Privacy Policy — bob68

In this Privacy Policy, the following terms carry the meanings set out below unless context requires otherwise:

• "bob68" / "Operator" / "we" / "us" / "our" refers to the company that owns and operates the bob68 platform accessible at bob68.pro.
• "Player" / "you" / "your" means any individual who visits, registers on, or uses the bob68 platform in any capacity.
• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including but not limited to name, email address, phone number, national identity number, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion.
• "KYC" means the Know Your Customer identity verification procedure required before withdrawal requests are processed.
• "Cookies" means small text files placed on your device by the bob68 platform for the purposes described in Section 6.
• "Third-Party Providers" means game studios, payment processors, fraud-detection vendors, and other service partners whose software or infrastructure is integrated into the bob68 platform.
• "IDR / Rp" means Indonesian Rupiah, the currency in which all financial transactions on bob68 are conducted.

This Privacy Policy applies to all Personal Data collected by bob68 through any of the following channels:

• The bob68.pro website and any mobile-optimised interface or progressive web app associated with it.
• The account registration, login, KYC submission, and account management processes.
• Deposits and withdrawals conducted via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Customer support interactions conducted via live chat, email, or any other support channel offered by bob68.
• Promotional campaigns, tournaments, and bonus programmes administered by bob68.

This Policy does not apply to external websites that may be referenced in content on bob68.pro. We have no control over the privacy practices of third-party sites, and we encourage you to review their respective privacy policies independently.

bob68 collects Personal Data across three broad categories: data you provide directly, data generated automatically by your use of the platform, and data received from third-party providers.

3.1 Data You Provide Directly

• Registration data: full legal name, date of birth, residential address in Indonesia (city, province, postal code), email address, and mobile phone number.
• KYC documents: a copy of your government-issued national identity card (KTP) or passport, proof of address (utility bill or bank statement), and payment method verification documentation.
• Financial data: bank account name and number (BCA, BRI, BNI, Mandiri, or CIMB Niaga) or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals. Full payment card numbers are never stored by bob68.
• Support communications: the content of messages, emails, and chat transcripts exchanged with our customer support team.
• Preferences: responsible gaming limits, notification preferences, and marketing opt-in/opt-out choices set within your account dashboard.

3.2 Data Generated Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone (defaulting to WIB, UTC+7 for Indonesian players).
• Usage data: pages visited, features used, search queries entered within the platform, bet history, game session duration, deposit and withdrawal timestamps.
• Cookie and tracking data: as described in Section 6 below.

3.3 Data Received from Third Parties

• Identity verification results returned by KYC processing partners, including age-verification outcomes and fraud-risk scores.
• Payment confirmation data returned by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja confirming that a transaction has been authorised and settled.
• Anti-fraud and anti-money-laundering signals from compliance screening services used to meet our regulatory obligations.

Summary of Data Categories and Purposes

bob68 uses your Personal Data strictly for the purposes listed below. We do not use your data for any purpose that is incompatible with those stated here without first obtaining your explicit consent or as otherwise permitted by law.

• Account management: Creating, maintaining, and securing your player account, including processing login requests and enforcing session security.
• Age and identity verification: Confirming that you are at least 21 years of age and that the identity information you have provided is accurate, as required before withdrawal requests are processed.
• Transaction processing: Facilitating deposits and withdrawals through your chosen payment channel — BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja — and maintaining accurate financial records.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality-assurance purposes.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem-gambling behaviour, enforcing deposit limits and self-exclusion requests, and providing appropriate intervention resources.
• Fraud prevention and AML compliance: Detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited activities as described in the Terms & Conditions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, add features, and fix technical issues.
• Marketing communications: Sending you information about promotions, bonuses, slot tournaments, and seasonal offers — but only where you have opted in to receive such communications. You can withdraw consent at any time.
• Legal obligations: Retaining records as required by applicable law and responding to lawful requests from government or regulatory authorities.

bob68 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and bob68 — for example, creating your account, processing deposits, and settling winnings.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering rules, age-verification requirements, and lawful requests from authorities.
• Legitimate interests: Processing carried out for bob68's legitimate business interests where those interests are not overridden by your privacy rights — for example, fraud detection, platform security, and service analytics.
• Consent: Processing for purposes beyond those above — particularly marketing communications — where we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bob68 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device by your browser when you visit bob68.pro. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — for example, maintaining your login session, remembering your account region (Indonesia / WIB), and enabling the deposit flow. These cannot be disabled without impairing your ability to use the platform.
• Performance and analytics cookies: Collect anonymised data about how players navigate the platform — pages visited, features clicked, error rates — to help us identify and fix issues and improve the user experience. No personally identifiable information is included in analytics reports.
• Functional cookies: Remember your preferences, such as your preferred language, notification settings, and responsible gaming limits, so you do not need to re-enter them on each visit.
• Marketing cookies: Used only where you have given consent to receive personalised promotional communications. These cookies help us attribute promotional activity and measure campaign effectiveness without sharing your data with third-party advertising networks.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from using core platform features including login and deposits. Blocking performance or marketing cookies will not affect your ability to place wagers or access your account.

bob68 does not sell your Personal Data. We share data only in the specific circumstances described below, and only to the minimum extent necessary:

• Payment providers: We share the minimum financial data required — your name, payment account identifier, and transaction amount in IDR — with BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja to process your deposits and withdrawals.
• KYC and identity verification partners: We transmit your KYC documents to licensed verification service providers for the sole purpose of confirming your identity and age. These partners are contractually prohibited from using your data for any other purpose.
• Game content providers: When you play a game powered by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, a session token and anonymised player identifier are transmitted to that provider's game server. No personally identifiable registration data is transmitted to game studios.
• Fraud and compliance vendors: We may share technical data — including IP addresses, device fingerprints, and transaction patterns — with fraud-detection and anti-money-laundering screening services to protect the platform and comply with our legal obligations.
• Legal and regulatory authorities: We will disclose Personal Data to government agencies, regulators, or law enforcement bodies where we are compelled to do so by a valid legal order, warrant, or regulatory requirement. Where permitted, we will notify you of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of the Operator's assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

The bob68 platform is operated as an international service. Your Personal Data may be stored on or transmitted to servers located outside of Indonesia. Where such international transfers occur, bob68 implements appropriate safeguards to ensure that your data receives a level of protection equivalent to that described in this Policy.

Safeguards for international transfers may include contractual data-protection clauses incorporated into our agreements with third-party providers, as well as technical security measures such as encryption in transit and at rest. If you have questions about the specific safeguards applied to any transfer, please contact us at [email protected].

bob68 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and KYC documents: Retained for the lifetime of your Account plus a minimum of five (5) years after Account closure, to satisfy anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial compliance purposes.
• Customer support records: Retained for three (3) years from the date of the most recent interaction, to support dispute resolution and quality assurance.
• Marketing preference data: Retained until you withdraw consent or close your Account, whichever occurs first. Proof of your original consent is retained for one (1) year after withdrawal to demonstrate compliance.
• Technical and usage data: Anonymised and aggregated after thirteen (13) months for analytics purposes; raw session logs are deleted after ninety (90) days.

When Personal Data is no longer required, it is securely deleted or rendered permanently irreversibly anonymised in accordance with our data destruction procedures.

bob68 maintains a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive data categories including KYC documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access specific categories of player data.
• Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals.
• Multi-factor authentication enforced for all internal systems that access player data.
• Automated anomaly detection systems that flag unusual login patterns, payment behaviours, or data-access events for immediate review.
• Formal incident-response procedures: in the event of a data breach that may affect your rights, bob68 will notify affected players without undue delay and take immediate steps to contain the breach.

While we employ robust security practices, no online platform can guarantee absolute security. You also play a role in protecting your account by using a strong, unique password and keeping your login credentials confidential.

As a data subject, you hold the following rights with respect to the Personal Data bob68 processes about you. To exercise any of these rights, please contact us at [email protected] with your Account username and a description of your request. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days.

Please note that certain rights are subject to limitations where retention of your data is required by law — for example, AML record-keeping obligations will take precedence over an erasure request made within the mandatory retention window.

The bob68 platform is strictly restricted to individuals aged 21 years and over. We do not knowingly collect Personal Data from anyone under the age of 21. If we become aware that an Account has been registered by or on behalf of an underage individual, we will immediately close the Account, delete the associated Personal Data, and — where funds have been deposited — return them to the original payment source subject to verification.

If you believe that a minor has registered on bob68 without authorisation, please notify us immediately at [email protected] so that we can take prompt corrective action.

Content on bob68.pro may occasionally reference or describe third-party services such as game studios (Pragmatic Play, Evolution Gaming, Microgaming), payment providers (BCA, OVO, GoPay), or sports organisations (BRI Liga 1, FIFA, AFF). These references do not constitute endorsements, and bob68 does not control the data-handling practices of any third party.

This Privacy Policy applies solely to the bob68 platform. If you navigate away from bob68.pro to any external service — including the apps of BCA, OVO, or DANA — your interactions with those services are governed exclusively by their own privacy policies, for which bob68 accepts no responsibility.

bob68 reserves the right to update or amend this Privacy Policy at any time. Material changes — such as a new category of data being collected or a new sharing arrangement with a third party — will be communicated to registered players via a platform notification or email to the address associated with your Account, at least seven (7) days before the change takes effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the bob68 platform after a revised Policy has taken effect constitutes your acknowledgement of the changes.

If you do not accept any material amendment to this Policy, you have the right to close your Account before the effective date and to request deletion of your Personal Data to the extent permitted by our retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bob68 processes your Personal Data, please contact our team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" and include your Account username to allow us to respond efficiently.
• Live Chat: Available 24/7 via the chat widget within your authenticated Account dashboard. Support is available in both Indonesian and English.
• Response Time: Privacy-related email queries are acknowledged within five (5) business days. Substantive responses are provided within thirty (30) days, or we will notify you if an extension is required.

For formal data-subject rights requests — access, rectification, erasure, portability, objection, or withdrawal of consent — please send your request in writing to [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise.

You also have the right to lodge a complaint with the relevant data-protection authority in your jurisdiction if you believe bob68 has failed to handle your Personal Data in accordance with applicable law. We would, however, appreciate the opportunity to address your concern directly before any such complaint is filed.