Your privacy matters to us. This policy explains exactly what personal data sba99 collects, why we collect it, how we use and protect it, and what rights you hold as a Member registered from Indonesia.
Last updated: 1 January 2026A plain-English summary of sba99's core data protection principles. The full legal text in the sections below governs in all cases.
sba99 does not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for their commercial use. Your information stays within sba99's controlled environment and its vetted service providers.
All data transmitted between your browser and sba99's servers is encrypted using industry-standard TLS 1.3 / SSL. Sensitive data at rest — including payment details and identity documents — is encrypted in storage using AES-256.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit requests to the support email listed at the bottom of this page and we will respond within 30 days.
sba99 uses cookies solely for session management, fraud prevention, and platform performance analytics. We do not deploy third-party advertising cookies or cross-site tracking pixels.
sba99 collects only the data that is necessary to operate the Platform, verify your identity, process transactions, and comply with applicable law. We do not collect data speculatively or beyond these defined purposes.
In the event of a data security incident that is likely to result in a high risk to your rights or freedoms, sba99 will notify affected Members without undue delay and provide guidance on protective steps you can take.
As a Member of sba99, you hold the following rights with respect to your personal data. To exercise any right, contact our support team at the email address published on this page.
Request a copy of all personal data sba99 holds about you, including the categories of data, purposes of processing, and any third parties to whom it has been disclosed.
Request correction of inaccurate or incomplete personal data. Account name corrections may require supporting identity documentation to prevent fraud.
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations (e.g., AML records held for 5 years).
Request that sba99 restrict the processing of your data in certain circumstances — for example, while the accuracy of your data is being contested.
Request your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) where processing is based on your consent or a contract.
Object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on sba99's legitimate interests on grounds relating to your particular situation.
In this Privacy Policy, the following terms carry the meanings defined below:
2.1 sba99 is an internationally operated online betting and casino platform accessible at sba99.cam. We serve English-preference users across Indonesia and are committed to handling all personal data in accordance with the principles of data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality.
2.2 sba99 acts as the Data Controller for all Personal Data submitted by Members through the Platform. Where sba99 engages third-party service providers who process data on its behalf, those providers act as Data Processors and are contractually bound to handle data only in accordance with sba99's written instructions and applicable data protection standards.
2.3 Questions about this Privacy Policy, requests to exercise your data rights, or complaints about sba99's data handling practices should be directed to the support contact details in Section 18.
3.1 sba99 collects the following categories of Personal Data:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID / KTP number, passport number | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, Indonesian mobile number | Account communication, support, transaction alerts, marketing (if consented) |
| Financial Data | Bank account number and name (BCA, BRI, BNI, Mandiri, etc.), e-wallet handle (OVO, DANA, GoPay), transaction history | Deposit processing, withdrawal processing, AML compliance |
| Technical Data | IP address, browser type and version, operating system, device identifier, session timestamps | Security monitoring, fraud prevention, platform optimisation |
| Usage Data | Pages visited, games played, bet history, session duration, clickstream data | Platform improvement, responsible gaming monitoring, personalisation |
| KYC Documents | Scanned KTP, bank statement, selfie photograph | Identity verification, AML compliance, fraud prevention |
| Communications Data | Support chat logs, email correspondence content, complaint records | Customer service, dispute resolution, quality assurance |
3.2 sba99 does not knowingly collect sensitive Personal Data categories such as biometric data, health data, racial or ethnic origin, political opinions, or religious beliefs beyond what is inherent in the KYC document verification process.
4.1 Directly from you: when you register an Account, complete the KYC process, make a deposit or withdrawal, contact support, or submit a form on the Platform.
4.2 Automatically: when you access or navigate the Platform, via Cookies, server logs, and similar tracking technologies (see Section 10 for Cookie details).
4.3 From third-party payment processors: when you deposit or withdraw via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja — sba99 receives transaction reference data necessary to match your payment to your Account.
4.4 From identity verification services: sba99 may use third-party KYC verification tools to cross-reference the identity documents you submit. These tools return a verification result (pass/fail/pending); they do not independently store your documents unless required by applicable law.
5.1 sba99 processes your Personal Data on the following legal bases:
6.1 sba99 uses your Personal Data for the following purposes:
7.1 sba99 does not sell, rent, or trade your Personal Data. We share data only in the circumstances described below:
7.2 All third-party Data Processors are subject to contractual obligations requiring them to: (a) process data only on sba99's documented instructions; (b) implement appropriate technical and organisational security measures; and (c) delete or return data upon termination of the processing relationship.
8.1 sba99 operates internationally. Your Personal Data may be transferred to and stored on servers located outside Indonesia. Where data is transferred to countries that do not provide a level of data protection equivalent to international standards, sba99 implements appropriate safeguards including standard contractual clauses, data processing agreements with equivalent protections, and technical security controls equivalent to those applied to data stored within the region.
8.2 By registering an Account with sba99 and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data to sba99's international server infrastructure for the purposes described in this Policy.
9.1 sba99 retains your Personal Data for as long as your Account remains active and for a period thereafter as required by legal, regulatory, or legitimate business purposes. Specific retention periods are as follows:
9.2 When retention periods expire, Personal Data is securely deleted or irreversibly anonymised. Where deletion is technically complex due to backup systems, sba99 will ensure the data is not used for any active purpose pending deletion.
10.1 sba99 uses the following categories of cookies on the Platform:
10.2 sba99 does not use advertising cookies, retargeting pixels, or social media tracking scripts (Facebook Pixel, Google Ads remarketing, etc.) on the Platform. No third-party advertising network receives your browsing data from sba99.
10.3 Most browsers allow you to manage and delete cookies through browser settings. However, disabling strictly necessary cookies will impair or prevent your use of the Platform. Disabling performance cookies will not affect your ability to use the Platform but will reduce sba99's ability to identify and fix technical issues.
11.1 sba99 implements the following technical and organisational security measures to protect your Personal Data:
11.2 No security measure is absolute. In the event of a data breach that poses a high risk to your rights or freedoms, sba99 will notify affected Members without undue delay and provide information on protective steps you can take.
12.1 The Platform is intended solely for adults aged 21 years and over. sba99 does not knowingly collect Personal Data from any person under the age of 21.
12.2 If sba99 discovers that Personal Data belonging to a person under 21 has been collected — whether through fraudulent age misrepresentation during registration or any other means — the Account will be immediately suspended, all associated Personal Data will be deleted without delay, and any Balance will be returned to the depositing payment account after an appropriate investigation period.
12.3 If you are a parent or guardian and believe your child has registered an Account with sba99, please contact our support team immediately at the address in Section 18.
13.1 To exercise any of the data rights described in this Policy — access, rectification, erasure, restriction, portability, or objection — please submit a written request to sba99's support team at the contact details in Section 18.
13.2 sba99 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days with prior notification.
13.3 sba99 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee or refusal of the request may apply.
13.4 sba99 may need to verify your identity before processing a data rights request. This is to prevent unauthorised third parties from accessing or deleting another Member's data. Verification will typically require you to be logged in to your Account or to provide confirmation from the email address registered to the Account.
14.1 sba99 may send you marketing emails about promotions, new games, VIP tier upgrades, and seasonal offers (including Idul Fitri, Ramadhan, Indonesian Independence Day, Nyepi, and Chinese New Year (Imlek) promotions) where you have expressly opted in during registration or subsequently via your Account preferences.
14.2 You may unsubscribe from marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email; or (b) updating your communication preferences in your Account settings; or (c) submitting a written opt-out request to the support email in Section 18.
14.3 Opting out of marketing communications does not affect transactional communications (deposit confirmations, withdrawal notifications, security alerts, KYC status updates) — these are sent as part of the service contract and cannot be disabled while an Account remains active.
14.4 sba99 will not send marketing communications to any Member who has activated a self-exclusion or cooling-off period under the Platform's responsible gaming tools, regardless of their marketing opt-in status.
15.1 The Platform does not contain links to external third-party websites as a matter of policy. All navigation links on sba99.cam point exclusively to pages within the sba99 domain.
15.2 If you independently navigate from sba99 to any third-party website, sba99 has no control over that site's privacy practices and is not responsible for the collection or use of your Personal Data by that third party. We encourage you to read the privacy policy of any website you visit.
16.1 sba99 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. Material changes — those that affect your rights or the way we use your data in a significant manner — will be communicated by email to your registered address at least 14 days before taking effect.
16.2 The updated Privacy Policy will be published on this page with a revised "Last Updated" date. We encourage you to review this page periodically to stay informed about how sba99 protects your data.
16.3 Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree with a material amendment, you may request Account closure before the amendment takes effect.
17.1 This Privacy Policy is governed by the laws applicable to sba99's operating jurisdiction. sba99 is committed to aligning its data protection practices with internationally recognised frameworks and best practices.
17.2 Members based in Indonesia acknowledge that Indonesia's Electronic Information and Transactions Law (UU ITE) and Personal Data Protection Law (UU PDP) may apply to their interactions with the Platform. sba99 takes reasonable measures to ensure its practices are consistent with those frameworks.
18.1 For any questions, data rights requests, or concerns about this Privacy Policy or sba99's data handling practices, please contact us using the following details:
18.2 If you are not satisfied with sba99's response to your privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
18.3 For matters related to responsible gaming or self-exclusion, please visit the Responsible Gaming page or send a separate email with "Responsible Gaming Request" in the subject line.
18.4 For general platform questions and support, the full FAQ is available at sba99.cam/faq.
Our support team is available 24/7. Visit the FAQ for quick answers, review our Terms & Conditions, or check the Responsible Gaming page to manage your account protection settings.