Privacy Policy

1 Introduction

cmbets is a premium online sportsbook and casino platform serving players across Indonesia, including major metropolitan areas such as Jakarta, Surabaya, Bandung, Medan, Semarang, Bali, and Yogyakarta. As an operator handling real-money transactions, KYC identity verification, and ongoing player relationships, cmbets necessarily collects and processes a range of personal data as part of delivering its services.

We are committed to handling your data responsibly and in accordance with internationally recognized data protection principles, including purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability. This Policy is intended to give you a clear, honest account of our data practices so that you can make informed decisions about using the cmbets platform.

This Policy applies to all users of the cmbets platform, regardless of the device or method used to access it. It covers data collected via the web platform, any mobile-optimized interface, customer support channels (including live chat and email), and any surveys, promotions, or other interactions you have with cmbets.

2 Data We Collect

cmbets collects personal data across several categories, depending on the nature of your interaction with the Platform. The categories below outline what we may hold about you at any given time.

3 How We Collect Data

cmbets collects personal data through several distinct channels. Understanding how your data enters our systems helps you maintain informed control over your information.

• Direct Provision: You provide data directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion or survey.
• Automated Technical Collection: When you access the cmbets platform, our servers and analytics systems automatically collect technical data including your IP address, browser fingerprint, device type, operating system, session duration, and pages visited. This collection occurs through server logs and first-party analytics tools.
• Cookies and Similar Technologies: cmbets uses cookies and similar tracking technologies (session cookies, persistent cookies, local storage) to maintain your login session, remember your preferences, detect fraud, and measure platform performance. For full details, see Section 9 of this Policy.
• Payment Processors: When you transact using local bank transfers (BCA, BRI, BNI, Mandiri) or e-wallets (OVO, DANA, GoPay), our payment processing partners may share transaction confirmation data with us for account crediting and reconciliation purposes.
• Third-Party Verification Providers: cmbets uses third-party KYC and identity verification service providers to cross-reference the documents you submit. These providers return a verification status (pass/fail/pending) to cmbets — they do not independently store your data beyond what is required for their own regulatory obligations.
• Publicly Available Sources: In limited circumstances (such as enhanced due diligence on high-value accounts), cmbets may consult publicly available data sources — including sanctions lists and adverse media databases — to supplement our own records.

4 Purpose of Use

cmbets processes your personal data for specific, defined purposes. We do not use your data for any purpose that is incompatible with those stated at the time of collection. The primary purposes for which we process your data are as follows:

• Account Creation and Management: To register your account, authenticate your identity, maintain your account profile, and administer your relationship with cmbets as a registered player.
• Service Delivery: To process bets and wagers across sportsbook, casino, togel (Indonesia's traditional numbers lottery), and other product categories; to credit deposits; to process withdrawal requests; and to deliver bonus and promotional entitlements.
• KYC and Anti-Fraud Compliance: To verify your identity and age (21+ requirement), to detect and prevent fraud, money laundering, and other financial crimes, and to comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Customer Support: To respond to your inquiries, resolve disputes, investigate complaints, and provide the 24/7 Indonesian-speaking support service cmbets offers to all registered players.
• Platform Improvement: To analyze aggregate usage patterns, identify technical issues, conduct A/B testing, and improve the overall functionality and user experience of the cmbets platform.
• Marketing Communications: To send promotional offers, bonus notifications, seasonal campaign announcements (such as Idul Fitri or Ramadhan specials), and product updates — but only where you have provided consent or where a legitimate interest applies, and always with an easy opt-out mechanism.
• Respo nsible Gaming Enforcement: To monitor betting behavior for signs of problem gambling, to enforce deposit and loss limits, to administer self-exclusion requests, and to ensure compliance with our Responsible Gaming commitments.
• Legal Obligations: To comply with applicable laws, regulations, court orders, or requests from law enforcement or regulatory authorities in any relevant jurisdiction.
• Security and Integrity: To protect the security of the Platform, to detect and prevent unauthorized access, to investigate potential breaches of our Terms & Conditions, and to maintain the integrity of gaming outcomes and sports betting markets.

5 Legal Basis for Processing

cmbets processes your personal data in accordance with recognized legal bases for data processing. Depending on the specific data and purpose, we rely on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and cmbets (your account agreement, governed by our Terms & Conditions). This includes account management, transaction processing, KYC verification, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, tax reporting, and responses to lawful requests from authorities.
• Consent: Where required, we obtain your explicit consent before processing data for purposes such as marketing communications, optional analytics programs, or sharing data with promotional partners.
• Legitimate Interest: Processing is necessary for cmbets's legitimate business interests — including fraud prevention, platform security, business analytics, and product improvement — provided those interests do not override your fundamental rights and freedoms.

Where we rely on your consent, you may withdraw that consent at any time by contacting [email protected] or adjusting your account settings. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

6 Data Sharing & Disclosure

cmbets does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in order to operate the Platform and fulfill our legal obligations, we do share your data with carefully selected third-party service providers and partners under strict data protection agreements. These categories of recipients include:

• Payment Processing Partners: We share transaction details with licensed payment processors handling transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors require sufficient information to execute and reconcile your deposits and withdrawals.
• KYC Verification Providers: Identity documents and verification data are shared with third-party KYC service providers who perform age verification, identity authentication, and sanctions screening on cmbets's behalf.
• Game and Sports Data Providers: Aggregated and anonymized betting data may be shared with game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft) and sports data suppliers for integrity monitoring and odds calibration purposes. No personally identifiable information is shared in these contexts.
• Customer Support Tools: Live chat transcripts and support ticket data are processed through customer service platforms that assist our 24/7 support team in managing inquiries efficiently.
• Cloud Infrastructure Providers: cmbets uses secure cloud hosting services to store and process data. These providers operate under strict data protection and security certifications.
• Legal and Regulatory Authorities: Where required by law or in response to valid legal process, cmbets may disclose personal data to law enforcement, regulatory bodies, courts, or government agencies.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to a successor entity, subject to this Privacy Policy and applicable data protection law.

7 Data Retention

cmbets retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Retention periods vary by data type and are determined by the following principles:

• Active Accounts: While your account remains active, we retain all data necessary to provide ongoing services, including identity data, financial data, and transaction history.
• Closed Accounts: After you voluntarily close your account or after cmbets terminates your account, we retain core identity and transaction records for a minimum of 7 years to comply with AML/CTF obligations, tax reporting requirements, and to defend potential legal claims.
• Marketing Data: If you opt out of marketing communications, your contact details are retained on a suppression list to ensure we do not contact you in future campaigns.
• Technical Logs: Server logs, IP addresses, and session data are typically retained for 90 days for security and troubleshooting purposes, after which they are automatically purged unless required for an ongoing investigation.
• Support Communications: Live chat transcripts and email correspondence are retained for 3 years to provide continuity in customer support and to resolve any retrospective disputes.

Once a retention period expires, cmbets securely deletes or anonymizes the data in accordance with industry best practices. Anonymized data (stripped of all personally identifiable attributes) may be retained indefinitely for statistical and research purposes.

8 Security Measures

cmbets employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. While no digital platform can guarantee absolute security, we maintain robust safeguards across the following dimensions:

• Encryption: All data transmitted between your device and cmbets servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (including passwords and financial details) is encrypted using AES-256 or equivalent algorithms.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Only authorized cmbets personnel and approved third-party processors have access, and all access is logged and monitored.
• Authentication: Player accounts are protected by secure password requirements. We strongly recommend enabling two-factor authentication (2FA) for an additional layer of security.
• Intrusion Detection and Prevention: cmbets deploys real-time monitoring systems to detect and block unauthorized access attempts, DDoS attacks, and other security threats.
• Regular Security Audits: We conduct periodic vulnerability assessments, penetration testing, and third-party security audits to identify and remediate potential weaknesses.
• Data Backup and Disaster Recovery: Critical data is backed up regularly to geographically distributed secure locations, ensuring business continuity and data recoverability in the event of a disaster.
• Employee Training: All cmbets staff undergo data protection and information security training as part of their onboarding and receive regular updates on emerging threats and best practices.

Despite these measures, you also play a critical role in protecting your data. Never share your account credentials, be cautious of phishing attempts, and log out of your account on shared devices. If you suspect unauthorized access, contact [email protected] immediately.

9 Cookies & Tracking Technologies

cmbets uses cookies and similar tracking technologies to enhance your experience, maintain session continuity, analyze platform performance, and deliver relevant content. A cookie is a small text file stored on your device by your web browser. Cookies do not contain personal data directly, but may be linked to your account or session.

cmbets uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the operation of the Platform. They enable you to log in, navigate between pages, and use secure areas. Without these cookies, core functionality such as maintaining your session and processing transactions would not be possible. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect aggregated information about how visitors use the Platform, including which pages are most frequently visited and whether error messages are displayed. This data helps us improve platform performance and user experience. These cookies do not identify you individually.
• Functional Cookies: These cookies remember your preferences (such as language settings, preferred odds format, or previously selected payment methods) to provide a more personalized experience on return visits.
• Targeting and Advertising Cookies: These cookies may be used to deliver promotional content relevant to your interests based on your browsing behavior. You can opt out of non-essential cookies through your browser settings or account preferences.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may limit your ability to use certain features of the cmbets platform. To learn more about managing cookies, consult your browser's help documentation.

10 Your Rights Over Your Data

cmbets respects your rights over your personal data. Subject to applicable law and certain legitimate exceptions, you hold the following data subject rights:

• Right of Access: You have the right to request confirmation of whether cmbets holds personal data about you, and to obtain a copy of that data along with details about how it is being processed.
• Right to Rectification: If any of the personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (and no other legal basis applies). This right is subject to legal retention obligations.
• Right to Restriction of Processing: You may request that we limit the processing of your data in certain circumstances, such as while the accuracy of data is being verified or while a legal dispute is ongoing.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller.
• Right to Object: You may object to processing based on legitimate interests, including profiling and direct marketing. Where you object to marketing, cmbets will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: If you believe cmbets has not handled your data in accordance with this Policy or applicable law, you have the right to lodge a complaint with a supervisory data protection authority in your jurisdiction.

To exercise any of these rights, please contact our Data Protection team at [email protected] (plain text — not a clickable link). We will respond to verified requests within 30 days. In some cases, we may require additional information to verify your identity before processing your request.

11 Minors & Age Restriction

cmbets operates a strict 21+ age policy. The Platform is not intended for use by individuals under 21 years of age, and we do not knowingly collect personal data from minors. Account registration requires date-of-birth declaration, and KYC verification requires government-issued identification to confirm that every player is 21 or older.

If we discover that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any funds deposited by or on behalf of a minor will be returned to the originating payment source, and any winnings will be forfeited.

Parents and guardians: if you believe a minor has registered an account on cmbets using false information, please contact us immediately at [email protected] so we can take appropriate action.

12 Changes to This Privacy Policy

cmbets reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Policy, we will notify registered players via email at least 7 days in advance of the changes taking effect, and we will update the "Last Updated" date at the top of this document.

Continued use of the cmbets platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.

Non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be made without advance notice.

13 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or cmbets's data practices, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the cmbets platform. Our Indonesian-speaking agents can assist with privacy inquiries in both English and Bahasa Indonesia.
• Response Time: We aim to respond to all privacy-related inquiries within 72 hours. Formal data subject rights requests will be addressed within 30 days as required by applicable law.

For urgent data security concerns — such as suspected unauthorized access to your account or a data breach — please use live chat for the fastest response.

This Privacy Policy was last reviewed and updated on January 1, 2026. Your trust is the foundation of our relationship, and cmbets is committed to upholding the highest standards of data protection and transparency in everything we do.