Privacy Policy

1. Overview

byon88 ("we", "us", "our") operates the online gaming platform available at byon88.cam, providing Indonesian players with casino games, live dealer tables, sports betting, togel (Indonesia's traditional numbers lottery) draws, and related entertainment services. In delivering those services we necessarily collect and process certain personal data about you.

We are committed to handling that data with care, transparency, and respect. This Privacy Policy applies to all personal data collected through our website, mobile-optimised web experience, customer support channels, and any other touchpoint between you and byon88. It should be read alongside our Terms & Conditions, which govern the overall relationship between you and byon88.

2. Definitions

• "Personal Data" — any information that identifies or could reasonably identify you as a natural person, either on its own or in combination with other information.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" — byon88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on our behalf and under our instruction.
• "Player" / "User" / "you" — any individual who registers an account or uses byon88 services.
• "KYC" — Know Your Customer; the identity-verification procedures required by law and our internal anti-money-laundering (AML) programme.
• "Cookies" — small text files placed on your device by our website to store browsing preferences and session information.

3. Personal Data We Collect

3.1 Registration Data

When you create a byon88 account we collect:

• Full legal name (as it appears on your Indonesian national ID card / KTP)
• Date of birth
• Gender
• Email address
• Mobile phone number (Indonesian registered)
• Residential address in Indonesia
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering regulations and to prevent underage gambling, we collect:

• Copy of your Indonesian National ID (KTP) or passport
• Selfie photograph (with or without ID document, as requested)
• Proof of residential address (utility bill, bank statement, or official government document issued within the preceding three months)
• Source-of-funds documentation for high-value accounts (e.g., payslip, bank statement)

3.3 Financial and Transaction Data

To process deposits and withdrawals we collect:

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, and other supported Indonesian banks
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Full transaction history (deposit amounts, withdrawal amounts, dates, and payment references)
• Bonus and promotional credit records

3.4 Gaming Activity Data

• Game session logs (game type, stakes, results, timestamps)
• Sports betting history (events, markets, odds, outcomes)
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion records)
• Bonus wagering progress records

3.5 Technical and Device Data

• IP address and geolocation data (to verify you are accessing from Indonesia)
• Device type, operating system, and browser version
• Unique device identifiers
• Session timestamps and page-interaction logs

3.6 Communication Data

• Records of live chat conversations with customer support
• Email correspondence
• Survey responses and feedback submissions

4. How We Collect Your Data

We collect personal data through the following channels:

• Directly from you — during account registration, KYC submission, deposit or withdrawal requests, and customer support interactions.
• Automatically — through cookies, web beacons, and server logs when you browse or interact with our website.
• From third-party verification providers — identity verification agencies that cross-check your KYC documents against government databases.
• From payment processors — confirmation data returned by Indonesian banks and e-wallet providers when a transaction is completed.
• From fraud-prevention services — device-fingerprinting and IP-reputation data from our security partners.

5. How We Use Your Personal Data

5.1 Service Delivery

• Creating and managing your account
• Processing deposits and withdrawals via Indonesian banks and e-wallets
• Enabling gameplay across all byon88 products
• Calculating and crediting bonus entitlements

5.2 Legal and Regulatory Compliance

• Verifying that you are at least 21 years old and a resident of Indonesia
• Conducting KYC and AML checks as required by applicable law
• Monitoring transactions for suspicious activity
• Responding to lawful requests from law-enforcement or regulatory authorities

5.3 Security and Fraud Prevention

• Detecting and preventing unauthorised account access
• Identifying and blocking bonus abuse, multi-accounting, and collusion
• Monitoring for unusual betting patterns that may indicate match-fixing

5.4 Customer Support

• Responding to your enquiries and resolving disputes
• Sending important account notifications (password-reset emails, withdrawal confirmations, verification requests)

5.5 Responsible Gaming

• Monitoring your play for signs of problem gambling
• Enforcing the self-limit and self-exclusion tools you have activated
• Sending responsible gaming reminders where appropriate

5.6 Platform Improvement

• Analysing aggregated, anonymised usage data to improve site performance and user experience
• Conducting internal research to understand player preferences

5.7 Marketing Communications (with your consent)

If you opt in to receive promotional communications, we may send you information about byon88 bonuses, new games, seasonal promotions (for example around Idul Fitri, Ramadhan, or Indonesian Independence Day on 17 August), and other offers. You may withdraw your marketing consent at any time by updating your account preferences or contacting us directly. Withdrawing marketing consent does not affect your account o r the lawfulness of any processing already carried out.

6. Legal Basis for Processing

We process your personal data on one or more of the following legal grounds:

• Contractual necessity — processing required to perform the contract between you and byon88 (e.g., operating your account, processing payments).
• Legal obligation — processing required to comply with applicable laws and regulations, including KYC, AML, and age-verification requirements.
• Legitimate interests — processing necessary for our legitimate business interests, such as fraud prevention, security monitoring, and platform improvement, provided those interests are not overridden by your rights.
• Consent — processing based on your explicit opt-in, such as receiving marketing communications. You may withdraw consent at any time without affecting prior processing.

7. How We Share Your Data

byon88 does not sell your personal data to any third party. We share data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process data strictly on our behalf and under our written instructions:

• Payment processors — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) require transaction data to process your deposits and withdrawals.
• Identity verification providers — KYC agencies that validate your ID documents and cross-reference government databases.
• Game content providers — Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other studios receive anonymised session data necessary to deliver and certify their games.
• Fraud and security vendors — providers of device fingerprinting, IP reputation scoring, and transaction-monitoring tools.
• IT infrastructure providers — cloud hosting and content delivery network partners that store and transmit our platform data under strict data-processing agreements.

7.2 Legal and Regulatory Authorities

We may disclose your personal data to law-enforcement agencies, courts, or regulators when required to do so by law, court order, or to protect the rights, property, or safety of byon88, our players, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your data becomes subject to a different privacy policy.

7.4 With Your Explicit Consent

We will share your data with any other third party only where you have given clear, explicit consent for that specific disclosure.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Account and registration data — retained for the lifetime of your account plus five (5) years after account closure, to comply with AML record-keeping obligations.
• KYC and identity documents — retained for five (5) years from the date of verification or account closure, whichever is later.
• Financial transaction records — retained for five (5) years from the date of each transaction.
• Gaming session logs — retained for three (3) years from the date of each session.
• Customer support communications — retained for two (2) years from the date of the last interaction.
• Marketing consent records — retained until you withdraw consent, plus one (1) year thereafter as evidence of the consent history.

When data is no longer required, we securely delete or anonymise it so it can no longer be associated with you.

9. Security Measures

byon88 takes the security of your personal data seriously and employs a layered security architecture to protect it against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption — all data transmitted between your device and our servers is encrypted using the same bank-grade standard used by major financial institutions worldwide.
• Encryption at rest — sensitive fields (passwords, financial account numbers, identity document images) are encrypted in our databases using AES-256.
• Access controls — staff access to personal data is restricted on a strict need-to-know basis, with multi-factor authentication required for all administrative systems.
• Regular security audits — we conduct periodic penetration tests and vulnerability assessments conducted by independent security firms.
• Intrusion detection — automated systems monitor our infrastructure 24/7 for anomalous activity or attempted breaches.
• Incident response plan — in the event of a confirmed data breach that poses a risk to your rights, we will notify you and relevant authorities within 72 hours of discovery.

While we apply rigorous technical and organisational safeguards, no system is completely immune to risk. You are responsible for keeping your account password confidential and for notifying us immediately if you suspect unauthorised access.

10. Cookies and Tracking Technologies

10.1 What We Use

byon88 uses cookies and similar tracking technologies (web beacons, local storage) on our website. These fall into the following categories:

• Strictly necessary cookies — essential for the website to function. They maintain your login session, remember your language preference, and enable core security features. These cannot be disabled.
• Performance cookies — collect anonymised data about how visitors interact with our site (pages visited, time on page, errors encountered) to help us improve performance and stability.
• Functional cookies — remember your preferences (e.g., preferred payment method, responsible-gaming limit settings) to personalise your experience.
• Analytics cookies — enable us to understand aggregate usage trends and measure the effectiveness of platform improvements. Data is processed in anonymised or pseudonymised form.

10.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of byon88 — for example, you may be logged out automatically or lose your preference settings. Detailed cookie controls are available in your account settings under Privacy Preferences.

10.3 Third-Party Tracking

Our game content providers and analytics tools may place their own cookies when you interact with embedded game content. Those providers are governed by their own privacy policies; we contractually require them to handle any data they collect in compliance with applicable data-protection standards.

11. Your Data Rights

As a data subject you have the following rights in respect of your personal data held by byon88. To exercise any of these rights, contact us at the details in Section 14:

• Right of access — you may request a copy of all personal data we hold about you, along with information about how it is processed.
• Right to rectification — if any personal data we hold is inaccurate or incomplete, you may request that we correct it. For certain fields (e.g., name, date of birth), correction requires re-submission of KYC documents.
• Right to erasure ("right to be forgotten") — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (e.g., AML record-keeping requirements).
• Right to restrict processing — you may ask us to limit how we process your data in certain circumstances, such as while a dispute about accuracy is under review.
• Right to data portability — you may request your personal data in a structured, commonly used, machine-readable format so it can be transferred to another controller.
• Right to object — you may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior processing.

We will respond to all verified data-rights requests within 30 days of receipt. In complex cases we may extend this by a further 60 days and will notify you accordingly.

12. Minors (Under 21)

byon88 services are strictly for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe your child has provided personal data to byon88, please contact us immediately at [email protected]. We will investigate and, if confirmed, delete the data and close the account without delay.

Our age-verification process requires submission of a valid Indonesian national ID (KTP) or passport at the KYC stage. Accounts that fail to pass age verification are suspended pending investigation.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make material changes we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to the email address registered to your account.
• Display a prominent notice on our website for a minimum of 14 days following the change.

Your continued use of byon88 services after the effective date of any revised policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using our services and may request account closure.

14. Contact Information

For any questions, concerns, or data-rights requests relating to this Privacy Policy, please contact the byon88 Privacy Team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on our website
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and resolve them within 30 days