Privacy Policy

1. Introduction

bemo88 ("we", "us", "our") operates an online gaming platform accessible at https://bemo88.cam, offering casino games, sports betting (including bandar bola football betting), togel (Indonesia's traditional numbers lottery), slot gacor (hot slot) selections, and related gaming services to Indonesian residents aged 21 and above.

This Privacy Policy governs the collection, use, storage, and disclosure of personal information in accordance with Indonesian data protection laws, including Law No. 27 of 2022 on Personal Data Protection (UU PDP), and international best practices. We recognize that privacy is a fundamental right, and we have designed our data handling practices to respect your autonomy while meeting legal obligations for identity verification, fraud prevention, and responsible gaming enforcement.

By creating a bemo88 account or using our services, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. If you do not agree with our data handling practices, you should not use bemo88 services.

2. Information We Collect

bemo88 collects several categories of personal information to provide our services, comply with legal requirements, and improve user experience.

2.1 Information You Provide Directly

When you register for a bemo88 account, you provide:

• Personal Identification: Full legal name, date of birth, gender, and Indonesian National ID (KTP) number.
• Contact Information: Email address, Indonesian mobile phone number, and residential address (street, city, province, postal code).
• Account Credentials: Username, password (stored in encrypted hash format), and security questions/answers.
• Financial Information: Bank account details (bank name, account number, account holder name) or e-wallet information (OVO, DANA, GoPay, ShopeePay phone number) for deposits and withdrawals. We do not store full credit card numbers.

2.2 KYC Verification Documents

To comply with anti-money laundering (AML) regulations and prevent underage gambling, we collect:

• Government-Issued ID: Color photographs of your Indonesian KTP showing all four corners and readable text.
• Selfie Verification: Photograph of you holding your KTP next to your face for identity confirmation.
• Proof of Address: Utility bills, bank statements, or government correspondence (if requested for enhanced verification).

2.3 Automatically Collected Information

When you access bemo88, we automatically collect:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows), browser type and version, screen resolution.
• Connection Data: IP address, internet service provider, geographic location (city-level, derived from IP), time zone (WIB/WITA/WIT).
• Usage Data: Pages visited, features used, games played, bet history, deposit/withdrawal transactions, login times, session duration, click patterns, search queries on the platform.
• Communication Records: Live chat transcripts, email correspondence with customer support, WhatsApp message history related to your account.

2.4 Information from Third Parties

We may receive information from:

• Payment Processors: Transaction confirmation, payment method verification, fraud risk scores from BCA, BRI, BNI, Mandiri, e-wallet providers, and USDT payment gateways.
• Game Providers: Game session data, RTP results, and technical logs from Pragmatic Play, Evolution Gaming, Microgaming, and other software partners.
• Identity Verification Services: KYC validation results from third-party identity verification platforms that cross-reference your KTP against government databases (where legally available).

3. How We Use Your Information

bemo88 uses collected information for the following purposes:

3.1 Account Management and Service Delivery

• Create and maintain your bemo88 account.
• Process deposits, withdrawals, and internal fund transfers.
• Facilitate gameplay on slots, live dealer tables, sports betting markets, and togel draws.
• Track bet history, account balances, and transaction records.
• Provide customer support via live chat, email, and WhatsApp.

3.2 Legal Compliance and Verification

• Verify your identity and age (21+ requirement) through KYC processes.
• Comply with Indonesian anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
• Prevent fraud, multiple account creation, identity theft, and unauthorized access.
• Respond to legal requests from Indonesian authorities, court orders, or regulatory inquiries.

3.3 Responsible Gaming and Player Protection

• Monitor gameplay patterns for signs of problem gambling (excessive losses, chasing behavior, session time violations).
• Enforce deposit limits, loss limits, session time limits, and self-exclusion requests.
• Provide reality check reminders and self-assessment quiz results.
• Contact players who may benefit from responsible gaming resources.

3.4 Marketing and Communication

• Send promotional offers, bonus notifications, and VIP rewards (you can opt out at any time).
• Communicate important service updates, maintenance schedules, and policy changes via email or SMS.
• Personalize game recommendations based on your play history (e.g., suggesting slot gacor titles with RTP profiles you prefer).
• Conduct customer satisfaction surveys and request feedback on new features.

3.5 Platform Improvement and Analytics

• Analyze usage patterns to improve website navigation, game loading times, and mobile app performance.
• Identify popular games, peak traffic times, and regional preferences (e.g., higher BRI Liga 1 betting in Java vs. Sumatra).
• Test new features with A/B testing and measure their effectiveness.
• Detect and prevent technical issues, cyberattacks, and system abuse.

4. Data Sharing and Disclosure

bemo88 does not sell your personal information to third parties for marketing purposes. However, we share data in limited circumstances:

4.1 Service Providers and Business Partners

We share necessary information with:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, e-wallet providers (OVO, DANA, GoPay), and USDT gateways require account holder names and transaction details to process deposits/withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others receive your username, bet amounts, and session tokens to deliver game content. They do not receive your full personal identity.
• KYC Verification Services: Third-party identity verification platforms process your KTP documents under strict confidentiality agreements.
• Cloud Hosting Providers: Secure servers hosted in data centers store encrypted backups of user data.
• Customer Support Tools: Live chat software and ticketing systems access your contact information and communication history to resolve inquiries.

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with Indonesian data protection standards.

4.2 Legal and Regulatory Disclosure

We may disclose your information when required by law:

• In response to valid court orders, subpoenas, or legal processes from Indonesian authorities.
• To comply with anti-money laundering investigations or counter-terrorism financing inquiries.
• To protect bemo88's legal rights, enforce our Terms & Conditions, or defend against lawsuits.
• To prevent imminent harm to users or the public (e.g., credible threats, illegal activity).

4.3 Business Transfers

If bemo88 undergoes a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the successor entity. You will be notified via email and given the opportunity to delete your account before the transfer.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify individual users (e.g., "60% of bemo88 users in Jakarta prefer BCA deposits") with industry partners, researchers, or investors. This data does not constitute personal information under privacy law.

5. Data Security Measures

bemo88 implements industry-standard security measures to protect your personal information:

5.1 Technical Safeguards

• Encryption: All data transmissions between your device and bemo88 servers use 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, KTP images, financial records) is encrypted using AES-256 encryption.
• Secure Authentication: Passwords are hashed using bcrypt with unique salts. Multi-factor authentication (MFA) is available for enhanced account security.
• Firewalls and Intrusion Detection: Web application firewalls (WAF) and real-time intrusion detection systems monitor for cyberattacks, DDoS attempts, and unauthorized access.
• Regular Security Audits: Third-party penetration testing and vulnerability assessments are conducted quarterly to identify and patch security weaknesses.

5.2 Organizational Safeguards

• Access Controls: Only authorized bemo88 employees with legitimate business needs can access personal data. Access is logged and monitored.
• Employee Training: All staff undergo data protection training and sign confidentiality agreements.
• Incident Response Plan: In the event of a data breach, we will notify affected users within 72 hours and report to Indonesian data protection authorities as required by UU PDP.

5.3 Your Responsibility

You must also protect your account by:

• Keeping your password confidential and not sharing it with others.
• Logging out of shared devices after using bemo88.
• Reporting any suspicious account activity immediately to [email protected].
• Using strong, unique passwords (minimum 8 characters with uppercase, lowercase, numbers, and symbols).

6. Data Retention

bemo88 retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, and resolve disputes.

6.1 Active Account Data

• Account Information: Retained while your account is active and for 5 years after closure (Indonesian financial record retention requirement).
• Transaction Records: Deposit, withdrawal, and bet history retained for 7 years for tax compliance and AML auditing.
• KYC Documents: Retained for 5 years after account closure to comply with identity verification regulations.

6.2 Deleted Account Data

If you request account deletion:

• Your account is deactivated immediately and you lose access to bemo88 services.
• Personal identifiers (name, email, phone) are anonymized within 30 days.
• Transaction records and KYC documents are archived for the legal retention period (5-7 years), then securely deleted.
• Anonymized usage data (bet patterns, game preferences) may be retained indefinitely for analytics.

6.3 Backup and Disaster Recovery

Encrypted backups of data are retained for 90 days for disaster recovery purposes. After 90 days, backups are permanently deleted.

7. Your Privacy Rights

Under Indonesian Law No. 27 of 2022 on Personal Data Protection, you have the following rights:

7.1 Right to Access

You can request a copy of the personal information bemo88 holds about you. Log in to your account dashboard to view your profile, transaction history, and KYC documents. For additional data, email [email protected] with your request.

7.2 Right to Correction

If your personal information is inaccurate or incomplete, you can update it in your account settings. For changes to verified data (e.g., name on KTP), contact support with updated documentation.

7.3 Right to Deletion

You can request account deletion at any time. Note that certain data must be retained for legal compliance (see Data Retention section). Deletion requests are processed within 30 days.

7.4 Right to Data Portability

You can request your personal data in a machine-readable format (CSV, JSON) to transfer to another service. Processing time: 14 days.

7.5 Right to Withdraw Consent

You can withdraw consent for marketing communications at any time by clicking "unsubscribe" in emails or contacting support. Note that withdrawal does not affect data processing based on legal obligations or contractual necessity.

7.6 Right to Object

You can object to data processing for marketing or profiling purposes. We will cease such processing unless we have compelling legitimate grounds that override your interests.

7.7 Right to Lodge a Complaint

If you believe bemo88 has violated your privacy rights, you can lodge a complaint with Indonesia's Data Protection Authority (when established under UU PDP) or file a lawsuit in Indonesian courts.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device that help bemo88 recognize you on return visits, remember your preferences, and analyze site usage. We use both first-party cookies (set by bemo88) and third-party cookies (set by our partners).

8.2 Types of Cookies We Use

• Essential Cookies: Required for login, session management, and secure transactions. Cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymous usage data (pages visited, load times, error rates) to optimize site performance. Example: Google Analytics.
• Functional Cookies: Remember your language preference, display settings, and game favorites for a personalized experience.
• Marketing Cookies: Track your journey across bemo88 and partner sites to deliver targeted bonus offers and measure ad campaign effectiveness.

8.3 Managing Cookies

You can control cookies through your browser settings:

• Most browsers allow you to block all cookies, accept only first-party cookies, or delete cookies after each session.
• Disabling essential cookies will prevent you from logging into bemo88.
• Disabling marketing cookies will not affect site functionality but may result in less relevant bonus offers.

For mobile apps, you can manage tracking through iOS "Limit Ad Tracking" or Android "Opt Out of Ads Personalization" settings.

9. Third-Party Services

bemo88 integrates with third-party services that have their own privacy policies:

• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe. These providers may collect gameplay data when you launch their games. Review their privacy policies on their respective websites.
• Payment Processors: BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay process transactions according to Indonesian banking regulations. We do not control their data practices.
• Social Media: If you share bemo88 content on Facebook, Twitter, or Instagram, those platforms may track your activity per their privacy policies. bemo88 does not receive personal data from social media shares.
• Analytics Tools: Google Analytics tracks anonymized site usage. You can opt out using the Google Analytics Opt-Out Browser Add-on.

bemo88 is not responsible for the privacy practices of third-party services. We encourage you to review their policies before engaging with them.

10. International Data Transfers

While bemo88 primarily serves Indonesian residents, some data processing occurs outside Indonesia:

• Cloud Hosting: Encrypted data backups may be stored on servers in Singapore, Hong Kong, or other Southeast Asian data centers that meet international security standards (ISO 27001, SOC 2).
• Game Providers: When you play games from international providers (NetEnt, Microgaming), gameplay data may be processed in Europe or other jurisdictions where the provider operates.
• Payment Gateways: USDT transactions are processed via blockchain networks that operate globally.

When transferring data internationally, bemo88 ensures adequate protection through:

• Contractual clauses requiring foreign processors to maintain Indonesian-equivalent data protection standards.
• Encryption during transit and at rest.
• Regular audits of third-party compliance.

11. Children's Privacy

bemo88 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. Our KYC verification process is designed to detect and prevent underage account creation.

If we discover that a user is under 21:

• The account is immediately suspended.
• All bets are voided and winnings forfeited.
• Deposited funds are returned to the payment source.
• The user's information is flagged to prevent future registration.

If you believe a minor has created a bemo88 account, contact us immediately at [email protected] with evidence. We take underage gambling seriously and cooperate with parents and authorities to address violations.

12. Changes to This Policy

bemo88 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via:

• Email notification to your registered address.
• Prominent banner on the bemo88 website and mobile app.
• In-app notification when you next log in.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. Continued use of bemo88 services after changes take effect constitutes acceptance of the updated policy. If you do not agree with changes, you must close your account before the effective date.

13. Contact Information

For privacy-related inquiries, data access requests, or concerns about how bemo88 handles your personal information, contact us:

• Email: [email protected] (display as plain text only)
• Privacy Officer Email: [email protected] (for formal data protection requests)
• Live Chat: Available 24/7 via your bemo88 account dashboard
• WhatsApp: +62-812-3456-7890 (display as plain text only)
• Mailing Address: bemo88 Data Protection Officer, Jakarta, Indonesia (physical address available upon request)

We aim to respond to privacy inquiries within 7 business days. For complex requests (e.g., data portability, deletion), processing may take up to 30 days as permitted by Indonesian law.