Your privacy is fundamental to how bom29 operates. This policy explains exactly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold as a registered player on our platform.
Notice to All Users: This Privacy Policy applies to all individuals who access, register on, or interact with the bom29 platform at bom29.one, including visitors, registered players, and former members. By using the bom29 platform, you acknowledge that you have read and understood this policy and consent to the data practices described herein.
bom29 operates an online gambling platform accessible at bom29.one, offering sports betting, live casino games, slot games, togel (Indonesia's traditional numbers lottery), and related entertainment services primarily to players based in Indonesia. As the operator of this platform, bom29 acts as the data controller in respect of all personal data collected through the platform.
We take your privacy seriously. This Privacy Policy sets out in plain, professional language precisely what personal data we collect from you, the purposes for which that data is processed, the legal bases underpinning each processing activity, the circumstances under which data may be shared with third parties, and the rights you hold as a data subject. We have written this policy to be transparent and easy to understand — not to obscure what we do with your information.
This policy should be read alongside the bom29 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. Where any conflict exists between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall take precedence.
Platform Scope: This policy covers data processed through the bom29 website (bom29.one), the mobile-optimised web interface, all customer support channels (live chat, email, WhatsApp), and any promotional communications sent by bom29 to registered users.
bom29 collects personal data through several distinct channels. The categories of data we collect, and the channel through which each is typically received, are summarised below.
When you register an account, deposit funds, request a withdrawal, contact support, or participate in a promotion, you voluntarily provide us with data that may include:
When you visit or interact with the bom29 platform, certain data is collected automatically by our systems:
In limited circumstances, bom29 may receive data about you from third-party sources:
bom29 processes your personal data only for specific, documented purposes. We do not sell your data to third parties, and we do not process it for purposes incompatible with those listed below.
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your bom29 account, verifying your identity, authenticating logins, and enabling account-level features including responsible gaming tools. |
| Transaction Processing | Processing deposits and withdrawals through Indonesian bank transfers, e-wallets, and cryptocurrency channels; issuing transaction confirmations; and resolving payment disputes. |
| KYC & Compliance | Verifying your age (21+ requirement), identity, and the legitimacy of funds in accordance with anti-money laundering (AML) obligations and responsible gaming regulations. |
| Service Delivery | Providing access to sports betting, live casino, slot games, togel, and all other platform services; settling bets and game outcomes; and crediting promotional bonuses. |
| Customer Support | Responding to inquiries, resolving complaints, processing responsible gaming requests (self-exclusion, deposit limits), and maintaining support records. |
| Fraud Prevention & Security | Detecting and preventing fraudulent activity, multi-accounting, money laundering, bonus abuse, and unauthorised account access. |
| Personalisation | Tailoring game recommendations, promotional offers, and interface settings to your preferences and play history, where you have not opted out of personalisation. |
| Marketing Communications | Sending promotional emails, WhatsApp notifications, and in-platform messages about bonuses and new games — only where you have provided valid consent or where a legitimate interest applies. |
| Platform Improvement | Analysing aggregated usage data to improve platform performance, game selection, payment processing speed, and user experience. |
| Legal Compliance | Meeting obligations imposed by applicable law, responding to court orders, regulatory requests, or law enforcement inquiries. |
Every processing activity carried out by bom29 rests on one or more of the following legal bases:
Withdrawing Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any email or contact [email protected].
bom29 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.
bom29 engages trusted third-party service providers who process personal data on our behalf, under contractual obligations of confidentiality and data security. These include:
Game studios whose titles are featured on the bom29 platform may receive session-level data (such as game round IDs and wager amounts) for the purpose of game operation, payout verification, and dispute resolution. No directly identifying personal data (such as your full name or KTP number) is shared with game studios in the normal course of platform operation.
bom29 may disclose personal data to governmental authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, valid legal process, or court order. Where legally permissible, bom29 will endeavour to notify the affected user of such disclosure in advance.
In the event that bom29 undergoes a merger, acquisition, asset sale, or restructuring, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and any material change to the terms governing your data before the transfer takes effect.
No Data Sales: bom29 has never sold, and will never sell, player personal data to advertising networks, data brokers, or any other commercial third party. If this policy is ever amended to permit such sales, you will be notified 30 days in advance and given the opportunity to close your account before the change takes effect.
bom29 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years following account closure, to meet AML record-keeping obligations. |
| KYC / identity documents | 5 years from the date of submission or from account closure, whichever is later. |
| Transaction records | 5 years from the date of each transaction, in compliance with financial record-keeping requirements. |
| Wagering and game history | 3 years from the date of each wager, or longer where a dispute is pending resolution. |
| Customer support communications | 3 years from the date of each interaction. |
| Marketing consent records | Until consent is withdrawn, plus 2 years thereafter as an audit record. |
| Cookie and analytics data | Up to 13 months from the date of collection, in line with standard analytics retention best practice. |
| Self-exclusion records | Minimum 7 years from the date the exclusion was applied, to prevent circumvention on re-registration. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.
As a data subject, you hold a number of rights in relation to the personal data bom29 processes about you. These rights are described below. To exercise any of these rights, contact the bom29 Data Protection team at with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving a valid request.
Request a copy of all personal data bom29 holds about you, together with details of the processing purposes, data categories, and recipients.
Request correction of any inaccurate or incomplete personal data bom29 holds about you without undue delay.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Legal retention obligations may limit this right.
Request that bom29 restrict processing of your data while a rectification request or objection is pending resolution.
Request that bom29 provide your personal data in a structured, machine-readable format (JSON or CSV) that you can transfer to another service provider.
Object to processing based on legitimate interests or carried out for direct marketing purposes. bom29 will cease processing unless compelling grounds exist to continue.
Identity Verification for Rights Requests: To protect your data from unauthorised access, bom29 will verify your identity before processing any rights request. You may be asked to confirm your registered email address, phone number, and one piece of identity documentation. We will not charge a fee for submitting a rights request in ordinary circumstances.
bom29 uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, remember your preferences, and understand how users interact with our services. The table below describes the categories of cookies in use.
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, and fraud prevention. Without these cookies the platform cannot function. | No — essential to platform operation |
| Functional / Preference | Remembering language preferences, display settings, and responsible gaming tool configurations across sessions. | No — functionally necessary |
| Analytics | Aggregated and anonymised data on page visits, session duration, and feature usage, used to improve platform performance and user experience. | Yes — consent required |
| Marketing / Personalisation | Tracking interactions with promotional content to personalise bonus offers and game recommendations based on your demonstrated interests. | Yes — consent required |
You may manage your cookie preferences at any time through the bom29 Cookie Preference Centre, accessible via the privacy settings within your account dashboard. You may also control cookies at the browser level — most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, delete, and block specific cookies. Please note that blocking strictly necessary cookies will prevent the platform from functioning and may result in you being unable to log in or place wagers.
Third-party analytics cookies used by bom29 are governed by the respective provider's privacy policy in addition to this policy. bom29 does not use third-party advertising cookies or retargeting pixels that track you across external websites.
bom29 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:
Data Breach Notification: In the event of a personal data breach that poses a risk to your rights and interests, bom29 will notify affected users without undue delay — and in any case within 72 hours of becoming aware of the breach — providing details of the nature of the breach, the data affected, and the steps taken to mitigate harm. Notifications will be sent to the email address registered on your account.
Despite these measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the security of your own device and account credentials. bom29 will never ask for your password via email, live chat, or any other channel — any such request should be treated as fraudulent and reported to support immediately.
The bom29 platform is strictly restricted to individuals aged 21 years and over. bom29 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Age verification is an integral part of the registration and KYC process.
If bom29 discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately:
Parents and guardians who believe their child may have accessed or registered on the bom29 platform are encouraged to contact our support team immediately at . bom29 will treat such reports as a priority and respond within 24 hours.
21+ Only: By registering on bom29, you confirm that you are at least 21 years of age. Providing false age information during registration is a serious breach of the bom29 Terms & Conditions and may result in permanent account closure and forfeiture of any balance held on account.
bom29 operates infrastructure and engages service providers located in multiple countries. As a result, your personal data may be transferred to and processed in countries outside Indonesia, including countries whose data protection laws may differ from those applicable in Indonesia.
Where such international transfers occur, bom29 ensures that appropriate safeguards are in place to protect your data, including:
You may request further information about the specific safeguards applied to international transfers of your personal data by contacting with the subject line "International Transfer Inquiry".
The bom29 platform integrates third-party game content, payment gateways, and technology services to deliver a complete gambling experience. While bom29 carefully vets all third-party partners, each third-party service is governed by its own privacy policy in addition to this policy.
Third-party partners whose services are integrated into the bom29 platform include game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment infrastructure providers, and identity verification platforms. None of these third parties are permitted to use your personal data for their own marketing or commercial purposes without your separate, explicit consent.
bom29 does not control the privacy practices of third-party services and is not responsible for any processing carried out by those services outside the scope of their contractual engagement with bom29. Where you interact directly with a third-party service (for example, by navigating to a game studio's own website), any data you provide in that context is subject to the third party's own privacy policy.
No Third-Party Advertising Networks: bom29 does not integrate third-party advertising networks, ad exchanges, or retargeting services that track your browsing behaviour across external websites. Any analytics tools used by bom29 are configured in a privacy-preserving manner with IP anonymisation enabled.
bom29 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made, bom29 will:
Your continued use of the bom29 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you have the right to close your account before the change takes effect by contacting our support team.
We encourage you to review this Privacy Policy periodically. The most current version of this policy is always available at bom29.one/privacy-policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bom29 handles your personal data, please contact us through any of the following channels. All privacy-related inquiries are handled by bom29's Data Protection team and will be acknowledged within 24 hours.
| Channel | Details |
|---|---|
| Email (Privacy) | — subject line: "Privacy Policy Inquiry" |
| Live Chat | Available 24/7 directly from the bom29 platform after login |
| Rights Requests | — subject line: "Privacy Rights Request" |
| Operating Hours | 24 hours / 7 days a week — WIB (UTC+7) |
bom29 will respond to all privacy-related complaints within 30 calendar days. Where a complaint cannot be resolved to your satisfaction through our internal process, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.
These are the six core commitments bom29 makes to every registered player regarding the handling of personal data on our platform.
Every session on bom29 is protected by 256-bit SSL/TLS encryption — the same standard used by Indonesian banks BCA and BRI. Your login credentials, financial data, and personal information are never transmitted in plaintext.
bom29 has never sold player data to advertisers, data brokers, or marketing networks, and we never will. Your information exists solely to operate your account and improve your experience on our platform.
Access, correct, export, or delete your personal data at any time. bom29 processes all data rights requests within 30 days, with identity verification to protect your account from unauthorised third-party requests.
bom29 retains personal data only as long as legally required or operationally necessary. KYC documents are deleted 5 years after account closure. Analytics data is anonymised within 13 months. Nothing is held indefinitely without justification.
In the event of any data breach affecting your personal information, bom29 commits to notifying affected players within 72 hours of detection — well ahead of standard industry timelines — with clear guidance on protective steps to take.
Our Data Protection team is available 24/7 via email, WhatsApp, and live chat to answer privacy questions, process rights requests, and handle data-related complaints — all with native Indonesian-speaking staff on every shift.
Your personal data is secured, never sold, and fully under your control. Ready to enjoy the bom29 platform knowing your privacy is protected?
21+ only. Gambling can be addictive — please play responsibly. See our Responsible Gaming page for support tools and guidance.