Privacy Policy

1. Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

2. Data We Collect

bae69 collects the following categories of Personal Data from its members:

2.1 Identity Data. Full legal name, date of birth, gender, nationality, and a copy of a government-issued identity document (KTP — Indonesian national identity card — or passport) submitted during KYC verification.

2.2 Contact Data. Email address, mobile phone number, and residential address, including city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali) and postal code.

2.3 Financial Data. Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction records, deposit and withdrawal history, and account balance information. All financial figures are held in Indonesian Rupiah (IDR / Rp).

2.4 Account and Gaming Data. Username, hashed password, login timestamps, device identifiers, IP address, betting and gaming history (including all wagers placed on sports events, live casino games, togel (Indonesia's traditional numbers lottery) draws, and slot games), bonus and promotion redemption records, and customer support interaction logs.

2.5 Technical Data. Browser type and version, operating system, screen resolution, referring URLs, session duration, pages visited, and device type (desktop, mobile, tablet). This data is collected automatically when you access the bae69 platform.

2.6 Communication Data. Records of any communications you send to bae69 support via live chat, email, or any other channel, including the content of those communications and the timestamps of each exchange.

3. How We Collect Data

bae69 collects Personal Data through the following means:

• Direct submission — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or participate in a promotion.
• Automated collection — via cookies, web beacons, and server logs as you navigate and interact with the bae69 platform. See Section 9 (Cookies) for details.
• Third-party sources — from payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) when verifying transaction details; from fraud-detection and AML (anti-money laundering) screening services; and, where permitted by law, from identity verification bureaux used during enhanced KYC checks.

4. Purposes of Processing

bae69 uses your Personal Data for the following purposes:

bae69 does not use your Personal Data for automated decision-making that produces significant legal effects without human review. Where algorithmic risk scoring is used (for example, in fraud detection), a member may request human review of any decision that materially affects their account.

5. Legal Bases for Processing

bae69 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity — processing required to perform our obligations under the account agreement with you, including enabling deposits, withdrawals, and gameplay.
• Legal obligation — processing required to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and age verification regulations under international law.
• Legitimate interests — processing carried out for fraud prevention, platform security, abuse detection, and service improvement, where these interests are not overridden by your privacy rights.
• Consent — where you have given explicit consent, for example, to receive promotional communications. You may withdraw consent at any time by contacting support at [email protected].

6. Data Sharing and Disclosure

6.1 Third-Party Processors. bae69 shares Personal Data with carefully selected Third-Party Processors who assist in delivering our services. These include:

• Payment processors and banking partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja — for transaction processing and fraud screening.
• KYC and identity verification providers for age and document verification.
• Game studio providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft) who may process gameplay session data to deliver their games.
• Cloud infrastructure and hosting providers who store platform data on bae69's behalf under strict data processing agreements.
• Customer support tooling providers who process communication records to facilitate live chat and email support.

All Third-Party Processors are bound by contractual data protection obligations and are permitted to use your data only for the specific purpose for which it was shared.

6.2 Legal Disclosure. bae69 may disclose Personal Data to law enforcement agencies, regulators, or courts where required to do so by applicable law, where necessary to protect the rights and safety of bae69 or its members, or where required in connection with legal proceedings.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of bae69's assets, your Personal Data may be transferred to the acquiring entity. You will be notified via the email address on file before any such transfer takes effect, and the receiving entity will be required to honor the terms of this Privacy Policy.

6.4 No Sale of Personal Data. bae69 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We do not share your data with advertising networks for behavioral targeting.

7. Data Retention

7.1 bae69 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

7.2 As a general guide, the following retention periods apply:

• Active account data — retained for the duration of the account relationship plus five (5) years following account closure, to satisfy AML record-keeping requirements.
• KYC documents — retained for five (5) years from the date of submission or account closure, whichever is later.
• Transaction records — retained for five (5) years in accordance with financial record-keeping obligations.
• Customer support communications — retained for three (3) years from the date of the final communication in each interaction thread.
• Technical and analytics data — anonymized or deleted within twenty-four (24) months of collection.

7.3 Where Personal Data is retained solely to comply with a legal obligation, it is stored securely in a restricted-access archive and is not used for any operational purpose during that period.

7.4 On expiry of the applicable retention period, Personal Data is securely deleted or anonymized in accordance with industry-standard data destruction practices.

8. Security Measures

bae69 employs a layered approach to data security, combining technical, organizational, and procedural controls to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bae69 servers.
• Encrypted storage for sensitive data fields including passwords (hashed using bcrypt), financial credentials, and identity document copies.
• Access controls limiting employee access to Personal Data on a strict need-to-know basis, with role-based permissions and audit logging of all access events.
• Two-factor authentication (2FA) available to members for account login, and mandatory for all internal bae69 staff accessing production systems.
• Regular penetration testing and security audits conducted by independent third-party specialists.
• Incident response procedures — in the event of a data breach that poses a risk to your rights, bae69 will notify affected members by email within 72 hours of becoming aware of the incident, describing the nature of the breach and the steps taken to contain it.

9. Cookies and Tracking Technologies

9.1 The bae69 platform uses cookies and similar tracking technologies (web beacons, local storage) to operate core platform functionality, recognize returning members, and analyze platform usage patterns.

9.2 The categories of cookies used by bae69 are as follows:

9.3 bae69 does not use third-party advertising cookies or behavioral targeting cookies. No cookie data is shared with advertising networks.

9.4 You may configure your browser to reject or delete cookies, but doing so may impair the functionality of the bae69 platform, including preventing you from logging into your account.

10. Your Data Rights

As a bae69 member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with your account username and a description of your request. We will respond within thirty (30) days.

Please note that certain rights may be limited where bae69 is required to retain or process data to comply with a legal obligation (for example, AML record-keeping requirements that mandate a minimum five-year retention period).

11. Minors

11.1 bae69 does not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes mandatory age verification, and KYC checks are required before any withdrawal is permitted.

11.2 If bae69 becomes aware that Personal Data has been collected from a person under the age of 21, the associated account will be immediately suspended, all data will be securely deleted in accordance with our data retention policy, and any deposited funds will be returned via the original payment method after deduction of applicable processing costs.

11.3 If you are a parent or guardian and believe your child has registered on bae69, please contact us immediately at [email protected] so that we can take swift action.

12. International Data Transfers

12.1 bae69 is an internationally operated platform. Your Personal Data may be transferred to, and stored on, servers located outside of Indonesia, including in jurisdictions that may not offer the same level of statutory data protection as Indonesian law.

12.2 Where such transfers occur, bae69 takes all reasonable steps to ensure that your data remains protected to a standard consistent with this Privacy Policy. Safeguards in place include:

• Data processing agreements with all Third-Party Processors incorporating standard contractual clauses for cross-border data transfers.
• Technical security measures — including encryption in transit and at rest — applied uniformly regardless of the location of the receiving server.
• Restricting transfers to jurisdictions or processors that have demonstrated adequate data protection standards through independent audit or certification.

12.3 By registering a bae69 account, you acknowledge and consent to the international transfer of your Personal Data in accordance with the safeguards described in this clause.

13. Amendments to This Policy

13.1 bae69 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes will be communicated to registered members via the email address on file at least seven (7) days before they take effect.

13.2 The effective date of the most recent revision is displayed at the top of this page. We recommend reviewing this policy periodically. Continued use of the bae69 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.

13.3 If you do not agree with any material change to this policy, you have the right to close your account and withdraw your remaining balance before the change takes effect. Contact our support team to initiate this process.

14. Contact and Data Requests

For all privacy-related inquiries, data subject access requests, rectification requests, deletion requests, or complaints, please contact the bae69 Data Protection team through the following channel:

• Email: [email protected]
• Subject Line: Please use "Privacy Request — [Your Username]" to ensure your message is routed to the correct team.
• Response Time: All privacy requests are acknowledged within 48 hours and resolved within 30 calendar days of receipt.
• Live Chat: Available 24/7 on the bae69 platform for general support queries in Indonesian (WIB timezone).

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

For questions about our Terms & Conditions or Responsible Gaming policies, please visit the respective pages via the links in the navigation menu above.