Privacy Policy — 789bin

For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned to them below unless context requires otherwise:

• "789bin" / "we" / "us" / "our" — the 789bin online betting and gaming platform accessible at https://789bin.bet, including all associated sub-domains, mobile-optimised pages, and support channels.
• "Player" / "you" / "your" — any natural person who visits, registers on, or interacts with the 789bin platform in any capacity.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, including but not limited to name, date of birth, national identity number, email address, mobile number, payment account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. 789bin acts as the Data Controller for all Personal Data collected through the platform.
• "Data Processor" — a third party that processes Personal Data on behalf of 789bin under a written data processing agreement that imposes obligations equivalent to those in this Policy.
• "Cookies" — small text files placed on your device by the platform to store session information, preferences, and analytical data.
• "KYC" — Know Your Customer identity and age verification procedures conducted prior to processing withdrawals or large deposits, in compliance with anti-money-laundering and responsible gaming obligations.
• "Services" — the full range of wagering and gaming products available on 789bin, including sportsbook betting, live casino, slots, Bandar Q, and Sic Bo.

789bin operates as the Data Controller for all Personal Data collected through this platform. As Data Controller, we are responsible for determining why your data is collected and how it is processed, stored, and protected throughout its lifecycle on our systems.

789bin operates under an internationally recognised gaming licence and adheres to globally accepted data protection standards. While Indonesia's Personal Data Protection Law (UU PDP) provides the primary statutory framework relevant to our Indonesian player base, 789bin's data practices are designed to meet or exceed the protections that law affords to data subjects.

789bin collects only the Personal Data that is necessary for the lawful, efficient, and secure operation of the platform. The categories of data we collect are detailed in the table below:

789bin does not collect sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (unless submitted as part of KYC document photos), or health data, except where expressly required by applicable law or regulation.

Personal Data is collected through the following channels and mechanisms:

• Directly from you — when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support via live chat or email, or respond to a survey or promotional campaign.
• Automatically during your session — through server logs, cookies, pixel tags, and similar technologies that record Technical Data and Usage Data each time you interact with the platform. See Clause 10 for full details on cookies.
• From third-party payment processors — when your bank (e.g., BCA, BRI, BNI, Mandiri) or e-wallet provider (e.g., OVO, DANA, GoPay) transmits transaction confirmation data to our payment gateway.
• From identity verification services — when a third-party KYC provider processes your identity documents and returns a verified or flagged result to 789bin without retaining a copy of the document itself on their servers beyond the verification window.
• From fraud prevention and anti-money-laundering partners — who may cross-reference your data against watchlists, sanctions databases, and politically exposed persons (PEP) registries as required by our licensing obligations.

789bin processes your Personal Data only for clearly defined, legitimate purposes. We do not process data in a manner that is incompatible with the purposes listed below:

• Account Management: To create, maintain, and administer your 789bin player account, including authenticating your identity at each login and enabling access to all platform Services.
• Transaction Processing: To facilitate deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen local bank or e-wallet, reconcile your account balance, and generate transaction records.
• Identity & Age Verification (KYC): To verify that you are at least 21 years of age and that your identity, payment method, and residential address are genuine, as required by our responsible gaming policy and licensing conditions.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, multiple-account abuse, bonus abuse, and any other conduct that breaches our Terms & Conditions or applicable law.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 Indonesian-speaking support team.
• Personalisation & Product Improvement: To analyse usage patterns, improve platform features, tailor the gaming and sportsbook experience to your preferences, and develop new product offerings relevant to Indonesian players.
• Marketing Communications: To send you promotional offers, bonus alerts, and event-driven communications (such as those aligned with Ramadhan, Idul Fitri, or BRI Liga 1 fixtures) where you have opted in to receive them. You may withdraw consent at any time via your account settings.
• Responsible Gaming Compliance: To enforce deposit limits, loss limits, cool-off periods, and self-exclusion requests you have activated, and to monitor for behavioural indicators of problem gambling as part of our player welfare obligations.
• Legal & Regulatory Compliance: To comply with the requirements of our gaming licence, applicable laws, court orders, and requests from competent regulatory or law-enforcement authorities.

Every processing activity carried out by 789bin rests on at least one of the following lawful bases:

• Performance of a Contract: Processing that is necessary to deliver the Services you have contracted for when opening a 789bin account — including account management, transaction processing, and KYC verification.
• Legitimate Interests: Processing that serves 789bin's legitimate business interests (and those of our players) in maintaining platform security, preventing fraud, improving Services, and conducting analytics — provided those interests are not overridden by your rights and freedoms.
• Legal Obligation: Processing that is required to comply with our gaming licence conditions, anti-money-laundering obligations, applicable Indonesian law (including UU PDP), and orders from competent authorities.
• Consent: Processing for optional purposes — primarily direct marketing communications and the use of non-essential cookies — where you have provided freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

789bin does not sell your Personal Data to third parties for their own commercial purposes under any circumstances. We may share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors & Banking Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data required to execute deposits and withdrawals.
• KYC & Identity Verification Providers: Specialist third-party verification services process your identity documents solely to confirm your age and identity and return a pass/fail result to 789bin.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe may receive pseudonymised player identifiers and game session data solely for the purpose of delivering and auditing game rounds.
• Fraud Prevention & AML Services: Specialist providers that screen transactions and player profiles against sanctions lists, PEP registers, and fraud databases to protect the integrity of the platform.
• Analytics & Technology Providers: Cloud hosting, content delivery, platform monitoring, and analytics vendors that process Technical Data and Usage Data under strict data processing agreements with 789bin.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or at the lawful request of a competent Indonesian or international authority.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of 789bin's assets, Personal Data held may be transferred to the acquiring entity, subject to the same privacy obligations set out in this Policy.

All third-party Data Processors engaged by 789bin are bound by written data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to 789bin.

789bin retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, our gaming licence conditions, or legitimate business needs. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that renders it irrecoverable. Where data cannot be immediately deleted due to backup cycles or legal hold requirements, it is isolated from active processing until deletion can be completed.

789bin employs a multi-layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 789bin's servers is encrypted in transit using industry-standard TLS 1.2 or higher protocols, preventing interception by third parties.
• Encryption at Rest: Sensitive Personal Data stored in 789bin's databases — including financial data and identity documents — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): All 789bin player accounts support two-factor authentication via a one-time password (OTP) sent to your registered mobile number, providing an additional layer of login security.
• Access Controls: Internal access to Personal Data is governed by a strict role-based access control policy. Only authorised 789bin personnel with a documented business need may access identifiable player data.
• Intrusion Detection & Monitoring: 789bin's infrastructure is monitored continuously for anomalous activity, attempted intrusions, and data exfiltration attempts. Automatic alerts trigger immediate incident response procedures.
• Regular Security Audits: The platform undergoes periodic penetration testing and security audits conducted by independent third-party specialists to identify and remediate vulnerabilities before they can be exploited.
• Secure Data Centres: Player data is hosted in Tier III or higher certified data centres with physical access controls, redundant power, and environmental monitoring.

789bin uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and — where you have given consent — deliver personalised promotional content. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies manage your login session, maintain your account authentication state, remember your deposit method, and enable core security features. They cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Collect anonymised or pseudonymised data about how players navigate the platform — which pages are visited most frequently, where sessions begin and end, and which games attract the highest engagement. This data is used solely to improve platform performance and user experience.
• Functionality Cookies: Remember your preferences such as preferred language, display settings, and last-visited game category so you do not need to re-enter these settings on each visit.
• Marketing & Targeting Cookies: Used only with your explicit consent to deliver promotional content relevant to your gaming interests and to measure the effectiveness of marketing campaigns. These cookies may set a persistent identifier that links your session to a prior visit.

You may manage your cookie preferences at any time through your browser settings. Disabling non-essential cookies will not prevent you from using the platform's core features. Please note that clearing all cookies will log you out of your current session and reset your stored preferences.

As a player on the 789bin platform and a data subject under applicable privacy law, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request" and include your registered username and a brief description of your request.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and to receive information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. Basic profile corrections (name, phone number, email) can be made directly within your account settings.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that certain data must be retained for the periods specified in Clause 8 regardless of a deletion request, due to legal obligations.
• Right to Restriction: You have the right to request that we restrict processing of your Personal Data in specific circumstances — for example, while you contest its accuracy or while an objection to processing is being considered.
• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another service provider where the processing was based on your consent or performance of a contract.
• Right to Object: You have the right to object to processing of your Personal Data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, though we may be able to demonstrate compelling grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

789bin will respond to all verified data subject requests within 30 days of receipt. In complex or multiple requests, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

789bin's Services are strictly restricted to adults aged 21 years and above (21+). We do not knowingly collect, store, or process Personal Data from individuals under the age of 21. Account registration requires date-of-birth confirmation, and KYC verification is used to enforce this age restriction.

The 789bin platform may contain references to or integrations with third-party services — including game studios such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, and Spribe — whose privacy practices are governed by their own privacy policies, not this one. 789bin is not responsible for the data collection practices, security standards, or privacy policies of any third-party service providers or game studios integrated into the platform.

When you interact directly with a third-party game interface embedded within 789bin, that studio may collect technical session data (such as a pseudonymised player identifier and game round results) under the terms of their own privacy notice. We recommend reviewing the privacy policies of any third-party providers whose services you use through the platform.

789bin does not control, and is not responsible for, the content or privacy practices of any external websites that may be referenced in user-generated content submitted through our support channels. Accessing any external resource is entirely at your own risk.

789bin reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the Services we offer. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Where a proposed amendment materially affects your rights or the way in which we process your Personal Data, we will provide advance notice through one or more of the following channels, no fewer than 14 days before the amendment takes effect:

• A prominent notification banner displayed on the 789bin platform when you next log in.
• A direct email notification sent to your registered email address.
• An in-platform message delivered to your account inbox.

Your continued use of the 789bin platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the amended terms, you must cease using the Services and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 789bin's handling of your Personal Data, please reach out to our dedicated Data Protection team through the following channels:

• Live Chat: Available directly within the 789bin platform, 24 hours a day, 7 days a week. Average first-response time is under 60 seconds during peak hours (19:00–23:00 WIB). Live chat is the fastest channel for urgent account-related data concerns.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" to ensure your message is routed directly to our Data Protection team. Most email enquiries are answered within 4 business hours; the maximum response time is 5 business days.

When submitting a data subject request, please include your registered username and, where relevant, the specific data category or processing activity your request concerns. This will allow us to identify your account and action your request as efficiently as possible.