Privacy Policy

In this Privacy Policy, the following terms have the meanings set out below:

• "fb168", "we", "us", or "our" refers to the operator of the fb168 platform at fb168.cam.
• "Member", "you", or "your" refers to any individual who has registered an Account on the fb168 Platform or who browses the Platform without registration.
• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, including name, identity document number, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, fb168.
• "Third-Party Processor" means any external company engaged by fb168 to process Personal Data on fb168's behalf, subject to contractual data-protection obligations.
• "KYC" means Know Your Customer — the identity verification process required for account operation and regulatory compliance.
• "Cookie" means a small text file placed on your device by the fb168 Platform for session management, analytics, and preference storage purposes.

fb168 acts as the Data Controller for all Personal Data collected through the fb168 Platform. As Data Controller, fb168 is responsible for determining the purposes for which your Personal Data is collected and the manner in which it is processed.

fb168 operates as an internationally licensed online betting platform. The platform is designed for adult users in Indonesia and is operated in compliance with the licence conditions of the jurisdiction in which fb168 is registered. Questions regarding data control, data processing agreements, or this Privacy Policy should be directed to [email protected].

fb168 collects the following categories of Personal Data in connection with operating the Platform:

3.1 Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify the 21+ age requirement).
• Indonesian National Identity Card number (KTP number) or passport number, collected during KYC verification.
• A photograph or scan of your identity document and a selfie image, collected during KYC verification.

3.2 Contact Data

• Email address used for account registration and communications.
• Indonesian mobile phone number used for SMS OTP authentication and account security alerts.
• Residential address in Indonesia, collected at the KYC stage.

3.3 Financial Data

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, or other supported Indonesian banks registered for withdrawals.
• E-wallet identifiers (registered phone number or account ID) for OVO, DANA, GoPay, ShopeePay, or LinkAja accounts registered for deposits and withdrawals.
• Transaction history — a record of all deposits, withdrawals, bonus credits, and bet settlements processed through your fb168 Account.

3.4 Technical Data

• IP address and approximate geolocation derived from IP address.
• Browser type, version, and language settings.
• Device type, operating system, and device identifiers.
• Session timestamps, pages visited, and interaction logs within the Platform.

3.5 Betting and Gaming Activity Data

• Bet history, including market selections, stake amounts, odds accepted, and settlement outcomes.
• Game session records for casino, slot, Sic Bo, and Virtual Sports products.
• Bonus activation, wagering progress, and promotion participation records.

3.6 Communications Data

• Records of live chat conversations, emails, and support tickets exchanged between you and the fb168 support team.
• Voluntary feedback, complaints, and dispute submissions.

fb168 collects Personal Data through the following channels:

fb168 processes your Personal Data on one or more of the following legal grounds:

• Contract performance: Processing is necessary to create and manage your fb168 Account, execute deposit and withdrawal transactions, settle bets, and deliver the platform services you have requested.
• Legal obligation: Processing is required for fb168 to comply with KYC obligations, anti-money-laundering (AML) requirements, and the record-keeping conditions of its operating licence.
• Legitimate interests: Processing is necessary for fraud detection and prevention, platform security, responsible gaming monitoring, and service improvement — provided that these interests are not overridden by your fundamental privacy rights.
• Consent: For marketing communications (promotional emails, SMS notifications about bonuses), processing is based on your explicit opt-in consent given during registration or subsequently through Account settings. You may withdraw marketing consent at any time.

fb168 uses your Personal Data for the following purposes:

• Account creation and management: Creating your fb168 Account, verifying your identity and age, maintaining your Account profile, and enabling secure login.
• Transaction processing: Processing deposits from and withdrawals to your registered Indonesian bank account or e-wallet in IDR.
• KYC and compliance: Verifying your identity and address in accordance with our licence obligations; maintaining records required by applicable anti-money-laundering regulations.
• Platform security and fraud prevention: Detecting and preventing unauthorised access, account takeover, bonus abuse, collusion, and other fraudulent or prohibited conduct described in the fb168 Terms & Conditions.
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling indicators; applying deposit limits, cooling-off periods, and self-exclusion measures as requested or as required by responsible gaming obligations.
• Customer support: Responding to your queries, complaints, and dispute submissions; maintaining a record of support interactions.
• Marketing communications (consent-based): Sending you information about promotions, bonuses, and new products where you have opted in to receive such communications. You can unsubscribe at any time via the link in any marketing email or by contacting support.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the fb168 Platform's performance, content, and user experience.

fb168 does not sell, rent, or trade your Personal Data to any third party for their independent marketing or commercial purposes. fb168 shares Personal Data only in the following limited circumstances:

• Payment processors: Your financial account details and transaction data are shared with the payment gateway operators (such as the banks BCA, BRI, BNI, Mandiri, and e-wallet providers OVO, DANA, GoPay, ShopeePay, LinkAja) solely to the extent necessary to process your deposit or withdrawal instruction.
• KYC verification providers: Your identity document images and personal details are transmitted to our licensed KYC verification partners for identity authentication. These partners are contractually prohibited from using your data for any purpose other than the verification service provided to fb168.
• Fraud prevention services: Technical identifiers (IP address, device fingerprint, transaction risk signals) may be shared with third-party fraud-detection systems to protect the Platform and its Members.
• Game studios and platform providers: Anonymised session identifiers are shared with game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to the extent necessary to deliver their game content through the fb168 Platform. These providers do not receive your identity or financial data.
• Legal and regulatory authorities: fb168 may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid legal order, or in connection with the investigation of suspected fraud or criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of fb168's business, Personal Data held by fb168 may be transferred to the acquiring entity, subject to equivalent data-protection commitments.

fb168 is an internationally operated platform. Some of the Third-Party Processors engaged by fb168 — including KYC verification providers and fraud-detection services — may process Personal Data on servers located outside Indonesia. Where such international transfers occur, fb168 ensures that appropriate safeguards are in place, including:

• Contractual clauses that require the recipient to apply data-protection standards no less protective than those described in this Policy.
• Transfer only to processors located in jurisdictions that maintain an adequate level of data protection as assessed by fb168's data governance review process.
• Restriction of transferred data to the minimum necessary for the specific processing purpose.

fb168 retains Personal Data for no longer than is necessary for the purpose for which it was collected, subject to the following minimum retention periods required for regulatory compliance:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and business analysis purposes.

The fb168 Platform uses cookies and similar tracking technologies to operate core Platform functionality, maintain your login session, detect fraud, and understand how Members use the Platform. The following cookie categories are in use:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Used to remember your preferences such as language settings, display options, and previously used payment methods.
• Analytics cookies: Used to collect anonymised data about how Members navigate the Platform — which pages are visited, how long sessions last, and which features are used most. This data is used solely to improve the fb168 Platform.
• Security and fraud-detection cookies: Used to detect suspicious behaviour patterns, bot activity, and multi-account creation attempts.

fb168 does not use third-party advertising or retargeting cookies. You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your fb168 Account.

As a Member of fb168, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact fb168 support at [email protected] with the subject line "Data Rights Request" and include your registered username and email address:

Please note that certain rights are subject to limitations where processing is required for legal compliance, fraud prevention, or the exercise of legal claims. fb168 will communicate any applicable limitations clearly when responding to your request.

If fb168 becomes aware that Personal Data has been collected from a person under the age of 21, the relevant Account will be closed immediately, all associated Personal Data will be deleted, and any deposits made will be returned via the original payment method to the extent technically possible.

If you believe that a person under 21 has registered a fb168 Account — including through the use of your own device or payment method — please contact fb168 support immediately at [email protected] so that the account can be closed and the data removed without delay.

fb168 implements the following technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption on all data in transit between your device and the fb168 Platform.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial account details.
• Role-based access control limiting staff access to Personal Data strictly to those with a demonstrable operational need.
• Two-factor authentication (2FA) for all fb168 staff accounts with access to Member data systems.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Automated anomaly detection that flags and escalates unusual access patterns to the security team in real time.
• Incident response procedures that require fb168 to notify affected Members and relevant authorities in the event of a data breach involving Personal Data, within the timeframe required by applicable law.

fb168 may update this Privacy Policy from time to time to reflect changes in our data processing practices, Platform functionality, or applicable law. The "Last Reviewed" date at the top of this page indicates when the Policy was most recently updated.

Where an amendment is material — meaning it significantly affects your privacy rights, the categories of data collected, or the purposes for which data is used — fb168 will notify you by email to your registered address at least 14 days before the change takes effect. Your continued use of the fb168 Platform after the effective date of any revised Policy constitutes your acknowledgement of the updated terms.

If you do not agree with any amendment, you should stop using the Platform and contact support to close your Account and request withdrawal of your remaining Balance. The most current version of this Privacy Policy is always accessible at fb168.cam/privacy-policy.

For any privacy-related enquiries, data rights requests, or concerns about how fb168 handles your Personal Data, please contact the fb168 Data Protection team through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing. Responses within 4 hours during standard WIB business hours (09:00–22:00 WIB, 7 days a week).
• Live Chat: Available 24/7 through the chat widget on the fb168 Platform. Indonesian-speaking and English-speaking agents available.

When submitting a data rights request, please include your registered username, the email address associated with your fb168 Account, and a clear description of the request. This allows the support team to locate your account records promptly and process your request within the 30-day response window.