bata88 Privacy Policy

1. Definitions

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "bata88," "we," "us," or "our" refers to the online betting platform operating under the domain bata88.cam and all affiliated services.
• "User," "you," or "your" refers to any individual who accesses, registers for, or uses the bata88 platform, including visitors who have not registered an account.
• "Personal Data" means any information that identifies or could be used to identify you as a natural person, either directly (e.g., full name, KTP number) or indirectly (e.g., device fingerprint combined with behavioral data).
• "Processing" refers to any operation performed on Personal Data, including collection, storage, use, disclosure, modification, or deletion.
• "KYC" refers to Know Your Customer verification, the mandatory identity verification process required before withdrawals are processed on bata88.
• "Cookies" refers to small text files stored on your device by your web browser when you visit bata88, used to remember preferences and analyze usage patterns.
• "Third-Party Service Providers" refers to payment processors (e.g., BCA, BRI, OVO, GoPay), fraud detection services, analytics platforms, and technical infrastructure providers that process data on our behalf under strict contractual obligations.

2. Data Controller Identity

bata88, operating via bata88.cam, is the data controller responsible for your Personal Data. We determine the purposes and means of processing your Personal Data in connection with the provision of our online betting and gaming services to Indonesian players.

If you have questions or concerns about how bata88 handles your Personal Data, or if you wish to exercise any of your privacy rights, please contact our Data Protection team at:

• Email: [email protected]
• Live Chat: Available 24/7 via your bata88 account dashboard

3. Data We Collect

3.1 Registration Data

When you create a bata88 account, we collect the following information:

• Full legal name (as it appears on your Indonesian KTP)
• Date of birth (to verify you are 21 years of age or older)
• Residential address in Indonesia
• Email address
• Indonesian mobile phone number
• Chosen username and encrypted password

3.2 KYC Verification Data

To comply with anti-money-laundering (AML) regulations and to process withdrawals, we collect:

• Photograph of your Indonesian National Identity Card (KTP)
• Proof of residential address (utility bill, bank statement, or government document issued within 3 months)
• Selfie photograph of you holding your KTP
• For higher withdrawal limits: bank account details in your name (BCA, BRI, BNI, Mandiri, or other supported Indonesian banks)

3.3 Financial Data

We collect financial transaction data necessary to process your deposits and withdrawals, including:

• Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction amounts in Indonesian Rupiah (IDR)
• Transaction timestamps and reference numbers

bata88 does not store full credit card numbers. All payment data is processed by PCI-DSS-compliant third-party payment processors.

3.4 Gaming Activity Data

We record your activity on the bata88 platform to maintain account integrity and service quality:

• Bet history (sports bets, casino wagers, togel lottery tickets, sabung ayam cockfighting wagers)
• Game session durations and frequencies
• Bonus claims and wagering progress
• Win/loss records
• Responsible gaming tool usage (deposit limits, time-out settings)

3.5 Technical and Device Data

When you access bata88, we automatically collect certain technical information:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session logs, page views, and click events
• Cookie identifiers and session tokens

4. How We Collect Your Data

bata88 collects your Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact customer support, or submit feedback.
• Automatically via technology: Through cookies, server logs, and tracking pixels when you browse the bata88 website or mobile application.
• From payment processors: Transaction confirmation data from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment partners.
• From fraud prevention services: Risk score assessments and IP reputation data to protect your account from unauthorized access.

5. How We Use Your Data

bata88 uses your Personal Data for the following specific purposes:

6. Legal Basis for Processing

bata88 processes your Personal Data under one or more of the following legal bases:

• Contract Performance: Processing necessary to provide the services you have contracted for when registering an account (account management, deposits, withdrawals, bet settlement).
• Legal Obligation: Processing required to comply with applicable laws and international regulations, including anti-money-laundering (AML) requirements, identity verification mandates, and responsible gaming obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, service analytics, and responsible gaming monitoring — where our legitimate business interests do not override your privacy rights.
• Consent: For optional data uses such as promotional email communications. You may withdraw your consent at any time by contacting [email protected].

7. Data Sharing and Disclosure

bata88 does not sell your Personal Data to any third party. We may share your data in the following limited, controlled circumstances:

7.1 Payment Processors

We share the minimum necessary financial data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposit and withdrawal transactions. These providers process data solely to complete your requested transactions.

7.2 KYC and Fraud Prevention Partners

To verify your identity and prevent fraud, we may share your KYC documents with trusted third-party identity verification service providers. These partners operate under strict confidentiality agreements and are prohibited from using your data for any purpose other than identity verification.

7.3 Legal and Regulatory Disclosures

bata88 may disclose your Personal Data if required to do so by law, court order, or in response to a valid request from a government or law enforcement authority with appropriate jurisdiction, particularly in connection with anti- money-laundering investigations or fraud inquiries.

7.4 Technical Infrastructure Providers

We use third-party hosting, analytics, and infrastructure providers who may process technical data (IP addresses, session logs) on our behalf. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to bata88.

8. Data Retention

bata88 retains your Personal Data for as long as is necessary to fulfill the purposes described in this Privacy Policy, and in accordance with applicable legal and regulatory requirements:

• Active Account Data: Retained for the duration of your account's existence on bata88.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure, as required by international anti-money-laundering regulations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Customer Support Correspondence: Retained for 3 years from the date of the interaction.
• Marketing Consent Records: Retained for 3 years from the date consent was given or withdrawn.
• Technical Logs (server/IP logs): Retained for 12 months, then anonymized or deleted.

When your data is no longer required, it is securely deleted or anonymized so that it can no longer be linked to your identity. You may request early deletion of certain data categories (see Section 10 — Your Privacy Rights), subject to our legal retention obligations.

9. Data Security Measures

bata88 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in Transit: All communications between your device and bata88 servers are encrypted using 256-bit TLS/SSL protocols.
• Encryption at Rest: Sensitive data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Personal Data is accessible only to bata88 personnel with a genuine need to access it for service delivery. Role-based access controls and multi-factor authentication are enforced for all staff accounts.
• Regular Security Audits: We conduct periodic penetration tests and vulnerability assessments conducted by independent cybersecurity firms to identify and remediate potential weaknesses.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, bata88 will notify affected users within 72 hours of becoming aware of the incident, in accordance with internationally recognized breach notification standards.
• Two-Factor Authentication (2FA): We strongly encourage all bata88 users to enable 2FA on their accounts for an additional layer of protection against unauthorized access.

10. Your Privacy Rights

As a user of bata88, you hold the following rights over your Personal Data. To exercise any of these rights, contact our support team at [email protected] or via Live Chat:

• Right of Access: You have the right to request a copy of all Personal Data bata88 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (e.g., AML regulations may require us to retain KYC data for 5 years post-closure).
• Right to Data Portability: You may request your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV), so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing based on our legitimate interests, including profiling for responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict processing of your data (e.g., while accuracy is contested), which means we will store it but not actively use it pending resolution.

11. Cookies and Tracking Technologies

11.1 What Cookies We Use

bata88 uses cookies and similar tracking technologies to deliver and improve our services. The categories of cookies we deploy are:

• Strictly Necessary Cookies: Required for the platform to function correctly — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core functionality.
• Performance and Analytics Cookies: Collect anonymized data about how users navigate bata88 — which pages are visited most, session durations, error rates — to help us improve platform performance and user experience.
• Functional Cookies: Remember your preferences such as language, display settings, and previously used payment methods to provide a more personalized experience.
• Responsible Gaming Cookies: Store your reality-check timer settings, deposit limit preferences, and session duration alerts between visits.

11.2 Managing Cookies

You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may limit your ability to use some features of the bata88 platform. Instructions for managing cookies vary by browser — refer to your browser's help documentation for guidance on Chrome, Firefox, Safari, or Edge.

12. Children and Minors

bata88 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. The minimum age to register and use bata88 is 21 years, in accordance with our responsible gaming policy and applicable regulations.

If we become aware that a user is under 21 years of age, we will immediately suspend their account, delete all associated Personal Data, and refund any deposited funds after completing applicable verification. If you believe a minor has registered on bata88, please report it immediately to [email protected].

13. International Data Transfers

bata88 may transfer your Personal Data to servers and service providers located outside of Indonesia in order to deliver our services. Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) with data processors in third countries.
• Data processing agreements that impose equivalent privacy and security obligations on recipients.
• Transfer only to jurisdictions recognized as providing an adequate level of data protection.

Your financial data shared with Indonesian payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) is processed within Indonesia and subject to Indonesian financial regulations.

14. Changes to This Policy

bata88 reviews and updates this Privacy Policy periodically to reflect changes in our services, technology, or legal obligations. When we make material changes — such as introducing new data collection categories or new sharing arrangements — we will:

• Update the "Last Updated" date at the top of this document.
• Send a notification email to all registered users at least 14 days before the change takes effect.
• Display a prominent in-platform notification for users who log in after a policy update.

For minor, non-material changes (such as wording clarifications or formatting improvements), we will update the policy without separate notification. Your continued use of bata88 following a policy update constitutes acceptance of the revised terms.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bata88 handles your Personal Data, please reach out to our dedicated Data Protection team:

• Email: [email protected] (please include "Privacy Request" in the subject line)
• Live Chat: Available 24/7 via your bata88 account dashboard — Indonesian-speaking agents available
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days, and to fulfill data rights requests within 30 calendar days.

We are committed to resolving any privacy concerns you may have in a fair, transparent, and timely manner. If you are not satisfied with our response, you have the right to escalate your concern to a relevant supervisory authority in your jurisdiction.