b200Privacy Policy
This page describes what we collect when you use b200 and how we keep that data protected. We understand that your information is sensitive, and we design our systems to limit collection, encrypt storage, and restrict access to only the teams and processors who need it to run the platform.
When you open an account with us, you provide your email address, identity document, and payment method. We use these to verify your identity under local anti-money-laundering rules, process your deposits and withdrawals, and contact you about account activity. Our servers may sit outside your jurisdiction, but we enforce the same data standards regardless of where your information physically resides.
Our services are available only where applicable law permits. We do not collect or retain data from users in jurisdictions where our offering is prohibited.
What we collect and why
We at b200 collect personal data only to deliver the service. This includes your email, phone number, full name, date of birth, identity document type and number, residential address, and payment method details. We also record your IP address, device fingerprint, and browser type to detect fraud and enforce access rules.
When you use b200, we log your account activity — bets placed, games played, live-dealer table sessions, deposit and withdrawal requests. We track this to settle your account fairly, flag unusual patterns that may indicate a compromised account, and respond to your support inquiries. We do not sell this data to advertisers or data brokers.
Payment processors and third parties
We partner with payment gateways to process deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers (mobile banking, local payment, online payment, e-wallet). These processors see your payment method, transaction amount, and timestamp. They follow their own privacy rules, which we do not control. We recommend reviewing their policies if you have concerns.
We also use hosting providers to store your account data, live-dealer studios to stream table games, and analytics vendors to measure site performance. None of these vendors can use your data for their own marketing. We sign data-processing agreements with each third party to enforce these limits.
Your rights and choices
You may request a copy of the personal data we hold about you, ask us to correct inaccurate information, or request deletion of your account and associated records. These requests may take up to 30 days to process because we must verify your identity and check for pending withdrawals or disputes.
We keep your data for as long as your account is active and for a period afterward to comply with anti-money-laundering law. After account closure, we retain aggregated, non-identifiable data (such as "one deposit event occurred on this date") for statistical analysis, but we delete your name, email, and document number.
Cookies, security, and contact
We at b200 use cookies to keep you logged in, remember your preferences (such as language or table filters), and measure site traffic. Session cookies expire when you close your browser; persistent cookies remain for up to one year. You can disable cookies in your browser settings, but doing so may prevent the b200 app from functioning correctly.
We protect your data using industry-standard encryption (TLS 1.3 for data in transit, AES-256 for data at rest). Access to your email, payment method, and identity document is restricted to a small team of engineers and compliance officers. We conduct annual security audits and respond to any breach report within 72 hours.
Our b200 platform does not store full payment card numbers. If you deposit via credit card, the payment gateway tokenizes the card and we receive only a one-way reference, never the card number itself. Similarly, we do not store your bank PIN or OTP codes.
If you have questions about how we handle your data, or if you wish to exercise your rights, contact our support team. You may also lodge a complaint with your local data-protection authority if you believe we have mishandled your information. We operate in Jakarta, Surabaya, and other major Indonesian cities, and we follow the rules that apply to each jurisdiction where our users reside.
Key takeaways
- We collect only the data needed to verify your identity, process payments, and detect fraud.
- Payment processors and hosting vendors see limited data; we enforce strict contracts with each.
- You may request access, correction, or deletion of your personal data.
- We use encryption, regular audits, and access controls to protect your information.
- Our services are available only where local law permits; we do not operate in prohibited jurisdictions.
This policy may change as we update our systems or legal obligations. We will post changes on this page and notify you by email if the change is material. Your continued use of b200 after a policy update means you accept the new terms.