At bata23, your privacy is not a footnote — it is a core product commitment. This Privacy Policy explains exactly what personal data we collect from Indonesian players, why we collect it, how we use and protect it, and what rights you hold over your own information.
This Privacy Policy describes how bata23 ("bata23", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of players ("you", "your") who register an Account or use the bata23 Platform at https://bata23.net.
By registering an Account on the bata23 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not create an Account or use the Platform.
This Policy applies to all data processing activities carried out in connection with the bata23 Platform, including account registration, deposits and withdrawals via Indonesian banks and e-wallets, gameplay, customer support interactions, and marketing communications where you have given consent.
This Privacy Policy should be read alongside our Terms & Conditions, which govern your overall use of the bata23 Platform, and our Responsible Gaming page, which describes tools available to help you manage your betting activity.
bata23 is the data controller responsible for the personal data collected through the Platform. As data controller, bata23 determines the purposes for which and the means by which your personal data is processed.
If you have any questions about how bata23 handles your personal data, or wish to exercise any of your rights as described in Section 11, you may contact our Data Protection contact at:
bata23 collects the following categories of personal data in connection with your use of the Platform:
bata23 collects personal data through the following means:
bata23 uses your personal data for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your bata23 Account | Identity, Contact |
| Verifying your age (21+) and identity via KYC | Identity |
| Processing deposits and withdrawals in IDR | Identity, Financial |
| Settling bets and crediting winnings | Usage & Gameplay, Financial |
| Providing and improving customer support | Identity, Contact, Communications |
| Fraud prevention and security monitoring | Identity, Technical, Financial, Usage |
| Anti-money laundering (AML) compliance | Identity, Financial |
| Responsible gaming monitoring and intervention | Usage & Gameplay, Communications |
| Sending service notifications (deposits, withdrawals, security alerts) | Contact, Financial |
| Sending promotional communications (with your consent) | Contact, Communications |
| Analyzing Platform usage to improve products and services | Technical, Usage & Gameplay |
| Complying with applicable legal obligations | All categories as required |
bata23 processes your personal data on one or more of the following legal bases:
7.1 General Principle. bata23 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. Data is shared only to the extent necessary to deliver the services you have requested or to meet a legal obligation.
7.2 Service Providers. bata23 shares personal data with the following categories of third-party service providers who process data strictly on bata23's behalf and under binding data processing agreements:
7.3 Legal Disclosures. bata23 may disclose your personal data to law enforcement authorities, courts, or regulators where required by applicable law, a valid court order, or where bata23 reasonably believes disclosure is necessary to protect the rights, property, or safety of bata23, its players, or others.
7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of bata23's assets, your personal data may be transferred to the acquiring entity as part of the transaction. bata23 will notify affected players via the email address on their Account prior to any such transfer and ensure that the receiving entity provides at least equivalent privacy protections.
bata23 uses cookies and similar tracking technologies on the Platform for the following purposes:
These cookies are strictly necessary for the Platform to function. They enable session management (keeping you logged in during a session), security token verification, and load balancing across servers. Essential cookies cannot be disabled without preventing you from using the Platform. No consent is required for essential cookies.
These cookies collect aggregated, anonymized data about how players use the Platform — such as which pages are visited most frequently, how long sessions last, and which game categories are most popular. bata23 uses this data to identify usability issues and improve the Platform experience. These cookies do not track your personal identity.
Functional cookies remember your preferences — such as your preferred language setting, last-used payment method, and responsible gaming limit configurations — so you do not need to re-enter them on each visit.
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality, including the retention of your preferences between sessions. Most modern browsers (Chrome, Firefox, Safari, Edge) provide cookie management options in their privacy or settings menu.
9.1 Active Accounts. bata23 retains your personal data for as long as your Account is active and for a period thereafter as described in this Section. Data associated with active Accounts is retained to provide the service, process transactions, and respond to support queries.
9.2 Closed Accounts. Following Account closure, bata23 retains identity and financial data for a minimum period of five (5) years to meet anti-money laundering record-keeping obligations and to defend against any legal claims arising from your use of the Platform. After this retention period, data is securely deleted or permanently anonymized.
9.3 Communications Records. Customer support communication records are retained for three (3) years from the date of the interaction, unless they relate to an ongoing dispute or investigation, in which case they are retained until the matter is fully resolved.
9.4 Marketing Data. If you withdraw consent to marketing communications, your contact details will be removed from active marketing lists within 10 business days. A suppression record (containing only your email address and opt-out date) is retained indefinitely to ensure we do not inadvertently re-contact you.
9.5 Technical and Log Data. Server log and technical data is retained for up to 12 months in an identifiable form, after which it is aggregated and anonymized for long-term analytics purposes.
bata23 implements a layered security architecture to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our key security measures include:
While bata23 takes all reasonable precautions to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying bata23 immediately at [email protected] if you suspect unauthorized access to your Account.
As a bata23 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy / Data Request". We will respond within 30 calendar days of receiving your verified request.
Request a copy of all personal data bata23 holds about you, including your Account details, transaction history, and KYC records.
Request correction of any inaccurate or incomplete personal data held on your Account. Minor contact details can be updated directly in Account settings.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations in Section 9.
Request that bata23 restrict processing of your data in certain circumstances, such as while you contest the accuracy of data we hold.
Request a machine-readable export of the personal data you provided to bata23, in a structured format (CSV or JSON) where technically feasible.
Object to processing of your data for marketing purposes or for purposes based on bata23's legitimate interests. You may withdraw marketing consent at any time.
bata23 may need to verify your identity before processing a data rights request to prevent unauthorized disclosure of your personal data to third parties. Verification will typically require you to confirm details matching your Account registration.
The bata23 Platform is strictly for Adults Only (21+). bata23 does not knowingly collect personal data from any person under 21 years of age. Age verification is a mandatory step before any withdrawal is processed, and bata23 reserves the right to request proof of age at any point during a player's Account lifetime.
If bata23 discovers or is notified that a registered Account belongs to a person under 21, that Account will be immediately suspended, all betting activity voided, and the deposited Real Money Funds returned to the verified payment source. All personal data associated with the underage Account will be deleted promptly following the conclusion of any required investigation.
If you are a parent or guardian and believe that a person under your care has registered an Account on bata23, please contact us immediately at [email protected]. For responsible gaming guidance and parental control resources, please visit our Responsible Gaming page.
The bata23 Platform may include references to game providers and payment services operated by third parties (such as Evolution Gaming, Pragmatic Play, and the e-wallet providers listed in Section 7.2). While bata23 carefully selects its service partners, once you interact directly with a third-party service — for example, by accessing an embedded game interface hosted on a game provider's servers — that interaction is governed by the privacy policy of the third-party provider.
bata23 is not responsible for the privacy practices, content, or security of any third-party service, and this Privacy Policy does not extend to any data processing carried out independently by third-party providers. We encourage you to review the privacy policies of any third-party services you interact with.
14.1 bata23 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page will be revised accordingly.
14.2 Material changes — such as a new category of data being collected, a new purpose for processing, or a change to our data retention periods — will be communicated to registered players via email to the address on their Account at least 14 calendar days before the change takes effect.
14.3 Minor or administrative changes (such as correcting a typographical error or clarifying existing language without substantive effect) may be made without prior notice, though the updated date will always reflect the most recent revision.
14.4 Your continued use of the bata23 Platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised Policy. If you do not agree with a material change, you may close your Account in accordance with Section 12.1 of the Terms & Conditions prior to the effective date of the change.
For any questions, concerns, or requests related to this Privacy Policy or bata23's data practices, please reach out to our team through the following channels:
For general account support, betting queries, or bonus questions, please visit our FAQ page, which covers the most common player topics in detail.
Six principles that govern every data decision we make — from the moment you register to the day you close your Account.
Every byte of data exchanged between your device and the bata23 Platform is encrypted using industry-standard 256-bit SSL/TLS. Your Account credentials, financial details, and personal information are never transmitted in plain text.
bata23 will never sell, rent, or trade your personal data to advertisers, data brokers, or any third party for their own commercial purposes. Your data is used exclusively to operate and improve your bata23 experience.
Access, correct, export, or request deletion of your personal data at any time by contacting our support team. bata23 responds to all verified data rights requests within 30 calendar days.
bata23 retains your data only for as long as necessary — to maintain your Account, process transactions, and meet legal obligations. Closed Account data is deleted or anonymized within 5 years, in line with AML requirements.
Internal access to player personal data is restricted to staff with a specific operational need. Role-based access controls and audit logs ensure that data access is always traceable and limited to its stated purpose.
In the unlikely event of a data breach affecting your personal information, bata23 will notify you via your registered email address within a commercially reasonable timeframe and advise on steps to protect your Account.