Privacy Policy — buy128

1.1 Scope of This Policy. This Privacy Policy applies to all personal information collected by buy128 through the website https://buy128.cam and any related mobile applications, services, or platforms operated by buy128 (collectively, "the Platform"). This policy applies to all users, including visitors, registered players, and former account holders.

1.2 Data Controller. buy128 is the data controller responsible for the collection, processing, and protection of your personal information. For the purposes of applicable data protection regulations, buy128's registered office serves as the primary contact for privacy-related matters.

1.3 Consent. By creating an account on buy128, making a deposit, or otherwise using our services, you provide explicit consent to the collection and use of your personal data as described in this Privacy Policy. You may withdraw consent at any time by closing your account, though this may result in your inability to use certain features of the Platform.

1.4 Indonesia Market Context. buy128 operates primarily for players located in Indonesia. All personal data processing activities comply with internationally recognized data protection standards and the regulatory requirements of buy128's operating jurisdiction. We take special care to protect the personal information of Indonesian residents in accordance with best practices for cross-border data flows.

buy128 collects several categories of personal information in order to operate the Platform, comply with legal obligations, and provide you with a secure and personalized experience. The types of information we collect include:

2.1 Account Registration Information. When you create an account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address (for account notifications and customer support)
• Mobile phone number (for security verification and account recovery)
• Username and password (chosen by you during registration)
• Residential address (city and province — full address may be requested during KYC verification)

2.2 Identity Verification (KYC) Information. To comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations, we collect:

• Government-issued photo ID: Indonesian national identity card (KTP), passport, or driver's licence showing your photo, name, date of birth, and ID number
• Proof of payment method: Bank account statement, e-wallet screenshot, or card image showing account holder name matching your registered name
• Proof of address: Utility bill, bank statement, or government correspondence issued within the last three months (requested on a case-by-case basis)
• Selfie verification: A photograph of you holding your ID document to confirm your identity matches the ID submitted

2.3 Financial and Transaction Information. We collect data related to your deposits, withdrawals, bets, and game activity, including:

• Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) or e-wallet details (OVO, DANA, GoPay, ShopeePay, LinkAja) linked to your account
• Deposit and withdrawal amounts, transaction dates, and payment method used
• Betting history, including bet amounts, odds, game selections, and outcomes
• Account balance and bonus fund activity
• Wagering patterns and game preferences

2.4 Technical and Usage Data. When you access buy128, we automatically collect technical information, including:

• Device information: Device type, operating system, browser type and version, screen resolution
• IP address and geolocation: Your IP address and approximate location (city/region level) to verify that you are accessing the Platform from a permitted jurisdiction
• Session data: Login and logout times, session duration, pages visited, and features used
• Cookies and tracking identifiers: See Section 5 (Cookies & Tracking) for detailed information

2.5 Communication Data. If you contact buy128 customer support via email, live chat, or phone, we retain records of your communications, including:

• The content of your messages and support requests
• Date and time of communications
• Support ticket history and resolution outcomes

2.6 Marketing Preferences. We collect information about your marketing communication preferences, including whether you have opted in or out of receiving promotional emails, SMS messages, or push notifications.

buy128 uses your personal information for the following purposes:

3.1 Account Management and Service Provision. We use your personal data to:

• Create and maintain your buy128 player account
• Authenticate your identity when you log in
• Process deposits, withdrawals, and other financial transactions
• Provide access to betting markets, casino games, togel draws, and other gaming services
• Calculate bet settlements and credit winnings to your account
• Apply bonuses, promotions, and loyalty rewards to your account

3.2 Legal and Regulatory Compliance. We use your personal data to:

• Verify your age (confirming you are 21 years or older)
• Perform Know Your Customer (KYC) and anti-money laundering (AML) checks as required by our operating licence
• Detect and prevent fraud, money laundering, underage gambling, and other illegal activities
• Respond to legal requests, court orders, or regulatory enquiries from competent authorities
• Maintain records as required by applicable gaming regulations and financial laws

3.3 Security and Fraud Prevention. We use your personal data to:

• Monitor account activity for unusual or suspicious patterns that may indicate fraud, bonus abuse, or account compromise
• Detect and prevent collusion, arbitrage betting, bot usage, or other prohibited activities outlined in our Terms & Conditions
• Verify that deposits and withdrawals originate from payment methods registered in your name
• Protect the integrity of our games and betting markets

3.4 Customer Support. We use your personal data to:

• Respond to your enquiries, questions, and support requests
• Investigate and resolve complaints, disputes, or technical issues
• Provide assistance with account recovery, password resets, and KYC document submission
• Communicate important account notifications (e.g., successful deposits, withdrawal approvals, bonus credits)

3.5 Responsible Gaming. We use your personal data to:

• Enforce deposit limits, loss limits, and session time limits that you set
• Process self-exclusion requests and prevent access during exclusion periods
• Monitor for signs of problem gambling behavior and intervene when appropriate
• Provide information and resources on responsible gaming practices

3.6 Marketing and Personalization (With Your Consent). If you have opted in to receive marketing communications, we may use your personal data to:

• Send promotional emails, SMS messages, or push notifications about bonuses, new games, and special offers
• Personalize your experience on the Platform by recommending games, betting markets, or promotions based on your activity and preferences
• Conduct surveys to gather feedback on our services

You may opt out of marketing communications at any time by clicking "Unsubscribe" in any promotional email or by adjusting your communication preferences in your account settings.

3.7 Platform Improvement and Analytics. We use aggregated and anonymized data (data that cannot identify you personally) to:

• Analyze Platform usage patterns and user behavior to improve our website, apps, and services
• Optimize game performance, loading times, and user interface design
• Identify and fix bugs, errors, and technical issues
• Develop new features and services based on user needs and preferences

buy128 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data in the following limited circumstances:

4.1 Service Providers and Processors. We share personal data with trusted third-party service providers who assist us in operating the Platform, including:

• Payment processors: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Game providers: To deliver casino games, live dealer tables, slots, and other gaming content (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming)
• KYC and identity verification vendors: To verify your identity documents and conduct anti-fraud checks
• Cloud hosting and infrastructure providers: To store data securely and ensure Platform availability
• Customer support software vendors: To manage support tickets, live chat, and email communications

All third-party service providers are contractually bound to process your data only for the specific purposes we authorize and to maintain appropriate security measures. They are prohibited from using your data for their own purposes.

4.2 Legal and Regulatory Authorities. We may disclose your personal information to law enforcement, regulatory bodies, courts, or government agencies if:

• Required by applicable law, regulation, or legal process (e.g., court order, subpoena, or regulatory investigation)
• Necessary to comply with our licensing obligations or to cooperate with our regulators
• Necessary to detect, prevent, or prosecute fraud, money laundering, or other criminal activity
• Necessary to protect the rights, property, or safety of buy128, our users, or the public

4.3 Business Transfers. In the event that buy128 undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction. You will be notified via email or a prominent notice on the Platform if such a transfer occurs, and the new entity will be bound by the same privacy commitments outlined in this Privacy Policy.

4.4 Affiliates and Group Companies. We may share your personal data with companies within the buy128 corporate group for internal administrative purposes, customer support coordination, fraud prevention, and to provide you with a consistent experience across all buy128 services.

5.1 What Are Cookies? Cookies are small text files stored on your device (computer, smartphone, or tablet) when you visit the buy128 website. Cookies help us recognize your device on return visits and enable certain features of the Platform.

5.2 Types of Cookies We Use. buy128 uses the following types of cookies:

• Essential Cookies: These cookies are strictly necessary for the Platform to function. They enable you to log in, navigate the site, place bets, and use secure areas of the Platform. Without these cookies, services you have requested (such as account login) cannot be provided. Essential cookies are automatically set and cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymized information about how you use the Platform, such as which pages you visit most often and whether you encounter error messages. This data helps us improve the performance and usability of the Platform. Analytics cookies do not collect personally identifiable information.
• Functionality Cookies: These cookies remember your preferences (such as language, currency display, or game filter settings) to provide you with a more personalized experience. Functionality cookies may also be used to remember your login session so you do not have to enter your credentials every time you visit.
• Advertising and Marketing Cookies (Third-Party): If you have opted in to receive marketing communications, we may use third-party advertising cookies to deliver targeted promotional content on external websites or social media platforms. You can opt out of these cookies through your browser settings or by using third-party opt-out tools.

5.3 Managing Cookies. You can control and manage cookies through your web browser settings. Most browsers allow you to:

• View which cookies are stored on your device and delete them individually or in bulk
• Block third-party cookies while still allowing first-party cookies from buy128
• Block all cookies entirely (note: this may impair your ability to use the Platform)
• Receive a notification each time a new cookie is set, allowing you to accept or reject it

Please refer to your browser's help documentation for specific instructions on managing cookies. Disabling essential cookies may prevent you from accessing certain features or logging into your account.

5.4 Other Tracking Technologies. In addition to cookies, buy128 may use:

• Web beacons (pixel tags): Small invisible images embedded in emails or web pages to track whether you have opened an email or visited a particular page
• Session storage and local storage: Browser-based storage mechanisms that store data temporarily or persistently on your device to enhance performance and functionality
• Device fingerprinting: A fraud-prevention technique that analyzes your device's configuration (browser version, screen resolution, installed fonts, etc.) to create a unique identifier used to detect suspicious activity

6.1 Security Measures. buy128 employs industry-leading technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and buy128 servers is encrypted using Transport Layer Security (TLS 1.3). Data stored on our servers (data at rest) is encrypted using AES-256 encryption.
• Firewalls and intrusion detection: Our servers are protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for suspicious activity.
• Access controls: Personal data is accessible only to authorized buy128 personnel who require it to perform their job functions. Access is granted on a need-to-know basis and is logged for audit purposes.
• Regular security audits: buy128 undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Two-factor authentication (2FA): We strongly encourage all players to enable 2FA on their accounts for an additional layer of login security.

6.2 Your Responsibility. While buy128 takes extensive measures to protect your data, account security is a shared responsibility. You must:

• Choose a strong, unique password for your buy128 account and avoid reusing passwords from other websites
• Keep your login credentials confidential and never share them with anyone, including buy128 staff (we will never ask for your password)
• Log out of your account when using a shared or public device
• Enable two-factor authentication (2FA) to enhance account security
• Notify buy128 immediately at [email protected] if you suspect your account has been compromised

6.3 Data Breach Notification. In the unlikely event of a data breach that compromises your personal information, buy128 will notify you and the relevant regulatory authorities in accordance with applicable data protection laws. Notification will include the nature of the breach, the types of data affected, and the steps we are taking to mitigate harm.

7.1 Retention Periods. buy128 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with legal and regulatory obligations. Typical retention periods are:

• Active accounts: Personal data is retained for the duration of your active account plus any applicable regulatory retention period (typically 5–7 years after account closure for financial and transaction records).
• Closed accounts: When you close your account, we will retain certain personal data (name, email, transaction history, KYC documents) for up to 7 years as required by anti-money laundering (AML) and financial regulations. After this period, data is securely deleted unless retention is required by ongoing legal proceedings or disputes.
• Marketing data: If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to ensure we do not contact you again.
• Technical and usage data: Aggregated and anonymized usage data (which cannot identify you personally) may be retained indefinitely for analytics and Platform improvement purposes.

7.2 Secure Deletion. At the end of the applicable retention period, personal data is securely deleted or anonymized in accordance with industry best practices. Deletion methods include secure overwriting of data storage media and destruction of physical documents containing personal information.

Under applicable data protection laws, you have the following rights regarding your personal information:

8.1 Right of Access. You have the right to request a copy of the personal data buy128 holds about you. You may request this information at any time by contacting [email protected]. We will provide the data in a structured, commonly used, and machine-readable format within 30 days of your request.

8.2 Right to Rectification. If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most account details (email, phone number, address) directly through your account settings. For changes to identity documents or registered payment methods, contact customer support.

8.3 Right to Erasure ("Right to Be Forgotten"). You may request that buy128 delete your personal data in certain circumstances, such as:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds for continued processing

Note: We may not be able to delete all data immediately if retention is required by law (e.g., AML regulations require us to retain transaction records for 5–7 years). In such cases, we will restrict processing and delete the data once the legal retention period expires.

8.4 Right to Restriction of Processing. You may request that we limit how we use your personal data in certain circumstances, such as:

• You contest the accuracy of the data and we are verifying its accuracy
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you require it for legal claims

8.5 Right to Data Portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider. This right applies to data you provided to buy128 with your consent or as part of a contract.

8.6 Right to Object. You have the right to object to processing of your personal data for:

• Direct marketing purposes: You may opt out of marketing communications at any time by clicking "Unsubscribe" or adjusting your preferences in account settings.
• Legitimate interests: You may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

8.7 Right to Withdraw Consent. Where we process your data based on consent (e.g., marketing communications, optional data collection), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

8.8 Right to Lodge a Complaint. If you believe buy128 has not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

9.1 Age Restriction — 21+ Only. buy128 is an adults-only platform. You must be at least 21 years of age to register an account or use our services. We do not knowingly collect personal information from individuals under the age of 21.

9.2 Parental Responsibility. If you are a parent or guardian and believe that your child has provided personal information to buy128, please contact us immediately at [email protected]. We will promptly investigate and delete any such data from our systems.

9.3 Age Verification. buy128 employs age verification procedures during registration and KYC verification to prevent underage access. If we discover that a user is under 21 years of age, we will immediately suspend the account, void any bets or winnings, and return deposited funds to the registered payment method (if verifiable).

10.1 Cross-Border Transfers. buy128 operates internationally and may transfer your personal data to servers located outside Indonesia, including to jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Encryption of data in transit and at rest
• Contractual data processing agreements with third-party service providers that require adherence to strict data protection standards
• Compliance with applicable data protection frameworks and regulations

10.2 Consent to International Transfers. By using the buy128 Platform, you consent to the transfer of your personal data to countries outside Indonesia as necessary to provide our services, subject to the safeguards described above.

11.1 Right to Amend. buy128 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes to this Privacy Policy, we will notify you by:

• Updating the "Last Updated" date at the top of this page
• Sending an email notification to your registered email address
• Displaying a prominent notice on the buy128 homepage or in your account dashboard

11.2 Your Responsibility to Review. It is your responsibility to review this Privacy Policy periodically. Your continued use of the buy128 Platform after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you must stop using the Platform and close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or how buy128 handles your personal data, please contact us:

For enquiries related to exercising your privacy rights (access, rectification, erasure, etc.), please include your full name, registered email address, and a detailed description of your request. We may ask for additional information to verify your identity before processing your request.