bonus123 Casino & Sportsbook Data Care

This page describes what we collect when you use bonus123 and how we keep that data protected. We collect your email, phone number, identity document, address, payment method details, and game activity when you open an account and play on our platform. We use this information only to verify your identity, process deposits and withdrawals, settle game outcomes, and comply with financial regulations in your jurisdiction.

We at bonus123 do not sell your personal data to third parties. We share your information only with payment processors (such as DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and banks including mobile banking, local payment, online payment, e-wallet) and with regulatory authorities if required by law. Our privacy practices are designed to protect you and meet applicable data-protection standards in the regions where our services operate.

Your data on bonus123 is stored on encrypted servers and accessed only by our staff and systems that need it to serve your account. We do not use your data for marketing to other services, and we do not track your location or device activity beyond what is necessary to prevent fraud and verify your deposits.

What We Collect on Your bonus123 Account

When you create an account with bonus123, we ask for your email address and a mobile phone number. We use your email to send account confirmations, security alerts, and transaction receipts. We use your phone number for two-factor authentication (2FA) when you log in from a new device or change your account settings.

We require your full legal name, date of birth, and national identity document number (KTP for Indonesian users) to verify your identity. We scan your KTP and cross-reference it against our fraud-detection system to confirm you are who you claim to be. We also ask for your residential address and request a proof-of-address document (utility bill, bank statement, or government letter) dated within the last 12 months.

When you deposit funds to bonus123, we record your payment method details—your DANA username, e-wallet phone number, bank account number, or mobile banking code. We do not store your full card numbers or full banking credentials; we tokenize them for security. This allows us to process future withdrawals to the same method without you re-entering details.

We log all of your activity on bonus123. This includes every deposit, withdrawal, bet placed, game joined, and outcome settled. We record the time, amount, market or game type, and result for each transaction. This activity log helps us detect fraud, settle disputes, and provide you with transaction history and account statements.

Session data: We log your login times, device type, and IP address for security. This helps us detect unauthorized access and alert you if your account is accessed from an unusual location.
Device information: Our app collects your device model, operating system, and app version to optimize streaming quality and performance. We do not collect your contact list or other apps on your device.
Cookies and trackers: We use cookies on bonus123 to remember your login preference and language choice. We do not use cookies to track you across other websites or apps.
Game telemetry: For live-dealer tables and sportsbook markets, we record your interaction data (how long you remain at a table, which markets you view) to improve our service and detect unusual patterns.

How We Use and Protect Your Data on bonus123

We use your personal data primarily for account verification and payment processing. When you deposit via GoPay or e-wallet, we send your name and phone number to mobile banking or local payment's servers to confirm the transaction. When you withdraw to a online payment or e-wallet account, we share your name and account number with those banks to process the transfer. These payment processors are bound by their own privacy policies and are responsible for protecting your data on their systems.

We use your activity log to prevent fraud and money laundering. Our automated systems scan for patterns—such as a sudden large withdrawal after account inactivity, or repeated deposits and immediate withdrawals—that might indicate misuse. If we detect such a pattern, we may temporarily hold your account pending manual review by our compliance team.

We are required by Indonesian financial regulations to retain your KTP number, address, and payment method details for at least 7 years after your account closes. We cannot delete these records even if you ask, as they are part of our anti-money-laundering (AML) obligation. We do, however, delete your email address and phone number upon account closure unless we are legally required to retain them.

Note: Our bonus123 servers may be located outside Indonesia. Your data may be stored in data centres in Singapore or Australia to ensure redundancy and uptime. Data transferred across borders is encrypted end-to-end.

We encrypt all data in transit (between your device and our servers) using HTTPS/TLS encryption. Data at rest (stored on our servers) is encrypted using AES-256 encryption. Access to your personal data is restricted to bonus123 staff who need it to process your account, investigate disputes, or comply with legal requests. We log all access to sensitive data (KTP numbers, payment methods) and review these logs monthly for unauthorized access.

We undergo security audits annually. An independent security firm tests our systems for vulnerabilities, reviews our data-handling procedures, and confirms that we meet industry standards for data protection. We maintain cyber-liability insurance in case of a data breach.

Breach notification: If we discover that your data has been compromised, we notify you via email within 24 hours and inform regulatory authorities as required by law. We do not publicly disclose breaches that affect fewer than 100 accounts.
Data retention: We delete transaction data (deposits, withdrawals, game activity) after 7 years of account inactivity. Your core identity data (KTP, address) is retained for AML compliance. You can request a data export anytime.
Third-party processors: We use email services (for sending confirmations), SMS services (for 2FA codes), and analytics platforms to understand platform performance. None of these processors can access your payment details or betting history.
Your rights: You can request a copy of your data, correct inaccurate information, or delete your account at any time. Account deletion erases your login credentials and gameplay records but does not erase your KTP or payment history (retained for regulatory compliance).

Data Jurisdiction and Your Rights on bonus123

We at bonus123 operate in jurisdictions where data protection laws vary. In Indonesia (Jakarta, Surabaya, Bandung, Medan, Semarang), we comply with Law No. 27 of 2022 on Data Protection. In other supported jurisdictions, we comply with applicable local laws. This means your rights regarding your data depend on where you are located.

If you are in a jurisdiction with a data-protection law similar to Indonesia's, you have the right to: access your data, correct inaccurate data, request deletion (subject to regulatory holds), and object to certain processing. To exercise these rights, contact our support team with your account ID and a clear description of your request. We respond within 30 days.

Our bonus123 service is available only where local law permits. If we determine that your jurisdiction has prohibitions against our service, we may close your account and return your balance to your registered payment method. We make these determinations based on IP address, registered address, and regulatory guidance.

We do not collect data from users under the legal age of majority in their jurisdiction. If we discover a minor has created an account, we close it immediately and do not process any deposits or withdrawals.

Note: We do not honor "do not track" (DNT) browser signals because we need to track your activity on bonus123 for fraud prevention and account security. DNT preferences do not apply to our platform.

Contacting bonus123 About Your Data

If you have questions about our privacy practices, want to exercise your data rights, or suspect your data has been misused, contact our support team. Email us at [email protected] or use the in-app chat feature during business hours (Monday–Friday, 8 AM–6 PM WITA). Include your account ID and a clear description of your concern. We respond within 48 business hours.

We regularly update this privacy policy to reflect changes in our practices or applicable law. We notify you of material changes via email at least 30 days before they take effect. Your continued use of bonus123 after the 30-day notice period indicates your acceptance of the updated policy. If you disagree with an update, you can close your account and request withdrawal of your balance.

Our bonus123 data-protection commitments apply uniformly across all users, regardless of location, payment method, or account tier. We do not sell your data, do not use it for marketing to third parties, and do not share it outside the purposes outlined in this policy. Your trust is essential to our operation, and we take data protection seriously.