bbo30 Privacy Policy

For the purposes of this Privacy Policy, the following terms have the meanings set out below.

bbo30 collects Personal Data through multiple channels as part of providing a secure, compliant, and personalised gaming experience. The categories of data we collect are described below.

2.1 Registration Data

When you create a bbo30 account, we collect your full legal name, date of birth, residential address, email address, and a chosen username. This information is required to establish your identity and to ensure that you meet our minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to verify your age, we may request copies of government-issued identification documents such as your Indonesian National Identity Card (KTP), passport, or driver's licence. We may also request proof of address (e.g., a recent utility bill or bank statement) and, in higher-risk situations, evidence of source of funds.

2.3 Financial Data

We collect details of the bank accounts and e-wallets you register for deposit and withdrawal purposes, including account holder name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), account number, and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja). We do not store full debit or credit card numbers on our servers.

2.4 Transaction Data

We maintain a record of all deposits, withdrawals, wagers placed, games played, bonus claims, and promotional activity associated with your account. This data is retained for regulatory compliance, dispute resolution, and fraud prevention purposes.

2.5 Technical and Usage Data

When you access the bbo30 platform, our systems automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, session duration, pages visited, and referring URL. This data is used for security monitoring, platform optimisation, and fraud detection.

2.6 Communications Data

If you contact our support team via email, WhatsApp, or live chat, we retain a record of those communications — including the content of messages, timestamps, and resolution outcomes — for quality assurance and dispute resolution purposes.

2.7 Responsible Gaming Data

If you use any of our responsible gaming tools — including deposit limits, session time alerts, reality checks, or self-exclusion — we record your elections and the dates on which they were applied. This data is used exclusively to enforce the tool you have activated and is not used for marketing purposes.

bbo30 uses the Personal Data it collects for the following purposes:

• Account Management: To create, maintain, and administer your bbo30 account, including managing your balance, processing deposits and withdrawals, and updating your account preferences.
• Identity Verification: To confirm that you are who you say you are, that you are at least 21 years of age, and that you are not subject to any active self-exclusion order.
• Payment Processing: To route your deposit and withdrawal transactions through the correct local bank or e-wallet channel and to reconcile transaction records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other forms of platform misuse.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money-laundering, know-your-customer, and data protection laws.
• Customer Support: To handle your enquiries, complaints, and requests efficiently and to maintain records of support interactions for quality assurance.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the overall quality and performance of the bbo30 platform.
• Promotional Communications: Where you have given explicit consent, to send you information about promotions, bonuses, and new game releases relevant to your gaming activity. You may withdraw this consent at any time.
• Responsible Gaming Enforcement: To apply and monitor the responsible gaming tools you have activated on your account.

bbo30 processes your Personal Data on the following legal bases, consistent with applicable data protection law including Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022):

bbo30 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share your data only in the following limited circumstances:

1. Payment Processors and Banking Partners: To facilitate deposits and withdrawals, we share the minimum necessary financial data with your chosen bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja). These institutions process your data under their own privacy policies and applicable financial regulations.
2. KYC and Identity Verification Providers: To fulfil our age and identity verification obligations, we may engage specialist third-party KYC providers who process identity document images and biometric data on our behalf under strict data processing agreements.
3. Game Studios and Content Providers: When you play games provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, or Spribe, certain session-level data (e.g., bet amounts, game outcomes) is transmitted to the relevant studio to enable gameplay and calculate results.
4. Fraud Prevention and Security Services: We may share technical data (IP address, device fingerprint, session metadata) with specialist anti-fraud and cybersecurity providers for the purpose of detecting and preventing platform abuse.
5. Legal and Regulatory Authorities: Where required by applicable law, court order, or lawful request from a competent regulatory or law enforcement authority, bbo30 may disclose Personal Data. We will notify you of such disclosure where legally permitted to do so.
6. Corporate Transactions: In the event of a merger, acquisition, or sale of all or a material part of bbo30's business, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified in advance of any such transfer.

bbo30 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your experience. The categories of cookies we use are as follows:

You may manage your cookie preferences at any time by contacting our support team. Withdrawing consent for non-essential cookies will not affect your ability to use core platform features.

bbo30 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with our internal data destruction procedures.

As a data subject, you hold the following rights with respect to your Personal Data held by bbo30. These rights are subject to applicable legal limitations and may be balanced against bbo30's legitimate interests or legal obligations where these take precedence.

To exercise any of the above rights, please submit a written request to support@bbo30.app with the subject line "Data Subject Request". bbo30 will acknowledge your request within 5 business days and respond in full within 30 calendar days. Where requests are complex or numerous, this period may be extended by a further 30 days with prior notification.

To protect your data and prevent fraudulent requests, bbo30 may ask you to verify your identity before processing any data subject request.

bbo30 implements a multi-layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and bbo30 servers is encrypted using industry-standard TLS protocols.
• At-Rest Encryption: Sensitive data stored on bbo30 servers — including identity document scans and financial records — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data within bbo30's systems is restricted on a strict need-to-know basis. Staff who handle Member data are subject to confidentiality obligations and regular security training.
• Intrusion Detection and Monitoring: bbo30 maintains continuous monitoring of its infrastructure for anomalous activity, potential breaches, and denial-of-service attempts.
• Penetration Testing: Our systems are subject to periodic third-party penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bbo30 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to your rights and freedoms, we will notify affected Members without undue delay.

The bbo30 platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from persons under the age of 21. If you believe that a minor has registered an account on the bbo30 platform or has provided us with Personal Data, please notify us immediately at support@bbo30.app.

Upon receiving a credible report of a minor's account, bbo30 will:

• Immediately suspend the account pending investigation;
• Permanently close the account upon confirmation that the account holder is under 21;
• Securely delete all Personal Data associated with the minor's account to the extent permitted by law; and
• Return any deposited funds to the payment source from which they originated.

bbo30 uses KYC identity verification as the primary technical control to prevent minor access. Parents and guardians who are concerned about underage gambling are encouraged to make use of parental control tools available through their device manufacturer or internet service provider, in addition to our own age verification measures.

bbo30 operates globally and may transfer your Personal Data to countries outside of Indonesia in connection with our operational infrastructure, game studio partnerships, and third-party processors. Where such transfers occur, bbo30 takes the following steps to ensure that your data continues to receive an adequate level of protection:

• Transfers to third-party processors located outside Indonesia are governed by data processing agreements that incorporate standard contractual clauses or equivalent safeguards recognised under applicable data protection law.
• bbo30 assesses the data protection standards of the destination country prior to any transfer, and applies additional technical safeguards (e.g., encryption, pseudonymisation) where the destination country's legal framework is assessed as providing a lower level of protection than Indonesia's UU PDP.
• Where a game studio partner (e.g., Evolution Gaming, Pragmatic Play) processes session data on servers located outside Indonesia, the studio's own data processing agreement and privacy policy apply to that processing. bbo30 retains only the reconciled outcome data on its own servers.

bbo30 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify active Members by publishing a prominent notice on the platform and, where practicable, via the registered contact method on your account.

The "Last Reviewed" date at the top of this document will be updated each time the policy is revised. Your continued use of the bbo30 platform following the effective date of any revised policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we protect your data.

If you disagree with any change to this Privacy Policy, you may close your account by contacting our support team and requesting voluntary closure in accordance with the Terms & Conditions available at /terms-conditions.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the bbo30 Data Privacy team using the details below. All privacy-related correspondence is handled with strict confidentiality.

• Email: support@bbo30.app — please use the subject line "Privacy Enquiry" or "Data Subject Request" for faster routing
• WhatsApp: +62 811 0000 3030 (available 08:00–24:00 WIB)
• Live Chat: Available 24/7 via the bbo30 platform

bbo30 aims to acknowledge all privacy-related requests within 5 business days (Western Indonesia Time, WIB) and to resolve substantive requests within 30 calendar days of receiving all required information.