bossmahjong Privacy Policy: Protection of User Data
This page explains how bossmahjong collects, uses, stores, and protects your personal data. We are committed to safeguarding the privacy of every user in accordance with applicable best practices.
1. Data We Collect
When you register for and use bossmahjong services, we collect several types of information needed to operate the platform safely and efficiently. The categories of data collected include:
- Account information: Full name, email address, phone number, date of birth, and an encrypted password provided at registration.
- Identity data (KYC): A photo or copy of an official government-issued identity document (national ID card, driver's license, or passport) provided during the account verification process.
- Payment information: Local bank account number, account holder name, and transaction history in Indonesian Rupiah (IDR). We do not store credit card data directly.
- Device and browser data: IP address, device type, operating system, browser type, and session data collected automatically when you access the platform.
- Usage data: Pages visited, session duration, interactions with platform features, and display preferences you have selected.
All data is collected solely for the purposes stated in this policy and is not used for any other purpose without your explicit consent.
- Data Collected
- Purpose of Data Use
- Cookies & Tracking
- Storage & Security
- Third-Party Data Sharing
- User Rights
- & Changes Contact
2. Purpose of Data Use
The data we collect is used exclusively to support the operation of the bossmahjong platform and to deliver the best possible experience to our users. The specific purposes for which data is used are as follows:
- Processing account registration and verifying user identity through the KYC process.
- Facilitating financial transactions, including deposits and withdrawals in IDR, and ensuring the security of every transaction.
- Sending important account notifications, policy updates, or alerts about suspicious activity to your registered email address.
- Improving service quality based on aggregated and anonymized usage patterns and user feedback.
- Complying with applicable legal obligations, including anti-money laundering (AML) requirements and consumer protection regulations.
- Preventing fraud, account misuse, and activities that violate the platform's terms of service.
bossmahjong will not use your personal data for third-party marketing purposes or sell your information to advertisers without your prior written consent.
3. Cookies and Tracking Technologies
bossmahjong uses cookies and similar technologies to enhance the user experience on the platform. Cookies are small files stored on your device that help the platform remember your preferences and login session so you do not need to sign in again each time you open a new page.
The types of cookies we use include: session cookies (deleted automatically when the browser is closed), persistent cookies (stored for a set period to remember your preferences), and analytics cookies (used anonymously to understand how users interact with the platform).
You can control cookie usage through your browser settings. Most modern browsers allow you to block or delete cookies at any time. Please note, however, that disabling certain cookies may affect platform functionality, such as the ability to remain signed in to your account or to retain your display preferences.
We do not use cookies to track your activity outside the bossmahjong platform, and cookie data is not shared with third parties for targeted advertising purposes.
4. Data Storage and Security
All personal data collected by bossmahjong is stored on servers protected with industry-standard SSL/TLS encryption. Sensitive data such as KYC identity information and bank account details is stored in encrypted form and can only be accessed by authorized personnel with a legitimate business need.
We apply role-based access controls to restrict who within the organization can access user data. All access to sensitive data is logged in an audit trail system for security monitoring purposes.
User data is retained for as long as the account is active and for the retention period required by applicable legal obligations — typically 5 (five) years after account closure to meet financial reporting and anti-money laundering requirements. Once the retention period ends, data will be securely deleted from our systems.
While we take all reasonable steps to protect your data, no security system is perfect. In the event of a data breach affecting your personal information, we will notify you as soon as possible via your registered email address and take the necessary corrective action.
5. Sharing Data with Third Parties
bossmahjong does not sell, rent, or trade users' personal data to third parties for commercial purposes. However, in certain limited situations, we may need to share information with the following parties:
- Payment service providers: Local banks, GoPay, OVO, DANA, and other digital wallet providers used to process financial transactions in IDR. Information shared is limited to what is strictly necessary to complete the transaction.
- Technology service providers: Companies that assist us in operating the platform, such as server hosting providers, who are bound by strict data confidentiality agreements.
- Legal authorities: Where required by applicable law or in response to a formal request from a law enforcement agency or authorized regulatory body.
Every third-party partner that receives user data is required to comply with data protection standards equivalent to those applied by bossmahjong and is not permitted to use that data for any purpose other than what has been agreed upon.
- & payment processing IDR verification
- Applicable legal obligations
- & fraud prevention and security
- With the user's explicit consent
- Third-party advertising
- Sold to data brokers
- Commercial profiling without permission
6. User Rights Over Personal Data
As a bossmahjong user, you have the following rights regarding your personal data, which you may exercise at any time by contacting our support team:
You have the right to request a copy of the personal data we hold about you, including account information, transaction history, and verification data documented in our systems.
If your data is inaccurate or out of date, you have the right to request a correction through your account panel or by contacting customer support with the relevant supporting documents.
You may request the deletion of your personal data after your account is closed, subject to applicable legal retention obligations. Requests will be processed within 30 business days after identity verification is complete.
bossmahjong reserves the right to update this privacy policy at any time. Users will be notified of material changes via their registered email address at least 7 (seven) days before the changes take effect. Continued use of the service after an update constitutes acceptance of the revised policy.
For questions, data access requests, or privacy-related complaints, please contact our team by email: [email protected]. We aim to respond within 3–5 business days for all incoming privacy requests.
Last updated: 2024. This policy applies to all registered users on the bossmahjong platform.
Your Data Is Safe With Us
bossmahjong is fully committed to the privacy of every user. Register now and enjoy a safe, trusted digital entertainment experience.