Privacy Policy

1Introduction

byb108 operates a premier online gaming and sports betting platform serving primarily Indonesian players, including users located in Jakarta, Surabaya, Bandung, Bali, Medan, Makassar, Semarang, Palembang, Yogyakarta, and other regions across Indonesia. The protection of your personal data is a core operational commitment at byb108, not a secondary consideration.

This Policy is designed to give you a clear, complete picture of how your information flows through the byb108 platform — from the moment you register to the point at which your account is closed. We have structured this document to be as transparent and readable as possible, while meeting the formal requirements of our international licensing obligations.

This Policy should be read in conjunction with the byb108 Terms & Conditions, which together form the complete legal framework governing your use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

2Data Controller

For the purposes of applicable data protection legislation, byb108 acts as the data controller with respect to the personal information of its Members. This means byb108 determines the purposes for which and the means by which your personal data is processed.

Where byb108 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification vendors, or cloud infrastructure providers), those parties act as data processors and are contractually required to handle your data in accordance with byb108's instructions and to applicable data protection standards.

All data-related inquiries, access requests, and complaints may be directed to the byb108 Data Protection contact listed in Section 15 of this Policy.

3Data We Collect

byb108 collects the following categories of personal data from Members:

3.1 Identity & Registration Data

• Full legal name as it appears on official Indonesian government identification
• Date of birth (to verify compliance with the 21+ age requirement)
• Residential address, including city (e.g., Jakarta, Surabaya, Bandung) and province
• Chosen username and encrypted account password
• Nationality and, where required by KYC, Indonesian national identity card (KTP) number

3.2 Contact Data

• Registered email address
• Indonesian mobile phone number (used for account security and transaction notifications)

3.3 Financial & Payment Data

• Indonesian bank account details (bank name such as BCA, BRI, BNI, Mandiri, CIMB Niaga, or Bank Permata; account holder name; account number)
• E-wallet identifiers associated with OVO, DANA, GoPay, ShopeePay, or LinkAja accounts registered in the Member's name
• Transaction history including deposit amounts, withdrawal requests, and bonus activity

3.4 KYC Verification Documents

• Scanned copy or photograph of a valid Indonesian national identity card (KTP) or passport
• Proof of address documentation where required
• Proof of payment method ownership (e.g., bank statement header or e-wallet screenshot)

3.5 Technical & Usage Data

• IP address and approximate geolocation at the time of login and transaction
• Device type, operating system, browser type, and version
• Session duration, pages visited, game history, and betting activity logs
• Login timestamps and logout records

3.6 Communications Data

• Records of support interactions via live chat, email, or any other support channel
• Content of any complaints, dispute submissions, or responsible gaming requests submitted to byb108

4How We Collect Data

byb108 collects personal data through the following means:

4.1 Directly From You

The majority of personal data byb108 holds is provided directly by you at the time of account registration, KYC verification, deposit or withdrawal submission, bonus claim, or when you contact our support team. You are not obligated to provide personal data, but failure to do so may prevent you from accessing certain features of the platform, including the ability to process withdrawals.

4.2 Automatically Through Platform Use

When you use the byb108 platform, our systems automatically record technical data including your IP address, device iden tifiers, browser characteristics, and usage patterns. This data is collected through server logs, cookies, and similar technologies and is used for security, fraud prevention, and service improvement purposes.

4.3 From Third-Party Verification Providers

During the KYC verification process, byb108 may use specialized third-party identity verification services to cross-check the documents you provide against official databases and to detect fraudulent identity documents. These services act as data processors on behalf of byb108 and return verification results without permanently storing your documents on their own systems.

4.4 From Payment Service Providers

When you make a deposit or withdrawal via BCA, BRI, BNI, Mandiri, or other supported Indonesian banks, or via OVO, DANA, GoPay, ShopeePay, or LinkAja, byb108 receives transaction confirmation data from the payment processor including transaction ID, amount, timestamp, and transaction status. This data is used exclusively to reconcile payments with your byb108 wallet balance.

5Purpose & Legal Basis

byb108 processes your personal data for the following purposes, each supported by a lawful basis under applicable data protection regulations:

Where processing relies on your consent, you retain the right to withdraw that consent at any time by updating your account preferences or contacting byb108 support. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

6Data Sharing

byb108 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. Your data may be shared only in the following limited circumstances:

6.1 Service Providers

byb108 engages trusted third-party service providers to support platform operations, including payment processors for BCA / BRI / BNI / Mandiri bank transfers and OVO / DANA / GoPay e-wallet transactions, KYC verification vendors, cloud hosting infrastructure providers, and customer support software platforms. These parties process personal data solely on byb108's behalf, under strict contractual data protection obligations, and do not use your data for their own purposes.

6.2 Game Content Providers

When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, limited session data (including your Member ID and bet history) is shared with those providers to enable game functionality and for their internal audit and regulatory reporting purposes. These providers are bound by their own privacy commitments and licensing requirements.

6.3 Regulatory & Law Enforcement Authorities

byb108 may be required to disclose personal data to regulatory bodies governing our international gaming licence, to Indonesian government authorities where required by applicable Indonesian law, or to law enforcement agencies in connection with investigations into suspected illegal activity, fraud, or money laundering. Such disclosures are made only to the extent legally required and byb108 will, where permitted by law, notify affected Members of such disclosures.

6.4 Business Transfers

In the event that byb108 undergoes a merger, acquisition, or sale of all or a portion of its assets, personal data held by byb108 may be transferred to the acquiring entity as part of that transaction. Members will be notified via email and via a prominent notice on the platform at least 30 days prior to any such transfer taking effect, and you will be given the opportunity to close your account if you do not consent to the transfer.

7Data Retention

byb108 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Specific retention periods are as follows:

• Active account data: Retained for the duration of your account's active status and for 6 months following voluntary account closure.
• KYC verification documents: Retained for a minimum of 5 years following account closure to comply with anti-money laundering (AML) record-keeping requirements under our international licence.
• Transaction records: Retained for 7 years following the date of the transaction to comply with financial auditing and tax-reporting obligations.
• Support communications: Retained for 3 years following the resolution of the inquiry or complaint for quality assurance and dispute resolution purposes.
• Technical logs and usage data: Retained for 12 months for security monitoring and platform improvement, then anonymized or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted from byb108's active systems. Backup copies held for disaster recovery purposes are overwritten within 90 days of the primary deletion.

8Data Security

byb108 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and byb108 servers.
• Advanced encryption at rest for all personal data and KYC documents stored in byb108's databases.
• Multi-factor authentication (MFA) for access to byb108's internal administrative systems.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security firms.
• Role-based access controls ensuring that byb108 employees and contractors can only access personal data necessary for their specific job functions.
• 24/7 security operations center (SOC) monitoring for unauthorized access attempts, brute-force attacks, and anomalous activity patterns.
• Incident response protocols requiring immediate notification to affected Members and regulators in the event of a personal data breach, in accordance with applicable data protection law.

Despite these safeguards, no method of data transmission or storage is completely secure. byb108 cannot guarantee absolute security, and you acknowledge that you provide personal data to byb108 at your own risk. You are responsible for maintaining the confidentiality of your own account password and for immediately notifying byb108 if you suspect unauthorized access to your account.

9Cookies & Tracking Technologies

byb108 uses cookies and similar tracking technologies to support essential platform functionality, enhance security, and improve user experience. The types of cookies used on byb108 are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the operation of the byb108 platform. They enable core functionality such as secure login, session management, account authentication, and fraud detection. Strictly necessary cookies cannot be disabled without fundamentally breaking the platform's functionality.

9.2 Performance & Analytics Cookies

byb108 uses internal analytics cookies to understand how Members interact with the platform, which games are most popular, and where users encounter technical difficulties. This data is used exclusively to improve the byb108 experience and is never shared with third-party advertising networks. All analytics data is aggregated and anonymized such that individual Members cannot be identified.

9.3 Functionality Cookies

These cookies remember your preferences, such as language settings, time zone display (WIB, WITA, WIT), and display preferences, allowing byb108 to provide a more personalized experience on return visits.

9.4 What byb108 Does NOT Use

byb108 does not use third-party advertising cookies, behavioral profiling cookies, or cross-site tracking technologies. We do not integrate Facebook Pixel, Google Ads remarketing tags, or similar advertising trackers into the byb108 platform.

You may configure your browser to reject cookies, but doing so may prevent you from accessing certain features of the byb108 platform, including the ability to log in securely. Instructions for managing cookies in popular browsers can be found in your browser's help documentation.

10Your Rights

As a byb108 Member, you hold the following data protection rights, which you may exercise at any time by contacting byb108 support:

10.1 Right of Access

You have the right to request a copy of all personal data byb108 holds about you. byb108 will provide this information in a commonly used electronic format (PDF or CSV) within 30 days of receiving your verified request.

10.2 Right to Rectification

If any personal data byb108 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Most account information can be updated directly through your account settings; for changes to KYC-verified data (name, date of birth), contact byb108 support with supporting documentation.

10.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data where there is no compelling legal reason for byb108 to continue processing it. Note that byb108 may be required to retain certain data for compliance with AML record-keeping requirements (typically 5-7 years post account closure), and your right to erasure is subject to these legal retention obligations.

10.4 Right to Restriction of Processing

You may request that byb108 limit how your personal data is processed while a dispute regarding its accuracy or lawfulness is being resolved. Restricted accounts remain in a suspended state during the resolution period.

10.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another service provider where technically feasible. byb108 will provide your account data, transaction history, and game logs in CSV or JSON format upon request.

10.6 Right to Object

Where byb108 processes your personal data on the basis of legitimate interest, you have the right to object to that processing. byb108 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defense of legal claims.

10.7 Right to Withdraw Consent

Where processing is based on consent (e.g., promotional email communications), you may withdraw that consent at any time. Withdrawal can be effected by clicking the unsubscribe link in any promotional email, by updating your account communication preferences, or by contacting support.

To exercise any of these rights, please submit a request to [email protected] with "Data Rights Request" in the subject line. byb108 will verify your identity before processing the request and respond within 30 days.

11Minors & Age Policy

byb108 services are strictly intended for adults aged 21 years and older. byb108 does not knowingly collect personal data from individuals under the age of 21. If byb108 becomes aware that a Member is under 21 years of age, the account will be immediately suspended, all funds frozen, and the Member's legal guardian will be notified.

If you are a parent or guardian and believe your child has provided personal data to byb108, please contact us immediately at [email protected]. byb108 will take prompt steps to delete the data and close the account.

12Third-Party Services

The byb108 platform integrates with third-party payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft). Each of these third parties operates under its own privacy policy, which governs how your data is handled once it leaves the byb108 platform.

byb108 is not responsible for the privacy practices of these third-party services. We encourage you to review the privacy policies of any third-party service you interact with through the byb108 platform, particularly if you are redirected to an external payment portal or game interface.

13International Data Transfers

byb108's primary infrastructure is hosted in secure data centers located outside Indonesia. This means that personal data you provide to byb108 may be transferred to, stored in, and processed in jurisdictions that do not provide the same level of data protection as Indonesian law.

Where byb108 transfers personal data internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities, to protect your data to a standard equivalent to that required under applicable Indonesian data protection regulations.

14Policy Amendments

byb108 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. Material changes will be communicated to Members via the registered email address and via a prominent notice displayed on the platform for at least 30 days prior to the changes taking effect.

The date of the most recent update is displayed at the top of this page. Continued use of the byb108 platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must discontinue use of the platform and contact support to close your account.

15Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or byb108's data practices, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Inquiry" or "Data Rights Request"
• Response Time: Standard inquiries within 48 hours; formal data rights requests within 30 days

If you are not satisfied with byb108's response to a data protection complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. byb108 will cooperate fully with any regulatory investigation.