Your privacy matters to us. This Privacy Policy explains exactly what personal data cb899 collects when you use our platform, how that data is used, who it may be shared with, and the rights you hold over your own information. We encourage you to read this document in full before creating an account.
cb899, operating through the domain cb899.bio, is the data controller responsible for the personal data of all registered players and platform visitors. As data controller, cb899 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection standards.
For all data protection queries, subject access requests, and complaints relating to the handling of your personal information, you may contact the cb899 Data Protection team using the contact details set out in Section 15 of this policy.
cb899 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the primary data categories and specific data points collected:
| Category | Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP for Indonesian residents) | Account registration and KYC verification |
| Contact Data | Email address, WhatsApp number, city and province of residence (e.g., Jakarta, Surabaya, Bandung, Bali) | Account registration and support interactions |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet account numbers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | First deposit, withdrawal requests, and KYC verification |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, time-zone setting | Automatically upon each platform session |
| Usage Data | Login timestamps, pages visited, games played, wager amounts and outcomes, session duration, promotional offers viewed and claimed | Automatically during platform use |
| Communication Data | Live chat transcripts, WhatsApp message logs, support ticket content, survey responses | Each customer support interaction |
| Verification Documents | Photographs or scans of government-issued ID, selfies with ID (for liveness checks), proof of address documents | KYC verification process |
cb899 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity verification purposes.
The majority of personal data cb899 holds about you is data that you provide directly — including the information you submit during registration, the payment details you enter when making a deposit or withdrawal request, the documents you upload during KYC verification, and the messages you send to the cb899 support team through live chat or WhatsApp.
When you access the cb899 platform, our servers and analytics systems automatically record certain technical and usage data. This includes your IP address (used to determine approximate location and enforce geographic restrictions), device and browser information, session timestamps, and clickstream data that records your navigation path through the platform. This data is collected using server logs and first-party analytics tools.
cb899 may receive personal data about you from third parties in limited circumstances, including:
cb899 processes your personal data for the following purposes:
cb899 processes your personal data on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and service delivery | Performance of a contract — processing is necessary to provide the services you have requested by registering with cb899. |
| Payment processing and withdrawal settlement | Performance of a contract — processing is necessary to fulfil financial obligations arising from your use of cb899 services. |
| KYC and identity verification | Legal obligation — cb899 is required to verify the identity of players as part of its AML and responsible gaming compliance programme. |
| Fraud prevention and AML screening | Legitimate interest — cb899 has a compelling legitimate interest in protecting the security and integrity of the platform and in preventing financial crime. |
| Responsible gaming monitoring | Legal obligation and legitimate interest — cb899 is obligated to implement player-protection measures and has a legitimate interest in player welfare. |
| Marketing and promotional communications | Consent — marketing messages are only sent where you have affirmatively opted in to receive them. You may withdraw consent at any time via Account Settings or by contacting support. |
| Analytics and platform improvement | Legitimate interest — cb899 has a legitimate interest in understanding how players use the platform in order to improve services and user experience. |
cb899 shares personal data with trusted third-party service providers who process it on our behalf and under our instructions. These providers include identity verification and KYC vendors, payment processing partners (including the Indonesian banks and e-wallet operators listed in Section 2), cloud infrastructure providers, customer support platform providers, and game software studios. All service providers are contractually required to process your data only for the purposes cb899 specifies and to maintain appropriate security measures.
cb899 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a court order, or a lawful request from a public authority. Such disclosures will be limited to the minimum information necessary to comply with the relevant obligation.
In the event that cb899 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to data-controller identity that result from it.
cb899 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing purposes. Your data is shared with third parties only as described in this policy.
cb899 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected and to meet applicable legal retention obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | For the duration of the account relationship, plus a minimum of 5 years following account closure (AML retention obligation). |
| Transaction and financial data | Minimum 5 years from the date of each transaction, in line with financial record-keeping requirements. |
| KYC and verification documents | Minimum 5 years following account closure or the completion of the most recent verification review, whichever is later. |
| Customer support communications | 3 years from the date of the final message in each support conversation. |
| Technical and usage logs | 13 months from the date of collection, unless extended by a specific investigation requirement. |
| Marketing consent records | For as long as the consent is active, plus 3 years following withdrawal of consent. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with cb899's data-destruction procedures.
cb899 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Whilst cb899 takes all reasonable steps to protect your personal data, no transmission over the internet is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying cb899 support immediately if you suspect any unauthorised access to your account.
Cookies are small text files placed on your device by a website when you visit it. cb899 uses cookies and similar tracking technologies (including local storage objects and session tokens) to enable core platform functionality, maintain your login session, and gather usage analytics.
You can manage or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using the cb899 platform. Disabling functional or analytics cookies will not prevent platform access but may result in a degraded user experience. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.
cb899 operates infrastructure and engages service providers that may be located outside Indonesia. Where personal data is transferred to a country or territory that does not provide a level of data protection equivalent to that applicable in Indonesia, cb899 implements appropriate safeguards to protect the data during transit and processing.
Appropriate safeguards employed by cb899 for international data transfers include contractual data protection clauses incorporated into agreements with receiving parties, binding corporate rules where the receiving party is a cb899 group entity, and technical security measures applied to the data during transmission.
By using cb899 Services, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia and consent to such transfers being made subject to the safeguards described in this section.
As a data subject, you hold the following rights in relation to your personal data held by cb899. To exercise any of these rights, please contact the cb899 Data Protection team using the details in Section 15. Requests will be acknowledged within 3 business days and substantively responded to within 30 days.
cb899 Services are strictly intended for adults aged 21 years and over. cb899 does not knowingly collect personal data from individuals under the age of 21. The platform's registration process includes a mandatory date-of-birth declaration, and cb899 operates age-verification checks as part of its KYC programme.
If cb899 discovers or is notified that it has collected personal data from an individual who is under 21 years of age, the following actions will be taken immediately: the account will be closed; all associated wagers will be voided; any deposited funds will be returned to the originating payment method; and all personal data associated with the account will be deleted as soon as is technically practicable, subject to any mandatory legal retention obligations.
If you are a parent or guardian and believe that your child has registered an account on cb899 without your knowledge, please contact the cb899 support team immediately via live chat so that the matter can be addressed without delay.
The cb899 platform does not contain outbound links to third-party websites. However, game content delivered within the cb899 platform is provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These studios operate their own privacy policies with respect to any data they collect directly through their game interfaces. cb899 recommends that you review the privacy policies of any third-party service whose content you access through the cb899 platform.
cb899 accepts no responsibility or liability for the privacy practices of third-party game studios or any other external service providers beyond the contractual obligations those providers have undertaken toward cb899.
cb899 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or platform functionality. Where a proposed amendment is material — meaning it significantly affects your rights, the data we collect, or how we use it — cb899 will provide at least 7 days' advance notice by email to the address registered to your account and by posting a prominent notice on the cb899 platform.
Non-material amendments — including corrections, clarifications, and updates required by immediate changes in applicable law — may be made without advance notice and will take effect from the date of publication. The "Last Reviewed" date at the top of this policy will be updated accordingly.
Your continued use of cb899 Services following the effective date of any amendment constitutes your acceptance of the revised policy. If you do not accept the amended policy, you must stop using the platform and may request account closure in accordance with the process described in the Terms & Conditions.
The current version of this Privacy Policy is always accessible at cb899.bio/privacy-policy.
For all queries relating to this Privacy Policy, to exercise your data subject rights, or to raise a data protection concern, please contact the cb899 Data Protection team:
cb899 will acknowledge all data subject requests within 3 business days of receipt. Substantive responses to access, rectification, erasure, restriction, portability, and objection requests will be provided within 30 calendar days. Where a request is particularly complex or where cb899 is handling a high volume of requests, this period may be extended by a further 30 days, and you will be informed of the extension and the reason for it.
If you are not satisfied with cb899's response to a data protection complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. Indonesian residents may also seek recourse through applicable consumer protection channels.
Privacy is not a checkbox at cb899 — it is built into every layer of the platform. Here is what that looks like in practice.
Every byte transmitted between your device and cb899 is protected by 256-bit TLS/SSL encryption — the same standard used by BCA, BRI, Mandiri, and other leading Indonesian financial institutions. Your personal and financial data is never sent over unencrypted channels.
cb899 collects only the data it genuinely needs to deliver services, verify identity, and comply with AML obligations. We do not collect health data, political opinions, or any sensitive category data beyond what is strictly required for age and identity verification under our KYC programme.
cb899 does not sell, rent, or commercially transfer your personal data to third parties for their own marketing purposes. Your data is shared only with the service providers necessary to operate the platform — payment processors, KYC vendors, and game studios — all under strict contractual data-protection obligations.
You have the right to access, correct, export, restrict, and delete your personal data held by cb899. Most account data can be updated directly in Account Settings. For formal data subject requests, the cb899 Data Protection team responds within 30 days — without exception.
cb899 retains personal data only for as long as legally required or operationally necessary. Account and transaction data is held for a minimum of 5 years in line with AML obligations, then securely destroyed. We do not keep your data indefinitely or use it beyond its stated purpose.
The cb899 Data Protection team is reachable 24/7 via live chat and during WhatsApp hours (08:00–24:00 WIB). Whether you have a question about how your data is used, want to request deletion, or need to raise a concern — our Indonesian-speaking support agents are ready to assist.
You have read our Privacy Policy and know exactly how your data is handled. Now discover everything cb899 has to offer — from live casino tables and slot gacor titles to sportsbook markets covering BRI Liga 1 and the Champions League.