Privacy Policy

This Privacy Policy applies to all personal data collected, processed, or stored by batu56 in connection with the operation of the online betting and gaming platform available at https://batu56.cam, including all associated sub-domains, mobile applications, and any other digital touchpoints operated under the batu56 brand.

This Policy applies to all individuals who interact with batu56, including registered players, prospective players who browse the Platform without registering, and individuals who contact our customer support team.

By using the batu56 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to request closure of your account and deletion of your personal data where legally permissible.

batu56 collects the following categories of personal data:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (used to verify you are at least 21 years of age)
• Residential address in Indonesia or your country of residence
• Contact email address
• Mobile phone number
• Preferred username and encrypted password

• Indonesian national identity card (KTP — Kartu Tanda Penduduk) or valid passport image
• Proof of address documentation (utility bills, bank statements dated within three months)
• Selfie photograph taken alongside your primary identity document
• Payment account ownership verification (screenshots of OVO, DANA, GoPay, or bank account reflecting your registered name)

• Bank account details (account number, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga) used for deposits and withdrawals
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for transactions
• Transaction history (deposits, withdrawals, bet amounts, winnings, bonus credits)
• Note: batu56 does not store full credit or debit card numbers. Where card payments are processed, they are handled by PCI-DSS certified payment processors.

• Betting history across all products (sports betting, live casino, slots, togel — Indonesia's traditional numbers lottery)
• Game preferences, session frequency, and session duration
• Responsible gaming tool usage and settings (deposit limits, self-exclusion requests)
• Bonus participation and wagering activity

• IP address at the time of registration, login, and each session
• Device type, operating system, and browser type/version
• Geolocation data (country and region level, derived from IP address)
• Referring URL and on-site navigation path
• Cookie identifiers and session tokens

• Records of all support interactions (live chat transcripts, email correspondence) with the batu56 team
• Feedback, complaints, and dispute records submitted to batu56
• Marketing preference records (opt-in and opt-out history)

batu56 collects personal data through the following channels:

• Directly from you — when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically via the Platform — when you browse or use the Platform, our systems automatically collect technical and device data through server logs and session cookies.
• From third-party payment providers — when you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, our payment processing partners may return transactional confirmation data to us.
• From identity verification partners — where batu56 uses a third-party KYC service provider, that provider may return verification results and risk scores to batu56 after processing your identity documents.
• From fraud prevention and security services — batu56 may receive data from fraud detection services to help identify suspicious login attempts, payment fraud, or multi-account activity.

batu56 uses your personal data exclusively for the following defined purposes:

batu56 will not use your personal data for any purpose not listed above without first notifying you and, where required, obtaining your consent.

batu56 processes your personal data on one or more of the following lawful grounds:

• Contractual necessity: Processing required to fulfil batu56's obligations to you under the Terms & Conditions, including account creation, payment processing, and bet settlement.
• Legal obligation: Processing necessary to comply with applicable laws, including anti-money laundering (AML) requirements, age verification obligations, and responses to lawful governmental requests.
• Legitimate interests: Processing carried out in pursuit of batu56's legitimate business interests, including fraud prevention, platform security, and aggregated analytics for service improvement, provided these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

batu56 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors receive only the minimum data necessary to execute the transaction.
• KYC / identity verification providers: Third-party identity verification services that process your KYC documents on batu56's behalf, under strict data processing agreements.
• Game technology providers: Studios such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive anonymised session identifiers to deliver their games within the Platform. These providers do not receive your full personal profile.
• Fraud prevention services: Specialist providers that help detect multi-accounting, payment fraud, and suspicious betting patterns.
• Legal and regulatory authorities: Where batu56 is required by law, court order, or regulatory instruction to disclose personal data. batu56 will, where legally permissible, notify the affected player prior to disclosure.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of batu56's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

batu56 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

batu56 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• Encryption at rest: All personal data stored in batu56's databases is encrypted using AES-256 symmetric encryption.
• Encryption in transit: All data transmitted between your browser or app and batu56's servers is protected by TLS 1.2 or higher (SSL). Look for the padlock icon in your browser's address bar.
• Access controls: Access to personal data within batu56 is strictly limited to employees and contractors who require it to perform their designated role. Role-based access control (RBAC) and multi-factor authentication (MFA) are enforced for all staff with data access privileges.
• Network security: batu56's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and DDoS mitigation services.
• Penetration testing: The Platform undergoes regular third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to affected individuals, batu56 will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection standards.

batu56 uses cookies and similar tracking technologies to operate the Platform effectively and to understand how it is being used. We categorise our cookies as follows:

batu56 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts. We do not participate in ad retargeting networks.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to use the Platform. For questions about our cookie practices, contact [email protected].

As a batu56 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verifiable request.

We may ask you to verify your identity before processing a data rights request to prevent unauthorised access to your personal information. Requests will be fulfilled free of charge unless they are manifestly unfounded or excessive.

batu56 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes date-of-birth verification, and our KYC process further validates age through government-issued identity documents.

If batu56 discovers that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all balances will be withheld pending investigation, and all personal data associated with the underage account will be deleted in accordance with our retention policy.

If you are a parent or guardian and believe that a minor in your care has registered a batu56 account, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will treat the matter with urgency and full confidentiality.

batu56 operates with cloud infrastructure and technology partners that may be located outside of Indonesia. As a result, your personal data may be transferred to and stored in jurisdictions other than your country of residence. Such transfers may include countries in Southeast Asia, Europe, or other regions where batu56's infrastructure or third-party service providers are based.

Wherever personal data is transferred internationally, batu56 takes appropriate safeguards to ensure that the receiving party provides a level of data protection equivalent to that described in this Policy. These safeguards may include contractual data transfer agreements, standard contractual clauses, or other legally recognised transfer mechanisms.

By using the batu56 Platform, you consent to the transfer of your personal data as described in this clause.

batu56 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email and/or a prominent on-Platform notice at least seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If a proposed change is one to which you do not consent, you have the right to close your account and request deletion of your personal data prior to the amendment's effective date by contacting our support team.

For all privacy-related enquiries, data rights requests, or questions about how batu56 handles your personal information, please reach out to our support team using the contact details below. All communications regarding personal data are handled with strict confidentiality.

• Support Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Support Hours: 24 hours a day, 7 days a week — WIB (UTC+7)
• Response Time Target: Within 30 days for formal data rights requests; within 24 hours for general privacy queries
• Languages: Indonesian and English

When submitting a data rights request, please include your registered email address and a brief description of your request. We may ask you to verify your identity before processing the request to protect the security of your personal data.

For questions about our Terms & Conditions or your account, please visit our FAQ page or contact support directly. For responsible gaming support, including self-exclusion requests, please see our Responsible Gaming page.