Privacy Policy — cb899

This Privacy Policy ("Policy") applies to all personal data processed by cb899 in connection with the online betting and casino platform operated at cb899.cam and any associated sub-domains, mobile interfaces, or communication channels (collectively, "the Platform"). It applies to all registered Players, prospective users who browse the Platform without registering, and any individual whose personal data is submitted in connection with an Account.

cb899 is committed to handling personal data responsibly, transparently, and in accordance with applicable international data protection standards. Our primary user base consists of Indonesian players — residents of Indonesia who access the Platform to engage in sports betting, live casino, slots, and togel (Indonesia's traditional numbers lottery) — and this Policy reflects the data-handling expectations and rights relevant to that audience.

By registering an Account on cb899, accessing the Platform, or otherwise providing personal data to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and cb899. In the event of any conflict between this Policy and the Terms & Conditions regarding data matters, this Policy takes precedence.

The data controller responsible for the personal data of cb899 Players is the legal entity holding the international gaming operating licence under which cb899 operates. As data controller, cb899 determines the purposes for which personal data is processed and the means by which that processing is carried out.

For any enquiries relating to data protection, privacy rights, or this Policy, please contact our designated Data Protection contact via email at [email protected]. We aim to acknowledge all data-related enquiries within 5 business days and to resolve them fully within 30 calendar days of receipt.

cb899 collects personal data in several categories. The scope of data collected may vary depending on whether you are a registered Player, a visitor browsing without an Account, or a Player who has completed full KYC verification. The principal categories of personal data we collect include:

cb899 collects personal data through the following channels and mechanisms:

• Direct submission: Data you actively provide when registering an Account, completing KYC, making deposits, requesting withdrawals, contacting support, or completing any on-platform form.
• Automated platform interaction: Technical and behavioural data collected automatically when you browse or use the Platform, including via server logs, session cookies, and analytics tools.
• Payment processors: Transaction confirmation data received from third-party payment gateways when you deposit or withdraw via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, or other supported channels.
• Identity verification services: Data returned by third-party KYC and anti-fraud verification providers that cb899 uses to confirm identity documents and screen against sanctions lists.
• Third-party game providers: Game session data generated by games sourced from third-party studios integrated into the cb899 platform.
• Publicly available sources: In limited circumstances for fraud prevention or AML screening, cb899 may cross-reference publicly available information (such as sanctions databases or adverse media) against the information you have provided.

cb899 processes personal data only where a valid legal basis exists. The primary legal bases we rely on, and the corresponding processing purposes, are set out below:

• Contract performance: Processing necessary to provide you with the services you have requested — including Account management, bet settlement, payment processing, and customer support.
• Legal obligation: Processing required for compliance with anti-money-laundering (AML) regulations, KYC obligations imposed by our licensing authority, and applicable financial crime prevention laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, product improvement, and business analytics — provided these interests are not overridden by your privacy rights.
• Consent: Marketing communications (email newsletters, promotional SMS, push notifications) are sent only where you have expressly opted in. You may withdraw consent at any time without affecting your Account.

cb899 does not use personal data for automated decision-making that produces legal or similarly significant effects on Players, except where required by our compliance obligations (e.g., automated sanctions screening). Where automated decisions affect your Account, you have the right to request human review by contacting our support team.

cb899 does not sell your personal data. We share personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors and banking partners: Your name and payment account details are shared with the relevant bank or e-wallet provider (e.g., BCA, BRI, BNI, OVO, DANA) solely to process deposits and withdrawals in IDR.
• KYC and identity verification providers: Identity documents are shared with contracted third-party KYC services for verification purposes under strict data-processing agreements that prohibit secondary use.
• Game technology providers: Anonymised session identifiers and game play data are shared with licensed game studios integrated into the cb899 platform for the purpose of game operation and fairness auditing.
• Fraud prevention and security services: Technical data (IP address, device fingerprint, behavioural signals) may be shared with specialist fraud prevention vendors to protect the Platform and its users.
• Regulatory and law enforcement authorities: cb899 will disclose personal data to competent authorities where required by law, by a valid court order, or by a regulatory instruction from our licensing authority. We will notify you of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of the business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations being assumed by that entity.

All third-party service providers who process personal data on cb899's behalf are required to enter into data-processing agreements that prohibit them from using your data for their own purposes and oblige them to implement appropriate security measures.

cb899 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. Our principal retention periods are as follows:

• Active Account data: Retained for the duration of your Account relationship with cb899, plus a minimum of five (5) years after Account closure, in order to satisfy AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, or five (5) years after Account closure, whichever is later — as required by anti-money-laundering legislation applicable to our licensing jurisdiction.
• Transaction records: Deposit, withdrawal, and bet history retained for a minimum of five (5) years for regulatory compliance and dispute resolution purposes.
• Support communications: Customer service correspondence retained for three (3) years from the date of the interaction, unless the subject matter of the communication requires longer retention (e.g., a formal complaint or regulatory inquiry).
• Marketing data: Retained until you withdraw consent or request deletion, after which it is removed from active marketing systems within 30 days.
• Technical and log data: Server logs and session data retained for 12 months for security monitoring purposes, then deleted or anonymised.

At the end of each applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

cb899 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Transport-layer encryption: All data transmitted between your device and the cb899 platform is encrypted using TLS 1.2 or higher with 256-bit cipher suites.
• At-rest encryption: Sensitive personal data — including KYC documents and financial account identifiers — is encrypted at rest using AES-256, the industry standard for data storage security.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and receive regular data protection training.
• Two-factor authentication (2FA): All internal administrative systems are protected by 2FA. Players are also encouraged to enable 2FA on their own Accounts for additional protection.
• Penetration testing: The cb899 platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: cb899 maintains a documented security incident response plan. In the event of a data breach that poses a risk to Players, we will notify affected individuals and relevant authorities within the timeframes required by applicable law.

While we invest significantly in security, no online system is entirely immune to risk. Players are responsible for maintaining the confidentiality of their own Account credentials and should contact us immediately if they suspect unauthorised access to their Account.

cb899 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how visitors use the Platform — which pages are most visited, where errors occur, and how players navigate between sections. This data helps us improve the Platform experience.
• Functional cookies: Store your preferences (e.g., language settings, deposit limits display) to personalise your experience across sessions.
• Responsible gaming cookies: Used to track session duration for players who have set time-based limits, ensuring those limits are enforced correctly across devices.

cb899 does not use third-party advertising or re-targeting cookies. You can control or delete cookies through your browser settings. Blocking all cookies may impair certain Platform features, including login and balance display. For detailed guidance on managing cookies, refer to your browser's help documentation.

cb899 operates as an international platform serving Indonesian players. As a result, your personal data may be transferred to and processed in countries outside Indonesia, including the jurisdiction in which the Operator is incorporated and the countries where our third-party service providers (KYC vendors, payment processors, game studios) operate their infrastructure.

When personal data is transferred internationally, cb899 ensures that appropriate safeguards are in place, including:

• Contractual data transfer clauses that impose equivalent data protection obligations on the recipient.
• Transfers to jurisdictions that our licensing authority recognises as providing an adequate level of data protection.
• Binding corporate rules where personal data is shared within a group of affiliated companies.

If you have questions about specific international transfers involving your personal data, please contact us at [email protected].

Subject to applicable law and the legitimate interests of cb899 in maintaining its legal and regulatory compliance obligations, you have the following rights with respect to your personal data held by cb899:

cb899 operates a strict minimum age policy of 21 years for all registered Players. The Platform is not directed at individuals under the age of 21, and cb899 does not knowingly collect or process personal data from anyone under that age.

Age verification is conducted as part of the KYC process for all Players requesting a withdrawal. Where cb899 discovers or has reasonable grounds to suspect that an Account has been registered by or on behalf of a person under the age of 21, we will immediately suspend the Account, conduct a review, and — if the suspicion is confirmed — permanently close the Account and return any real-money deposits (net of any withdrawals already made) to the depositor via the original payment method.

If you are aware of or suspect that a minor is using cb899, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

The cb899 platform integrates services and content from third-party providers, including game studios (such as live casino and slot providers), payment gateways, and analytics tools. These third-party services operate under their own privacy policies, which we encourage you to review separately.

cb899 is not responsible for the privacy practices of third-party service providers. However, all third parties with whom we share personal data are required to enter into written data-processing agreements that restrict how they may use your data and oblige them to implement security measures equivalent to or stronger than our own.

This Platform does not include links to external third-party websites for general browsing. Any external links that may appear in support communications or documentation are provided for informational purposes only, and cb899 does not endorse or accept responsibility for the content or privacy practices of any external site.

cb899 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. Material changes — those that significantly affect how your personal data is used or your privacy rights — will be communicated to registered Players via email notification or a prominent on-platform notice at least seven (7) days before the revised Policy takes effect.

For non-material changes (such as typographical corrections, clarifications, or minor administrative updates), the revised Policy will be published at cb899.cam/privacy-policy with an updated effective date, without advance individual notification.

Your continued use of the cb899 Platform after any revised Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

For all privacy-related enquiries, data subject rights requests, or concerns about how cb899 handles your personal data, please use the contact details below. Our team is available 24/7 and includes Indonesian-speaking staff to assist players across all Indonesian time zones (WIB, WITA, and WIT).