bes808 Privacy Policy

The following defined terms are used throughout this Privacy Policy. Familiarity with these definitions will help you understand how bes808 handles your personal data.

• "bes808", "we", "us", or "our" refers to the bes808 platform and its operating entity, accessible at https://bes808.app.
• "Platform" means the bes808 website, any associated mobile-optimized interface, and all services delivered through those channels.
• "Player" or "you" means any individual who registers an Account on the Platform or otherwise accesses any part of the Platform.
• "Personal Data" means any information that identifies or can be used to identify a living individual — including name, date of birth, national identity number, email address, mobile number, payment account details, device identifiers, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" (Know Your Customer) means the identity and age verification process through which bes808 confirms the identity of a Player before permitting withdrawals or continued platform access.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, analytics, and personalization.
• "Third-Party Service Provider" means any external company engaged by bes808 to deliver specific services — such as payment processing, identity verification, fraud detection, or game software — that requires limited access to Personal Data to function.

This Privacy Policy applies to all Personal Data collected by bes808 in connection with your use of the Platform, regardless of whether you are a registered Player, a visitor browsing the Platform without an account, or a former Player whose account has been closed.

bes808 acts as the data controller with respect to the Personal Data described in this Policy. This means we determine the purposes for which your Personal Data is collected and the manner in which it is processed. Where we engage Third-Party Service Providers to process data on our behalf, those providers act as data processors and are contractually bound to process your data only in accordance with our documented instructions.

This Policy applies to players located in Indonesia and to all individuals who access the Platform from Indonesian territory. Players in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and all other regions of Indonesia are subject to this Policy in equal measure.

bes808 collects the following categories of Personal Data:

bes808 collects Personal Data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or participate in a promotion.
• Automatically: through Cookies, web server logs, and similar tracking technologies that record Technical Data and Usage Data each time you access the Platform. See Section 7 (Cookies & Tracking) for full details.
• From Third-Party Service Providers: identity verification partners may return enriched data (e.g., document validation status) to us following a KYC check; payment processors may confirm transaction status; fraud-detection services may provide risk scores associated with your device or account activity.
• From publicly available sources: in limited circumstances, we may cross-reference publicly available information to verify the accuracy of data you have provided or to fulfil our anti-money-laundering obligations.

You are not obligated to provide all requested data; however, refusing to provide data that is marked as required during registration or KYC will prevent bes808 from opening or maintaining your Account, or from processing withdrawal requests, as applicable.

bes808 processes your Personal Data only for the specific purposes listed below, each supported by a documented legal basis:

• Account creation and management — to register your account, verify your identity, and maintain your player profile. Legal basis: performance of a contract.
• Payment processing — to facilitate deposits and withdrawals via Indonesian local banks and e-wallets in IDR. Legal basis: performance of a contract.
• KYC and age verification — to confirm that you meet the minimum age requirement of 21 years and satisfy our identity verification obligations. Legal basis: legal obligation and legitimate interest.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct. Legal basis: legitimate interest and legal obligation.
• Customer support — to respond to your inquiries, resolve disputes, and manage complaints submitted via live chat or email. Legal basis: performance of a contract.
• Responsible gaming management — to monitor betting patterns, enforce self-imposed limits, and identify players who may be exhibiting signs of problem gambling. Legal basis: legitimate interest and legal obligation.
• Platform improvement and analytics — to analyze aggregate Usage Data and Technical Data for the purpose of improving platform performance, feature development, and user experience. Legal basis: legitimate interest.
• Personalized promotions and marketing — to send you bonus offers, free bet credits, and promotional updates tailored to your gaming preferences — only where you have explicitly opted in to receive such communications. Legal basis: consent (withdrawable at any time).
• Legal and regulatory compliance — to comply with applicable laws, respond to lawful requests from competent authorities, and maintain records required by our international operating license. Legal basis: legal obligation.

bes808 does not sell your Personal Data to any third party. We share data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors: Local bank transfer facilitators and e-wallet gateways (covering OVO, DANA, GoPay, ShopeePay, LinkAja, and the major Indonesian banks) receive the minimum financial data required to execute your deposit or withdrawal transaction.
• Identity verification partners: KYC and age-verification service providers receive your KTP or passport image and selfie solely for the purpose of confirming your identity and age. These providers are contractually prohibited from using your data for any other purpose.
• Game studio providers: Licensed game studios such as Pragmatic Play, Pocket Games Soft, Evolution Gaming, NetEnt, and Microgaming receive a pseudonymous player identifier and session token to deliver game content and record results. They do not receive your name, bank details, or contact information.
• Fraud and risk management services: Anti-fraud and anti-money-laundering screening tools may receive Technical Data (IP address, device fingerprint) and transaction metadata to generate risk assessments. No document-level identity data is shared for this purpose.
• Customer support infrastructure: Our live chat and ticketing platform provider stores chat transcripts and support ticket content on secure, access-controlled servers. This provider acts as a data processor under a binding data processing agreement.
• Legal authorities: bes808 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by a lawful order, subpoena, or other legal process. We will notify you of such disclosure where legally permitted to do so.

bes808 uses Cookies and similar tracking technologies (including web beacons and local storage objects) to operate the Platform effectively and to improve your experience. The categories of Cookies we use are as follows:

• Strictly necessary Cookies: Required for the Platform to function. These include session authentication tokens, load-balancing identifiers, and security tokens. These Cookies cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences — such as your preferred language display, last-visited game category, and deposit method — to provide a personalized experience on return visits.
• Analytics Cookies: Collect aggregated, anonymized Usage Data to help us understand which features are most popular, which pages have high exit rates, and how players navigate the Platform. This data is used exclusively for internal performance improvement.
• Security and fraud-prevention Cookies: Assist in detecting unusual account activity, multiple-account registration, and automated bot traffic by generating a device fingerprint that can be compared across sessions.

Most web browsers allow you to manage Cookie preferences through the browser settings menu. You can set your browser to refuse all Cookies or to alert you when a Cookie is being placed. Please note that disabling strictly necessary Cookies will prevent you from logging into your bes808 Account. Disabling functional or analytics Cookies will not prevent Platform access but may degrade certain personalization features.

bes808 does not use third-party advertising or retargeting Cookies. We do not share Usage Data derived from Cookies with advertising networks or data brokers.

bes808 retains your Personal Data for different periods depending on the category of data and the purpose for which it was collected:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be associated with an individual. Anonymized data may be retained indefinitely for aggregate statistical analysis.

bes808 implements a multi-layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Key security measures include:

• Transport encryption: All data transmitted between your device and bes808 servers is encrypted using TLS 1.2 or higher (256-bit SSL), preventing interception during transmission.
• At-rest encryption: Personal Data stored in bes808 databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access controls: Internal access to Personal Data is governed by a principle of least privilege. Employees and contractors can only access the data they need to perform their specific job function. All access is logged, and logs are reviewed regularly.
• Two-factor authentication (2FA): bes808 staff with access to systems containing Personal Data are required to use 2FA. Players are strongly encouraged to enable 2FA on their own accounts via the account settings panel.
• Regular security audits: bes808 conducts periodic internal security reviews and engages independent third-party security firms to perform vulnerability assessments of the Platform infrastructure.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, bes808 will notify affected Players without undue delay — and within 72 hours of becoming aware of the breach — via the email address registered to your account.

As a registered Player, you hold the following rights with respect to your Personal Data. You may exercise any of these rights at any time by submitting a written request to [email protected] with the subject line "Data Rights Request".

bes808 will respond to all verified data-rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days; we will notify you of any extension and the reason for it within the initial 30-day period. Identity verification may be required before we can action a request to ensure we do not disclose or modify another person's data in error.

There is no fee for exercising your data rights. However, bes808 reserves the right to charge a reasonable administrative fee — or to decline to process — requests that are manifestly unfounded or excessive, particularly where requests are repetitive in nature.

The bes808 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process; any account found to belong to a person under 21 will be immediately suspended and all associated Personal Data will be deleted without delay.

If you are a parent or guardian and believe that a minor in your household has registered an account on bes808 or submitted Personal Data to the Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action, including account closure and data deletion, within 48 hours of a verified report.

bes808 may send you promotional messages — including bonus offers, free bet credits, seasonal promotions (for example, around Idul Fitri, Ramadhan, or Indonesian Independence Day on 17 August), and new game launch announcements — through the following channels:

• Email to the address registered on your account
• SMS to your registered Indonesian mobile number
• In-platform notifications displayed after login

Marketing communications are sent only where you have given explicit opt-in consent during registration or at a later stage through your account preferences. You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in the account settings panel after login;
• Clicking the unsubscribe link included at the bottom of any marketing email; or
• Contacting our support team via live chat or email and requesting removal from all marketing lists.

Withdrawal of marketing consent will not affect the lawfulness of processing carried out before consent was withdrawn. Transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not subject to the marketing opt-out mechanism and will continue to be sent as necessary for the operation of your account.

The bes808 Platform does not contain links to third-party websites as a standard feature. However, where any such link is incidentally present — for example, within a game provider's in-game help panel — bes808 has no control over, and accepts no responsibility for, the privacy practices or content of those third-party sites.

If you navigate away from the bes808 Platform to any external website, we recommend that you read the privacy policy of that website before submitting any personal information. bes808's Privacy Policy applies exclusively to data collected through our own Platform.

bes808 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered Players by email and by posting a prominent notice on the Platform for a minimum of 14 days prior to the change taking effect.

The "Last updated" date shown at the top of this page reflects the date on which the most recent revision was published. The version of the Privacy Policy in effect at the time you use the Platform governs the processing of your data during that session. If you disagree with any material change to this Policy, you must stop using the Platform and may request account closure in accordance with the procedure described in our Terms & Conditions.

We encourage you to review this Privacy Policy periodically, particularly before submitting new categories of Personal Data — for example, when uploading KYC documents for the first time or when adding a new payment method to your account.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the bes808 Data Privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the Platform after login. Our Indonesian-speaking support agents can assist with privacy inquiries in English or Indonesian. Average response time is under 15 minutes (WIB, UTC+7).
• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" for faster routing. Email responses are delivered within 24 hours for general inquiries and within 30 calendar days for formal data-rights requests.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or competent regulatory body in the jurisdiction that governs our operating license. bes808 will cooperate fully with any such regulatory inquiry.