Privacy Policy

1. Introduction

bara36 ("we," "us," "our") operates the online gambling platform accessible at https://bara36.cam (the "Platform"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of information that you provide when using our services.

By creating an account with bara36, accessing our Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with this Privacy Policy, you must not use our Platform or services.

This Privacy Policy applies to all users of bara36, including visitors to our website, registered members, and anyone who interacts with our Platform in any capacity. It should be read in conjunction with our Terms and Conditions, which govern your use of the Platform.

2. Information We Collect

To provide our gambling services, process transactions, comply with legal obligations, and enhance your user experience, bara36 collects various types of personal information. The categories of information we collect include:

2.1 Personal Identification Information

• Full Name: Your legal name as it appears on government-issued identification
• Date of Birth: To verify you are at least 21 years old, as required by Indonesian law
• Email Address: For account communications, security notifications, and marketing (if you opt in)
• Mobile Phone Number: For account verification, security alerts, and customer support
• Residential Address: Your current address in Indonesia for identity verification and compliance purposes
• Indonesian National ID (KTP): To complete KYC (Know Your Customer) verification as required by anti-money laundering regulations
• Selfie Photo: Holding your ID to verify that you are the account owner and prevent identity theft

2.2 Financial Information

• Bank Account Details: Bank name (BCA, BRI, BNI, Mandiri, etc.), account number, and account holder name for processing deposits and withdrawals
• E-Wallet Information: Registered mobile numbers or account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja transactions
• Transaction History: Records of all deposits, withdrawals, bets placed, winnings, losses, and other financial transactions conducted on the Platform
• Payment Verification Documents: Bank statements, screenshots, or other proof of payment method ownership as may be required for large withdrawals or suspicious activity investigation

2.3 Gaming and Activity Information

• Betting History: All bets placed, including bet type (sports betting, live casino, slots), stake amount, odds, outcomes, and timestamps
• Game Play Data: Records of games played, session duration, wins, losses, and gameplay patterns
• Bonus and Promotion Usage: Which bonuses you claim, wagering progress, and compliance with bonus terms
• Responsible Gaming Settings: Deposit limits, loss limits, session time limits, self-exclusion status, and reality check preferences

2.4 Technical and Device Information

• IP Address: Your device's internet protocol address for security, fraud prevention, and geolocation verification
• Device Information: Device type (smartphone, tablet, computer), operating system (Android, iOS, Windows, macOS), browser type and version
• Login History: Date and time of each login, device used, IP address, and location data
• Cookies and Tracking Data: Information collected through cookies, web beacons, and similar technologies (see Section 8 for details)
• Website Usage Data: Pages viewed, links clicked, time spent on pages, navigation paths, and search queries entered on the Platform

2.5 Communication Records

• Customer Support Interactions: Live chat transcripts, email correspondence, WhatsApp messages, and phone call recordings (where legally permitted and disclosed)
• Marketing Preferences: Your opt-in or opt-out choices for promotional emails, SMS messages, and other marketing communications
• Feedback and Surveys: Any feedback, reviews, survey responses, or other communications you voluntarily provide to bara36

3. How We Collect Information

bara36 collects your personal information through various methods:

3.1 Information You Provide Directly

• When you create an account and complete the registration form
• When you upload KYC verification documents (ID, selfie, proof of address)
• When you make deposits or request withdrawals
• When you contact customer support via live chat, email, or WhatsApp
• When you set responsible gaming limits or request self-exclusion
• When you participate in promotions, surveys, or provide feedback

3.2 Information Collected Automatically

• Through cookies, web beacons, and similar tracking technologies when you visit our website
• Through server logs that record IP addresses, device information, and browsing behavior
• Through your betting and gaming activity as you use the Platform
• Through fraud detection systems and security monitoring tools

3.3 Information from Third Parties

• Payment Processors: Information from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to verify and process transactions
• Identity Verification Services: Data from third-party KYC verification providers to confirm your identity and prevent fraud
• Game Providers: Gameplay data from third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.) whose games you play on bara36
• Fraud Prevention Services: Information from fraud detection databases and credit reference agencies to protect against money laundering and illegal activity

4. How We Use Your Information

bara36 uses your personal information for the following purposes, all of which are necessary to provide our services, comply with legal obligations, and improve your user experience:

4.1 Account Management and Service Provision

• Create, maintain, and manage your bara36 user account
• Verify your identity and age (21+ requirement) through KYC procedures
• Process deposits and withdrawals to your registered payment methods
• Enable you to place bets on sports, play casino games, and participate in other gambling activities
• Track your betting history, account balance, wins, and losses
• Administer bonuses, promotions, and loyalty rewards (VIP program)
• Enforce responsible gaming limits and self-exclusion requests

4.2 Customer Support and Communication

• Respond to your inquiries, complaints, and support requests via live chat, email, or WhatsApp
• Send you transactional communications (deposit confirmations, withdrawal notifications, account security alerts)
• Notify you of important changes to our Terms and Conditions, Privacy Policy, or Platform features
• Send you marketing communications about new games, bonuses, and promotions (only if you have opted in; you may opt out at any time)

4.3 Legal Compliance and Security

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Verify that you are not located in a restricted jurisdiction where online gambling is prohibited
• Detect, prevent, and investigate fraud, money laundering, underage gambling, and other illegal activities
• Protect the security and integrity of our Platform against hacking, unauthorized access, and cyberattacks
• Respond to legal requests, court orders, and regulatory investigations
• Enforce our Terms and Conditions and resolve disputes

4.4 Platform Improvement and Analytics

• Analyze user behavior and preferences to improve website functionality, game selection, and user experience
• Conduct market research and customer satisfaction surveys
• Test new features, games, and promotional offers
• Identify technical issues, bugs, and performance problems
• Generate anonymized statistics and reports for business intelligence (no personally identifiable information is included in aggregated data)

5. Information Sharing and Disclosure

bara36 does not sell your personal information to third parties for marketing purposes. However, we may share your information with trusted partners and service providers in the following circumstances:

5.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• Game Providers: Third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Pocket Games Soft) whose games are integrated into our Platform
• KYC and Identity Verification Services: Third-party verification providers to confirm your identity and age
• Customer Support Tools: Live chat software providers, email services, and CRM systems used to manage customer communications
• Marketing and Analytics Partners: Services that help us analyze website traffic, user behavior, and marketing campaign effectiveness (only anonymized or aggregated data is shared where possible)
• Cloud Hosting and IT Infrastructure: Secure server providers and cloud computing services that host our Platform and store data

All third-party service providers are contractually obligated to protect your data, use it only for the purposes we specify, and comply with applicable data protection laws. They are prohibited from using your information for their own purposes or sharing it with others without our authorization.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulators, courts, or government authorities when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or regulatory investigation
• Detect, prevent, or address fraud, security breaches, or illegal activity
• Enforce our Terms and Conditions or other agreements
• Protect the rights, property, or safety of bara36, our users, or the public

5.3 Business Transfers

In the event that bara36 undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with other third parties when you have given explicit consent for us to do so (e.g., participating in a partner promotion or survey).

6. Data Security Measures

bara36 takes data security extremely seriously and implements industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

6.1 Encryption and Secure Transmission

• SSL/TLS Encryption: All data transmitted between your device and bara36 servers is protected using 256-bit SSL (Secure Socket Layer) encryption—the same technology used by banks and financial institutions
• Encrypted Data Storage: Sensitive personal and financial information is encrypted at rest using advanced encryption standards (AES-256)
• Secure Payment Processing: All payment transactions are processed through PCI-DSS compliant payment gateways

6.2 Access Controls and Authentication

• Password Protection: User accounts are protected by secure passwords that must meet minimum complexity requirements
• Two-Factor Authentication (2FA): Optional 2FA adds an extra layer of security by requiring a verification code sent to your mobile device
• Role-Based Access: bara36 employees and contractors have access only to the personal information necessary for their job functions
• Regular Access Audits: We regularly review and audit who has access to personal data and revoke access when no longer needed

6.3 Network and Infrastructure Security

• Firewalls: Multi-layer firewall protection to prevent unauthorized network access
• Intrusion Detection Systems: Real-time monitoring to detect and respond to suspicious activity
• Regular Security Updates: We keep our software, systems, and infrastructure up to date with the latest security patches
• DDoS Protection: Distributed Denial of Service attack mitigation to ensure Platform availability and data integrity

6.4 Employee Training and Policies

• All bara36 employees and contractors undergo data protection training
• Staff are bound by strict confidentiality agreements
• We enforce clear policies regarding the handling, storage, and disposal of personal information

6.5 Regular Security Assessments

• We conduct regular internal security audits and vulnerability assessments
• Third-party security experts periodically perform independent penetration testing
• We maintain an incident response plan to quickly address any data breaches or security incidents

7. Data Retention

bara36 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Active Account Data

While your account is active, we retain all personal information, transaction history, and gaming records to provide ongoing services and comply with regulatory requirements.

7.2 Closed or Inactive Accounts

• Voluntary Account Closure: If you close your account, we will retain certain information (name, ID verification documents, transaction records) for a minimum of 5 years to comply with anti-money laundering regulations and tax laws
• Terminated Accounts: Accounts terminated for violation of Terms and Conditions may have information retained indefinitely to prevent future fraud and abuse
• Inactive Accounts: Accounts with no login or transaction activity for 12 consecutive months may be considered dormant; we may delete non-essential data while retaining legally required records

7.3 Legal and Regulatory Requirements

Certain types of information must be retained for specific periods under Indonesian and international law:

• KYC documents and identity verification records: minimum 5 years after account closure
• Transaction records (deposits, withdrawals, bets): minimum 5 years for tax and audit purposes
• Anti-money laundering compliance records: as required by applicable AML regulations
• Legal dispute records: retained until the dispute is fully resolved and all appeal periods have expired

7.4 Data Deletion

After the retention period expires, your personal information will be securely deleted or anonymized so that it can no longer identify you. Deletion methods include secure erasure of electronic files, physical destruction of paper documents, and permanent removal from backup systems.

8. Cookies and Tracking Technologies

bara36 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our Platform, analyze website traffic, and deliver personalized content. This section explains what cookies are, how we use them, and how you can manage your cookie preferences.

8.1 What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit a website. They allow the website to remember your actions and preferences (such as login status, language, font size) over a period of time, so you don't have to re-enter them whenever you return to the site or browse from one page to another.

8.2 Types of Cookies We Use

• Essential Cookies: Strictly necessary for the Platform to function. These enable core features like account login, security, and transaction processing. You cannot opt out of essential cookies without disabling your browser's cookie functionality entirely (which will prevent you from using bara36).
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymized information about pages visited, time spent on site, and navigation paths. This data helps us improve website performance and user experience.
• Functionality Cookies: Remember your preferences (language, display settings, responsible gaming limits) to provide a more personalized experience.
• Advertising and Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies may track your browsing behavior across multiple websites to show you targeted ads.

8.3 Managing Cookies

Most web browsers automatically accept cookies by default, but you can modify your browser settings to decline cookies or alert you when a cookie is being sent. Instructions for managing cookies vary by browser:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions

Please note that if you disable cookies, some features of the bara36 Platform may not function properly, and your user experience may be degraded.

8.4 Third-Party Cookies

Some cookies on our Platform are set by third-party service providers (e.g., analytics tools, advertising networks, game providers). These third parties have their own privacy policies governing how they use your information. We recommend reviewing their policies if you have concerns about third-party tracking.

9. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. bara36 respects these rights and provides mechanisms for you to exercise them.

9.1 Right to Access

You have the right to request a copy of the personal information bara36 holds about you. To exercise this right, contact our support team with a written request. We will provide your information in a commonly used electronic format within 30 days (or as required by applicable law).

9.2 Right to Correction

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly through your account settings, or contact support for assistance with changes that require verification (e.g., name, date of birth, registered payment methods).

9.3 Right to Deletion (Right to be Forgotten)

You may request deletion of your personal information in certain circumstances, such as when:

• The information is no longer necessary for the purposes for which it was collected
• You withdraw consent (where consent was the legal basis for processing)
• You object to processing and there are no overriding legitimate grounds for continued processing
• The information was unlawfully processed

However, we may refuse deletion requests when we have a legal obligation to retain the information (e.g., anti-money laundering records, tax documentation, ongoing legal disputes). We will inform you of the reasons if we cannot fulfill your deletion request.

9.4 Right to Object

You have the right to object to certain types of processing, particularly:

• Marketing Communications: You can opt out of promotional emails, SMS messages, and other marketing communications at any time by clicking "unsubscribe" in emails, adjusting your account preferences, or contacting support
• Automated Decision-Making: You have the right to object to decisions made solely by automated processing (e.g., automated credit checks, fraud detection algorithms) and request human review

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider (where technically feasible). This right applies when processing is based on consent or contract and is carried out by automated means.

9.6 Right to Withdraw Consent

Where we rely on your consent to process personal information (e.g., marketing communications, certain optional features), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9.7 How to Exercise Your Rights

To exercise any of these privacy rights, please contact bara36:

• Email: [email protected] (subject line: "Privacy Rights Request")
• Live Chat: Available 24/7 through your account dashboard

We will respond to your request within 30 days and may ask for additional information to verify your identity before processing the request.

10. Children's Privacy

bara36 strictly prohibits underage gambling. Our services are intended exclusively for individuals who are at least 21 years of age, in compliance with Indonesian law. We do not knowingly collect personal information from anyone under 21.

If we become aware that a user is under 21 years old, we will immediately:

• Suspend or terminate the account
• Void all bets and transactions
• Forfeit any account balance
• Delete the user's personal information (except as required by law for regulatory reporting)
• Report the incident to relevant authorities if required

If you are a parent or guardian and believe your child has provided personal information to bara36, please contact us immediately at [email protected] so we can take appropriate action.

11. International Data Transfers

bara36 may transfer, store, and process your personal information in countries outside Indonesia, including jurisdictions that may not have the same level of data protection as Indonesian law. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Transferring data only to countries recognized as providing adequate data protection
• Using standard contractual clauses approved by data protection authorities
• Ensuring third-party service providers comply with international data protection standards

By using bara36, you acknowledge and consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.

12. Changes to This Privacy Policy

bara36 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document
• Notify you via email to your registered email address
• Display a prominent notice on the bara36 website
• For significant changes affecting your rights, request your explicit consent where required by law

Your continued use of bara36 services after notification of changes constitutes acceptance of the updated Privacy Policy. If you do not agree to the changes, you must stop using bara36 and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or how bara36 handles your personal information, please contact us:

• Email: [email protected] (subject line: "Privacy Inquiry" for fastest response)
• Live Chat: Available 24/7 through your account dashboard and the bara36 website
• WhatsApp Support: Contact number available in your account dashboard after login

Our customer service team operates 24 hours a day, 7 days a week, including weekends and Indonesian public holidays. Indonesian-speaking support agents are prioritized during WIB business hours (8 AM - 11 PM WIB).

We will investigate and respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.