Privacy Policy

1 Introduction

ciobet is an online gaming platform licensed and regulated internationally, serving players primarily in the Indonesian market. We operate in compliance with international data protection standards and apply industry best practices to safeguard personal information.

This Privacy Policy applies to all personal data processed by ciobet through the website located at ciobet.cam, any associated mobile web applications, and all related services. It covers data collected directly from users, data received from payment processors and identity verification providers, and data automatically generated through platform usage.

We are committed to transparency in our data handling practices and recognize that trust is foundational to our relationship with every ciobet member. This Policy is written in plain English to ensure accessibility and understanding for all users, regardless of their familiarity with legal or technical terminology.

2 Data Controller

For the purposes of applicable data protection laws, ciobet acts as the data controller in respect of all personal information collected and processed through the Platform. This means ciobet determines the purposes for which and the means by which your personal data is processed.

Questions, concerns, or requests related to your personal data may be directed to our Data Protection Officer via the contact details provided in Section 15 of this Policy.

3 Data We Collect

ciobet collects and processes the following categories of personal information:

3.1 Account Registration Data

When you create a ciobet account, we collect:

• Full legal name (as it appears on your Indonesian national identity card)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile telephone number (Indonesian +62 prefix)
• Residential address (street, city, province, postal code)
• Username and encrypted password
• Preferred language and currency (IDR)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and responsible gaming obligations, we collect:

• Government-issued photo identification (KTP, passport, or SIM)
• Proof of address documents (utility bills, bank statements dated within last 3 months)
• Selfie photograph holding identification (for facial verification)
• Source of funds documentation (where transaction volumes exceed defined thresholds)

3.3 Payment and Transaction Data

For processing deposits and withdrawals, we collect:

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata
• E-wallet identifiers (registered phone number or account ID for OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history (deposits, withdrawals, bet placements, game outcomes, bonus credits)
• Payment processing metadata (timestamps, processing status, transaction reference numbers)

3.4 Gaming Activity Data

To operate gaming services and ensure platform integrity, we record:

• Games played (slots, live dealer, sports bets, togel entries, sabung ayam wagers)
• Bet amounts, stake sizes, win/loss outcomes
• Bonus participation and wagering progress
• Game round identifiers and timestamps
• Session duration and frequency
• Responsible gaming tool usage (deposit limits, self-exclusion requests, session reminders)

3.5 Technical and Usage Data

Our systems automatically collect technical information when you access the Platform:

• IP address and geolocation data (city level, not precise GPS coordinates)
• Device type, operating system, browser type and version
• Screen resolution, device identifiers
• Pages visited, click paths, time spent on each page
• Referring URL (the page you came from before visiting ciobet)
• Login times, session durations, logout times

3.6 Communications Data

When you contact ciobet support or communicate with us, we retain:

• Email correspondence and support ticket content
• Live chat transcripts
• Phone call recordings (where permitted and with your consent)
• Feedback, complaints, and survey responses

4 How We Collect Data

Personal data is collected through the following channels:

• Directly from you: During account registration, KYC submission, deposit/withdrawal requests, and when you contact customer support.
• Automatically through technology: Cookies, web beacons, server logs, and analytics tools record technical and usage data as you interact with the Platform.
• From third-party service providers: Payment processors (banks, e-wallet providers) confirm transaction details; identity verification providers validate KYC documents; game providers report gaming outcomes.
• From publicly available sources: In rare cases where enhanced due diligence is required, we may verify information against public records or sanctions lists.

5 Purpose of Data Use

ciobet processes your personal information for the following purposes:

6 Legal Basis for Processing

ciobet processes personal data on the following legal grounds:

• Contractual necessity: Processing is required to perform our contract with you (i.e., to provide gaming services, process transactions, maintain your account).
• Legal obligation: Processing is necessary to comply with KYC, AML, responsible gaming, tax reporting, and other legal requirements under our international gaming license.
• Legitimate interests: Processing is justified by our legitimate business interests in preventing fraud, improving our services, and ensuring platform security — provided these interests do not override your fundamental rights.
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit, freely given consent, which you may withdraw at any time.

7 Data Sharing and Disclosure

ciobet does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We do share data with the following categories of recipients, and only to the extent necessary for the purposes described:

7.1 Service Providers

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive payment instructions to process deposits and withdrawals.
• Identity verification providers: Specialized KYC/AML service providers verify the authenticity of submitted documents and check against sanctions lists.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and Pocket Games Soft receive anonymized player identifiers to deliver game content and record outcomes.
• Cloud infrastructure and hosting providers: Secure data centers host ciobet's servers and databases.
• Customer support platforms: Live chat and ticketing systems used by our support team.

All service providers are contractually bound to process data only as instructed by ciobet and to implement appropriate security measures.

7.2 Legal and Regulatory Bodies

We may disclose personal data to law enforcement, regulatory authorities, courts, or other government bodies where required by law, court order, or our licensing obligations. This includes disclosures for AML investigations, tax reporting, or response to valid legal process.

7.3 Business Transfers

In the event ciobet is involved in a merger, acquisition, sale of assets, or bankruptcy proceeding, personal data may be transferred to the successor entity as part of that transaction, subject to the same privacy protections.

8 Data Security Measures

ciobet employs industry-standard technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS. Sensitive data at rest (passwords, financial information, KYC documents) is encrypted in our databases.
• Access controls: Personal data is accessible only to authorized ciobet personnel who require it to perform their job functions. Access is granted on a role-based, least-privilege basis.
• Authentication: Multi-factor authentication is required for employee access to production systems. Player accounts are protected by secure password policies.
• Firewall and intrusion detection: Network-level protections prevent unauthorized access to our infrastructure.
• Regular security audits: Independent third-party security assessments are conducted annually to identify and remediate vulnerabilities.
• Employee training: All ciobet staff undergo data protection and security awareness training upon hire and annually thereafter.
• Incident response: We maintain a documented data breach response plan to ensure rapid detection, containment, and notification in the unlikely event of a security incident.

9 Data Retention Periods

ciobet retains personal data only as long as necessary for the purposes for which it was collected, or as required by applicable law:

• Active accounts: Account and transaction data is retained for the duration of your membership plus 7 years after account closure (to comply with financial record-keeping laws and our licensing obligations).
• KYC documents: Retained for 7 years after the end of the business relationship, as required by AML regulations.
• Marketing communications data: Retained until you withdraw consent or for 3 years of inactivity, whichever comes first.
• Support communications: Retained for 3 years from the date of the last interaction for quality assurance and complaint resolution purposes.
• Technical logs: Server logs and IP addresses are retained for 90 days for security monitoring, then anonymized or deleted.

After the applicable retention period expires, personal data is either securely deleted or anonymized such that it can no longer identify you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

10 Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format (typically PDF or CSV).
• Right to rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. Most account information can be updated directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Note that we may be legally required to retain certain data (e.g., transaction records for tax purposes) despite a deletion request.
• Right to restrict processing: You may request that we temporarily suspend processing of your personal data in certain circumstances, such as while we verify its accuracy or investigate a complaint.
• Right to data portability: You may request that we transfer your personal data directly to another service provider in a machine-readable format, where technically feasible.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time. This will not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days of verifying your identity. There is no fee to exercise your rights unless your request is manifestly unfounded or excessive.

If you believe ciobet has not adequately addressed your privacy concern, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.

11 Cookies and Tracking Technologies

ciobet uses cookies — small text files stored on your device — to enhance your experience on the Platform. Cookies help us recognize your device, remember your preferences, and analyze site usage.

Types of Cookies We Use:

• Essential cookies: Required for core platform functionality, including session management, authentication, and security. These cannot be disabled without breaking the Platform.
• Performance cookies: Collect aggregated, anonymized data about how users interact with the Platform (page views, click paths, load times) to help us improve performance.
• Functional cookies: Remember your preferences such as language, currency display, and personalized settings.
• Marketing cookies: Track your activity across sessions to deliver personalized promotional offers. These are used only with your consent.

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent you from using the Platform.

ciobet does not use third-party advertising networks or social media tracking pixels on its Platform.

12 International Data Transfers

ciobet operates with an international gaming license and utilizes service providers located in various jurisdictions. As a result, your personal data may be transferred to, stored in, or accessed from countries outside Indonesia.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place:

• Data processing agreements with service providers that include standard contractual clauses approved by relevant data protection authorities
• Technical measures such as encryption in transit and at rest
• Regular audits of third-party processors to verify compliance with data protection standards

Your personal data will always be subject to a level of protection at least equivalent to that provided under this Privacy Policy, regardless of where it is processed.

13 Children's Privacy (21+ Policy)

ciobet is an adults-only platform. We do not knowingly collect, use, or retain personal information from individuals under 21 years of age. Our Terms & Conditions explicitly prohibit underage registration, and we verify age during the KYC process.

If we become aware that an individual under 21 has provided personal information or created an account, we will immediately suspend the account, void all transactions, and delete all associated personal data (except as required to be retained for regulatory reporting of the incident).

Parents or guardians who believe a minor has accessed ciobet should contact our support team immediately at [email protected].

14 Changes to This Privacy Policy

ciobet reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service offerings. When we make material changes, we will provide at least 30 days' advance notice via:

• A prominent notice on the ciobet homepage
• An email to the address registered on your account
• A notification within your account dashboard upon next login

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after a revised Policy becomes effective constitutes your acceptance of the changes.

If you do not agree with a revised Policy, you may close your account in accordance with our Terms & Conditions.

15 Contact Us

Questions, concerns, or requests regarding this Privacy Policy or ciobet's data protection practices should be directed to:

• Data Protection Officer
• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Inquiry" or "Data Rights Request"
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days and to formal data rights requests within 30 days.

For general customer support inquiries unrelated to privacy, please use our 24/7 live chat service available on the homepage or submit a support ticket through your account dashboard.