Privacy Policy

1. Introduction

bima88 ("we," "us," "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you access or use our online betting platform, including the bima88 website (bima88.cam), mobile-optimized site, and any future native mobile applications (collectively, the "Platform").

By creating an account, depositing funds, or placing any wager on bima88, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein. If you do not agree with any provision of this Privacy Policy, you must discontinue use of the Platform immediately.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. In the event of any conflict between this Privacy Policy and other policies, the terms of this Privacy Policy shall prevail with respect to data protection matters.

2. Data Controller

bima88 operates under an internationally recognized gaming license and is the data controller responsible for the personal information you provide to us. All inquiries regarding data protection, privacy rights, or the handling of your personal information should be directed to:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"

We will respond to all privacy-related inquiries within 72 hours during business days. For urgent data protection concerns, including suspected data breaches or unauthorized access to your account, contact us immediately via the email address above.

3. Information We Collect

bima88 collects several categories of personal information to provide, maintain, and improve our services, comply with legal obligations, and prevent fraud. The information we collect includes:

3.1 Information You Provide Directly

When you register for an account or use our Platform, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, government-issued identification number (Indonesian KTP number, passport number, or driver's license number)
• Contact Information: Email address, phone number (Indonesian mobile number), residential address (street, city, province, postal code)
• Account Credentials: Username, password, security questions and answers
• Financial Information: Bank account details (account number, account holder name, bank name), e-wallet account details (OVO, DANA, GoPay, ShopeePay account identifiers), transaction history
• KYC Verification Documents: Government-issued photo ID (KTP, passport, driver's license), proof of residence (utility bill, bank statement, government correspondence), selfie photographs for identity verification

3.2 Information We Collect Automatically

When you access or use the Platform, we automatically collect certain technical and usage information:

• Device Information: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, device identifiers (advertising ID, device fingerprint)
• Usage Data: Pages visited, time spent on each page, navigation paths, betting history (bets placed, amounts wagered, games played, win/loss records), login and logout timestamps, session duration
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with jurisdictional restrictions and to detect fraudulent activity
• Communication Records: Transcripts or recordings of your interactions with our customer support team (live chat, email, phone), including the content of your inquiries and our responses

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation data, payment method verification, fraud screening results from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, and ShopeePay
• Identity Verification Services: Verification status, document authenticity assessments, fraud alerts from third-party KYC providers
• Responsible Gaming Databases: Self-exclusion status from national or international gambling exclusion registers (if you have voluntarily registered yourself on such databases)

4. How We Use Your Information

bima88 uses your personal information for the following purposes:

4.1 Account Management & Service Delivery

• Create and maintain your user account
• Process deposits, withdrawals, and internal transfers
• Enable you to place bets, play casino games, and participate in promotions
• Verify your identity and age (21+ requirement) to comply with legal and regulatory obligations
• Communicate with you regarding your account, transactions, and service updates

4.2 Security & Fraud Prevention

• Detect, prevent, and investigate fraudulent transactions, account takeovers, bonus abuse, collusion, and other prohibited activities
• Monitor betting patterns and gameplay for signs of problem gambling or match-fixing
• Conduct risk assessments and enhance platform security measures
• Comply with anti-money laundering (AML) and counter-terrorist financing (CTF) regulations

4.3 Customer Support

• Respond to your inquiries, complaints, and support requests
• Provide technical assistance and troubleshooting
• Offer guidance on responsible gaming tools and self-exclusion options

4.4 Marketing & Promotions

• Send you promotional offers, bonus notifications, and newsletters (only if you have opted in to marketing communications)
• Personalize your experience on the Platform by showing relevant game recommendations and offers based on your preferences and betting history
• Conduct surveys and solicit feedback to improve our services

4.5 Legal & Regulatory Compliance

• Comply with legal obligations, including responding to court orders, subpoenas, and regulatory inquiries
• Maintain records required by gaming regulations and financial reporting standards
• Enforce our Terms & Conditions and protect our legal rights

4.6 Platform Improvement & Analytics

• Analyze usage patterns to improve Platform functionality, navigation, and user experience
• Conduct internal research and statistical analysis to develop new products and features
• Test new technologies and optimize performance

5. Legal Basis for Processing

bima88 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms & Conditions, including account creation, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including age verification, KYC requirements, AML/CTF obligations, and gaming license conditions.
• Legitimate Interest: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, customer support, and platform improvement, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, we obtain your explicit consent before processing your data for specific purposes, such as marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. When We Share Your Information

bima88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients under limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals
• KYC & Identity Verification Services: Specialized providers that verify your identity documents and conduct fraud screening
• Cloud Hosting & Infrastructure Providers: Servers and data storage providers that host the Platform and store encrypted backups
• Customer Support Tools: Live chat software, email management platforms, and CRM systems used to deliver customer service
• Game Providers: Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, and other studios that supply live casino and slot games (these providers may collect gameplay data to ensure game integrity)

All service providers are contractually bound to process your data only on our instructions, maintain confidentiality, and implement appropriate security measures.

6.2 Legal & Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, courts, or regulatory bodies when required by law or when we believe disclosure is necessary to:

• Comply with a legal obligation, court order, or subpoena
• Investigate or report suspected illegal activity, including fraud, money laundering, or match-fixing
• Protect the rights, property, or safety of bima88, our users, or the public
• Enforce our Terms & Conditions or defend against legal claims

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with third parties for purposes not covered in this Privacy Policy if we obtain your explicit consent to do so.

7. How We Protect Your Data

bima88 implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Sockets Layer (SSL) technology, the same standard used by banks and financial institutions.
• Secure Data Storage: Personal information is stored on secure servers located in access-controlled data centers with 24/7 monitoring, biometric access controls, and redundant backup systems.
• Data Encryption at Rest: Sensitive data (including passwords, financial information, and identification documents) is encrypted when stored in our databases.
• Regular Security Audits: Independent third-party security firms conduct annual penetration tests and vulnerability assessments of the Platform.
• Access Controls: Employee access to personal data is restricted on a need-to-know basis and subject to role-based permissions. All access is logged and monitored.
• Fraud Detection Systems: Automated monitoring tools detect and flag suspicious activity, including unusual betting patterns, multiple account creation, and unauthorized access attempts.

Despite these measures, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information using commercially acceptable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for all activities that occur under your account.

8. How Long We Keep Your Data

bima88 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal and transactional data is retained for the duration of your active account plus six years after account closure to comply with financial record-keeping regulations and gaming license requirements.
• KYC Documents: Identity verification documents are retained for seven years after account closure to meet AML/CTF compliance obligations.
• Transaction Records: Deposit, withdrawal, and wagering records are retained for ten years to comply with financial auditing requirements.
• Communication Records: Customer support transcripts and emails are retained for three years for quality assurance and dispute resolution purposes.
• Marketing Data: If you opt out of marketing communications, your email address is retained on a suppression list indefinitely to ensure you do not receive future marketing messages.

After the applicable retention period expires, personal information is securely deleted or anonymized such that it can no longer be associated with you as an individual.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights with respect to your personal information:

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To exercise this right, contact us at [email protected] with "Data Access Request" in the subject line. We will provide your data in a structured, commonly used, and machine-readable format (such as CSV or JSON) within 30 days of verification.

9.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you may request correction. You can update most information directly from your account settings, or contact us for assistance with changes that cannot be made via the Platform.

9.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal information under certain circumstances, such as when:

• The information is no longer necessary for the purposes for which it was collected
• You withdraw consent (where consent was the legal basis for processing)
• You object to processing based on legitimate interests and we have no overriding legitimate grounds

Note that we may be required to retain certain information to comply with legal obligations (e.g., financial records, AML/CTF documentation) even after you request deletion. In such cases, we will restrict processing to the minimum necessary for compliance.

9.4 Right to Restrict Processing

You may request that we limit the processing of your personal information under certain conditions, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

You have the right to receive your personal information in a portable format and to transmit it to another data controller where technically feasible.

9.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing communications, we will cease processing your data for that purpose immediately.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

9.8 How to Exercise Your Rights

To exercise any of the above rights, email [email protected] with your request. We may require additional information to verify your identity before processing your request to prevent unauthorized disclosure. We will respond to all verified requests within 30 days. If we are unable to fulfill your request, we will explain why.

10. Cookies & Tracking Technologies

bima88 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly. These cookies enable account login, session management, and secure navigation. They cannot be disabled without severely impairing Platform functionality.
• Performance & Analytics Cookies: Collect information about how you use the Platform, including pages visited, time on site, and navigation paths. This data is aggregated and anonymized to improve user experience.
• Functional Cookies: Remember your preferences (e.g., language settings, display preferences) to provide a more personalized experience.
• Advertising Cookies: Track your browsing activity to deliver relevant promotional offers. These cookies may be set by third-party advertising partners (subject to your consent).

10.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to block all cookies, accept only essential cookies, or notify you when a cookie is set. Note that blocking essential cookies will prevent you from using certain features of the Platform, including logging in and placing bets.

For more information on managing cookies, consult your browser's help documentation:

• Google Chrome: Settings > Privacy and Security > Cookies
• Mozilla Firefox: Preferences > Privacy & Security > Cookies
• Safari: Preferences > Privacy > Cookies
• Microsoft Edge: Settings > Privacy, search, and services > Cookies

11. Children's Privacy

bima88 is an adults-only platform. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that a user is under 21, we will immediately close the account, void all active bets, and return all funds to the original deposit method.

Parents and guardians should monitor their children's online activities and ensure minors do not access gambling platforms. If you believe a minor has created an account on bima88, contact us immediately at [email protected].

12. Changes to This Privacy Policy

bima88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will notify you by:

• Posting a prominent notice on the Platform homepage
• Sending an email to your registered email address
• Displaying an in-app notification upon your next login

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Your continued use of the Platform after we publish or notify you of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you must discontinue use of the Platform and contact us to close your account.

13. Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Concern"

We are committed to working with you to resolve any privacy-related issues. We will investigate all complaints and respond within 72 hours during business days. If you are not satisfied with our response, you may have the right to lodge a complaint with the data protection authority in your jurisdiction.