Privacy Policy

1Introduction

Welcome to the bob69 Privacy Policy. This document sets out how bob69 ("we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "your") who access our online gaming platform at https://bob69.cam.

bob69 operates an online entertainment platform offering casino games, sports betting, live dealer tables, lottery draws including togel (Indonesia's traditional numbers lottery), and other gaming services to residents of Indonesia aged 21 years and older. We take our data protection obligations seriously and are committed to transparency about how we handle your personal information.

By creating an account on bob69, depositing funds, or using any of our services, you acknowledge that you have read, understood, and agree to this Privacy Policy in its entirety. If you do not agree with any aspect of this policy, please do not use our platform. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform.

We process personal data in accordance with applicable data protection laws and regulations, including principles aligned with international best practices such as the General Data Protection Regulation (GDPR) where applicable. We are committed to collecting only the minimum data necessary to provide our services, maintaining that data securely, and respecting your rights as a data subject.

2Data Controller

bob69 is the data controller responsible for the personal data collected through the Platform. For the purposes of this Privacy Policy, bob69 determines the means and purposes of processing your personal data.

As data controller, bob69 is responsible for ensuring that your personal information is processed lawfully, fairly, and transparently. We implement appropriate technical and organizational measures to protect your data and comply with applicable privacy laws.

If you have questions or concerns about how we process your data, or if you wish to exercise any of your privacy rights, please contact us at [email protected]. Our data protection team will respond to all privacy inquiries within 14 business days.

3Information We Collect

bob69 collects several categories of personal data necessary to provide our gaming services, verify your identity, process transactions, comply with legal obligations, and improve user experience. The data we collect includes:

Registration & Account Information

When you create an account, we collect your full legal name, date of birth, residential address in Indonesia, email address, mobile phone number, and chosen username and password. This information is necessary to establish your account, verify you meet the 21+ age requirement, and communicate with you about your account.

Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and verify your identity before processing withdrawals, we collect copies of your Indonesian National Identity Card (KTP), proof of address (utility bill or bank statement dated within 3 months), and a selfie verification photograph. These documents are encrypted and stored securely.

Financial & Transaction Data

We collect data about your deposits, withdrawals, wagers, wins, losses, and bonus activity. This includes payment method details (bank account number or e-wallet identifier for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts, timestamps, and transaction status. We do not store full credit card numbers or CVV codes.

Gameplay & Behavioral Data

We automatically log your gameplay activity including games played, bet amounts, game outcomes, session duration, login frequency, IP address, device type, browser version, operating system, and interaction patterns with the Platform. This data helps us detect fraud, ensure fair play, personalize your experience, and identify problem gambling behavior.

Communications

When you contact our customer support team via live chat, email, or phone, we record the content of those communications, timestamps, and resolution outcomes. This helps us improve service quality and provides a record of support interactions.

Marketing Preferences

We collect information about your marketing preferences, including whether you consent to receiving promotional emails, SMS notifications, and push notifications about bonuses, tournaments, and new games.

4How We Use Your Data

bob69 processes your personal data for the following legitimate purposes:

• Account Management: To create, maintain, and manage your player account, authenticate your identity, and provide customer support services.
• Service Delivery: To enable you to place wagers, play games, participate in promotions, access VIP benefits, and use all features of the Platform.
• Payment Processing: To process deposits, execute withdrawals, reconcile transactions, and maintain accurate financial records. We work with licensed payment processors to facilitate secure transfers to and from your Indonesian bank account or e-wallet.
• Legal & Regulatory Compliance: To verify your age and identity (KYC), prevent money laundering, detect and prevent fraud, comply with anti-terrorism financing laws, respond to lawful requests from authorities, and maintain records required by our gaming license.
• Security & Fraud Prevention: To monitor for suspicious activity, detect multiple accounts, prevent bonus abuse, identify collusion or cheating, and protect the integrity of our games and the Platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce deposit limits and self-exclusion periods, and provide targeted responsible gaming interventions when behavioral red flags are detected.
• Marketing & Communications: To send you promotional offers, bonus notifications, tournament invitations, and platform updates — but only where you have provided consent or where permitted by law. You can opt out of marketing communications at any time.
• Platform Improvement: To analyze user behavior, understand game preferences, optimize user experience, fix bugs, develop new features, and improve overall service quality.
• Dispute Resolution: To investigate disputes, resolve complaints, enforce our Terms & Conditions, and defend legal claims.

We process your data only where we have a lawful basis to do so, including performance of our contract with you, compliance with legal obligations, protection of our legitimate interests, or your explicit consent.

5Data Sharing & Third-Party Disclosure

bob69 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, we may share your data with certain trusted third-party service providers under strict confidentiality obligations in the following circumstances:

• Payment Processors: We share necessary financial data with licensed payment gateways and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and e-wallet providers OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These providers are bound by data protection agreements.
• Game Providers: We share limited gameplay data with third-party game studios whose games appear on our Platform to enable game functionality, verify bet outcomes, and reconcile progressive jackpots. Studios do not receive your personal contact information.
• Identity Verification Services: We may use third-party KYC verification services to authenticate identity documents and screen for fraud or sanctions list matches.
• Customer Support Tools: We use third-party live chat and ticketing software to deliver customer support. Support providers may access conversation history but are contractually prohibited from using your data for their own purposes.
• Marketing & Analytics Platforms: With your consent, we may share anonymized or pseudonymized data with analytics tools (e.g., Google Analytics) to understand user behavior and measure marketing campaign effectiveness. These services operate under their own privacy policies.
• Legal & Regulatory Authorities: We may disclose your data to law enforcement, tax authorities, gaming regulators, or courts where required by law, court order, or regulatory investigation.
• Professional Advisors: We may share data with lawyers, auditors, accountants, and consultants who provide professional services to bob69 under confidentiality agreements.
• Business Transfers: In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity subject to this Privacy Policy.

6Data Security

bob69 employs industry-standard technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data stored in our databases (passwords, financial information, identity documents) is encrypted at rest.
• Access Controls: Personal data is accessible only to authorized bob69 personnel on a need-to-know basis. Staff access is logged and monitored. All employees sign confidentiality agreements.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, 24/7 monitoring, redundant power supplies, and disaster recovery capabilities.
• Firewalls & Intrusion Detection: We deploy enterprise-grade firewalls, intrusion detection systems, and anti-malware tools to protect against cyber attacks.
• Regular Audits: We conduct regular security audits, penetration testing, and vulnerability assessments performed by independent third-party security firms.
• Payment Security: Financial transactions are processed through PCI-DSS compliant payment gateways. We do not store full credit card numbers or CVV codes.
• Incident Response: We maintain an incident response plan to detect, contain, and remediate any data breach. In the unlikely event of a breach affecting your personal data, we will notify you and relevant authorities as required by law.

While we implement robust security measures, no online platform can guarantee absolute security. You are responsible for safeguarding your login credentials and should never share your password with anyone. Always log out after using shared or public devices.

7Data Retention

bob69 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Active account information is retained for the duration of your relationship with bob69. Upon account closure, core account data is retained for 7 years to comply with financial record-keeping and anti-money laundering regulations.
• Transaction Records: Financial transaction logs including deposits, withdrawals, wagers, and payouts are retained for 7 years as required by tax and gaming regulations.
• Identity Documents (KYC): Copies of identity verification documents are retained for 5 years following account closure to comply with regulatory requirements.
• Marketing Communications: If you opt out of marketing, your contact information is immediately suppressed from promotional campaigns but retained on a suppression list to honor your opt-out preference.
• Support Records: Customer support interactions are retained for 3 years to maintain service quality records and resolve potential disputes.
• Cookies & Session Data: Technical cookies typically expire after 30 days or when you close your browser, though persistent cookies may last up to 2 years depending on type.

After the applicable retention period expires, we securely delete or anonymize your personal data so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

8Cookies & Tracking Technologies

bob69 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file placed on your device that helps us recognize you on return visits.

Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function. These enable core features like login authentication, session management, and security. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous data about how users interact with the Platform — pages visited, time on site, click patterns. This helps us optimize performance and identify technical issues.
• Functional Cookies: Remember your preferences such as language selection, game filters, and display settings to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure marketing campaign effectiveness. These require your consent.

Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to block or delete cookies, though disabling essential cookies may affect Platform functionality. Consult your browser's help documentation for specific instructions on managing cookies.

9Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data. To exercise any of these rights, please contact [email protected]:

• Right of Access: You can request a copy of the personal data we hold about you, including information about how it is processed.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data. You can update many details directly through your Account Settings.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data where we no longer have a legitimate reason to retain it, subject to legal retention obligations.
• Right to Restriction: You can request that we limit processing of your data in certain circumstances, such as while we investigate a complaint.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You can object to processing based on legitimate interests, including direct marketing. We will cease processing unless we demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you can withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

We will respond to all privacy rights requests within 30 days. In some cases we may require additional information to verify your identity before fulfilling a request. There is no fee for exercising your rights unless the request is manifestly unfounded or excessive.

10International Data Transfers

bob69 primarily serves users in Indonesia. However, some of our third-party service providers (game studios, payment processors, cloud hosting providers) may be located outside Indonesia and may process or store your data in jurisdictions such as Singapore, Europe, or the United States.

When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses aligned with international standards
• Verification that the receiving jurisdiction provides adequate data protection
• Use of Privacy Shield-equivalent mechanisms where applicable
• Encryption of data in transit and at rest

By using bob69, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia where necessary to provide our services.

11Protection of Minors

bob69 strictly prohibits use of the Platform by individuals under 21 years of age. We do not knowingly collect personal data from minors. Account registration requires users to confirm they are 21 or older, and we verify age through KYC documentation.

If we discover that we have inadvertently collected personal data from a person under 21, we will immediately delete that data and permanently close the associated account. Any deposits from underage accounts will be returned to the original payment source.

Parents and guardians are encouraged to monitor their children's internet activity and use device parental controls to prevent underage access to online gaming platforms.

12Changes to This Privacy Policy

bob69 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on the Platform homepage
• Sending an email notification to your registered email address
• Displaying an in-app notification upon your next login

The "Effective Date" at the top of this policy indicates when the current version was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of the Platform after a Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with changes, you should cease using the Platform and may request account closure.

13Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or how bob69 handles your personal data, please contact our Data Protection team:

• Email: [email protected] (plain text — please include "Privacy Inquiry" in the subject line)
• Live Chat: Available 24/7 through your Account dashboard
• Response Time: We respond to privacy inquiries within 14 business days

For formal data subject access requests or privacy rights exercises, please submit your request in writing via email with "Data Subject Request" in the subject line. Include your full name, registered email address, and a description of the specific right you wish to exercise. We may require additional identity verification before processing your request.