Privacy Policy — s86bet Data Protection Commitment

The data controller responsible for the processing of personal data collected via the s86bet Platform is s86bet's internationally licensed operating entity (hereinafter referred to as "s86bet", "we", "us", or "our"). As data controller, s86bet determines the purposes and means of processing personal data collected from users and registered players of the Platform at https://s86bet.cam.

For all privacy-related inquiries, data rights requests, or complaints, you may contact our Data Protection contact point at [email protected] with the subject line "Privacy Inquiry — [Your Username]". We aim to respond to all privacy-related correspondence within 5 business days (WIB).

The categories of personal data that s86bet collects from players vary depending on the stage of your interaction with the Platform. The following table summarizes the key data categories and the context in which they are collected:

Where you choose not to provide data marked as mandatory during registration or KYC, s86bet may be unable to open or maintain your account, or to process withdrawal requests, as applicable.

s86bet collects personal data through the following primary channels:

• Direct Submission: Information you actively provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or adjusting your account settings.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, session durations, and clickstream data. This collection occurs via server logs, cookies, and analytics tools as described in Section 8.
• Transaction Processing: Financial data generated when you initiate deposits via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), or cryptocurrency (USDT, BTC, ETH), including transaction reference numbers and timestamps.
• Third-Party Verification: During KYC processing, s86bet may use third-party identity verification service providers to cross-reference the documents you submit against public and licensed identity databases. These providers are bound by confidentiality agreements and are not permitted to use your data for any other purpose.
• Game Studio Providers: When you access casino games or live dealer tables provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, those studios may collect limited technical data (such as session identifiers) necessary to deliver the game experience. That data is governed by the studio's own data processing agreements with s86bet.

s86bet processes your personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with those stated below:

• Account Management: Creating, maintaining, and administering your s86bet player account, including authentication, password recovery, and account security monitoring.
• Service Delivery: Enabling you to place bets on sports markets (BRI Liga 1, EPL, Champions League, Timnas Indonesia fixtures, etc.), access casino games, participate in live dealer tables, and use all other Platform features.
• Financial Transaction Processing: Processing your deposit and withdrawal requests securely via your chosen payment method, and maintaining accurate financial records associated with your account.
• KYC & AML Compliance: Verifying your identity and age (21+ requirement) in accordance with international Know Your Customer (KYC) and Anti-Money Laundering (AML) standards applicable to licensed gaming platforms.
• Fraud Prevention & Platform Security: Detecting and investigating suspicious activity, unauthorized account access, bonus abuse, multi-accounting, and other conduct prohibited under our Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators and proactively offering responsible gaming tools such as deposit limits, session limits, and self-exclusion options.
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining a record of communications to ensure service consistency.
• Platform Improvement: Analyzing aggregated, anonymized behavioral data to improve the Platform's performance, user interface, game selection, and overall player experience.
• Marketing & Promotions: Sending you bonus offers, promotional notifications, and platform news — only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.
• Legal & Regulatory Compliance: Meeting our obligations under applicable international gaming regulations, financial crime prevention laws, and any lawful orders from competent authorities.

s86bet processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary to perform the contract between you and s86bet — specifically, to operate your account, process bets, and handle deposits and withdrawals — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, is carried out on the basis of legal compliance.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of s86bet's legitimate business interests, provided those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional analytics features is carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

s86bet does not sell your personal data. We may share your data with the following categories of third parties, strictly to the extent necessary for the purpose stated:

• Payment Processing Partners: Indonesian bank transfer processors and e-wallet providers (OVO, DANA, GoPay) receive the minimum financial data required to execute your transaction. Cryptocurrency transactions are processed via blockchain networks, which are publicly visible by their nature.
• KYC / Identity Verification Providers: Third-party identity verification services receive copies of the KYC documents you submit, solely for the purpose of verifying your identity and age. These providers operate under strict data processing agreements with s86bet.
• Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session-level data necessary to deliver the game experience. No personally identifiable information beyond a session or player token is typically shared.
• IT Infrastructure & Cloud Providers: s86bet's platform is hosted on secure cloud infrastructure. Our hosting providers process data solely on s86bet's instructions and are contractually prohibited from accessing or using your data independently.
• Legal & Regulatory Authorities: s86bet may be required to disclose personal data to law enforcement agencies, gaming regulators, or financial intelligence authorities in response to lawful orders, subpoenas, or regulatory investigations. We will notify affected players of such disclosure where we are legally permitted to do so.
• Professional Advisors: Our legal counsel, external auditors, and compliance consultants may have limited access to personal data where necessary to provide their professional services. All such parties are bound by confidentiality obligations.

In all cases where data is shared with third parties, s86bet ensures that appropriate contractual safeguards — including data processing agreements — are in place to protect your information.

s86bet retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: All account-related personal data is retained for the duration of your active account relationship with s86bet.
• Post-Closure Retention: Following account closure, s86bet retains identity data, KYC documentation, and transaction records for a minimum of five (5) years in compliance with international AML record-keeping requirements. This period may be extended where a legal hold, active investigation, or dispute is in progress.
• Transaction Records: Financial transaction logs (deposit and withdrawal history, bet records) are retained for a minimum of five (5) years following the date of the transaction.
• Communications Data: Customer support conversations and dispute correspondence are retained for three (3) years following the resolution of the interaction.
• Technical & Behavioral Data: Aggregated, anonymized analytics data may be retained indefinitely for platform improvement purposes. Raw technical logs (e.g., IP address logs) are retained for up to twelve (12) months.
• Marketing Preferences: Records of your marketing consent status are retained for the duration of your account and for three (3) years following account closure, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized.

The s86bet Platform uses cookies and similar tracking technologies to maintain session state, analyze Platform usage, and deliver a personalized experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impacting your ability to use the Platform.
• Functional Cookies: Store your Platform preferences — such as your preferred language, responsible gaming settings, and display preferences — to provide a consistent experience across sessions.
• Analytical Cookies: Collect aggregated, anonymized data about how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used exclusively to improve the Platform and is not linked to your individual identity.
• Performance Cookies: Monitor Platform load times, server response performance, and feature reliability to support our technical operations team in maintaining a stable service.

s86bet does not use third-party advertising cookies or cross-site tracking cookies that serve personalized advertisements on external websites. Our use of tracking technologies is limited to improving the s86bet Platform and your experience within it.

s86bet takes the security of your personal data seriously and implements a layered set of technical and organizational measures to protect it against unauthorized access, loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and s86bet servers is encrypted in transit using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data — including identity documents and financial records — is encrypted at rest using AES-256 encryption on all storage systems.
• Access Controls: Access to systems holding personal data is restricted to authorized personnel only, using role-based access control (RBAC). Privileged access requires multi-factor authentication.
• Audit Logging: All access to personal data by internal staff is logged and subject to regular automated and manual audit review to detect anomalies or unauthorized access attempts.
• Penetration Testing: s86bet engages independent security firms to conduct regular penetration testing and vulnerability assessments of the Platform and its underlying infrastructure.
• Incident Response: In the event of a data breach or security incident affecting player data, s86bet maintains a formal incident response plan. Affected players will be notified promptly where required by applicable law.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. This provides an additional layer of security beyond the password at login.

The s86bet Platform integrates with a number of third-party service providers to deliver a complete gaming experience. These include game content studios, payment gateways, and identity verification providers. While s86bet takes contractual measures to ensure these parties handle your data responsibly, we are not responsible for the independent privacy practices of third-party entities.

Specifically, when you play games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, those studios operate the game software under license agreements that include data processing terms. The data those studios handle in connection with your game session is governed by their own privacy frameworks, as well as the data processing agreements they hold with s86bet.

Payment service providers — including local Indonesian bank processors and e-wallet operators such as OVO, DANA, and GoPay — receive only the transaction data necessary to execute your payment. Their handling of that data is governed by their own published privacy policies and applicable Indonesian financial regulation.

The s86bet Platform does not contain links to external websites other than those required for platform operation. If any such links are present, s86bet is not responsible for the privacy practices of linked external sites.

s86bet respects your rights over your personal data. Subject to applicable law and our regulatory obligations, you hold the following rights with respect to the personal data we hold about you:

• Right of Access: You may request a copy of the personal data that s86bet holds about you. We will provide this in a structured, readable format within a reasonable timeframe.
• Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly via your account settings.
• Right of Erasure: You may request that s86bet delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations — we cannot erase data we are required by law to retain.
• Right to Restrict Processing: In certain circumstances, you may request that s86bet restrict the processing of your data — for example, while a dispute over its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that your data be provided in a machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including processing for direct marketing purposes. If you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, please contact s86bet at [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request promptly and respond substantively within a reasonable period. We may need to verify your identity before processing a data rights request.

The s86bet Platform is strictly intended for adults aged 21 years and older. s86bet does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and any account found to belong to a person under 21 will be immediately closed.

If you are a parent or guardian and believe that a minor has registered an account on s86bet or provided personal data to the Platform without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action, including closing the account and deleting any personal data collected, as swiftly as possible.

As an internationally operating platform, s86bet may transfer your personal data to countries outside Indonesia for the purpose of hosting, processing, or providing the Platform's services. Where such transfers occur, s86bet ensures that appropriate safeguards are in place to protect your data to a standard consistent with internationally recognized data protection principles.

Safeguards used for international data transfers include:

• Contractual data processing agreements with all third-party recipients that impose data protection obligations equivalent to those described in this Privacy Policy.
• Transfer to jurisdictions recognized as providing an adequate level of data protection by the governing body of s86bet's licensing jurisdiction.
• Technical measures — including encryption and pseudonymization — applied to data prior to transfer where additional protection is warranted.

By using the s86bet Platform, Indonesian players acknowledge that their data may be processed outside Indonesia as described above, and consent to such transfers as part of the overall service agreement.

s86bet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The date of the most recent update is displayed at the top of this document.

When material changes are made to this Privacy Policy, s86bet will notify registered players via an in-platform notification displayed upon login, and/or by email to the address associated with your account. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the s86bet Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and contact support to request account closure.

For all privacy-related inquiries, data rights requests, or concerns about how s86bet handles your personal data, please reach out using the contact details below. All privacy correspondence must be in writing — no telephone privacy support line is available.

• General Privacy Inquiries: [email protected] — Subject: "Privacy Inquiry — [Your Username]"
• Data Rights Requests (Access, Deletion, Rectification): [email protected] — Subject: "Data Rights Request — [Your Username]"
• Reporting Suspected Unauthorized Access: [email protected] — Subject: "Security Concern — [Your Username]"
• Response Time: We acknowledge all privacy requests within 24 hours (WIB business hours) and provide substantive responses within 5 business days.
• Support Availability: 24/7, with Indonesian-speaking agents available at all hours across WIB, WITA, and WIT time zones.