Privacy Policy

bus4b operates an online sports betting and casino platform serving players primarily across Indonesia, including in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Yogyakarta, Makassar, and Palembang. The privacy and security of our players is a fundamental organizational value — not a compliance afterthought.

This Policy applies to all personal data collected through the bus4b website, any associated mobile-optimized interface, customer support channels (including email and live chat), and any other interaction you have with bus4b as a registered player. It covers all categories of data from initial registration through Account closure and beyond, where applicable retention obligations apply.

We encourage you to read this Policy in full. If you have any questions after doing so, our support team is available 24/7 at [email protected].

The following terms carry the meanings set out below throughout this Policy:

bus4b collects Personal Data across several categories depending on the nature of your interaction with the Platform:

3.1 Registration Data

When you create an Account, we collect the following information:

• Full legal name (as it appears on your Indonesian National ID — KTP)
• Date of birth
• Email address
• Indonesian mobile phone number
• Username and encrypted password
• City or region of residence (e.g., Jakarta, Surabaya, Bali)

3.2 Identity Verification (KYC) Data

Before any withdrawal is approved, bus4b is required to verify your identity. KYC data includes:

• Scan or photograph of your KTP (Indonesian National Identity Card)
• Proof of address document (utility bill, bank statement, or government-issued document issued within the last 3 months)
• Evidence of ownership of your payment method (e.g., screenshot of your BCA, BRI, BNI, Mandiri, OVO, or DANA account showing your name and account number)
• In some cases, a selfie photograph for liveness verification

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, and payment method identifiers
• Bank account numbers or e-wallet account identifiers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction reference numbers and processing status

3.4 Betting & Gaming Activity Data

• All bets placed, game sessions initiated, and results recorded on the Platform
• Bonus claims, wagering activity, and promotion participation history
• Account balance history and withdrawal request records

3.5 Technical & Device Data

• IP address at the time of login and transaction
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop) and screen resolution
• Session duration, pages visited, and navigation paths within the Platform
• Cookie identifiers and similar tracking technologies (see Clause 8)

3.6 Customer Support Data

When you contact bus4b's support team — via live chat or email — we record the content of that communication, including your Account details, the nature of your query or complaint, and the resolution provided. These records are retained for quality assurance and dispute resolution purposes.

bus4b collects Personal Data through the following means:

• Directly from you: When you register an Account, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automatically: Through cookies, session tracking, and server logs when you visit and interact with the Platform (see Clause 8 for full cookie details).
• From Third-Party Processors: KYC verification partners may return identity check results and risk scores to bus4b. Payment processors confirm the status and details of your transactions. These partners operate under strict data processing agreements with bus4b.
• From publicly available sources: In limited circumstances, bus4b may cross-reference publicly available records (such as sanctions lists or politically exposed persons databases) to fulfill anti-money-laundering obligations.

bus4b processes your Personal Data only for clearly defined, legitimate purposes. The table below sets out each purpose and the category of data involved:

bus4b does not use your Personal Data for any purpose not listed above without first obtaining your explicit consent or being required to do so by applicable law.

bus4b processes your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing required to fulfill the contract with you — i.e., to operate your Account, process your deposits and withdrawals, and deliver the betting and casino services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) requirements, KYC obligations, and fraud prevention duties.
• Legitimate interests: Processing carried out to pursue bus4b's legitimate business interests, including Platform security, fraud prevention, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have given clear, informed consent to a specific processing activity — for example, opting in to receive promotional emails about bonuses and seasonal offers such as Idul Fitri or Ramadhan promotions. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bus4b does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the following strictly controlled circumstances:

7.1 Third-Party Processors

We engage vetted third-party service providers who process Personal Data on our behalf and are contractually bound to use it only as instructed by bus4b and to maintain appropriate security standards. These include:

• KYC and identity verification providers: To check the authenticity of your KTP and supporting documents.
• Payment processors: To facilitate deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game content studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe receive limited session data necessary to deliver their game interfaces. No financial or KYC data is passed to game studios.
• Fraud and security analytics providers: Who analyze technical data and transaction patterns to identify and prevent unauthorized access, bonus abuse, and money laundering.
• Customer support platform providers: Who host our live chat and ticketing infrastructure.

7.2 Legal and Regulatory Disclosure

bus4b may disclose Personal Data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, a valid court order, or a lawful government request. We will, where legally permissible, notify you of any such disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of bus4b's business assets, Personal Data held by bus4b may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change in the privacy terms applicable to your data prior to the transfer taking effect.

bus4b uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The cookies we use fall into the following categories:

bus4b does not use third-party advertising or retargeting cookies. You can manage cookie settings in your browser. Note that disabling strictly necessary cookies will prevent you from logging into your Account.

bus4b retains Personal Data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the lifetime of your Account plus a minimum of 5 years following Account closure, to meet AML record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification, consistent with internationally applied AML standards.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Betting and gaming activity logs: Retained for a minimum of 3 years from the date of each session or transaction.
• Customer support records: Retained for 2 years from the date of the interaction, or longer where the communication relates to an unresolved dispute or ongoing investigation.
• Technical and device data (server logs): Retained for up to 12 months, after which they are automatically purged or anonymized.

At the end of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual. Anonymized or aggregated data may be retained indefinitely for statistical and analytical purposes.

bus4b implements a layered security architecture designed to protect your Personal Data against unauthorized access, loss, alteration, and disclosure. Our technical and organizational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform.
• Encryption at rest for sensitive data fields including passwords (bcrypt hashing), KYC document files, and payment method identifiers stored in our databases.
• Role-based access controls (RBAC) ensuring that only authorized bus4b personnel with a legitimate business need can access specific categories of Personal Data.
• Multi-factor authentication (MFA) on all internal systems that hold Personal Data, including our customer support platform and back-office administrative tools.
• Regular penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection and monitoring systems that alert our security team to anomalous access patterns in real time.
• Secure data deletion procedures including cryptographic erasure for data stored on decommissioned hardware.

As a player on the bus4b Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your Account username. We will respond within 30 days of receiving your request.

11.1 Right of Access

You have the right to request a copy of the Personal Data bus4b holds about you, including what categories of data we hold, the purposes for which we use it, and the third parties with whom we have shared it.

11.2 Right to Rectification

You have the right to request that inaccurate or incomplete Personal Data be corrected or updated. For KYC-verified data (such as your registered name or date of birth), corrections may require submission of updated identity documents.

11.3 Right to Erasure

You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that bus4b cannot delete data that we are legally required to retain (e.g., AML transaction records — see Clause 9).

11.4 Right to Restriction of Processing

You may request that bus4b restrict the processing of your Personal Data — for example, while a rectification request is being assessed or where you have objected to processing and a determination is pending.

11.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive the Personal Data you have provided to bus4b in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to transmit that data to another controller.

11.6 Right to Object

You have the right to object to processing of your Personal Data where bus4b relies on legitimate interests as the legal basis. bus4b will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defense of legal claims.

11.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., receiving promotional communications), you may withdraw that consent at any time by contacting support or updating your Account notification preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

bus4b is strictly an adult platform. Access is prohibited to any person under the age of 21. We do not knowingly collect Personal Data from individuals under 21 years of age. If bus4b becomes aware that an Account has been registered by a minor, that Account will be immediately suspended, all associated data will be securely deleted, and any deposits will be returned to the original payment source.

If you believe that a person under 21 has registered on the Platform using false information, please notify us immediately at [email protected]. We take such reports seriously and will investigate without delay.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online betting platforms. bus4b strongly supports responsible gaming and child protection efforts across Indonesia.

Some of bus4b's Third-Party Processors — including game content studios and KYC verification providers — may process Personal Data on servers located outside Indonesia. Where such international transfers occur, bus4b ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia. These safeguards include:

• Contractual clauses in data processing agreements requiring the recipient to adhere to data protection standards consistent with internationally recognized frameworks.
• Transfers exclusively to processors that have demonstrated adequate data security certifications, such as ISO 27001 information security management certification.
• Limiting the scope of data transferred to the minimum necessary for the specific processing purpose.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries other than Indonesia. bus4b will not transfer Personal Data to any jurisdiction that does not provide an adequate level of protection without your explicit consent or a valid legal basis.

bus4b reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When a material change is made — for example, a new category of data being collected, a new processing purpose, or a new category of Third-Party Processor — we will notify you by email to your registered address and display a prominent notice on the Platform at least 7 days before the change takes effect.

The version date shown at the top of this page reflects when the Policy was last revised. Continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree to the updated terms, you must stop using the Platform and contact us to close your Account. Your verified real-money Balance will be returned to your registered payment method upon Account closure.

We recommend bookmarking this page and checking it periodically, particularly around Indonesian public holidays when promotional campaigns may involve additional data processing activities.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bus4b handles your Personal Data, please contact our Data Privacy team using the details below:

• Email: [email protected]
• Subject Line for Privacy Requests: "Data Rights Request — [Your Username]"
• Response Time: Within 30 days of receiving a complete request; urgent security-related requests are prioritized within 24 hours
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays
• Languages: English and Indonesian (Bahasa Indonesia)