Privacy Policy — bebe66

Clause 1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "bebe66" / "the Platform" / "we" / "us" / "our" — The online betting and gaming service operated at bebe66.cam and all associated sub-domains, mobile interfaces, and applications.
• "Company" — The legal entity that owns and operates the bebe66 platform under its international gaming licence.
• "Member" / "User" / "you" / "your" — Any individual who accesses bebe66, whether as a registered account holder or as an unregistered visitor.
• "Personal Data" — Any information that identifies or could reasonably be used to identify a living individual, including name, contact details, financial data, and behavioural data tied to an account.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, and all stages in between.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. bebe66 is the Data Controller for all Member data processed in connection with the operation of the Platform.
• "Third Party" — Any individual or organisation that is not bebe66 or a Member.
• "KYC" — Know Your Customer; the identity verification process required to confirm a Member's identity and age before processing withdrawals.

Clause 2 Data Controller

bebe66 is the Data Controller responsible for the Personal Data of its Members. The Company operates the Platform under an internationally issued gaming licence and processes data in accordance with the standards required by that licence and with applicable international data protection principles.

All privacy-related enquiries, data subject requests, and complaints should be directed to our support team at [email protected]. Responses to formal data subject requests will be provided within thirty (30) calendar days of receipt, in accordance with our obligations.

Clause 3 Personal Data We Collect

The following table sets out the categories of Personal Data that bebe66 may collect from or about you in connection with your use of the Platform:

Clause 4 How We Collect Personal Data

bebe66 collects Personal Data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our customer support team, or use any interactive feature of the Platform.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you visit or interact with the bebe66 website or application. This includes technical data such as your IP address, browser type, and session activity.
• From third-party service providers: From identity verification agencies, payment processors (including banks such as BCA, BRI, BNI, and Mand iri, and digital wallet providers such as OVO, DANA, and GoPay), fraud prevention services, and geolocation providers — solely to the extent necessary to verify your identity, process transactions, and protect the integrity of the Platform.
• From publicly available sources: In limited circumstances, bebe66 may cross-reference publicly available information (such as sanctions lists or regulatory watchlists) to fulfil its compliance obligations under applicable anti-money-laundering frameworks.

Clause 5 Purposes of Processing

bebe66 processes your Personal Data for the following specific and legitimate purposes:

1. Account Creation and Management: To register your account, maintain your profile, and provide you with access to the full range of bebe66's betting and gaming services.
2. Identity Verification (KYC): To confirm your identity, age (21+), and eligibility to use the Platform, as required by our international gaming licence and anti-money-laundering obligations.
3. Transaction Processing: To process deposits and withdrawals via local Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and digital wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate records of all financial activity on your account.
4. Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide ongoing assistance through our 24/7 Indonesian-speaking support channels.
5. Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other forms of misconduct that could harm the integrity of the Platform or other Members.
6. Regulatory Compliance: To fulfil our legal and regulatory obligations, including anti-money-laundering (AML) checks, responsible gaming monitoring, and reporting to relevant licensing authorities where required.
7. Responsible Gaming: To monitor wagering patterns for indicators of problem gambling and to administer deposit limits, cooling-off periods, and self-exclusion tools at your request.
8. Platform Improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, and user experience of bebe66. No individually identifiable data is used for this purpose without your consent.
9. Promotional Communications: To send you relevant offers, promotions, and platform updates by email or in-platform notification, where you have not opted out of such communications. You may withdraw this consent at any time by contacting our support team.

Clause 6 Legal Basis for Processing

bebe66 processes your Personal Data on one or more of the following legal grounds, depending on the nature and purpose of each processing activity:

• Contractual Necessity: Processing that is necessary to perform our contract with you — including account registration, transaction processing, KYC verification, and customer support — is carried out on the basis that it is required to deliver the services you have requested.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including anti-money-laundering obligations, age verification, and licence conditions mandated by our gaming authority.
• Legitimate Interests: Processing carried out for the legitimate business interests of bebe66, including fraud prevention, platform security, and the analysis of aggregated usage data — provided that these interests do not override your fundamental rights and freedoms.
• Consent: Processing for the purpose of sending promotional communications and using non-essential cookies, where we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

Clause 7 Data Sharing & Disclosure

bebe66 does not sell your Personal Data. We may share your data with the following categories of Third Parties, strictly on a need-to-know basis and only to the extent required for the stated purpose:

• Identity Verification Providers: Specialist KYC and age-verification agencies that assist bebe66 in confirming the identity and eligibility of Members.
• Payment Processors and Banking Partners: Financial institutions and payment intermediaries — including but not limited to networks connected with BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja — involved in processing your deposits and withdrawals.
• Fraud Prevention and Security Services: Third-party vendors that provide fraud detection, IP geolocation, device fingerprinting, and related security services to protect the Platform and its Members.
• Technology and Infrastructure Providers: Cloud hosting, data storage, content delivery, and software service providers that support the operation of the bebe66 platform. These providers act as data processors under contractual agreements that require them to protect your data and use it only as instructed by bebe66.
• Regulatory and Legal Authorities: Government bodies, law enforcement agencies, licensing authorities, or courts where disclosure is required by law, court order, or in connection with the investigation of suspected criminal activity.
• Group Companies: Where bebe66 operates as part of a corporate group, relevant data may be shared with affiliated entities for the purposes of group-level compliance, risk management, and consolidated reporting. All intra-group transfers are governed by binding data sharing agreements.

Clause 8 Data Retention

bebe66 retains Personal Data only for as long as necessary to fulfil the specific purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active membership and for a period of five (5) years following account closure, in accordance with standard financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission, as required by anti-money-laundering regulations applicable to licensed gaming operators.
• Transaction Records: Deposit and withdrawal records are retained for a minimum of five (5) years from the date of each transaction to support financial auditing and regulatory reporting obligations.
• Customer Support Records: Communications records and complaint files are retained for three (3) years from the date of the most recent interaction.
• Technical and Log Data: Server logs and session data are retained for up to twelve (12) months, after which they are anonymised or permanently deleted.
• Responsible Gaming Records: Self-exclusion records and responsible gaming tool activations are retained for a minimum of seven (7) years to ensure that self-exclusion requests are honoured and not inadvertently reversed.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

Clause 9 Your Data Rights

As a Member of bebe66, you hold the following rights in relation to your Personal Data. These rights may be exercised at any time by contacting us at [email protected]. We will respond to all verified requests within thirty (30) calendar days.

Clause 10 Cookies & Tracking Technologies

bebe66 uses cookies and similar technologies (including web beacons and local storage) to operate the Platform effectively and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing your ability to use bebe66.
• Functional Cookies: Used to remember your preferences — such as your preferred language display and notification settings — so that you do not need to reconfigure them on each visit.
• Analytical Cookies: Used to collect anonymised, aggregated data about how Members interact with the Platform — including pages visited, session duration, and navigation paths. This data is used exclusively to improve Platform performance and is not linked to any identifiable individual.
• Security and Fraud Detection Cookies: Used to detect and prevent automated attacks, bot activity, multi-accounting, and other forms of abuse. These cookies enable our security systems to distinguish legitimate Member activity from fraudulent or scripted behaviour.

Third-Party Advertising Cookies: bebe66 does not deploy third-party advertising or behavioural tracking cookies. No external ad network has access to your browsing behaviour on our Platform.

Clause 11 Security Measures

bebe66 implements a comprehensive set of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS protocols, preventing interception by third parties.
• Encrypted Data Storage: Sensitive data at rest — including KYC documents and financial records — is stored using strong encryption. Passwords are hashed using a one-way cryptographic algorithm and are never stored in recoverable form.
• Access Controls: Access to Personal Data within our organisation is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and are bound by confidentiality obligations.
• Intrusion Detection and Monitoring: Our infrastructure is monitored continuously for anomalous activity. Automated intrusion detection systems flag and respond to suspicious access attempts in real time.
• Regular Security Audits: bebe66 conducts periodic security reviews and penetration testing to identify and remediate vulnerabilities in our systems before they can be exploited.
• Incident Response: In the event of a data breach that is likely to affect your rights and freedoms, bebe66 will notify affected Members promptly and take all necessary steps to contain and remediate the incident.

While bebe66 takes all reasonable precautions to secure your data, no system is entirely immune to risk. We encourage Members to use strong, unique passwords for their accounts and to contact our support team immediately if they suspect unauthorised access.

Clause 12 Minors — 21+ Policy

bebe66 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. Registration on bebe66 requires confirmation that you are at least 21 years of age, and age is verified as part of the mandatory KYC process.

If bebe66 becomes aware that Personal Data has been collected from an individual under 21 — whether through a false declaration at registration or any other means — we will immediately suspend the relevant account, delete all associated Personal Data to the extent permitted by our legal obligations, and report the matter to relevant authorities where required.

Parents and guardians who believe their child may have accessed or registered on the bebe66 platform should contact us immediately at [email protected]. We will investigate and respond within twenty-four (24) hours of receiving such a report.

Clause 13 International Data Transfers

bebe66 operates on an international basis, and your Personal Data may be transferred to and processed in countries other than your country of residence — including countries where the data protection laws may differ from those of your home jurisdiction. Specifically, data may be processed in the jurisdiction where bebe66's gaming licence is held, and in the locations of our technology and cloud infrastructure providers.

Where such international transfers take place, bebe66 ensures that adequate safeguards are in place to protect your data, including:

• Binding contractual clauses with all data processors that require them to apply data protection standards equivalent to those we apply internally.
• Transfers only to countries or entities that have been assessed as providing an adequate level of protection for Personal Data.
• Intra-group data sharing agreements that govern the treatment of Member data across all entities within the bebe66 corporate structure.

You may request further information about the specific safeguards applicable to any international transfer of your data by contacting us at [email protected].

Clause 14 Changes to This Privacy Policy

bebe66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable laws and regulations. When we make material changes to this policy, we will notify all registered Members via in-platform notification and, where appropriate, by email to the address registered on your account.

Material updates will be communicated at least seven (7) calendar days before the revised policy takes effect, giving you sufficient time to review the changes and, if you do not agree, to close your account prior to the effective date. The date of the most recent revision is displayed at the top of this page.

Your continued use of bebe66 following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.

Clause 15 Contact & Data Requests

For any questions, concerns, or formal data subject requests relating to this Privacy Policy or the processing of your Personal Data by bebe66, please contact our support team using the details below. We treat all privacy enquiries with strict confidentiality.

• Email: [email protected] — plaintext address, not a clickable link
• Live Chat: Available 24/7 within the bebe66 platform interface, with Indonesian-speaking agents on standby.
• Response Commitment: All privacy-related enquiries and formal data subject access requests will receive an initial acknowledgement within twenty-four (24) hours and a substantive response within thirty (30) calendar days.

For matters related to your account security, self-exclusion, or responsible gaming tools, please visit our Responsible Gaming page. For a full understanding of your contractual relationship with bebe66, please also review our Terms & Conditions.