Privacy Policy — bbo33

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, bbo33.
• "Data Processor" means any third party that processes Personal Data on behalf of bbo33 under a binding contractual arrangement.
• "Member" / "User" / "you" means any individual who has registered an Account or otherwise accesses the bbo33 Platform.
• "Platform" means the bbo33 website at https://bbo33.one and all associated services.
• "KYC" means Know Your Customer — the identity and document verification process required under our compliance obligations.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and personalization.

bbo33 acts as the Data Controller in respect of all Personal Data collected and processed through the Platform. bbo33 is an internationally licensed online gaming operator serving players across Indonesia, including major cities such as Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and beyond.

All data protection inquiries, subject access requests, and complaints should be directed to our Data Protection contact as described in Clause 16 of this Policy. bbo33 takes its data controller responsibilities seriously and maintains internal policies and procedures designed to ensure ongoing compliance with applicable data protection standards.

bbo33 collects the following categories of Personal Data in connection with the operation of the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth — used to verify that you meet the 21+ minimum age requirement.
• Indonesian National Identity Card number (Nomor Induk Kependudukan / NIK), or passport number for non-Indonesian residents.
• Residential address — full street address, city, and postal code.
• Email address — used as your primary login identifier and for account communications.
• Mobile phone number — used for two-factor authentication and critical account notifications.

3.2 Financial Data

• Bank account details (account name, account number, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga) used to process deposits and withdrawals.
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) linked to your Account for payment processing.
• Transaction history, including deposit amounts, withdrawal requests, and account balance movements, all denominated in Indonesian Rupiah (IDR / Rp).

3.3 KYC Verification Documents

• Scanned or photographed copies of your KTP (Kartu Tanda Penduduk) or valid Indonesian passport.
• Proof of address documents such as utility bills or bank statements issued within the past 90 days.
• Source of funds documentation where required for high-volume accounts.

3.4 Behavioral & Technical Data

• IP address, device type, operating system, browser type, and screen resolution collected automatically on each session.
• Geolocation data derived from your IP address (city and country level — bbo33 does not collect GPS-level location data without explicit consent).
• Session logs including login timestamps, pages visited, games played, bet history, and session duration.
• Cookie identifiers and similar tracking technologies as described in Clause 11.

3.5 Communications Data

• Content of messages exchanged with bbo33 customer support, including live chat transcripts and email correspondence.
• Responses to surveys, promotions, or feedback requests where you voluntarily participate.

bbo33 collects Personal Data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through server logs, cookies, pixel tags, and similar technologies when you access or interact with the Platform.
• From third-party payment providers — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) share transaction confirmation data with bbo33 to reconcile deposits and process withdrawals.
• From identity verification services — bbo33 may engage licensed third-party KYC and anti-fraud providers who cross-reference your submitted identity documents against authoritative data sources.
• From game studios and content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may pass game session data (rounds played, outcomes, bet sizes) to bbo33 for account reconciliation and responsible gaming monitoring.

bbo33 processes your Personal Data for the following purposes:

bbo33 will not process your Personal Data for any purpose that is incompatible with the purposes listed above without providing prior notice and, where required, obtaining your fresh consent.

bbo33 processes your Personal Data under one or more of the following legal bases:

• Contractual necessity — processing required to create and manage your Account, authenticate your identity, process financial transactions, and deliver the Services you have requested.
• Legal obligation — processing required to comply with applicable anti-money-laundering (AML) regulations, KYC obligations, age verification requirements, and any lawful demands from competent regulatory or law enforcement authorities.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where those interests are not overridden by your privacy rights.
• Consent — processing for direct marketing communications and non-essential cookies, where you have given a clear, freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

bbo33 does not sell, rent, or trade your Personal Data to third-party marketing organizations under any circumstances. We may share your data with the following categories of recipients strictly to the extent necessary for the stated purpose:

• Payment processors and banking partners — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data required to execute your deposit or withdrawal instruction.
• KYC and identity verification providers — licensed third-party services engaged by bbo33 to verify identity documents and screen against sanctions and politically exposed persons (PEP) lists.
• Game content studios — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive a pseudonymous player identifier to enable game session delivery and RNG audit trails.
• IT and security service providers — cloud hosting, cybersecurity, and fraud monitoring vendors who process data on bbo33's behalf under binding data processing agreements that prohibit any independent use of your data.
• Regulatory and law enforcement authorities — where bbo33 is under a legal obligation or receives a lawful order to disclose Personal Data to a government body, regulator, or law enforcement agency.
• Professional advisers — lawyers, auditors, and insurers, subject to professional confidentiality obligations, where disclosure is necessary to obtain professional advice or defend legal claims.

As an internationally operated platform, bbo33 may transfer your Personal Data to servers, processors, or service providers located outside of Indonesia. Where such transfers occur, bbo33 implements appropriate contractual safeguards to ensure your data receives a standard of protection equivalent to that applied within Indonesia, including:

• Standard contractual clauses (SCCs) incorporated into agreements with all international Data Processors.
• Data processing agreements (DPAs) that bind recipients to confidentiality, security, and purpose-limitation obligations equivalent to those in this Policy.
• Selection of processors in jurisdictions recognized as providing an adequate level of data protection by relevant international standards.

You may request information about the specific safeguards in place for any international transfer of your Personal Data by contacting us at the details provided in Clause 16.

bbo33 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual.

bbo33 employs a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational security measures include:

• 256-bit TLS encryption on all connections between your device and bbo33 servers, ensuring that data in transit cannot be intercepted.
• AES-256 encryption at rest for all sensitive Personal Data and financial records stored on our servers.
• bcrypt password hashing with a high cost factor, ensuring that even in the event of a data breach, stored passwords cannot be reverse-engineered.
• Two-factor authentication (2FA) available to all Members, adding an additional layer of protection to Account login.
• Real-time fraud monitoring using automated anomaly detection systems that flag unusual login behavior, rapid IP changes, and atypical transaction patterns.
• Segregated player funds held in accounts entirely separate from bbo33's operational capital, protecting your balance from any Company financial event.
• Regular penetration testing and security audits conducted by independent cybersecurity professionals on a scheduled basis.
• Role-based access controls (RBAC) ensuring that internal staff access to Personal Data is strictly limited to those with a documented, job-related need.

bbo33 uses cookies and similar technologies (pixel tags, local storage) to operate and improve the Platform. The following cookie categories are used:

You may manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling analytics or marketing cookies will not affect your core gaming experience. bbo33 does not use cookies to serve third-party advertising on external websites.

Subject to applicable law and any overriding legal obligation on bbo33 (such as AML retention requirements), you have the following rights in respect of your Personal Data:

• Right of access — you may request a copy of all Personal Data bbo33 holds about you, along with information about how it is being processed.
• Right to rectification — you may request correction of any inaccurate or incomplete Personal Data. For Account details, many fields can be updated directly via your Account settings.
• Right to erasure ("right to be forgotten") — you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations.
• Right to restriction of processing — you may request that bbo33 suspend processing of your Personal Data in certain circumstances (e.g., while the accuracy of data is contested).
• Right to data portability — you may request receipt of Personal Data you have provided to bbo33 in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact bbo33 as set out in Clause 16. We will respond to verified requests within thirty (30) calendar days. In complex cases, this period may be extended by a further 60 days, and you will be notified of any such extension.

The bbo33 Platform is strictly intended for adults aged 21 years and over. bbo33 does not knowingly collect, process, or retain Personal Data from any individual under the age of 21. Age verification is a mandatory step in the Account registration and KYC process.

If bbo33 becomes aware that Personal Data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated Account will be permanently closed. If you believe a minor has registered an Account on the Platform, please contact us without delay at the details in Clause 16 so that we can investigate and take appropriate action.

The bbo33 Platform may, from time to time, contain references to third-party game studios or payment providers whose products are integrated into the Platform. Where these integrations involve a separate website or application operated by the third party, bbo33 has no control over, and accepts no responsibility for, the privacy practices or content of those third-party environments.

We encourage you to review the privacy policies of any third-party services you access in connection with your use of the bbo33 Platform. This Privacy Policy governs only the data processing carried out by bbo33 directly.

bbo33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where material changes are made, we will notify registered Members by email or via a prominent in-platform notice at least seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms.

For any privacy-related queries, data subject rights requests, or complaints regarding bbo33's handling of your Personal Data, please contact us using the following details:

If you are not satisfied with bbo33's response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to the dispute resolution body specified in bbo33's Terms & Conditions. Please visit our Terms & Conditions page for dispute resolution details.