Privacy Policy

1. Definitions

For the purposes of this Policy, the following terms carry the meanings given below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data held by us.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in this context, you, the Player.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — for data collected on the Platform, this is buas55.
• "Data Processor" means a third party that processes Personal Data on behalf of buas55 under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC Data" means documentation and information collected for identity verification and anti-money laundering compliance purposes.
• "Cookies" means small data files stored on your device by the Platform's web server to enable session management, preference storage, and analytics.

2. Data Controller

2.1  buas55, operating the Platform at https://buas55.cam, is the Data Controller for all Personal Data collected through the Platform. As Data Controller, buas55 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently in accordance with applicable data protection standards.

2.2  For all privacy-related inquiries, rights requests, and complaints, you may contact our designated Data Protection contact at: [email protected]. This email address is for plain-text contact only.

2.3  Where third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) independently collect data through their game interfaces embedded in the Platform, those providers act as separate Data Controllers for that specific data. buas55 does not control or accept liability for such independent data collection. Players are encouraged to review the privacy policies of game providers where relevant.

3. Personal Data We Collect

3.1  buas55 collects Personal Data across several categories depending on your relationship with the Platform. The table below summarizes the primary categories:

3.2  We do not collect special category data (such as racial or ethnic origin, religious beliefs, health data, or sexual orientation) unless you voluntarily provide such information in the context of a responsible gaming assessment or support interaction. Such data is processed solely for the stated support purpose and is never used for marketing or profiling.

4. How We Collect Your Data

4.1  Directly from you — when you register an Account, complete the KYC process, make a deposit or withdrawal, contact customer support, or update your account preferences.

4.2  Automatically — through cookies, web beacons, pixel tags, and server log files when you access and navigate the Platform. This technical data is collected regardless of whether you are logged into an Account.

4.3  From third-party service providers — including identity verification agencies, payment processors (such as the banks and e-wallet operators listed above), and fraud detection services, who may provide supplementary data to assist with KYC completion or transaction security.

4.4  From publicly available sources — including sanctions lists, politically exposed persons (PEP) registers, and adverse media databases, as required by our AML compliance obligations.

5. Legal Basis for Processing

5.1  buas55 processes Personal Data on one or more of the following legal bases:

• Contractual necessity — processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and game operation;
• Legal obligation — processing required to comply with applicable laws, including AML regulations, KYC requirements, and responses to lawful requests from competent authorities;
• Legitimate interests — processing necessary for buas55's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms;
• Consent — processing for optional purposes such as marketing communications, where you have provided explicit, freely given consent that you may withdraw at any time.

5.2  Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, update your preferences in your Account settings or contact our support team directly.

6. How We Use Your Personal Data

6.1  buas55 uses the Personal Data we collect for the following specific purposes:

• Account management — creating, maintaining, and securing your Player Account, including password reset and login authentication;
• Payment processing — facilitating deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported methods;
• Identity verification — conducting KYC checks to confirm eligibility, prevent underage gambling, and satisfy regulatory requirements;
• Fraud and AML compliance — detecting, investigating, and preventing fraudulent transactions, money laundering, and other financial crimes;
• Customer support — responding to inquiries, resolving disputes, and providing assistance with technical or account issues in both Indonesian and English;
• Responsible gaming — monitoring gameplay patterns to identify potential signs of problem gambling behaviour and administering self-exclusion, deposit limit, and time-out tools;
• Platform improvement — analysing usage data to improve the Platform's performance, features, and user experience;
• Legal compliance — meeting our obligations under applicable laws and responding to regulatory or law enforcement inquiries;
• Marketing communications — sending promotional offers, bonus notifications, and Platform updates to Players who have opted in to receive such communications.

6.2  We do not use automated decision-making processes that produce legal or similarly significant effects on Players without human review. Where automated tools are used for fraud screening or responsible gaming alerts, a qualified team member reviews flagged cases before any account action is taken.

7. Data Sharing & Disclosure

7.1  buas55 does not sell your Personal Data. We share your data only in the following limited circumstances:

7.1 Regulated Service Providers (Data Processors)

We engage carefully selected third-party service providers to process data on our behalf under written data processing agreements. These include:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet operators) for transaction processing;
• KYC and identity verification agencies for document authentication and sanctions screening;
• Cloud hosting and infrastructure providers for secure data storage and Platform operation;
• Customer support platform providers for managing live chat and support ticket systems;
• Analytics service providers for aggregated, anonymized Platform performance analysis;
• Fraud detection and cybersecurity vendors for real-time threat monitoring.

All Data Processors are contractually prohibited from using your Personal Data for any purpose beyond the specific service they provide to buas55.

7.2 Legal & Regulatory Disclosure

We may disclose your Personal Data to competent governmental authorities, law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and, where legally permissible, will notify you of the disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving buas55, your Personal Data may be transferred to the relevant successor entity. We will notify affected Players of any such transfer and the identity of the new Data Controller via the email address registered on your Account, with a minimum of thirty (30) calendar days' notice before the transfer takes effect.

8. International Data Transfers

8.1  buas55 operates internationally, and your Personal Data may be transferred to and processed in countries outside Indonesia where our service providers or infrastructure partners are located. Such transfers are made only where adequate data protection safeguards are in place, including:

• Standard contractual clauses that impose equivalent data protection obligations on the receiving party;
• Binding corporate rules where transfers occur within a group of companies subject to shared data governance standards;
• Other legally recognized transfer mechanisms appropriate to the applicable data protection framework.

8.2  By using the Platform, you acknowledge that your data may be processed in jurisdictions with data protection laws that differ from those in Indonesia. buas55 takes all reasonable steps to ensure that any such processing is carried out securely and with appropriate contractual protections in place.

9. Cookies & Tracking Technologies

9.1  The Platform uses the following categories of cookies and similar tracking technologies:

9.2  Most web browsers allow you to manage cookie preferences through their settings. Disabling strictly necessary cookies will impair your ability to log in and use core Platform features. buas55 does not deploy third-party advertising network cookies or cross-site tracking pixels.

9.3  We may use session replay tools for quality assurance and fraud investigation purposes. These tools record anonymized user interaction sequences and do not capture payment card numbers, full ID document images, or passwords.

10. Data Retention

10.1  buas55 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following standard retention periods apply:

• Account and identity data — retained for the duration of the active Account relationship, plus a minimum of five (5) years following Account closure, in accordance with international AML record-keeping standards;
• KYC documentation — retained for a minimum of five (5) years from the date of the most recent verification check or Account closure, whichever is later;
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications — retained for three (3) years from the date of the interaction, unless the communication forms part of an ongoing dispute or investigation;
• Technical and usage logs — retained for up to twelve (12) months in identifiable form, after which they are aggregated and anonymized;
• Marketing consent records — retained for the duration of the consent plus three (3) years to demonstrate compliance.

10.2  Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized using industry-standard data destruction methods. Anonymized, aggregated data may be retained indefinitely for statistical analysis and Platform improvement purposes.

11. Your Data Subject Rights

11.1  Subject to applicable law and our legal retention obligations, you hold the following rights with respect to your Personal Data held by buas55:

• Right of Access — you may request a copy of the Personal Data we hold about you, together with information about how it is processed;
• Right to Rectification — you may request correction of inaccurate or incomplete Personal Data. For certain data types (such as registered name or date of birth), correction requires supporting documentation;
• Right to Erasure — you may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations which may override this right in respect of certain data categories;
• Right to Restrict Processing — you may request that we limit how we use your data in certain circumstances, such as while a dispute about its accuracy is resolved;
• Right to Data Portability — you may request a structured, machine-readable export of Personal Data you provided to us directly, where processing is based on consent or contractual necessity;
• Right to Object — you may object to processing based on our legitimate interests at any time. We will assess whether our interests override your rights on a case-by-case basis;
• Right to Withdraw Consent — where processing is based on your consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

11.2  To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge receipt within three (3) business days and provide a substantive response within thirty (30) calendar days. Complex requests may require an extension of up to a further thirty (30) days, of which we will notify you.

11.3  We reserve the right to verify your identity before processing any data rights request to prevent unauthorized disclosure of Personal Data to third parties.

12. Minors

12.1  The Platform is strictly intended for adults aged 21 years or older. buas55 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a minor has registered an Account or submitted Personal Data, we will immediately suspend the Account, delete all associated data, and return any deposited funds to the originating payment method where technically possible.

12.2  If you have reason to believe that a minor has accessed or registered on the Platform, please notify us immediately at [email protected]. We treat all such reports as a priority and will investigate within 24 hours of notification.

13. Security Measures

13.1  buas55 implements a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption for Personal Data and KYC documentation stored at rest;
• Multi-factor authentication (MFA) required for all administrative access to Player data systems;
• Role-based access controls that limit staff access to Personal Data strictly to what is required for their specific job function;
• Regular independent penetration testing and vulnerability assessments of the Platform infrastructure;
• Real-time intrusion detection and security information and event management (SIEM) monitoring;
• Formal data breach response procedures, including notification protocols consistent with applicable regulatory timelines.

13.2  In the event of a Personal Data breach that poses a risk to your rights and freedoms, buas55 will notify affected Players without undue delay following our becoming aware of the breach, and will take all reasonable steps to contain and remediate it. We will also notify the relevant supervisory authority where required by law.

13.3  While we implement robust technical and organizational security measures, no internet-based platform can guarantee absolute security. You play an important role in protecting your own data by maintaining a strong, unique password, enabling any available MFA options, and not sharing your login credentials with any third party.

14. Third-Party Links & Embedded Content

14.1  The Platform may contain links to or embed content from third-party services — most notably game interfaces provided by our licensed game studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These third parties operate their own privacy practices independent of buas55.

14.2  buas55 is not responsible for the privacy practices of any third-party provider whose services are accessible through the Platform. We encourage you to review the privacy policies of any third-party service you interact with, particularly in respect of any data they may collect independently through their game interfaces.

15. Policy Amendments

15.1  buas55 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Material changes will be communicated to registered Players via the email address on file at least fourteen (14) calendar days before the updated Policy takes effect.

15.2  The version number and last-updated date in the page header always reflect the currently operative Policy. We recommend reviewing this Policy periodically. Continued use of the Platform following the effective date of a revised Policy constitutes your acknowledgment of the changes.

15.3  Where a change to this Policy requires your fresh consent (for example, where we introduce a new processing purpose that is not covered by an existing legal basis), we will obtain that consent proactively before commencing the new processing activity.

16. Contact & Complaints

16.1  For any questions, rights requests, or concerns regarding this Privacy Policy or the way buas55 handles your Personal Data, please contact us:

16.2  If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. buas55 will cooperate fully with any such supervisory investigation.

16.3  For responsible gaming concerns, account self-exclusion requests, or deposit limit adjustments, please visit our dedicated Responsible Gaming page or contact support directly. All responsible gaming requests are treated as a priority and handled with strict confidentiality.