At bnb96, your personal data belongs to you. This Privacy Policy explains precisely what information we collect when you use our platform, why we collect it, how it is stored and protected, and the rights you hold over it as a player based in Indonesia.
All data transmitted between your device and bnb96's servers is protected by industry-standard TLS 1.3 encryption. Your account credentials, financial details, and personal information are never sent in plain text across any network.
bnb96 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Your information is used exclusively to operate the platform, process transactions, and comply with regulatory obligations.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a data request through our support team and we will respond within 14 calendar days in accordance with applicable data protection standards.
Personal data is stored on access-controlled, encrypted servers with regular security audits. Sensitive fields such as passwords are hashed with bcrypt and are never stored in recoverable plain text — not even by our own engineering team.
We collect only the data that is strictly necessary to provide our services, fulfill KYC obligations, and comply with our international licensing requirements. We do not collect data speculatively or for purposes beyond those disclosed in this policy.
Promotional communications from bnb96 are entirely optional. You can opt out of all marketing emails, SMS alerts, and WhatsApp messages at any time via your Account settings or by contacting our support team — and opt-out requests are processed within 48 hours.
bnb96 is an internationally licensed online betting and gaming platform that serves English-preference players across Indonesia, including major cities such as Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, Semarang, and Makassar. This Privacy Policy governs all personal data processing activities conducted by bnb96 in connection with the operation of the platform at https://bnb96.app and any associated progressive web application or mobile interface.
This policy is written in plain, professional English to ensure that every player fully understands their rights and our obligations, regardless of their level of familiarity with formal data protection language. Where technical or legal terms are unavoidable, we have provided clear explanations inline.
bnb96 acts as the data controller for personal data collected directly through the platform. Where we engage third-party service providers who process data on our behalf (such as payment processors and game studios), those parties act as data processors subject to strict contractual obligations aligned with this policy.
The categories of personal data collected by bnb96 depend on how you interact with the platform. We have organised these categories in the table below for clarity:
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP or passport number) | At registration and during KYC verification |
| Contact Data | Email address, mobile phone number (Indonesian format), WhatsApp number | At registration; updated by player on request |
| Address Data | Residential address, city, province, postal code | At KYC verification stage |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records in IDR | When adding a payment method or completing a transaction |
| KYC Documents | Scanned or photographed copies of KTP, passport, driving licence, utility bills, bank statements | When withdrawal is first requested or account review is triggered |
| Account & Gaming Data | Username, account balance, betting history, game session logs, bonus redemption records, responsible gaming tool settings | Continuously during platform use |
| Technical Data | IP address, device fingerprint, browser type and version, operating system, screen resolution, time zone (WIB/WITA/WIT) | Automatically on each platform visit |
| Usage Data | Pages visited, features used, session duration, click-stream data, search queries within the platform | Automatically during active sessions |
| Communications Data | Live chat transcripts, email correspondence, WhatsApp messages exchanged with bnb96 support | When you contact our support team |
Registration details, KYC documents, payment information, and communications you initiate with our support team are provided directly by you. Providing accurate information in these categories is a requirement of your account agreement with bnb96; providing false information constitutes a breach of our Terms & Conditions.
Technical and usage data is collected automatically whenever you access the platform, whether or not you are logged in. This data is essential for platform security, fraud prevention, and performance optimization. It is not possible to use the bnb96 platform while entirely preventing the collection of technical data, as it is inherent to the operation of any internet-based service.
In some circumstances bnb96 may receive supplementary data from third-party sources, including identity verification agencies used to cross-check KYC documents, fraud prevention services that flag IP addresses or device identifiers associated with known fraudulent activity, and payment processors that confirm the outcome of deposit or withdrawal transactions.
bnb96 uses personal data for the following clearly defined purposes. We do not use data for any purpose not listed here without first updating this Privacy Policy and notifying affected players.
bnb96 processes personal data on the following legal grounds:
bnb96 does not sell personal data. We share data only in the following limited circumstances:
We engage carefully selected third-party service providers to assist in operating the platform. These include payment processors (which receive the minimum financial data necessary to execute your transactions), identity verification agencies (which receive KYC document data under strict confidentiality agreements), game content providers such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe (which receive anonymised session identifiers sufficient to deliver game content), and cloud infrastructure and cybersecurity vendors. All data processors are contractually bound to process data only on bnb96's instructions and to apply security standards equivalent to those described in this policy.
bnb96 will disclose personal data to competent regulatory bodies, licensing authorities, law enforcement agencies, or courts when required to do so by a lawful order, warrant, or legal obligation. Where legally permitted, bnb96 will notify the affected player of such a disclosure request before complying.
In the event of a merger, acquisition, or sale of all or part of bnb96's business, personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players before their data is transferred and becomes subject to a different privacy policy, and players will retain the right to request deletion of their data prior to any such transfer.
Where a player has activated permanent self-exclusion, bnb96 may share the minimum necessary data (typically a hashed identifier and exclusion status) with partner responsible gaming networks to prevent the excluded player from registering a new account on affiliated platforms. This sharing is conducted exclusively to protect the player's own welfare and is not used for commercial purposes.
Cookies are small text files placed on your device by a website when you visit it. bnb96 uses cookies and similar tracking technologies (including local storage and session tokens) to maintain your login session, remember your preferences, protect account security, and analyse aggregate platform usage.
| Cookie Type | Purpose | Can Be Declined? |
|---|---|---|
| Strictly Necessary | Session authentication, CSRF protection, load balancing, security token storage | No — required for the platform to function |
| Functional | Language preference, timezone detection (WIB/WITA/WIT), odds format setting, theme preference | Yes — declining may reduce comfort features |
| Analytics | Aggregate page-view counts, feature usage heatmaps, session duration data (no personal identifiers) | Yes — declining does not affect gameplay |
| Security / Fraud Prevention | Device fingerprint components used to detect multi-accounting and bot activity | No — required to maintain platform integrity |
You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary or security cookies may prevent you from logging in to your bnb96 account or using certain features. bnb96 does not respond to browser-level "Do Not Track" signals at this time, as no universally accepted standard for responding to these signals currently exists.
bnb96 retains personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with applicable legal, regulatory, and licensing obligations. The table below summarises our standard retention periods by data category:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years post-closure | Licensing obligation and dispute resolution |
| Financial Transaction Records | 7 years from transaction date | Anti-money-laundering regulatory requirement |
| KYC Documents | Duration of account plus 5 years post-closure | Regulatory compliance and audit readiness |
| Betting History | Duration of account plus 2 years post-closure | Dispute resolution and responsible gaming monitoring |
| Support Communications | 3 years from last interaction | Quality assurance and complaint resolution |
| Marketing Consent Records | 3 years from consent or opt-out, whichever is later | Proof of consent and compliance with marketing regulations |
| Technical & Usage Data | 13 months from collection | Platform analytics and security monitoring |
| Self-Exclusion Records | Indefinite (permanent exclusion) or duration of cooling-off period plus 1 year | Player protection and regulatory obligation |
At the end of the applicable retention period, personal data is either securely deleted or irreversibly anonymised. Anonymised data (which can no longer identify any individual) may be retained indefinitely for statistical and research purposes.
bnb96 implements a multi-layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction. Key technical controls include:
Access to personal data within bnb96 is governed by a strict need-to-know principle. Staff with access to player data undergo background checks, receive regular data protection training, and are bound by confidentiality agreements. Access rights are reviewed quarterly and revoked immediately upon termination of employment or contract.
In the event of a confirmed personal data breach that poses a risk to affected players, bnb96 will notify impacted players without undue delay and, in any case, within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps bnb96 has taken or will take to address the breach and mitigate its effects.
As a player and data subject, you hold the following rights in relation to your personal data held by bnb96. To exercise any of these rights, please contact our support team via live chat or email at [email protected], clearly identifying your account and the right you wish to exercise.
You may request a copy of all personal data bnb96 holds about you, along with information about how it is processed. We will provide this in a structured, commonly used format within 14 calendar days.
You may request correction of any inaccurate or incomplete personal data. For identity-related data, corrections may require supporting documentation consistent with our KYC process.
You may request deletion of your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. Note that data subject to mandatory regulatory retention periods cannot be deleted until those periods have expired.
You may request that bnb96 restricts processing of your data in certain circumstances — for example, while a rectification request is under review, or where you have objected to processing and we are assessing your objection.
Where processing is based on contract or consent and is carried out by automated means, you may request your personal data in a structured, machine-readable format (JSON or CSV) for transfer to another service provider.
You may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention or responsible gaming monitoring. bnb96 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of a legal claim.
We will respond to all valid data rights requests within 14 calendar days. In complex cases, this period may be extended by a further 14 days, in which case we will notify you of the extension and the reason for it before the initial deadline expires.
The bnb96 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification checks are conducted both at registration (via self-declaration) and at the KYC verification stage (via government-issued identity documents such as the Indonesian KTP or passport).
If bnb96 discovers or has reasonable grounds to suspect that an account has been registered by a person under the age of 21, all personal data associated with that account will be processed solely for the purpose of:
If you believe that a minor has registered an account on bnb96, please contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.
The bnb96 platform integrates third-party services to deliver a complete betting and gaming experience. While we carefully vet all partners, each third-party provider operates under its own privacy policy and data practices. The table below identifies the categories of third-party services and their relevance to your personal data:
| Service Category | Examples | Data Shared |
|---|---|---|
| Game Content Providers | Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft | Anonymised session token; no identifiable personal data |
| Payment Processors | BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja | Account name and number required to process the specific transaction |
| Identity Verification (KYC) | Licensed third-party KYC verification agencies | Full name, date of birth, ID document image, for verification purposes only |
| Fraud & Risk Management | Industry fraud-prevention services | IP address, device fingerprint, hashed account identifier |
| Cloud Infrastructure | Hosting and content delivery providers | Encrypted data at rest; providers cannot read the content |
| Analytics | Internal analytics tools (no external analytics vendors with access to identifiable data) | Aggregated, anonymised usage statistics only |
bnb96 does not integrate third-party advertising networks, social media tracking pixels, or behavioural advertising platforms on the platform. The third-party services listed above are solely operational in nature.
Links to external websites may appear in responsible gaming resources or informational content on the platform. bnb96 has no control over the privacy practices of external websites and recommends that you review the privacy policy of any external site before providing personal data to that site.
bnb96 operates on an internationally hosted infrastructure to deliver consistent, low-latency service to players across Indonesia. As a result, personal data may be transferred to and stored on servers located outside Indonesia, including in jurisdictions within Asia-Pacific and Europe where our hosting providers and game content partners maintain data centres.
All international data transfers are conducted under one or more of the following safeguards:
If you would like more information about the specific safeguards applied to international transfers of your personal data, please contact our support team at [email protected].
bnb96 reviews this Privacy Policy at least annually and whenever significant changes occur in how we process personal data. When material changes are made, we will notify registered players by email to the address on file, or by a prominent notice displayed within the platform upon next login, at least 14 days before the changes take effect.
The "Last Updated" date at the top of this page indicates when the most recent revision was published. Continuing to use the bnb96 platform after the effective date of any revision constitutes your acknowledgment of the updated policy. If you do not agree with the changes, you must stop using the platform and may request account closure before the revised policy takes effect.
Non-material changes — such as corrections to typographical errors, clarifications that do not affect your rights or our obligations, or updates to formatting — may be made without advance notice. We encourage you to review this page periodically to stay informed of how bnb96 protects your personal data.
For any privacy-related enquiry, data subject rights request, or concern regarding how bnb96 handles your personal data, please contact us through the following channels:
When submitting a data subject rights request, please provide your registered account username and email address so that we can verify your identity before processing the request. We may ask for additional verification if the request relates to particularly sensitive data categories.
Now that you understand exactly how bnb96 protects your personal data, explore Indonesia's most trusted English-language betting platform — sports betting, live casino, slots, and more. Adults only, 21+.