bts89 Privacy Policy

bts89 operates the online gambling and sports betting platform accessible at bts89.org (the "Platform"). As the data controller responsible for your personal information, bts89 is fully committed to protecting the privacy and security of every member and visitor. This Privacy Policy sets out, in clear and transparent terms, how bts89 collects, processes, stores, shares, and protects your personal data, and how you can exercise your rights in relation to that data.

This Policy applies to all personal data collected through the bts89 Platform, including data submitted during registration, KYC verification, deposits and withdrawals, customer support interactions, and general browsing of bts89.org. It applies equally to members based in Jakarta, Surabaya, Bali, Bandung, Medan, Yogyakarta, and all other regions of Indonesia.

Where bts89 processes your data as a processor on behalf of a licensed game studio or payment provider (for example, when you play an Evolution Gaming live table), that studio or provider's own privacy policy also applies to the data they independently collect. Links to relevant third-party policies are available within individual game interfaces.

The following key terms are used throughout this Privacy Policy with the meanings assigned below.

bts89 collects personal data across several categories, each necessary for a specific and legitimate operational purpose. The categories of data we collect are described in full below.

3.1 Registration Data

When you create a bts89 account, you provide the following information:

• Full legal name (as it appears on your national identity card)
• Date of birth (to confirm you are 21 or older)
• Residential address (to confirm Indonesian residency)
• Email address (for account communications and security alerts)
• Phone number (for two-factor authentication and account recovery)
• Chosen username and hashed account password

3.2 KYC Verification Data

To comply with anti-money-laundering obligations and to confirm member eligibility, bts89 may request:

• A clear photograph or scan of your Indonesian National Identity Card (KTP) or passport
• A selfie photograph holding your identity document
• A recent bank statement or utility bill confirming your residential address

3.3 Financial Transaction Data

All deposit and withdrawal activity generates a record that includes the transaction amount (in IDR / Rp), the payment channel used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja), the transaction timestamp (recorded in Western Indonesia Time, WIB, UTC+7), and the transaction status. Full bank account or e-wallet account numbers are masked in storage; only the last four digits are retained.

3.4 Gameplay & Betting Data

bts89 records all game sessions and sportsbook wagers, including the game or market selected, the stake and result of each bet, the session duration, and the device and IP address used. This data is used for dispute resolution, responsible gaming monitoring, and the detection of prohibited conduct such as collusion and use of automated betting tools.

3.5 Technical & Device Data

When you access bts89.org, our servers automatically collect:

• IP address (used for geolocation verification and fraud detection)
• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• Referring URL and pages visited within bts89.org
• Session duration and click-path data

3.6 Customer Support Data

All communications submitted to bts89 through live chat, email, or any other support channel are retained. This includes the content of your messages, any attachments you submit, the time and date of the interaction, and the resolution outcome. These records are used to train support quality and to resolve escalated disputes.

bts89 collects personal data through the following channels and mechanisms:

bts89 uses your personal data for the following purposes, each of which is described in relation to the legal basis that justifies the processing (see Section 6):

1. Account Management: Creating, maintaining, and securing your bts89 account, including processing login requests, enforcing session timeouts, and delivering account-related notifications.
2. Identity & Age Verification: Confirming that you are at least 21 years of age and a resident of Indonesia before granting full access to the Platform, in accordance with bts89's eligibility requirements.
3. Transaction Processing: Facilitating deposits from and withdrawals to your nominated payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) in Indonesian Rupiah (IDR).
4. Anti-Money Laundering (AML) Compliance: Monitoring transactions for patterns indicative of money laundering, fraud, or terrorist financing, and reporting suspicious activity to appropriate authorities as legally required.
5. Responsible Gaming: Using gameplay data to identify patterns that may indicate problem gambling and proactively contacting members where there is a genuine welfare concern, or applying self-imposed deposit, session, or self-exclusion limits.
6. Fraud Detection and Security: Analyzing IP addresses, device fingerprints, and behavioral patterns to detect and prevent unauthorized access, multi-accounting, bonus abuse, and use of automated betting software.
7. Dispute Resolution: Investigating and resolving member complaints related to gameplay outcomes, transaction discrepancies, or alleged policy breaches by referencing stored gameplay logs and transaction records.
8. Marketing Communications: Sending promotional offers, seasonal bonus notifications (such as Idul Fitri or Ramadhan promotions), and bts89 product updates to members who have explicitly opted in to receive such communications.
9. Platform Improvement: Analyzing aggregate, anonymized usage data to improve the bts89 user interface, optimize game lobby layout, and enhance the overall member experience.
10. Legal Compliance: Retaining records as required by the laws of the jurisdiction in which bts89 holds its operating license, including minimum transaction record retention periods of five years.

bts89 processes your personal data on one of the following lawful bases, depending on the specific purpose of each processing activity:

bts89 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

7.1 Payment Processors
Transaction data is shared with the payment processors that facilitate your deposits and withdrawals — including the banking networks of BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata, and the e-wallet networks of OVO, DANA, GoPay, ShopeePay, and LinkAja. This sharing is limited to the data required to execute and reconcile each specific transaction.

7.2 Identity Verification Providers
KYC documents are processed by bts89's appointed identity verification provider under a formal data processing agreement. The provider may use automated document-scanning technology to verify the authenticity of identity documents. Verified data is stored only as long as required for compliance and dispute-resolution purposes.

7.3 Certified Game Studios
When you play a game supplied by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, or Spribe, a game session token and your account identifier (a pseudonymized reference, not your full name or financial data) are shared with the studio's game server to facilitate gameplay and record outcomes.

7.4 Anti-Fraud Networks
bts89 participates in industry anti-fraud networks. Where a Member's account activity triggers a high-risk fraud signal, limited account metadata (IP address, device fingerprint, and account risk score) may be shared with network partners to identify and prevent cross-platform fraudulent activity.

7.5 Legal and Regulatory Disclosure
bts89 will disclose personal data to law enforcement agencies, regulatory authorities, or courts where legally compelled to do so by a valid court order, subpoena, or applicable statute. bts89 will, where permitted, notify the affected Member of such a disclosure request before complying.

bts89.org uses cookies and similar technologies to deliver core site functionality and to understand how members interact with the Platform. The cookies we use fall into three categories:

1. Essential Cookies: Required for the Platform to function correctly. These include session authentication tokens, CSRF protection tokens, and load-balancer routing cookies. Essential cookies cannot be disabled without breaking core Platform functionality. They are deleted automatically when you close your browser (session cookies) or after a fixed expiry period stated in the cookie.
2. Functional Cookies: Remember your preferences — such as your preferred language (English for international-preference members), display settings, and last-visited game category — to deliver a more personalized experience on return visits. Functional cookies persist for up to 12 months.
3. Analytical Cookies: Used to collect aggregate, anonymized data on how members navigate bts89.org — which pages are visited most frequently, where members exit the site, and how long sessions last. This data helps bts89 optimize the Platform layout and content. Individual users are not identifiable from analytical cookie data.

bts89 does not use third-party advertising cookies, pixel trackers, or behavioral profiling technologies that track your browsing activity across websites other than bts89.org.

bts89 implements a comprehensive, multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. The key security measures in place include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and bts89 servers is encrypted using TLS 1.2 or higher. The connection is indicated by the HTTPS padlock in your browser's address bar.
• Encrypted Data at Rest: Sensitive data stored on bts89 servers — including KYC documents, hashed passwords, and partial financial identifiers — is encrypted using AES-256 encryption.
• Access Controls: Access to member personal data within bts89 is strictly role-based. Only authorized personnel with a legitimate operational need may access personal data, and all internal access is logged and audited.
• Password Hashing: bts89 never stores your account password in plain text. Passwords are hashed using a one-way cryptographic algorithm with salting, meaning even bts89 staff cannot read your password.
• Intrusion Detection Systems: bts89's infrastructure is monitored around the clock by automated intrusion detection and anomaly-alerting systems. Any unusual access pattern triggers an immediate security review.
• Penetration Testing: bts89 commissions regular third-party penetration tests to identify and remediate security vulnerabilities proactively.

bts89 retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The retention periods that apply to each category of data are set out below.

Upon expiry of the applicable retention period, bts89 will securely delete or permanently anonymize your personal data so that it can no longer be attributed to you. Where deletion is technically complex due to backup architecture, data is suppressed from active use immediately and purged from backup systems within 90 days of the scheduled deletion date.

As a bts89 member, you hold the following rights in relation to your personal data. bts89 will respond to all valid rights requests within 30 calendar days of receipt. Where a request is complex or bts89 receives a high volume of requests, the response period may be extended by a further 30 days, in which case bts89 will notify you of the extension and the reason for it.

To exercise any of the above rights, please contact bts89 support via live chat on the Platform or by email at: support at bts89.org (plain text — not a clickable link). Please include your registered username and a clear description of your request to allow bts89 to process it efficiently.

The bts89 Platform is strictly intended for adults. You must be at least 21 years of age to register an account and use any part of the Platform, including free-play or demo game modes. bts89 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

As part of the KYC verification process, bts89 verifies the date of birth of every member against their submitted identity document. Any account where the member is found to be under 21 will be immediately suspended, all funds will be returned to the member's nominated payment channel after verification of ownership, and any winnings generated during the underage period will be forfeited in accordance with the bts89 Terms & Conditions.

bts89 operates infrastructure across multiple geographic regions to ensure Platform availability, low-latency gameplay, and resilient transaction processing for members across Jakarta, Surabaya, Bali, Medan, Bandung, and all other parts of Indonesia. As a result, personal data collected from Indonesian members may be stored on, or transferred to, servers located outside of Indonesia.

Where such international transfers occur, bts89 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that described in this Privacy Policy. These safeguards include:

• Contractual data protection clauses in agreements with all data processors and subprocessors that receive transferred data;
• Transfer only to jurisdictions or service providers whose data protection standards have been assessed and approved by bts89's compliance team;
• Encryption of all data in transit across international network boundaries using TLS 1.2 or higher.

By using the bts89 Platform, you acknowledge and consent to the international transfer of your personal data under the safeguards described above.

bts89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or Platform functionality. The "Last updated" date at the top of this page will be revised each time a change is made.

For material changes — those that significantly affect your rights or the way bts89 uses your data — bts89 will notify active members via their registered email address at least 14 days before the amended Policy takes effect. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data bts89 holds about you, please contact our Data Privacy team through one of the following channels:

• Live Chat: Available 24/7 directly from any page on the bts89 Platform. Our support team includes native Indonesian-speaking agents available across all Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9).
• Email: support at bts89.org (plain text — not a clickable link). Please mark your subject line with "Privacy Request" and include your registered username. Target response time: within 24 hours on business days.

When submitting a data rights request (Section 11), please provide your registered username, the specific right you wish to exercise, and any supporting information that will help bts89 locate and process your request efficiently. bts89 will acknowledge all privacy requests within 2 business days and provide a substantive response within 30 calendar days.