Privacy Policy

This Privacy Policy ("Policy") describes how b2slot ("we", "us", "our"), the operator of the online betting platform at https://b2slot.cam, collects, processes, stores, shares, and protects the personal data of individuals ("you", "your") who visit the website, register an account, or use any of our services.

b2slot serves English-preference players primarily based in Indonesia. We recognise that Indonesian players entrust us with sensitive personal and financial information and we take that responsibility seriously. This Policy is written in plain English so that you can fully understand our data practices without needing specialist legal knowledge.

By registering an account on b2slot or continuing to use our platform after the effective date of this Policy, you acknowledge that you have read and understood how we process your personal data as described herein. If you disagree with any part of this Policy, you must cease using the platform and contact us to request account closure.

The following terms carry the meanings below throughout this Policy:

b2slot acts as the Data Controller for all personal data collected through the platform. As Data Controller, b2slot is responsible for ensuring that personal data is processed lawfully, fairly, and transparently; collected only for specified, explicit, and legitimate purposes; kept accurate and up to date; stored no longer than necessary; and protected by appropriate technical and organisational security measures.

b2slot is an internationally licensed online gaming operator. Our licensing authority requires us to maintain robust data governance practices as a condition of holding a valid gaming licence. The requirements of our gaming licence inform and shape many of the data-processing activities described in this Policy, particularly those relating to KYC, AML monitoring, and data retention periods.

b2slot collects personal data through several channels and at various stages of the customer relationship. The categories of data we collect are described below.

3.1 Account Registration Data

When you create a b2slot account, we collect:

3.2 Identity Verification (KYC) Data

To comply with AML obligations and our gaming licence requirements, we collect:

3.3 Financial Transaction Data

Each time you deposit or withdraw funds, we record:

3.4 Betting & Gaming Activity Data

We maintain records of all wagering activity on your account, including:

3.5 Technical & Device Data

We automatically collect technical information when you access the platform:

3.6 Customer Support Communications

When you contact b2slot via email or live chat, we retain records of those communications, including the content of messages, timestamps, the support agent who handled the case, and any resolution actions taken. These records are used for quality assurance, dispute resolution, and staff training purposes.

b2slot processes personal data only where there is a lawful basis to do so. The table below summarises each processing purpose, the data categories involved, and the legal basis on which we rely.

• Account creation and management — Processing registration data to establish and maintain your account. Legal basis: performance of a contract.
• Payment processing — Crediting deposits and executing withdrawals in IDR via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja. Legal basis: performance of a contract.
• Identity verification (KYC) — Verifying your identity and age (21+) prior to withdrawal and on an ongoing basis as required by our licence. Legal basis: legal obligation and legitimate interests.
• Fraud prevention and AML monitoring — Monitoring transactions and betting patterns to detect and prevent money laundering, fraud, and match-fixing. Legal basis: legal obligation and legitimate interests.
• Responsible gaming — Identifying and responding to signs of problem gambling behaviour; maintaining self-exclusion and limit-setting records. Legal basis: legal obligation and legitimate interests.
• Customer support — Responding to queries, managing complaints, and maintaining support communication records. Legal basis: performance of a contract and legitimate interests.
• Platform analytics and improvement — Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game offering. Legal basis: legitimate interests.
• Marketing communications — Sending promotional emails, bonus notifications, and personalised offers where you have given explicit consent. Legal basis: consent (withdrawable at any time).
• Legal compliance and dispute resolution — Retaining records to meet gaming-licence, AML, and tax reporting obligations, and to defend or pursue legal claims. Legal basis: legal obligation and legitimate interests.

b2slot does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: We share financial transaction data with Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process deposits and withdrawals on your behalf.
• KYC and Identity Verification Vendors: We share identity documents and personal data with regulated third-party KYC providers for the purpose of verifying your identity and age as required by our gaming licence.
• Fraud Prevention and AML Services: We may share transaction and behavioural data with specialist fraud detection and AML compliance service providers operating under contractual data-protection obligations.
• Game Studio Providers: When you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — limited session and account data is transmitted to those studios to facilitate gameplay. Each studio operates under its own data-processing agreement with b2slot.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, our gaming licence regulator, tax authorities, or other competent government bodies where required to do so by law, court order, or regulatory direction.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of b2slot's business, member data may be transferred to the acquiring entity, subject to equivalent data protection obligations being imposed on the successor.

As an internationally licensed platform serving Indonesian players, b2slot may transfer personal data to servers or service providers located outside of Indonesia. When such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards used for international transfers include:

• Standard contractual data-protection clauses incorporated into agreements with all overseas Data Processors.
• Transfer to countries assessed as providing an adequate level of data protection by applicable regulatory frameworks.
• Technical security measures (encryption in transit and at rest) applied consistently regardless of the jurisdiction in which data is processed.

You may contact us to obtain further information about the specific safeguards applied to any international data transfer affecting your personal data.

b2slot uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, and understand how members use the site. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential to the operation of the platform. These enable core functions such as session authentication, security token management, and load balancing. They cannot be disabled without rendering the platform non-functional. No consent is required for these cookies.
• Functional Cookies: Used to remember your preferences such as language, display settings, and responsible gaming limit configurations. These improve your experience but are not strictly required for the platform to function.
• Analytics Cookies: Used to collect anonymised data on how visitors navigate the platform — which pages are viewed most often, where users exit the site, and how long sessions last. This data is aggregated and used solely to improve the platform. No individual user is identified from analytics data.
• Security and Fraud Detection Cookies: Used by our fraud prevention systems to detect suspicious activity such as account takeover attempts, bot traffic, or coordinated bonus abuse. These cookies are necessary for platform security.

b2slot retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our gaming licence and applicable legal obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your membership on b2slot.
• Post-Closure Account Data: Following account closure, we retain account records, KYC documents, and transaction history for a minimum of 5 years to satisfy AML compliance and gaming-licence requirements.
• Customer Support Records: Retained for 3 years from the date of the last interaction, or until the expiry of any associated complaint or dispute.
• Marketing Consent Records: Retained for the duration of your membership plus 2 years post-closure, to demonstrate compliance with consent-based marketing rules.
• Analytics Data: Aggregated and anonymised analytics data is retained indefinitely for platform improvement purposes; no individual can be identified from this data.
• Responsible Gaming Records: Self-exclusion records and responsible gaming interaction logs are retained for a minimum of 7 years following the end of the exclusion period, in accordance with responsible gaming best practices.

When data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

b2slot employs a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your device and b2slot servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained at all times.
• Encryption at Rest: Sensitive data stored on b2slot servers — including KYC documents, financial records, and password hashes — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised b2slot personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Password Security: Member passwords are stored as salted cryptographic hashes. b2slot staff cannot view your plaintext password. We strongly recommend using a unique, strong password for your b2slot account.
• Vulnerability Management: We conduct regular security assessments, penetration tests, and code reviews to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that materially affects your personal data, b2slot will notify affected members as promptly as practicable and will take immediate steps to contain and mitigate the breach.

As a b2slot member, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team using the contact details in Section 14 of this Policy.

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details such as email address and phone number can often be updated directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for retention. This right is subject to override by our legal retention obligations under AML and gaming-licence requirements.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to b2slot, for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw marketing consent at any time via your account settings or by contacting support.

b2slot will respond to all data rights requests within 30 calendar days. Where a request is complex or where we receive multiple requests from the same individual in a short period, we may extend this deadline by a further 60 days, notifying you of the extension and the reason for it.

b2slot does not knowingly collect personal data from any person under the age of 21. Our platform is strictly restricted to adults aged 21 and over. Age verification is a mandatory component of our KYC process, and any account found to belong to a person under 21 will be closed immediately.

If you are a parent or guardian and believe that a minor has registered on b2slot using false age information, please contact our support team immediately. We will investigate promptly and, if confirmed, close the account and delete all associated personal data to the extent permitted by our legal obligations.

With your consent, b2slot may send you promotional emails, bonus notifications, and personalised offers based on your gaming activity and preferences. Marketing communications are sent only to members who have opted in to receive them during registration or through their account settings.

• You may withdraw your marketing consent at any time by adjusting your notification preferences within your account settings, or by contacting our support team directly.
• Withdrawal of marketing consent does not affect the lawfulness of any marketing communications sent before the withdrawal was processed.
• Even if you opt out of marketing communications, b2slot will continue to send you essential transactional and account notifications — such as deposit confirmations, withdrawal updates, KYC requests, and security alerts — as these are necessary for the performance of your account contract.
• b2slot does not engage in unsolicited SMS marketing or cold-calling. All outbound phone contact by b2slot staff is initiated in response to a member enquiry or support ticket.

b2slot reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or our gaming-licence requirements. When material changes are made, we will notify you via a prominent notice on the b2slot website and, where appropriate, by email to the address registered on your account.

The revised Policy will display an updated "Last Updated" date at the top of this page. Your continued use of b2slot following notification of any change constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically to remain informed of how we protect your data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how b2slot has handled your personal data, please contact our support team. Our email address is provided as plain text only and is not a clickable link.

If you are not satisfied with b2slot's response to a data privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority or dispute resolution body in your jurisdiction. b2slot will cooperate fully with any such investigation.