cookies: Collect anonymous information about how you use bom29, including pages visited, time spent, and error messages encountered. We use this data to identify technical issues and improve platform performance.
• Functionality Cookies: Remember your preferences such as language settings, display options, and favorite games to provide a personalized experience.
• Marketing Cookies: Track your browsing activity across bom29 and partner websites to deliver relevant advertisements and measure marketing campaign effectiveness. You can opt out of marketing cookies through your browser settings.

7.2 Managing Cookie Preferences

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, accept only essential cookies, or alert you when cookies are being sent. However, disabling cookies may affect platform functionality and prevent you from accessing certain features. Consult your browser's help documentation for instructions on managing cookie preferences.

8. Your Privacy Rights

Indonesian users have the following rights regarding their personal data held by bom29:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

8.2 Right to Correction

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through your bom29 account dashboard, or contact customer support for assistance.

8.3 Right to Deletion

You may request deletion of your personal information, subject to our legal and regulatory obligations. We must retain certain data for specified periods to comply with anti-money laundering laws, financial regulations, and other legal requirements. After these obligations are fulfilled, we will delete your data upon request.

8.4 Right to Object

You have the right to object to certain types of data processing, including marketing communications and profiling for personalized advertising. You can opt out of marketing emails by clicking the "unsubscribe" link in any promotional message or by adjusting your communication preferences in your account settings.

8.5 Right to Data Portability

You have the right to receive your personal data in a portable format and request that we transfer it to another service provider where technically feasible.

8.6 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Team via email at [email protected] or through our 24/7 live chat support. We will verify your identity before processing any privacy rights requests to ensure data security. Most requests are processed within 30 days, though complex requests may require up to 60 days with notification of the extension.

9. Third-Party Links and Services

bom29 may contain links to third-party websites, advertisers, or services that are not operated or controlled by us. This Privacy Policy does not apply to third-party platforms. We are not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

10. Children's Privacy

bom29 services are strictly prohibited for individuals under 21 years of age in accordance with Indonesian law. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under 21, we will immediately delete that information and permanently close the associated account. Parents and guardians who believe their child has provided personal information to bom29 should contact us immediately so we can take appropriate action.

11. International Data Transfers

bom29 primarily operates within Indonesia and stores user data on servers located in secure data centers within the Asia-Pacific region. However, some of our service providers (cloud hosting, customer support tools, payment processors) may be located outside Indonesia. When we transfer your data internationally, we ensure that appropriate safeguards are in place, including data processing agreements that require third parties to protect your information according to international data protection standards.

12. Changes to This Privacy Policy

bom29 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you via email to your registered email address and display a prominent notice on our website. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Your continued use of bom29 services after changes have been posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us through the following channels:

• Email: [email protected] (displayed as plain text, not a clickable link)
• 24/7 Live Chat: Available on the bom29 website for immediate assistance
• WhatsApp Support: +62 812 3456 7890 (displayed as plain text, not a clickable link; available 8 AM - 12 AM WIB)

We are committed to resolving privacy concerns promptly and transparently. Our Data Protection Team will respond to all inquiries within 7 business days.

Last Updated: January 1, 2026

Version: 1.0