This Privacy Policy explains how bon32 collects, uses, stores, and protects the personal information of players who use the bon32 platform at bon32.vip. We are committed to handling your data responsibly, transparently, and in accordance with internationally recognised data-protection principles. By registering an account or using the Platform, you acknowledge that you have read and accepted the terms of this Policy.
bon32 operates the online casino and sportsbook platform accessible at bon32.vip (the "Platform"). In the course of providing gaming, sportsbook, and ancillary services to players based primarily in Indonesia, bon32 necessarily collects and processes certain categories of personal data relating to those players.
This Privacy Policy (the "Policy") sets out, in clear and accessible terms, the full scope of bon32's data-processing activities: what personal data we collect, the purposes for which that data is used, the legal bases on which processing rests, the parties with whom data may be shared, the safeguards in place to protect it, how long we retain it, and the rights that players may exercise in respect of their personal data.
This Policy should be read alongside the bon32 Terms & Conditions, which govern the overall relationship between bon32 and its players. Capitalised terms used but not defined in this Policy have the meanings given to them in the Terms & Conditions.
For the purposes of this Policy, bon32 is the data controller — the entity that determines the purposes and means of processing your personal data. bon32 operates the Platform under international gaming licensing and directs its services primarily toward adult players in Indonesia.
The designated Data Protection contact for bon32 is reachable at [email protected]. Players who wish to exercise any of the rights described in Section 11 of this Policy, or who have any privacy-related concerns, should direct their correspondence to this address with the subject line "Privacy — Data Subject Request".
bon32 collects personal data across several categories. The table below sets out the specific data types collected within each category:
| Category | Data Types Collected | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP, passport, or SIM) | Mandatory (KYC) |
| Contact Data | Email address, mobile phone number, WhatsApp number, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali) | Mandatory |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, transaction amounts in IDR | Mandatory |
| Verification Data | Photographs or scans of government-issued ID documents, selfie verification images, proof-of-address documents | Mandatory (KYC) |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, session timestamps | Automatic |
| Usage Data | Pages visited, games played, wagers placed, bet history, bonus redemption activity, session duration, login frequency | Automatic |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, any information you voluntarily provide to our support team | When applicable |
| Responsible Gaming Data | Self-imposed deposit limits, cooling-off elections, self-exclusion requests, session-time alerts, problem-gambling self-assessments | When applicable |
bon32 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where a document submitted for KYC purposes incidentally reveals such information. Where this occurs, the data is used solely for identity verification and is not processed for any other purpose.
The majority of your personal data is collected directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. You provide this data actively and voluntarily, with the exception of data that is a mandatory requirement for account registration or identity verification.
When you access the bon32 Platform, we automatically collect Technical Data and Usage Data through server logs, cookies, and similar tracking technologies. This data is collected regardless of whether you are logged in and is used to ensure the security, stability, and correct functioning of the Platform. For more detail on cookies, see Section 10.
In certain circumstances, bon32 may receive personal data about you from third parties, including:
bon32 processes your personal data for the following purposes:
bon32 processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration, KYC, payment processing, service delivery | Performance of contract — processing is necessary to fulfil our obligations to you as a registered player |
| AML screening, fraud prevention, regulatory record-keeping | Legal obligation — processing is required to comply with applicable AML and financial crime prevention regulations |
| Platform security, abuse prevention, responsible gaming monitoring | Legitimate interests — bon32 has a legitimate interest in protecting the integrity of the Platform and the wellbeing of its players |
| Direct marketing communications | Consent — where required, or legitimate interests — where an existing player relationship exists and opt-out options are clearly provided |
| Platform analytics and performance optimisation | Legitimate interests — improving the Platform benefits all players and does not override individual privacy rights |
bon32 shares personal data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include KYC verification providers, payment processors, cloud hosting and infrastructure providers, fraud screening services, and customer support platform operators. All service providers are bound by data-processing agreements that require them to maintain confidentiality and implement appropriate security measures.
Certain game providers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — may receive limited technical data (such as player session tokens) for the sole purpose of delivering their game content within the Platform. These providers do not receive your full identity or financial data.
bon32 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bon32, its players, or third parties. In such cases, bon32 will disclose only the minimum data necessary to satisfy the legal requirement.
In the event of a merger, acquisition, restructuring, or sale of all or part of bon32's business, player personal data may be transferred to the acquiring entity as part of that transaction. bon32 will endeavour to notify affected players before their data is transferred and becomes subject to a materially different privacy policy.
bon32 does not sell, rent, or lease your personal data to unaffiliated third parties for their own marketing or commercial purposes. Data is shared only as described in this Section, and only to the extent necessary for the stated purpose.
bon32 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below summarises our standard retention periods by data category:
| Data Category | Retention Period |
|---|---|
| Identity and KYC documents | 5 years from account closure (AML compliance requirement) |
| Financial transaction records | 5 years from the date of each transaction |
| Account and gaming activity data | Duration of active account plus 2 years post-closure |
| Customer support communications | 3 years from the date of last interaction |
| Technical and usage logs | 13 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 1 year thereafter |
| Self-exclusion records | Minimum 6 years from the date of self-exclusion request |
Upon expiry of the applicable retention period, data is securely deleted or anonymised so that it can no longer be linked to any individual player.
bon32 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to store information about your preferences and activity. bon32 uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform.
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Required for the Platform to function — e.g., session authentication, account security, fraud prevention signals. Cannot be disabled. |
| Functional | Remember your preferences such as language, currency display, and preferred game categories to personalise your experience. |
| Performance / Analytics | Collect anonymised usage data to help bon32 understand how players navigate the Platform, which pages are most visited, and where technical issues occur. |
| Marketing | Track promotional campaign effectiveness and — where consent is given — deliver targeted bonus offers and personalised marketing messages. |
You may configure your browser to refuse some or all cookies, or to alert you when a cookie is set. Disabling strictly necessary cookies will impair core Platform functionality, including login and game access. Disabling performance or marketing cookies will not affect your ability to play. Instructions for managing cookies are available in the help documentation of your browser of choice.
Subject to applicable law and certain exemptions, you have the following rights in respect of your personal data held by bon32:
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy — Data Subject Request". bon32 will acknowledge your request within 5 business days and respond substantively within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further two months, with prior notification.
The bon32 Platform is strictly intended for adults aged 21 years or older. bon32 does not knowingly collect, store, or process personal data from individuals below the age of 21. As part of the KYC verification process, all players are required to submit documentary evidence of their date of birth prior to their first withdrawal.
If bon32 becomes aware that personal data has been collected from a player who is under 21 years of age, the account will be immediately suspended, all funds will be frozen pending review, and the data will be deleted or rendered inaccessible without undue delay. Any winnings accrued by a player found to be under the minimum age will be voided.
Parents or guardians who believe a minor has accessed the Platform or submitted personal data should contact our support team immediately at [email protected] so that the matter can be investigated and resolved promptly.
bon32 is an internationally operating platform and, as a result, your personal data may be transferred to and processed in countries outside Indonesia. This may occur, for example, when data is stored on cloud infrastructure hosted in data centres located in other jurisdictions, or when a third-party service provider with whom we work is based outside Indonesia.
Wherever such transfers occur, bon32 takes appropriate steps to ensure that your personal data receives a consistent level of protection. These steps may include entering into standard contractual clauses with the receiving entity, ensuring the destination country offers an adequate level of data protection, or applying other legally recognised transfer mechanisms.
If you would like further information about the specific safeguards in place for any particular international transfer, please contact us at [email protected].
bon32 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, the services we offer, applicable law, or regulatory guidance. When changes are material, bon32 will notify registered players by email and/or by a prominent notice on the Platform at least 7 days before the revised Policy takes effect.
The "Effective Date" at the top of this Policy indicates when the current version came into force. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should close your account before the effective date and cease using the Platform.
We encourage you to review this Policy periodically to stay informed about how bon32 protects your information.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bon32 handles your personal data, please contact us through any of the following channels:
Every piece of data you transmit to bon32 — from account credentials to payment details — is protected by 256-bit SSL/TLS encryption. Your information is unreadable to any third party in transit.
bon32 never sells, rents, or trades your personal data to external advertisers or data brokers. Your information is used solely to operate your account and deliver the services you signed up for.
KYC documents submitted to bon32 are handled by trained compliance staff and secure third-party verification services. They are used exclusively for identity and age verification and are never shared for marketing purposes.
You hold meaningful rights over your data — access, rectification, erasure, portability, and objection. bon32 responds to all data subject requests within 30 days and provides clear escalation paths if you are not satisfied.
bon32 does not retain your data indefinitely. Clear retention schedules govern every data category — from 13-month rolling logs to 5-year AML record-keeping — after which data is securely deleted or anonymised.
Independent third-party security specialists conduct periodic penetration tests and vulnerability assessments of the bon32 Platform. Findings are remediated promptly to maintain a strong security posture for all players.
Now that you know how bon32 protects your data, take the next step. Explore our full game library, check our FAQ for common questions, or log in to manage your account privacy settings today.