beb88 Privacy Policy — Your Data, Your Rights

The following terms carry the meanings assigned to them throughout this Privacy Policy:

• "beb88", "we", "us", "our" — the operator of the beb88 platform at https://beb88.bio and all associated services.
• "Player", "you", "your" — any individual who accesses or uses the beb88 platform, whether or not a registered account holder.
• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, including name, email address, date of birth, bank account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "Controller" — the entity that determines the purposes and means of processing Personal Data; in this context, beb88 is the Data Controller.
• "Processor" — a third party that processes Personal Data on beb88's behalf under written instruction (e.g., payment gateway providers, KYC verification services).
• "Consent" — a freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their Personal Data for a stated purpose.
• "KYC" — Know Your Customer; the identity verification process beb88 uses to confirm a Player's identity and age before permitting withdrawals or high-value transactions.
• "Cookies" — small text files placed on a Player's device by the beb88 platform to support session management, analytics, and personalisation features.

beb88 collects Personal Data through several channels: directly from you when you register or interact with the platform; automatically through your use of the platform; and from trusted third-party verification partners where required by law or for security purposes. The categories of data we collect are described below.

beb88 uses Personal Data only for the purposes described in this Policy. We do not process your data in ways that are incompatible with these stated purposes. The primary uses of your data are as follows:

3.1 Marketing Communications. beb88 may send you promotional emails, SMS, or in-app notifications about new games, bonuses, and seasonal offers — such as promotions tied to Idul Fitri, Ramadhan, or Indonesian Independence Day (17 August) — provided you have given explicit consent at registration or subsequently opted in. You may withdraw your consent to marketing communications at any time by contacting support or adjusting your account notification preferences.

3.2 Automated Decision-Making. beb88 uses automated systems to flag suspicious transactions, detect bonus abuse, and enforce responsible gaming limits. Where an automated decision materially affects your account (such as a transaction being blocked), you have the right to request human review of that decision by contacting support.

beb88 processes your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the beb88 Terms & Conditions — such as account creation, deposit processing, game settlement, and withdrawal execution.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, identity verification mandates, and fraud reporting obligations.
• Legitimate interests: Processing necessary for beb88's legitimate business interests — including platform security, fraud detection, responsible gaming monitoring, and improving the quality of our services — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent (e.g., for marketing communications or non-essential cookies), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5.1 General Principle. beb88 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We share data only as described in this clause.

5.2 Payment Processors. To process your deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), beb88 shares the minimum necessary financial and account data with our licensed payment processing partners. These partners are contractually bound to use your data solely for payment processing and to apply security standards consistent with financial industry requirements.

5.3 KYC & Identity Verification Partners. Where beb88 uses a third-party KYC provider to verify your identity documents, your KYC data (ID scans, proof of address) is transmitted to that provider under a data processing agreement that restricts use to identity verification only.

5.4 Game Software Providers. Game titles on the beb88 platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive anonymised or pseudonymised game session data (such as bet amounts and game round IDs) for auditing, dispute resolution, and technical support purposes. No directly identifiable personal data (name, email, bank account) is shared with game studios for these purposes.

5.5 Legal & Regulatory Disclosure. beb88 may disclose Personal Data to law enforcement authorities, financial intelligence units, or other government bodies when required to do so by applicable law, a valid court order, or in connection with the investigation of fraud, money laundering, or other criminal activity. In such cases, beb88 will disclose only the minimum data required and will, where legally permissible, notify the affected Player.

5.6 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of beb88's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change in controller with a minimum of 30 days' advance notice.

beb88 uses cookies and similar client-side tracking technologies to operate the platform effectively, maintain your session, and understand how players interact with our services. The types of cookies used are described below.

6.1 Strictly Necessary Cookies. These cookies are essential for the beb88 platform to function and cannot be disabled without significantly impairing the service. They do not require your consent under applicable law. They include session cookies that authenticate your login and security tokens that prevent cross-site request forgery (CSRF) attacks.

6.2 Analytics Cookies. beb88 uses privacy-respecting analytics tools to collect aggregated, anonymised data on how players navigate the platform — which game categories attract the most engagement, where players encounter friction in the deposit flow, and how long sessions last on average. This data is never used to build individual profiles for advertising purposes.

6.3 Managing Cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect certain platform features. Instructions for managing cookies are available in your browser's help documentation. Strictly necessary cookies cannot be disabled via browser settings while you remain logged in to your beb88 account.

6.4 Do Not Track. beb88 respects browser-level Do Not Track (DNT) signals where technically feasible. Where a DNT signal is detected, beb88 will limit data collection to strictly necessary cookies for session management and security purposes.

beb88 retains Personal Data for as long as your account is active and for a defined period thereafter, as required by legal obligations or legitimate business interests. The retention periods for key data categories are set out below.

• Account & Registration Data: Retained for the duration of your active account plus five (5) years following account closure, to comply with AML record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable law or an ongoing investigation.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping obligations.
• Gaming Activity Logs: Retained for two (2) years from the date of each session for dispute resolution and fraud detection purposes. Aggregated, anonymised analytics data may be retained indefinitely.
• Communications Data (Live Chat, Email): Retained for two (2) years from the date of the last communication in each support thread.
• Responsible Gaming Records: Retained for the duration of any active exclusion or limit, plus three (3) years thereafter, to ensure self-exclusion commitments are honoured across any reinstated accounts.
• Technical & Device Data (IP Logs): Retained for twelve (12) months for security monitoring purposes, then deleted or anonymised.

When the applicable retention period expires and no legal obligation requires further retention, beb88 will securely delete or irreversibly anonymise the data. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and research purposes.

8.1 Technical Safeguards. beb88 implements a range of technical security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These include: TLS/SSL encryption for all data in transit; AES-256 encryption for sensitive data at rest; firewalls and intrusion detection systems; two-factor authentication (2FA) options for player accounts; and regular third-party penetration testing of our infrastructure.

8.2 Organisational Safeguards. Access to Personal Data within beb88 is restricted on a need-to-know basis. Staff who handle player data are subject to confidentiality obligations and receive data protection training. beb88 maintains an internal data protection policy and appoints a designated contact responsible for overseeing compliance with this Privacy Policy.

8.3 Payment Security. All financial transactions on the beb88 platform are routed through payment processors that maintain security standards appropriate for the financial services industry. beb88 does not store full bank account numbers, card numbers, or e-wallet PIN codes on its application servers.

8.4 Data Breach Response. In the event of a data security incident that poses a material risk to your rights and freedoms, beb88 will notify affected players without undue delay and will take immediate remedial action to contain and mitigate the impact of the breach.

8.5 Player Responsibilities. While beb88 takes all reasonable steps to secure your data, you also have a role to play. You should choose a strong, unique password for your beb88 account, enable two-factor authentication, keep your login credentials confidential, and contact support immediately if you suspect unauthorised access to your account.

As a player on the beb88 platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact beb88 support via Live Chat or at [email protected]. We will respond to all valid requests within thirty (30) days.

• Right of Access: You may request a copy of the Personal Data beb88 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected and no overriding legal obligation requires its retention. Please note that beb88 is required by AML and financial record-keeping laws to retain certain data for up to five years following account closure; the right to erasure does not override these legal obligations.
• Right to Restriction of Processing: You may request that beb88 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested or while an objection is being considered.
• Right to Data Portability: Where processing is based on your consent or is necessary for the performance of a contract, you may request that beb88 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests or carried out for direct marketing purposes. Where you object to marketing, beb88 will cease processing your data for that purpose immediately.
• Rights in Relation to Automated Decision-Making: Where beb88 makes decisions about your account using automated processes, you have the right to request human review of decisions that materially affect you.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

beb88 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive. In such cases, beb88 may charge a reasonable administrative fee or decline to act on the request, and will explain its decision in writing.

10.1 Age Restriction. The beb88 platform is strictly for adults aged 21+. beb88 does not knowingly collect Personal Data from individuals under the age of 21. Age is verified at the point of KYC completion and may be re-verified at any time at beb88's discretion.

10.2 Discovery of Minor's Data. If beb88 discovers or has reasonable grounds to believe that an account belongs to or has been accessed by a person under the age of 21, the account will be immediately suspended, all pending bets will be voided, and any balance will be returned via the original deposit method (less any bonuses credited) after investigation. The Personal Data of the minor will be deleted as soon as it is no longer required for investigative or legal compliance purposes.

10.3 Parental Guidance. Parents and guardians in Indonesia are strongly encouraged to use device-level parental controls — available on Android and iOS devices — to restrict access to gambling and age-restricted websites. If you believe a minor in your household has accessed or registered on the beb88 platform, please contact our support team immediately.

11.1 Cross-Border Processing. beb88 operates with the support of technology infrastructure, payment processors, and KYC verification partners that may process data in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, beb88 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to or greater than the protections afforded under this Privacy Policy.

11.2 Safeguards. Appropriate safeguards for international transfers include: contractual clauses in data processing agreements that bind recipients to comply with data protection obligations; transfers to jurisdictions that maintain recognised data protection frameworks; and technical measures such as encryption and pseudonymisation to reduce the risk of unauthorised access during transit.

11.3 Enquiries. You may request information about the specific safeguards applied to international transfers of your Personal Data by contacting [email protected].

The beb88 platform may display informational references to third-party services — such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) or sports data providers. Where such references include links to external websites, beb88 is not responsible for the privacy practices or content of those external sites. Each external site operates under its own privacy policy, which you should review independently before providing any personal information. beb88 recommends exercising caution when visiting any website other than https://beb88.bio.

13.1 Right to Update. beb88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Material changes — such as new categories of data being collected, new purposes for processing, or new third parties receiving data — will be communicated to registered players via email to the address on record, with a minimum of fourteen (14) days' advance notice before the change takes effect.

13.2 Continued Use as Acceptance . Your continued use of the beb88 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and contact support to close your account before the effective date of the update.

13.3 Version History. The current version of this Privacy Policy is effective as of 1 January 2026. Prior versions are available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way beb88 processes your Personal Data, please reach out through any of the following channels:

• Live Chat: Available 24/7 directly within the beb88 platform — the fastest way to reach our support team.
• Email: [email protected] — for formal data rights requests or privacy-related enquiries. Please include your registered username and a description of your request. We aim to respond within 30 days.
• WhatsApp: Available via the in-app chat feature. Support hours peak between 08:00 and 24:00 WIB (UTC+7), with Indonesian-speaking agents available during those hours.

When submitting a data rights request, please provide sufficient information to allow us to verify your identity before fulfilling the request. This protects you against unauthorised access to your data by third parties.