Privacy Policy — bni789

1 Introduction

bni789, accessible at https://bni789.bio, operates as an online betting and gaming platform serving Members primarily located in Indonesia. In delivering our services — including the sportsbook, live casino, slots, Domino QQ, and mobile casino — bni789 necessarily collects, stores, and processes certain personal data relating to our Members and platform visitors.

We take our data protection obligations seriously. This Privacy Policy sets out, in plain and transparent terms, the full scope of our data practices. It covers every stage of the data lifecycle: from the moment information is collected through account registration or platform interaction, to the point at which it is securely deleted or anonymised in accordance with our retention schedule.

This policy applies to all data subjects who interact with the bni789 platform, including registered Members, individuals browsing the site without an account, and former Members whose data is retained under our legally required retention obligations.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

Term	Meaning
"Personal Data"	Any information that identifies or could reasonably identify a living individual — directly or indirectly — including name, email address, date of birth, IP address, and payment details.
"Processing"	Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
"Data Controller"	bni789, the entity that determines the purposes and means of processing Personal Data.
"Data Processor"	A third-party service provider that processes Personal Data on behalf of bni789, under a contractual obligation to adhere to our data protection standards.
"Member" / "You"	Any individual who holds a registered account on the bni789 platform.
"Cookies"	Small text files placed on a user's device by a website to store session information, preferences, and tracking data.
"KYC"	Know Your Customer — the identity verification process bni789 uses to confirm a Member's identity, age, and payment ownership.

3 Personal Data We Collect

bni789 collects the following categories of Personal Data from Members and platform visitors:

3.1 Identity & Contact Data

• Full legal name (as it appears on a government-issued ID)
• Date of birth (for age verification — Members must be 21 or older)
• Residential address, city, and province (e.g., Jakarta, Surabaya, Bandung, Bali)
• Email address
• Mobile phone number

3.2 Account & Transaction Data

• Username and encrypted password credentials
• Account registration date and last login timestamp
• Deposit and withdrawal history, including amounts in IDR, payment method used, and transaction timestamps
• Betting history across all product categories — sportsbook, live casino, slots, and Domino QQ
• Bonus and promotion activity, including claimed offers and rollover progress
• Account balance and transaction ledger entries

3.3 Identity Verification (KYC) Data

• Copies of government-issued photo identification (KTP, passport, or SIM)
• Proof of address documents (utility bills, bank statements dated within three months)
• Proof of payment method ownership (bank account or e-wallet screenshots confirming the account is registered in the Member's name)

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• Session duration, pages visited, and click-path data
• Referral source (how you arrived at the bni789 platform)

3.5 Communication Data

• Records of live chat conversations with bni789 support agents
• Email correspondence sent to or received from bni789
• Support ticket content and resolution notes

4 How We Collect Personal Data

bni789 collects Personal Data through the following channels:

• Direct Submission: Data you provide voluntarily when registering an account, completing the KYC verification process, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated Technical Collection: Data collected automatically when you access the platform, including IP address, browser fingerprint, device identifiers, and session activity logs — collected via server logs and first-party cookies.
• Payment Processors: Confirmation data returned by Indonesian payment partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) when processing a deposit or withdrawal, including transaction reference numbers and timestamps.
• Third-Party Verification Providers: Identity and address verification data returned by KYC service providers when we use external tools to validate documents submitted by Members.

5 Purpose of Processing Your Data

bni789 processes your Personal Data for the following clearly defined purposes:

Purpose	Data Categories Used
Account creation and management	Identity & Contact Data, Account Data
Age and identity verification (KYC)	Identity & Contact Data, KYC Data
Processing deposits and withdrawals	Account & Transaction Data, Identity Data
Detecting and preventing fraud, money laundering, and prohibited conduct	All data categories
Providing and improving platform Services	Technical & Device Data, Account Data
Responsible gaming monitoring and intervention	Account & Transaction Data, Communication Data
Customer support and dispute resolution	Identity Data, Communication Data, Transaction Data
Sending transactional notifications (deposit confirmations, withdrawal alerts)	Identity & Contact Data, Transaction Data
Sending promotional communications (where consent has been given)	Identity & Contact Data
Legal and regulatory compliance	All data categories as required

6 Legal Basis for Processing

bni789 processes your Personal Data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a Member — including account management, bet settlement, and payment processing.
• Consent: Processing for optional activities such as sending marketing emails or promotional SMS messages. You may withdraw this consent at any time by contacting support or updating your account communication preferences.
• Legitimate Interests: Processing necessary to pursue bni789's legitimate business interests, including fraud detection, platform security monitoring, and product analytics — provided those interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering obligations, KYC requirements, record-keeping mandates, and any lawful request from a competent authority.

7 How We Share Your Data

bni789 does not sell your Personal Data to third parties under any circumstances. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

7.1 Payment Partners

To process deposits and withdrawals, bni789 shares necessary transaction data with Indonesian payment partners including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja. These partners process data solely for payment execution purposes and are bound by their own regulatory obligations under Indonesian banking law.

7.2 Identity Verification Providers

Where bni789 uses third-party KYC technology providers to assist in identity and document verification, the relevant KYC Data is shared with those providers under contractual data processing agreements that require them to handle the data securely and use it only for verification purposes.

7.3 Technology & Infrastructure Providers

bni789 uses third-party cloud hosting, content delivery, and analytics service providers to operate the platform. These providers may process Technical & Device Data as part of their service delivery. All such providers are engaged under data processing agreements consistent with applicable data protection standards.

7.4 Legal Disclosure

bni789 may disclose Personal Data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so — for example, in response to a lawful court order, anti-money-laundering investigation, or fraud inquiry. In such cases, we will disclose only the minimum data required by the order or legal obligation.

8 Cookies & Tracking Technologies

The bni789 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure browsing experience. The following categories of cookies are deployed:

Cookie Type	Purpose	Duration
Strictly Necessary	Essential for platform functionality — session management, login state, security tokens. Cannot be disabled without breaking core features.	Session
Functional	Remember your preferences — language, display settings, and game lobby layout choices.	Up to 12 months
Analytics	Aggregate, anonymised data about how Members navigate the platform, used to improve UX and identify technical issues.	Up to 24 months
Security	Fraud detection signals including device fingerprinting, unusual login location flagging, and bot detection.	Up to 12 months

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the platform. bni789 does not use third-party advertising cookies or cross-site tracking pixels.

9 Data Retention

bni789 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active Member Data: Retained for the full duration of the Member's account, plus a minimum of 5 years following account closure, to satisfy anti-money-laundering and record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of verification, or longer if required by a competent authority.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Communication Records: Support chat and email records retained for 3 years from the date of the interaction.
• Technical Logs: Server and session logs retained for up to 12 months, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of the consent plus 3 years thereafter as evidence of the consent having been given.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

10 Data Security

bni789 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bni789 platform is encrypted using industry-standard TLS protocols, preventing interception in transit.
• Encrypted Storage: Sensitive Personal Data — including passwords (stored as salted hashes), payment details, and KYC documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within bni789 is restricted on a strict need-to-know basis. Staff members can only access data relevant to their specific role, and all access events are logged and auditable.
• Intrusion Detection: bni789 deploys real-time intrusion detection and anomaly monitoring systems to identify and respond to potential security incidents promptly.
• Regular Security Audits: The platform undergoes periodic security assessments and penetration testing by qualified information security professionals.
• Staff Training: All bni789 personnel with access to Personal Data receive regular data protection and security awareness training.

11 Your Privacy Rights

As a Member of bni789, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact us using the details in Clause 15:

• Right of Access: You may request a copy of the Personal Data that bni789 holds about you, along with information about how it is being used.
• Right to Rectification: You may request that we correct any inaccurate or incomplete Personal Data held about you. For account details, you can update many fields directly through your account settings.
• Right to Erasure: You may request that we delete your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our retention obligations. Note that certain data must be retained for regulatory compliance purposes and cannot be deleted on request.
• Right to Restrict Processing: You may request that we temporarily restrict our use of your Personal Data — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request a structured, machine-readable copy of the Personal Data you have provided to bni789, where technically feasible.
• Right to Object: You may object to our processing of your Personal Data where that processing is based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bni789 will respond to all substantiated privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason.

12 Minors — Under 21 Policy

The bni789 platform is strictly intended for adults aged 21 and above. bni789 does not knowingly collect Personal Data from individuals under the age of 21. If we discover or are notified that a Member is under 21 years of age, we will:

• Immediately and permanently close the account;
• Void all bets and forfeit all balances associated with that account;
• Securely delete the Personal Data of the underage individual, subject to any legal retention obligations;
• Notify the relevant authorities if required by applicable child protection or responsible gaming regulations.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account with bni789, please contact us immediately at [email protected] so we can take prompt action.

13 Third-Party Links & Services

The bni789 platform may reference third-party services — such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) — whose software is integrated into the platform under licence. While these providers supply the game engines and content, bni789 controls the Member-facing account and data layer.

bni789 is not responsible for the privacy practices of external websites that you may navigate to independently outside of the bni789 platform. This Privacy Policy applies exclusively to data collected and processed by bni789 in connection with your use of the bni789 platform.

14 Amendments to This Privacy Policy

bni789 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will:

• Update the "Last Updated" date at the top of this document;
• Notify registered Members via email or an in-platform notification at least 7 days before the revised policy takes effect;
• Where required by applicable law, seek renewed consent from Members for any new processing activities introduced by the amendment.

Your continued use of the bni789 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to remain informed of our current data practices.

15 Contact Us — Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by bni789, please contact our Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the chat widget on the bni789 platform
• Response Time: Privacy-related requests acknowledged within 48 hours; substantive responses within 30 days
• Support Hours: 24 hours a day, 7 days a week including all Indonesian national holidays, staffed by native Indonesian-speaking agents (WIB, UTC+7)

When submitting a data rights request, please provide your registered account username and email address so we can verify your identity before processing the request. bni789 will not action data rights requests from unverified individuals to protect the privacy of our Members.