Privacy Policy

1. Overview and Scope

btp168 ("we," "us," or "our") is deeply committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out, in plain and formal language, exactly how we collect, use, store, transfer, and protect your personal information when you visit https://btp168.cam, register an account, make deposits or withdrawals, participate in games, or contact our support team.

This Policy applies to all users of the btp168 platform worldwide, with particular relevance to players based in Indonesia. It covers data processed through our website, our customer support channels, our payment processing integrations (including BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay), and our marketing communications. It does not govern the data practices of third-party websites that may be linked from our platform.

By creating an account with btp168 and using our services, you confirm that you have read this Privacy Policy in full and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of our services immediately and contact us to request Account closure and data deletion.

2. Definitions

For clarity throughout this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably identify a living natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, transmission, restriction, erasure, or destruction.
• "Data Controller" means btp168, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of and under the instructions of btp168.
• "User," "Player," or "you" means any natural person who accesses or uses the btp168 platform.
• "Cookies" means small text files placed on your device by our platform or third-party services to store session and preference information.
• "KYC" (Know Your Customer) means the identity and age verification procedures we are obligated to conduct under our gaming license requirements.
• "Account" means the registered gaming account through which you access btp168 services.

3. Personal Data We Collect

We collect only the data necessary to provide our services safely, fairly, and in compliance with our licensing obligations. The categories of Personal Data we may hold about you are:

3.1 Identity and Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address, including city, province, and postal code
• Email address and phone number
• Nationality and country of residence

3.2 Identification and Verification Documents

• National Identity Card (KTP) or passport copy
• Driver's license (where submitted as alternative ID)
• Proof of address documents (recent utility bill or bank statement)
• Selfie or live photo used for biometric identity matching

3.3 Financial and Transaction Data

• Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay account details)
• Deposit and withdrawal history including amounts, dates, and payment methods
• Bonus usage history and wagering activity records

3.4 Gaming and Behavioral Data

• Game session history, bet amounts, wager outcomes, and win/loss records
• Platform navigation patterns, feature usage, and time spent on specific sections
• Responsible gaming tool usage (deposit limit settings, session limits, self-exclusion requests)
• Customer support ticket contents and chat transcripts

3.5 Technical and Device Data

• IP address, device type, operating system, and browser version
• Geographic location data derived from your IP address
• Cookies, session tokens, and similar tracking identifiers
• Platform access timestamps and login/logout records

4. How We Collect Your Data

btp168 obtains your Personal Data through several channels:

4.1 Data You Provide Directly

You provide Personal Data when you complete our account registration form, submit KYC verification documents, contact customer support, complete a deposit or withdrawal request, or participate in any promotion that requires your details. All information you submit through these channels is transmitted over encrypted connections.

4.2 Data Collected Automatically

When you visit our platform or use our services, our servers and analytics systems automatically collect technical data about your device, browser, IP address, and navigation behavior. This data is collected through server logs, cookies, and similar technologies that activate as soon as you access our website.

4.3 Data from Third Parties

We may receive Personal Data about you from trusted third parties including: payment processors (for transaction verification and fraud prevention), identity verification service providers (for KYC document authentication), and fraud-detection platforms. We ensure all third-party providers are contractually required to handle data securely and in accordance with applicable privacy standards.

5. Purposes for Processing Your Data

btp168 processes your Personal Data only for defined, legitimate purposes. We do not process data beyond what is necessary for those purposes. The table below summarizes our primary processing activities:

6. Legal Basis for Processing

btp168 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfill the agreement between you and btp168 — specifically to operate your Account, process payments, and deliver gaming services.
• Legal Obligation: We are required to process certain data to comply with anti-money laundering laws, KYC obligations under our gaming license, and applicable regulatory requirements.
• Legitimate Interests: We process data to protect the security and integrity of our platform, prevent fraud, improve our services, and maintain responsible gaming standards — provided these interests are not overridden by your fundamental rights.
• Consent: Where required — particularly for marketing communications and non-essential cookies — we will obtain your explicit consent before processing, and you may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing and Disclosure of Data

btp168 does not sell, rent, or trade your Personal Data to any third party. We may share your data with carefully selected partners and service providers only when necessary and under strict contractual controls:

7.1 Service Providers and Data Processors

We engage third-party service providers to assist with KYC identity verification, payment processing (including connections to BCA, BRI, BNI, Mandiri, and e-wallets), IT infrastructure and hosting, fraud detection and prevention, and customer relationship management systems. All such providers are bound by data processing agreements requiring them to protect your data and use it exclusively on our instructions.

7.2 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required by law, pursuant to a valid legal request, or where we believe disclosure is necessary to protect the safety of our users or the public, to prevent financial crime, or to enforce our legal rights.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of btp168 or any of its assets, your Personal Data may be transferred to the acquiring or successor entity. We will notify you of any such transfer that materially affects your rights before it takes effect.

8. Cookies and Tracking Technologies

btp168 uses cookies and similar technologies to operate our platform effectively and deliver a personalized, secure experience. Coo kies are small data files stored on your device by your browser when you visit our site. We use the following categories of cookies:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They enable core features such as secure login sessions, account authentication, fraud prevention checks, and maintaining your session state as you navigate between pages. Without these cookies, our services cannot be delivered.

8.2 Functional Cookies

Functional cookies remember your preferences and settings — such as your preferred language, display settings, and previously entered information — to improve your experience across sessions. These cookies do not track your activity on other websites.

8.3 Analytics Cookies

We use analytics cookies to understand how users interact with our platform in aggregate — which pages are visited most frequently, where users encounter difficulties, and how our features are used. This data is anonymized and used exclusively to improve platform performance and user experience. We do not use analytics data to build individual behavioral profiles.

8.4 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies, though disabling strictly necessary cookies will impair your ability to use our platform. Please consult your browser's help documentation for instructions on managing cookie preferences. Note that opting out of analytics cookies does not affect your ability to play games or manage your account.

9. Data Retention

btp168 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our retention periods are guided by the following principles:

• Active Account Data: Retained for the full duration your Account remains open, plus a minimum of five (5) years following Account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by the regulatory framework under which we operate.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial crime prevention requirements.
• Customer Support Records: Retained for three (3) years from the date of each interaction to assist with dispute resolution and service improvement.
• Marketing Consent Records: Retained until you withdraw consent, and for one (1) year thereafter as proof of prior consent.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes.

Upon expiry of the applicable retention period, your data is securely deleted or anonymized so that it can no longer be associated with you as an individual. Anonymized, aggregated data may be retained indefinitely for analytical and statistical purposes.

10. Data Security Measures

btp168 applies industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

10.1 Encryption

All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Indonesian financial institutions including BCA and Mandiri. Sensitive data stored in our databases, including financial records and identity documents, is encrypted at rest using AES-256 encryption.

10.2 Access Controls

Access to Personal Data within btp168 is strictly limited to personnel who require it to perform their job functions. All staff with data access undergo background screening, privacy training, and are bound by confidentiality obligations. Access rights are reviewed regularly and revoked promptly upon a staff member's departure or change of role.

10.3 Infrastructure Security

Our platform is hosted on secure, professionally managed servers with firewall protection, intrusion detection systems, and regular vulnerability assessments. We conduct periodic penetration testing and third-party security audits to identify and remediate potential weaknesses before they can be exploited.

10.4 Data Breach Response

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay and take all necessary steps to contain the breach, assess its impact, and prevent recurrence. We maintain a formal incident response plan that is tested and updated regularly.

11. Your Rights as a Data Subject

As a user of btp168 services, you hold meaningful rights over your Personal Data. We are committed to honoring these rights promptly and transparently. Your rights include:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed. We will provide this within 30 days of a verified request.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that we may be required to retain certain data for legal and regulatory reasons even following an erasure request.
• Right to Restriction of Processing: You may request that we limit the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while we assess the grounds for an erasure request.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object at any time to processing based on our legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected]. We will verify your identity before processing any data subject request and respond within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

12. International Data Transfers

btp168 operates internationally, and your Personal Data may be transferred to and processed in countries outside of Indonesia. These transfers are necessary to deliver our services — for example, when data is processed by our hosting infrastructure, KYC verification partners, or gaming software providers located in other jurisdictions.

Whenever we transfer Personal Data outside Indonesia, we take steps to ensure that your data receives an adequate level of protection. These steps may include entering into standard contractual clauses with the receiving entity, relying on the recipient country's adequacy determination, or implementing other appropriate safeguards. If you would like more information about the specific mechanisms we use for international data transfers, please contact us.

13. Minors and Age Restriction

btp168 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires you to confirm that you are at least 21 years old, and our KYC procedures verify this through government-issued identity documents. If we discover or have reason to believe that a user is under 21, we will immediately suspend the Account, void any transactions, and securely delete all associated Personal Data.

If you are a parent or guardian and believe your child may have registered an account with btp168, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay. Protecting minors from exposure to gambling content is a non-negotiable commitment for btp168.

14. Changes to This Privacy Policy

btp168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When we make material changes, we will notify registered users by email to the address on file and prominently display a notice on our platform for at least 30 days prior to the changes taking effect.

The "Last Reviewed" date at the top of this document will be updated each time the Policy is revised. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Your continued use of btp168 services after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way btp168 handles your Personal Data, please reach out to us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the btp168 platform
• Response Time: We aim to acknowledge all privacy-related inquiries within 48 hours and resolve them within 30 calendar days

For inquiries specifically relating to data subject rights (access, erasure, portability, etc.), please include your full name, registered email address, and a clear description of your request so that we can verify your identity and process your request efficiently.