Privacy Policy

This Privacy Policy ("Policy") describes how bbo308 ("we", "us", "our", "the Company") collects, uses, processes, stores, shares, and protects personal information and data provided by users ("you", "User", "Player") of our online betting platform and services accessible at https://bbo308.cam and related domains (collectively, the "Platform" or "Service"). This Policy applies to all users who access, register for, or interact with bbo308 services in any capacity.

By creating an account on bbo308, using the Platform, providing personal information during registration or identity verification (KYC), or making deposits and placing bets, you acknowledge that you have read, understood, and consent to the collection, use, and processing of your personal data as described in this Privacy Policy. If you do not agree with any aspect of this Policy, you must immediately discontinue use of the Platform and contact Customer Support to request account closure and data deletion in accordance with applicable data protection rights.

1. Information We Collect

bbo308 collects various categories of personal information to provide, maintain, improve, and secure our betting services, comply with legal and regulatory obligations, prevent fraud, and enhance user experience. The types of information we collect include:

1.1 Information You Provide Directly

When you register for an account or use our services, you provide the following information:

• Account Registration Data: Full legal name (as it appears on your Indonesian National ID / KTP), date of birth, gender, email address, mobile phone number, residential address (street, city, province, postal code), and chosen username/password.
• Identity Verification (KYC) Documents: Government-issued identification documents including Indonesian National ID (KTP) showing your photograph, full name, date of birth, ID number, and address; proof of address documents (utility bills, bank statements) dated within the last three months; selfie photographs holding your ID for identity confirmation; and any additional documentation requested for enhanced verification.
• Financial Information: Indonesian bank account details (bank name, account number, account holder name) for deposits and withdrawals; e-wallet account information (OVO, DANA, GoPay account numbers); transaction history including deposit amounts, timestamps, payment methods, withdrawal requests, and processing status.
• Communication Data: Content of messages, emails, live chat transcripts, and other communications you send to Customer Support; feedback, survey responses, and contest entries; complaints, dispute submissions, and resolution correspondence.

1.2 Information Collected Automatically

When you access and use bbo308, we automatically collect technical and usage data:

• Device and Technical Information: IP address, device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (unique device ID, advertising ID), language settings, and time zone.
• Usage and Behavioral Data: Pages visited on the Platform, features used, buttons clicked, time spent on pages, navigation paths through the site, bet placement patterns, game preferences, login timestamps, session duration, and feature interaction frequency.
• Location Data: Geolocation information derived from IP address to verify you are accessing the Platform from within Indonesian territory, as required by our Terms and Conditions. We use geolocation to comply with jurisdictional restrictions and prevent access from prohibited regions.
• Betting and Gaming Data: Complete history of bets placed including sport/game selected, stake amounts, odds, bet types, win/loss outcomes, payout amounts, active bonus usage, wagering requirement progress, and responsible gaming tool settings (deposit limits, session time limits, self-exclusion status).

1.3 Information from Third Parties

We may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) confirming successful deposits and withdrawals.
• Identity Verification Services: Third-party KYC verification providers that validate the authenticity of identity documents, cross-check data against government databases, and perform anti-fraud screening.
• Fraud Prevention Services: Information from fraud detection and prevention partners that screen for suspicious activity, identify duplicate accounts, detect payment fraud, and monitor for money laundering patterns.

2. How We Use Your Information

bbo308 uses the personal information we collect for the following purposes, all of which are necessary for providing betting services, complying with legal obligations, and protecting legitimate business interests:

2.1 Service Provision and Account Management

• Creating, maintaining, and managing your bbo308 account and user profile.
• Processing your identity verification (KYC) to comply with anti-money laundering (AML) regulations and confirm you meet eligibility requirements (21+ years of age, Indonesian residency).
• Processing deposits, withdrawals, and other financial transactions through Indonesian banks and e-wallets.
• Recording and settling bets placed on sports events (bandar bola / football betting, basketball, badminton, etc.), casino games, slots, and other betting markets offered on the Platform.
• Calculating and crediting winnings to your account balance; applying bonuses, promotions, and loyalty rewards according to published terms.
• Providing customer support via email ([email protected]), live chat, and WhatsApp; responding to inquiries, resolving technical issues, and addressing complaints.

2.2 Security, Fraud Prevention, and Compliance

• Monitoring account activity to detect and prevent fraudulent transactions, unauthorized access, identity theft, money laundering, bonus abuse, and other prohibited activities.
• Verifying user identity and payment source ownership to prevent third-party fraud and ensure withdrawals are paid to legitimate account holders.
• Enforcing Terms and Conditions including detecting duplicate accounts (multi-accounting), coordinated betting patterns (syndicate betting), use of automated betting software (bots), and other Terms violations.
• Complying with Indonesian legal and regulatory obligations including age verification, responsible gaming requirements, anti-money laundering (AML) reporting, and cooperation with law enforcement investigations when legally compelled.
• Protecting the security and integrity of the Platform against cyber attacks, hacking attempts, DDoS attacks, data breaches, and other security threats.

2.3 Service Improvement and Personalization

• Analyzing usage patterns, betting behavior, and user preferences to improve Platform functionality, optimize user interface design, and develop new features tailored for Indonesian players.
• Personalizing user experience by displaying relevant betting markets (BRI Liga 1, EPL, La Liga, Champions League), game recommendations based on playing history, and promotions aligned with user interests.
• Conducting internal research and analytics to understand Indonesian market trends, popular betting categories, peak usage times (aligned with WIB timezone), and demographic patterns.
• Testing new features, conducting A/B testing on interface elements, and gathering user feedback to enhance service quality.

2.4 Marketing and Communication

• Sending promotional emails, SMS messages, and in-app notifications about bonuses, special offers, new game releases, and seasonal promotions (aligned with Indonesian cultural events like Independence Day 17 August, Idul Fitri, Chinese New Year / Imlek).
• Delivering transactional communications including account registration confirmation, deposit receipts, withdrawal confirmations, bonus activation notices, KYC status updates, and responsible gaming alerts.
• Providing important service announcements regarding Terms updates, scheduled maintenance, feature changes, or security notices.

Marketing Opt-Out: You may opt out of promotional marketing communications at any time by clicking "Unsubscribe" in emails, replying STOP to SMS messages, or adjusting notification preferences in your account settings. Transactional and service-related communications cannot be opted out as they are essential for account operation.

3. Legal Basis for Processing

Under applicable data protection principles, bbo308 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms and Conditions), including account creation, bet processing, payment transactions, and customer support.
• Legal Obligation: Processing is required to comply with Indonesian laws and regulations, including age verification requirements (21+ enforcement), anti-money laundering (AML) obligations, KYC compliance, tax reporting, and cooperation with lawful government requests.
• Legitimate Business Interests: Processing is necessary for our legitimate interests in operating a secure, efficient betting platform, preventing fraud, enforcing Terms, improving services, and conducting marketing, provided these interests do not override your fundamental privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing sensitive data or sending marketing communications. You may withdraw consent at any time, though this may affect your ability to use certain Platform features.

4. Information Sharing and Disclosure

bbo308 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your information only in the following limited circumstances:

4.1 Service Providers and Business Partners

• Payment Processors: We share necessary financial information with Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals. These providers are contractually obligated to handle your data securely and only for transaction processing purposes.
• Identity Verification Providers: We share KYC documents with third-party verification services that authenticate Indonesian National IDs (KTP), validate address proof documents, and screen against fraud databases. These providers operate under strict confidentiality agreements.
• Cloud Hosting and Infrastructure: Your data is stored on secure cloud servers provided by reputable infrastructure partners with data centers meeting international security standards. All data transmission is encrypted.
• Customer Support Tools: We use customer relationship management (CRM) and live chat software providers to deliver support services. Support agents access only the information necessary to resolve your inquiries.
• Analytics and Marketing Services: We share anonymized, aggregated usage data (not personally identifiable) with analytics providers to measure Platform performance, understand user behavior patterns, and optimize marketing campaigns.

4.2 Legal and Regulatory Disclosure

We may disclose your personal information when legally required or necessary to:

• Comply with valid legal processes including court orders, subpoenas, search warrants, or government information requests from Indonesian authorities.
• Enforce our Terms and Conditions, investigate suspected Terms violations, and protect against fraud, abuse, or illegal activity.
• Protect the rights, property, and safety of bbo308, our users, and the public, including in emergency situations involving potential harm to individuals.
• Respond to lawful requests from regulatory bodies, tax authorities, or law enforcement agencies conducting investigations related to money laundering, fraud, or criminal activity.

4.3 Business Transfers

In the event bbo308 is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred to the acquiring entity. You will be notified via email and Platform notice of any such change in ownership and given the opportunity to delete your account if you object to the transfer.

5. Data Security Measures

bbo308 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

5.1 Technical Safeguards

• Encryption: All data transmission between your device and our servers is protected using industry-standard SSL/TLS encryption (minimum 256-bit). Sensitive data at rest (stored on servers) is encrypted using advanced encryption algorithms.
• Secure Infrastructure: Our Platform operates on secure cloud infrastructure with redundant systems, regular security patching, intrusion detection systems, firewalls, and DDoS protection.
• Access Controls: Personal data is accessible only to authorized employees and contractors who require access to perform their job functions. Access is granted on a need-to-know basis with role-based permissions and multi-factor authentication for administrative accounts.
• Regular Security Audits: We conduct periodic security assessments, vulnerability testing, penetration testing, and code reviews to identify and remediate potential security risks.

5.2 Data Protection Practices

• All employees and contractors with access to personal data are bound by confidentiality agreements and receive data protection training.
• We maintain detailed logs of data access and processing activities for audit purposes.
• Payment card information (if used) is never stored on our servers; all payment processing is handled through PCI-DSS compliant payment gateways.
• We implement data minimization principles, collecting only information necessary for stated purposes and deleting data when no longer required.

5.3 User Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Use strong, unique passwords combining uppercase, lowercase, numbers, and special characters. Never reuse passwords from other websites.
• Enable two-factor authentication (2FA) when available for additional login security.
• Never share your login credentials with anyone or allow others to access your account.
• Avoid accessing your account on public Wi-Fi networks or shared computers.
• Immediately notify Customer Support if you suspect unauthorized account access or security compromise.

6. Data Retention Periods

bbo308 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

Data Category	Retention Period	Reason
Account Information	Duration of account + 7 years after closure	Legal compliance, dispute resolution, fraud prevention
KYC Documents	7 years after last transaction	Anti-money laundering (AML) regulations, Indonesian law
Transaction History	7 years after transaction date	Tax reporting, financial audits, legal requirements
Betting Records	7 years after bet settlement	Dispute resolution, regulatory compliance, integrity monitoring
Communication Records	3 years after communication	Customer support quality, dispute evidence, training
Marketing Consent	Until withdrawn or 2 years of inactivity	Respect user preferences, manage opt-out requests
Website Analytics	26 months	Performance measurement, service improvement

After retention periods expire, personal data is securely deleted or anonymized so it can no longer identify you. Some anonymized, aggregated data may be retained indefinitely for statistical analysis and business intelligence purposes.

7. Cookies and Tracking Technologies

bbo308 uses cookies and similar tracking technologies to enhance user experience, maintain session security, analyze Platform usage, and deliver personalized content. Cookies are small text files stored on your device that remember preferences and enable functionality.

7.1 Types of Cookies We Use

• Essential Cookies: Necessary for Platform operation, including session management, login authentication, security features, and bet placement functionality. These cannot be disabled as the Platform would not function without them.
• Performance Cookies: Collect anonymous data on how users interact with the Platform, which pages are visited, error messages encountered, and loading times. Used to identify technical issues and improve performance.
• Functional Cookies: Remember your preferences such as language settings, preferred odds format, favorite betting markets, and customized dashboard layout to personalize your experience.
• Analytics Cookies: Track aggregated usage patterns, traffic sources, user demographics (age range, location), and conversion funnels to measure marketing effectiveness and guide product development.
• Marketing Cookies: Enable targeted advertising and promotional offers based on browsing behavior and betting interests. Used to deliver relevant bonus offers and game recommendations.

7.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to refuse all cookies or accept only certain types. Note that disabling essential cookies will prevent you from using core Platform features including login and bet placement. Disabling other cookie types may reduce functionality and personalization but will not prevent basic Platform use.

8. Your Privacy Rights

Under applicable data protection principles and Indonesian privacy norms, you have the following rights regarding your personal information:

• Right to Access: Request a copy of all personal data we hold about you, including account information, transaction history, betting records, and KYC documents. We will provide this in a structured, commonly used format within 30 days of request.
• Right to Correction: Request correction of inaccurate or incomplete personal information. Update your profile details directly through account settings or contact Customer Support for KYC document updates.
• Right to Deletion: Request deletion of your personal data when it is no longer necessary for the purposes collected, subject to legal retention requirements. Note that we must retain certain data for 7 years to comply with Indonesian AML and tax regulations.
• Right to Restriction: Request that we limit processing of your personal data in certain circumstances, such as while disputing data accuracy or during investigation of suspected Terms violations.
• Right to Data Portability: Request transfer of your personal data to another service provider in a machine-readable format where technically feasible.
• Right to Object: Object to processing of your personal data for direct marketing purposes (opt out of promotional communications) or for legitimate business interests where you have compelling grounds.
• Right to Withdraw Consent: Withdraw previously given consent for data processing at any time, without affecting the lawfulness of processing prior to withdrawal.

Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your request. Include your full name, account username, and registered email address. We will respond within 30 days. We may request additional identification verification to prevent fraudulent data access requests.

9. International Data Transfers

bbo308 operates primarily to serve the Indonesian market. However, some of our service providers (cloud hosting, payment processors, security vendors) may be located outside Indonesia. When personal data is transferred internationally, we ensure appropriate safeguards are in place including:

• Contractual data protection clauses requiring foreign processors to maintain Indonesian-equivalent data security standards.
• Selection of service providers that comply with internationally recognized data protection frameworks.
• Encryption of data in transit and at rest when stored on international servers.
• Regular audits of international partners' data protection practices.

By using bbo308, you consent to such international data transfers when necessary for service provision, subject to the protections described above.

10. Children's Privacy

bbo308 services are strictly restricted to individuals 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If we discover that a user is underage, we will immediately:

• Suspend the account and prevent further access.
• Void all bets placed and return deposits to the source payment method (after deducting any winnings obtained through fraudulent registration).
• Delete all personal information associated with the underage account from our systems, except where retention is required for legal compliance or fraud investigation.
• Report the incident to Indonesian authorities if required by law.

If you believe a minor has accessed bbo308 services or provided personal information, immediately contact [email protected] so we can take corrective action.

11. Changes to This Privacy Policy

bbo308 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes that significantly affect how we collect, use, or share personal information, we will:

• Update the "Last Updated" date at the top of this Policy.
• Notify you via email to your registered email address at least 30 days before changes take effect (for material changes only).
• Display a prominent notice on the Platform homepage and in your account dashboard.
• Request explicit consent where required by law for new processing purposes.

Continued use of bbo308 services after Privacy Policy changes become effective constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or how bbo308 handles your personal information, please contact us through the following channels:

• Data Protection Officer: [email protected]
• General Inquiries: [email protected]
• Live Chat: Available 24/7 through the Platform interface
• WhatsApp: +62 812 3456 7890 (WIB business hours)

Our Data Protection team typically responds to privacy inquiries within 48 hours for general questions and within 30 days for formal data access requests or rights exercise requests. We take all privacy concerns seriously and will work diligently to address your questions and resolve any issues.