Privacy Policy

1. Introduction

bon32 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our online gaming platform at https://bon32.cam (the "Website") and associated services (collectively, the "Services").

By registering an account, accessing the Website, or using any of our Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you must immediately cease using our Services and contact us to close your account.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of bon32 services. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail except where specific privacy rights are concerned.

bon32 acts as the data controller for personal information collected through our Services. We are responsible for ensuring that your personal data is processed lawfully, fairly, and transparently in accordance with applicable data protection regulations.

2. Information We Collect

bon32 collects various types of personal information to provide, maintain, and improve our Services. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register an account with bon32, you voluntarily provide the following information:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, gender, nationality, and a recent photograph for identity verification purposes.
• Contact Information: Email address, mobile phone number, residential address including street, city, province, and postal code.
• Account Credentials: Username, password, and security questions/answers for account access and recovery.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja numbers), and transaction history.
• Verification Documents: Copies of government-issued identification (KTP - Indonesian Identity Card, passport, driver's license), proof of address documents (utility bills, bank statements), and payment method verification documents.
• Communication Data: Content of messages, emails, and chat conversations with our customer support team.

2.2 Information Collected Automatically

When you access and use bon32 Services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device manufacturer and model, unique device identifiers.
• Connection Information: IP address, geographic location (country, city, ISP), time zone, connection type (mobile data, WiFi).
• Usage Data: Pages viewed, features accessed, time spent on pages, navigation paths through the Website, clickstream data, referral sources.
• Gaming Activity: Bet history including stakes, odds, game types, win/loss records, deposit and withdrawal history, bonus usage, session duration and frequency.
• Performance Data: Website loading times, error messages, system crashes, and other technical diagnostics.

2.3 Information from Third Parties

bon32 may receive information about you from third-party sources including:

• Payment Processors: Transaction verification data from banks, e-wallet providers, and payment gateways.
• Identity Verification Services: Age verification, identity authentication, and fraud detection data from specialized verification providers.
• Sports Data Providers: Sports betting odds, results, and statistics from official league data sources.
• Affiliate Partners: Referral information if you accessed bon32 through an affiliate link or promotional campaign.

3. How We Use Your Information

bon32 uses your personal information for the following purposes, all of which are necessary for providing our Services or required by law:

3.1 Service Provision and Account Management

• Creating and maintaining your gaming account
• Verifying your identity and age (21+ requirement)
• Processing deposits, withdrawals, and other financial transactions
• Providing access to games, sports betting markets, and live casino services
• Managing bonuses, promotions, and VIP program benefits
• Tracking gaming activity for responsible gaming monitoring
• Authenticating your identity for login and security purposes

3.2 Communication and Customer Support

• Responding to your inquiries, requests, and support tickets
• Sending transactional notifications (deposit confirmations, withdrawal status, account alerts)
• Providing important service updates and policy changes
• Sending promotional communications and bonus offers (with your consent)
• Conducting customer satisfaction surveys

3.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and unauthorized access
• Monitoring for unusual betting patterns or account activity
• Enforcing our Terms & Conditions and preventing prohibited conduct
• Complying with anti-money laundering (AML) and know-your-customer (KYC) regulations
• Protecting against technical attacks, system vulnerabilities, and security breaches

3.4 Legal Compliance and Regulatory Requirements

• Complying with Indonesian laws and international gaming regulations
• Responding to legal requests, court orders, and government inquiries
• Maintaining records required by gaming licenses and regulatory authorities
• Reporting suspicious transactions to relevant authorities
• Enforcing legal rights and defending against legal claims

3.5 Service Improvement and Analytics

• Analyzing usage patterns to improve Website functionality and user experience
• Testing new features, games, and promotional campaigns
• Conducting market research and statistical analysis
• Optimizing customer support processes and response times
• Personalizing content and game recommendations based on your preferences

4. Data Sharing and Disclosure

bon32 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways that process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.).
• Game Providers: Casino game suppliers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe) that operate live dealer tables and RNG games.
• Identity Verification Services: Third-party KYC providers that authenticate identity documents and verify age.
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms that facilitate customer service.
• Cloud Infrastructure Providers: Hosting services, data storage providers, and content delivery networks.
• Analytics Providers: Services that help us understand Website usage and user behavior.

All service providers are contractually obligated to protect your data, use it only for the specified purposes, and comply with applicable privacy laws.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, courts, or government agencies when:

• Required by law, court order, subpoena, or legal process
• Necessary to comply with gaming license requirements
• Required to report suspicious transactions under anti-money laundering regulations
• Necessary to protect bon32's legal rights or defend against claims
• Needed to protect the safety and security of our users or the public

4.3 Business Transfers

If bon32 is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or prominent notice on our Website before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy when we have obtained your explicit consent to do so.

5. Data Security Measures

bon32 employs industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

5.1 Technical Security

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in databases is encrypted at rest.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, 24/7 surveillance, and environmental monitoring.
• Firewall Protection: Multi-layer firewalls prevent unauthorized network access and block malicious traffic.
• Intrusion Detection: Automated systems continuously monitor for suspicious activity and potential security breaches.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments.

5.2 Organizational Security

• Access Controls: Employee access to personal data is restricted based on role necessity and follows the principle of least privilege.
• Employee Training: Staff members receive regular training on data protection best practices and security protocols.
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements protecting your information.
• Incident Response Plan: We maintain documented procedures for responding to data breaches and security incidents.

5.3 Account Security Recommendations

You play a vital role in protecting your account security. We recommend:

• Choose a strong, unique password combining letters, numbers, and symbols
• Never share your password or login credentials with anyone
• Log out after each session, especially on shared or public devices
• Keep your contact information up to date for account recovery purposes
• Contact support immediately if you suspect unauthorized account access
• Use secure internet connections and avoid public WiFi for financial transactions

6. Cookies and Tracking Technologies

bon32 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

6.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for Website functionality, login authentication, and security. Cannot be disabled.	Session / Persistent
Functional Cookies	Remember your preferences, language settings, and improve user experience.	Up to 1 year
Analytics Cookies	Collect anonymous usage statistics to help us improve the Website.	Up to 2 years
Marketing Cookies	Track promotional campaign effectiveness and deliver targeted advertising (with consent).	Up to 1 year

6.2 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features or functionality on the bon32 Website. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies while allowing first-party cookies
• Block all cookies from specific websites
• Clear all cookies when you close your browser

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request confirmation of whether we process your personal data and obtain a copy of your data. Contact [email protected] with your request, and we will provide the information within 30 days in a commonly used electronic format.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction or completion. You can update most information directly through your account settings or by contacting customer support.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes collected or if you withdraw consent. Note that we may retain certain information where required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

7.4 Right to Restriction of Processing

You have the right to request that we limit how we use your data in certain situations, such as while we verify the accuracy of disputed information or assess whether we have legitimate grounds to process your data.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications by clicking unsubscribe links in emails or adjusting your communication preferences in account settings.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

7.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

8. Data Retention Policy

bon32 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your active account plus 5 years after account closure to comply with gaming regulations and resolve potential disputes.
• Financial Records: Transaction history, deposit/withdrawal records, and payment information are retained for 7 years to comply with tax and financial reporting requirements.
• Identity Verification Documents: KYC documents are retained for 5 years after account closure as required by anti-money laundering regulations.
• Marketing Communications: Contact details for marketing purposes are retained until you opt out or for 2 years of inactivity.
• Support Communications: Customer support conversations and tickets are retained for 3 years for quality assurance and training purposes.
• Technical Logs: Server logs, IP addresses, and usage data are retained for 12 months for security and troubleshooting purposes.

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer identify you.

9. International Data Transfers

bon32 operates globally and may transfer your personal information to countries outside Indonesia for processing and storage. These countries may have data protection laws different from those in Indonesia. When we transfer your data internationally, we implement appropriate safeguards including:

• Ensuring recipients are located in countries with adequate data protection standards
• Using Standard Contractual Clauses approved by regulatory authorities
• Implementing technical and organizational measures to protect data security
• Obtaining your explicit consent where required by law

By using bon32 services, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

10. Children's Privacy

bon32's Services are not intended for individuals under 21 years of age. We do not knowingly collect, use, or solicit personal information from anyone under 21. If you are under 21, do not register for an account, provide any personal information, or use our Services.

If we learn that we have inadvertently collected personal information from someone under 21, we will delete that information immediately. If you believe a person under 21 has provided personal information to bon32, please contact us immediately at [email protected].

Parents and guardians should monitor their children's online activities and ensure minors do not access gambling websites. bon32 implements age verification checks during registration and may request identity documents at any time to confirm your age.

11. Changes to This Privacy Policy

bon32 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our Website with a new "Last Updated" date
• Sending email notification to the address associated with your account
• Displaying a prominent notice on the Website homepage or dashboard

Changes become effective immediately upon posting unless otherwise specified. Your continued use of bon32 Services after changes are posted constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, you must stop using our Services and close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the following channels:

• Email: [email protected] (dedicated privacy inquiries) or [email protected] (general support)
• Live Chat: Available 24/7 on the bon32 website
• WhatsApp: +62 812-3456-7890 (available 24/7)
• Website: https://bon32.cam

For data protection rights requests (access, rectification, erasure, etc.), please include "DATA RIGHTS REQUEST" in your email subject line and provide your full name, account username, and description of your request. We will respond within 30 days of receiving your request.