Privacy Policy

1. Privacy Policy Overview and Commitment

At bbo33, we recognize that trust is the foundation of our relationship with Indonesian gaming enthusiasts. We handle your personal data with the utmost care, transparency, and respect for your privacy rights. This Privacy Policy applies to all personal information collected through our website, mobile applications, customer support interactions, payment processing systems, and any other touchpoints where you engage with bbo33 services.

We collect and process personal information solely for legitimate business purposes including account management, payment processing, fraud prevention, regulatory compliance, customer support, service improvement, and personalized user experience. We do not sell, rent, or trade your personal information to third parties for marketing purposes. Our data protection practices comply with international standards including principles established by the General Data Protection Regulation (GDPR) framework, adapted for Indonesian market context where applicable.

Key Privacy Principles at bbo33:

• Transparency: We clearly communicate what data we collect, why we collect it, and how we use it.
• Purpose Limitation: We collect only data necessary for specific, legitimate purposes and do not process it in ways incompatible with those purposes.
• Data Minimization: We limit data collection to what is adequate, relevant, and necessary for our stated purposes.
• Accuracy: We maintain accurate and up-to-date records and provide means for you to correct inaccurate information.
• Storage Limitation: We retain personal data only as long as necessary for legitimate purposes or as required by law.
• Security: We implement robust technical and organizational measures to protect your data against unauthorized access, loss, or misuse.
• Accountability: We take responsibility for compliance with data protection principles and demonstrate our commitment through regular audits and reviews.

2. Information We Collect

bbo33 collects several categories of personal information necessary to provide secure, compliant, and personalized gaming services to Indonesian players. The specific data we collect depends on how you interact with our platform.

2.1 Information You Provide Directly

Account Registration Data: When you create a bbo33 account, we collect:

• Full legal name (as appears on government-issued identification)
• Date of birth (to verify you are at least 21 years of age)
• Email address (for account communications and notifications)
• Mobile phone number (for account verification and security alerts)
• Residential address (street address, city, postal code, country)
• Username and password (securely hashed and encrypted)
• Preferred currency (Indonesian Rupiah - IDR)
• Security questions and answers (for account recovery)

Know Your Customer (KYC) Verification Documents: To comply with anti-money laundering regulations and verify your identity, we collect:

• Government-issued identification (KTP - Kartu Tanda Penduduk for Indonesian residents, passport, or driver's license) showing photograph, full name, date of birth, ID number, issue date, and expiry date
• Proof of address documents (utility bills, bank statements, government correspondence) dated within last three months
• Payment method verification (photographs of bank cards with middle digits obscured, bank account statements showing account holder name and account number, e-wallet account screenshots)
• Selfie photographs holding identification document for facial verification (optional enhanced security measure)

Payment and Financial Information: When processing deposits and withdrawals, we collect:

• Bank account details (bank name, account holder name, account number) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI
• E-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers and registered names)
• Transaction history (deposits, withdrawals, transaction amounts, timestamps, payment method used)
• Source of funds documentation (for large transactions or unusual activity patterns as required by anti-money laundering procedures)

Customer Support Communications: When you contact our support team, we collect:

• Support ticket content (your questions, concerns, complaints, and our responses)
• Email correspondence with customer service
• Live chat transcripts
• WhatsApp message history (if you contact us via WhatsApp support)
• Phone call recordings (with your consent, for quality assurance and training purposes)
• Screenshots or attachments you provide to illustrate issues

2.2 Information Collected Automatically

Gaming Activity and Behavior Data: We automatically log your gaming activity including:

• Bet history (sports bets, casino game sessions, slot spins) including stake amounts, odds, outcomes, timestamps
• Game preferences and favorite games
• Win and loss statistics
• Bonus claim history and wagering progress
• Session duration and frequency
• Navigation patterns within the platform
• Responsible gaming tool usage (deposit limits, loss limits, self-exclusion settings)

Technical and Device Information: When you access bbo33, we automatically collect:

• IP address (used for fraud detection, geographic verification, and security monitoring)
• Device type (smartphone, tablet, desktop computer)
• Operating system (Android, iOS, Windows, macOS) and version
• Browser type (Chrome, Firefox, Safari, Edge) and version
• Screen resolution and device identifiers
• Mobile network information (carrier name, connection type)
• Time zone and language settings
• Referring website or source (how you found bbo33)
• Access times and session duration

Location Data: We collect general geographic location information through:

• IP address geolocation (approximate city and country level, not precise GPS coordinates)
• Mobile device location services (only if you explicitly enable location permissions)
• This data helps us verify you are accessing services from permitted jurisdictions and detect fraudulent access attempts

2.3 Information from Third-Party Sources

In limited circumstances, we may receive information about you from third parties including:

• Payment Processors: Confirmation of successful transactions, payment method validity, chargeback notifications
• Identity Verification Services: Automated identity verification results, document authenticity checks, facial recognition match scores
• Fraud Prevention Services: Risk scores, blacklist checks, device fingerprinting data, known fraud patterns
• Responsible Gaming Databases: Self-exclusion registrations from national or international problem gambling databases (to prevent account creation by excluded individuals)

3. How We Use Your Personal Information

bbo33 uses collected personal information for specific, legitimate purposes that enable us to deliver secure, compliant, and personalized gaming services. Each data processing activity has a clear legal basis under data protection law.

3.1 Account Management and Service Delivery

• Account Creation and Authentication: Setting up your user account, verifying your credentials, enabling secure login, and maintaining account access.
• Processing Transactions: Executing deposits, withdrawals, and internal fund transfers; maintaining accurate account balance records; generating transaction history.
• Game Participation: Allowing you to place bets on sports events, play casino games, slots, and specialty markets; settling bets; crediting winnings; calculating RTP and statistics.
• Bonus and Promotion Management: Determining bonus eligibility, tracking wagering requirements, applying promotional offers, enforcing bonus terms.
• Customer Support: Responding to inquiries, resolving disputes, investigating complaints, providing technical assistance, offering gaming guidance.

3.2 Legal and Regulatory Compliance

• Age Verification: Confirming you are at least 21 years old to prevent underage gambling.
• Identity Verification (KYC): Verifying you are who you claim to be, preventing identity theft and account fraud.
• Anti-Money Laundering (AML): Monitoring transactions for suspicious patterns, reporting unusual activity to financial intelligence units, maintaining transaction records as required by law.
• Responsible Gaming: Monitoring gaming behavior for signs of problem gambling, enforcing self-imposed limits, facilitating self-exclusion, providing access to support resources.
• Tax Compliance: Generating tax documentation, reporting large wins or transactions to tax authorities as required by Indonesian tax law.
• Regulatory Reporting: Providing information to licensing authorities, gaming regulators, and law enforcement agencies when legally required.

3.3 Security and Fraud Prevention

• Fraud Detection: Identifying suspicious activity patterns, detecting multiple accounts, preventing bonus abuse, identifying collusion or cheating.
• Account Security: Monitoring unusual login attempts, detecting account takeover attempts, enabling two-factor authentication, alerting you to suspicious account activity.
• Payment Fraud Prevention: Verifying payment method ownership, detecting stolen card usage, preventing chargeback fraud.
• Platform Security: Protecting against DDoS attacks, SQL injection, cross-site scripting, and other technical threats; maintaining system integrity.

3.4 Service Improvement and Personalization

• User Experience Optimization: Analyzing how you use the platform, identifying pain points, improving navigation, streamlining processes.
• Game Recommendation: Suggesting games based on your preferences and playing history (with your consent for personalized recommendations).
• Platform Performance: Monitoring load times, identifying technical issues, optimizing mobile experience, improving overall platform speed and reliability.
• Product Development: Understanding user needs, prioritizing new features, testing new game integrations, developing better payment options.

3.5 Communications

• Essential Service Communications: Sending account verification emails, withdrawal confirmations, security alerts, terms and conditions updates, responsible gaming notifications (these communications are mandatory and cannot be opted out).
• Promotional Communications: Informing you about new bonuses, special offers, tournaments, and platform updates (you can opt out of promotional emails via account settings or unsubscribe links).
• Customer Feedback: Requesting satisfaction surveys, soliciting product improvement suggestions, gathering testimonials (always optional participation).

4. How We Share Your Information

bbo33 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances, always with appropriate safeguards in place:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf. These parties have access to personal information only as needed to perform their functions and are contractually obligated to maintain confidentiality and security. Service providers include:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment gateway services that process deposits and withdrawals.
• Identity Verification Services: Third-party KYC/AML verification providers that authenticate identification documents and perform background checks.
• Game Providers: Software providers supplying casino games, live dealer tables, and slot games who may receive limited data to facilitate gameplay and settle bets.
• Customer Support Platforms: Live chat software, helpdesk ticketing systems, and customer relationship management (CRM) tools.
• Marketing and Analytics Services: Analytics platforms (with anonymized or aggregated data) to understand user behavior and improve services.
• Cloud Infrastructure Providers: Hosting services, data storage providers, and content delivery networks (CDNs) that store and deliver platform content.
• Security Services: Fraud detection systems, cybersecurity monitoring tools, and DDoS protection services.

4.2 Legal Requirements and Law Enforcement

We may disclose personal information when required by law or when we believe disclosure is necessary to:

• Comply with legal process, court orders, subpoenas, or government requests
• Enforce our Terms and Conditions or other agreements
• Protect the rights, property, or safety of bbo33, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Respond to claims that content violates the rights of third parties
• Report suspicious transactions to financial intelligence units or anti-money laundering authorities
• Cooperate with gambling regulators, licensing authorities, or law enforcement investigations

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction involving bbo33, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent notice on our platform before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for purposes not described in this Privacy Policy with your explicit informed consent. For example, if you opt in to participate in third-party promotions, marketing programs, or research studies, we will clearly explain what information will be shared and with whom before obtaining your consent.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. For example, we might publish industry reports about betting trends in Indonesia, average withdrawal times, or popular game categories without revealing individual user information.

5. Data Security Measures

bbo33 implements comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. While no system can guarantee absolute security, we employ industry-leading practices to safeguard your data.

5.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by banks for online banking.
• Encrypted Data Storage: Sensitive personal information including passwords, financial details, and identification documents are encrypted at rest using AES-256 encryption.
• Password Security: Passwords are hashed using bcrypt or similar one-way cryptographic algorithms, meaning even bbo33 staff cannot see your actual password.
• Firewall Protection: Multiple layers of firewalls protect our systems from unauthorized external access.
• Intrusion Detection: Real-time monitoring systems detect and respond to potential security threats, unauthorized access attempts, and unusual activity patterns.
• Secure Development: Our platform is built following secure coding practices with regular code reviews, vulnerability scanning, and penetration testing.
• DDoS Protection: Advanced distributed denial-of-service attack mitigation ensures platform availability even during malicious traffic floods.

5.2 Access Controls and Authentication

• Least Privilege Principle: Employees and contractors have access only to personal information necessary for their specific job functions.
• Multi-Factor Authentication: Staff accessing sensitive systems must use two-factor authentication.
• User Authentication: Optional two-factor authentication (2FA) available for user accounts via SMS or authenticator apps.
• Session Management: Automatic logout after inactivity periods, secure session tokens, and protection against session hijacking.
• IP Whitelisting: Administrative access restricted to specific IP addresses.

5.3 Organizational Security Measures

• Data Protection Officer: Designated DPO responsible for overseeing data protection strategy and compliance.
• Employee Training: Regular security awareness training for all staff covering phishing prevention, social engineering, data handling procedures, and privacy obligations.
• Confidentiality Agreements: All employees, contractors, and service providers sign strict confidentiality agreements.
• Background Checks: Comprehensive background verification for staff with access to sensitive data.
• Incident Response Plan: Documented procedures for identifying, containing, and responding to data breaches or security incidents.
• Regular Audits: Periodic internal and third-party security audits to identify vulnerabilities and ensure compliance.

5.4 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, bbo33 will:

• Investigate the incident immediately to determine scope and impact
• Take measures to contain the breach and prevent further unauthorized access
• Notify affected users via email within 72 hours of discovering the breach
• Report the breach to relevant authorities as required by applicable data protection laws
• Provide guidance on steps you can take to protect yourself (e.g., password changes, fraud monitoring)
• Conduct post-incident review to improve security measures and prevent future occurrences

6. Data Retention and Deletion

bbo33 retains personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on data type and applicable legal requirements.

Data Category	Retention Period	Rationale
Account Information	Duration of account + 7 years after closure	AML/KYC compliance, regulatory requirements, dispute resolution
Transaction Records	7 years from transaction date	Financial record-keeping laws, tax compliance, audit requirements
Betting History	7 years from bet settlement	Regulatory compliance, dispute resolution, responsible gaming monitoring
KYC Documents	7 years after account closure	AML regulations, identity verification records, legal obligations
Support Communications	3 years from last contact	Customer service quality, dispute resolution, legal defense
Marketing Preferences	Until you opt out or account closure	Consent management, compliance with marketing regulations
Technical Logs	12 months	Security monitoring, fraud detection, technical troubleshooting
Responsible Gaming Data	Duration of exclusion + 7 years	Player protection, regulatory requirements, preventing circumvention

6.1 Account Closure and Data Deletion

When you close your bbo33 account:

• Your account is deactivated and you can no longer access platform services
• Marketing communications cease immediately
• Non-essential personal data may be anonymized or deleted after regulatory retention periods
• Transaction records, KYC documents, and other compliance-related data are retained for required legal periods (typically 7 years)
• You may request full data deletion after all legal retention obligations expire

7. Your Privacy Rights

bbo33 respects your data protection rights and provides mechanisms to exercise them. Depending on your jurisdiction, you may have some or all of the following rights:

7.1 Right to Access

You have the right to request confirmation of whether we process your personal data and obtain a copy of the personal information we hold about you. You can access much of your data directly through your account dashboard, or request a comprehensive data export by contacting [email protected].

7.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update your email address, phone number, and residential address directly in account settings. For KYC document corrections, contact customer support with updated documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when it is no longer necessary for the purposes it was collected, when you withdraw consent (for consent-based processing), or when data has been unlawfully processed. However, we may retain data where legally required for compliance, dispute resolution, or legitimate business purposes.

7.4 Right to Restrict Processing

You can request that we restrict processing of your personal data in certain circumstances, such as when you contest data accuracy, when processing is unlawful but you prefer restriction over deletion, or when you need data preserved for legal claims.

7.5 Right to Data Portability

For personal data processed based on your consent or for contract performance, you have the right to receive your data in a structured, commonly used, machine-readable format and request transfer to another service provider where technically feasible.

7.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time (opt out of promotional emails via account settings or unsubscribe links). You may also object to processing based on legitimate interests grounds in certain circumstances.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. Note that some processing is necessary for contract performance or legal compliance and cannot be opted out.

7.8 Right to Lodge a Complaint

If you believe we have mishandled your personal data, you have the right to lodge a complaint with your local data protection authority or supervisory body.

7.9 Exercising Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected] with subject line "Privacy Rights Request"
• Include: Your full name, account username, registered email address, and specific right(s) you wish to exercise
• Verification: We may require additional verification (e.g., answering security questions) to confirm your identity before processing requests
• Response Time: We will respond to verified requests within 30 days of receipt

8. Cookies and Tracking Technologies

bbo33 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on return visits.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality including login authentication, session management, security features. These cannot be disabled without impacting core services.
• Performance Cookies: Collect anonymous information about how you use our platform, helping us identify errors and improve performance.
• Functionality Cookies: Remember your preferences (language, currency, username) to provide enhanced personalized features.
• Analytics Cookies: Understand visitor behavior patterns, popular content, navigation paths. We use this data to optimize user experience.

8.2 Managing Cookie Preferences

Most browsers allow you to control cookies through settings. You can block cookies entirely, delete existing cookies, or receive notifications before cookies are stored. Note that disabling essential cookies will prevent you from using bbo33 services. For detailed cookie management instructions, consult your browser's help documentation.

9. Changes to This Privacy Policy

bbo33 reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify you through:

• Email notification to your registered email address
• Prominent notice on the platform homepage
• In-app notification upon next login

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this document indicates when changes were last made. Your continued use of bbo33 services after changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, you must discontinue use and may close your account.

10. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
• 24/7 Live Chat: Available through your account dashboard after login
• Response Time: We aim to respond to privacy inquiries within 48 hours

Our Indonesian-speaking customer support team is trained in data protection principles and can assist with privacy-related questions, data access requests, correction requests, and consent management.