Your Privacy Matters: This Privacy Policy ("Policy") describes how sby606 ("the Platform," "we," "us," "our") collects, uses, stores, and protects personal information provided by or collected from users ("Member," "you," "your") when they access or use the sby606 website at https://sby606.cam and all associated services. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. Please review it in full before creating an account or submitting any personal information.

1

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

  • "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, national identity number, contact details, device identifiers, and financial account references.
  • "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, transmission, disclosure, or deletion.
  • "Controller" means sby606, the entity that determines the purposes and means of processing Personal Data submitted through this Platform.
  • "Processor" means any third party that processes Personal Data on behalf of sby606 under a documented contractual arrangement, including payment processors, identity verification providers, and cloud infrastructure partners.
  • "KYC Data" means identity verification documents and information submitted by a Member during the Know Your Customer process, including copies of Indonesian KTP (national identity card) or passport, and in some cases proof of address or source-of-funds documentation.
  • "Cookies" means small text files placed on a Member's device by the Platform to support session management, analytics, and personalisation functions.
  • "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including government-issued identity numbers, biometric data (where collected), and financial account details.
2

Data We Collect

sby606 collects only the Personal Data that is necessary to deliver the Platform's services, comply with legal obligations, and maintain account security. The categories of data we collect are set out in the table below:

Data Category Specific Data Points Collection Stage
Identity Data Full legal name, date of birth, Indonesian KTP number or passport number, nationality Registration & KYC
Contact Data Mobile phone number (Indonesian), email address (where provided) Registration
Financial Data Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), registered e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts Account setup & transactions
Technical Data IP address, device type and model, operating system, browser type and version, screen resolution, session duration Automatic — all sessions
Behavioural Data Pages visited, games played, wager amounts and outcomes, login times, feature usage patterns Automatic — all sessions
Communication Data Live chat transcripts, WhatsApp message logs, email correspondence with sby606 support Customer support interactions
KYC Documentation Scanned or photographed copies of government-issued ID documents, selfie verification images (where required) KYC verification process

Data Minimisation Principle: sby606 applies a strict data minimisation approach. We do not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health data, unless explicitly required by a mandatory anti-money-laundering regulatory obligation and only to the minimum extent necessary.

3

How We Collect Data

sby606 collects Personal Data through the following channels and mechanisms:

  • Direct Submission: Information you provide actively when registering an account, completing the KYC verification process, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
  • Automatic Collection: Technical and behavioural data collected automatically via server logs, browser cookies, session-tracking technologies, and analytics tools each time you access the Platform.
  • Payment Providers: Transactional confirmation data received from Indonesian banking partners (BCA, BRI, BNI, Mandiri, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate deposit or withdrawal transactions.
  • Identity Verification Partners: Supplementary identity data from licensed KYC and anti-money-laundering screening services used to verify the accuracy of documents you submit and to screen against applicable sanctions and watchlists.
  • Fraud Prevention Services: Device fingerprinting and behavioural analytics data from third-party fraud-detection tools used to identify multiple account attempts, unusual login patterns, or suspicious wagering behaviour.
4

Purposes of Processing

sby606 processes your Personal Data for the following defined purposes. We do not use your data for any purpose beyond those listed here without first obtaining your informed consent or as required by applicable law:

  1. Account Management: Creating, maintaining, and administering your Member account, including authentication, password resets, and session management.
  2. Service Delivery: Enabling you to access games, place wagers, receive winnings, and use all features of the sby606 Platform as described in our Terms & Conditions.
  3. Payment Processing: Facilitating deposits and withdrawals through your nominated Indonesian bank account or registered e-wallet, and maintaining accurate transaction records.
  4. Identity Verification (KYC): Verifying your identity, age (21+), and eligibility to use the Platform in compliance with our anti-money-laundering and responsible gaming obligations.
  5. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multiple account registrations, unauthorized access, money laundering, and other prohibited conduct described in our Terms & Conditions.
  6. Legal Compliance: Meeting our obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and data protection laws, including responding to lawful requests from competent authorities.
  7. Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance through our live chat, WhatsApp, and email support channels.
  8. Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, administering self-exclusion requests and deposit limits, and providing appropriate support referrals.
  9. Platform Improvement: Analysing aggregated, anonymised behavioural data to improve the Platform's features, user experience, game selection, and performance.
  10. Promotional Communications: Sending you information about bonuses, promotions, and Platform updates, where you have opted in to receive such communications and in accordance with applicable marketing laws.
6

Data Sharing & Disclosure

sby606 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose:

  • Payment Partners: We share transaction-relevant data (name, account number, amount) with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process deposits and withdrawals that you initiate.
  • Identity Verification Providers: KYC Data is shared with licensed identity verification and AML screening service providers who process it solely on our behalf and under our written instructions, with no right to use your data for their own purposes.
  • Game Content Providers: Game session data (anonymised player ID, wager amounts, game outcomes) is shared with licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to deliver game content and support dispute resolution. These providers do not receive your identity or contact information.
  • Fraud Prevention Services: Technical and behavioural data is shared with third-party fraud-detection and device-fingerprinting platforms to identify and prevent prohibited conduct.
  • Legal Authorities: We disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts when required to do so by a lawful, documented legal obligation. We will not voluntarily disclose Member data to any government body without such a legal requirement.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a material part of sby606's business, Member Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Members will be notified of any such transfer in advance where legally required.

No Third-Party Marketing: sby606 will never share your contact details (phone number, email address) with any third-party advertiser, affiliate network, or marketing agency for the purpose of sending you unsolicited commercial communications from parties other than sby606 itself.

7

Data Retention

sby606 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and audit requirements. The following general retention periods apply:

Data Category Retention Period Basis
Account & Identity Data Duration of membership + 5 years post-closure AML / legal obligation
KYC Documentation Duration of membership + 5 years post-closure AML / legal obligation
Financial Transaction Records Duration of membership + 5 years post-closure AML / tax / audit
Communication & Support Logs 3 years from date of communication Dispute resolution / legitimate interests
Technical & Behavioural Data 24 months from collection Platform improvement / fraud detection
Marketing Consent Records Until withdrawal of consent + 2 years Legal compliance / consent audit trail

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where anonymisation is used, the resulting data no longer constitutes Personal Data and may be retained indefinitely for statistical and business analytics purposes.

8

Security Measures

sby606 implements a comprehensive, layered security framework to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. Our technical and organisational security measures include:

  • SSL/TLS Encryption: All data transmitted between your device and the sby606 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), ensuring that intercepted data is unreadable to any third party.
  • Data Encryption at Rest: Sensitive Personal Data stored on sby606's servers — including KYC documents and financial account references — is encrypted using AES-256 encryption.
  • Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Only authorised sby606 personnel with documented operational requirements may access Member data, and all access events are logged and auditable.
  • Two-Factor Authentication: sby606's internal administrative systems require multi-factor authentication for all staff access to Member data systems.
  • Regular Security Audits: Our systems undergo scheduled internal security reviews and periodic third-party penetration testing to identify and remediate vulnerabilities proactively.
  • Fraud Monitoring: Automated real-time monitoring systems flag anomalous login attempts, unusual transaction patterns, and potential account takeover events for immediate investigation by our security team.

Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, sby606 will notify affected Members without undue delay, and in any case within 72 hours of becoming aware of the breach, where technically feasible. Notification will describe the nature of the breach, the data affected, and the remediation steps being taken.

9

Cookies & Tracking Technologies

sby606 uses cookies and similar tracking technologies to operate the Platform effectively, remember your session preferences, and understand how Members interact with the Platform. The following cookie categories are in use:

  • Strictly Necessary Cookies: Essential for the Platform to function. These enable session management, authentication, and security features. They cannot be disabled without breaking core Platform functionality.
  • Functional Cookies: Remember your preferences such as display settings, game lobby filters, and preferred language. These improve your experience but are not essential to the Platform's operation.
  • Analytics Cookies: Collect anonymised data about how Members use the Platform — including pages visited, time spent, and navigation paths — to help us improve the Platform's design and content. Data is aggregated and does not identify individual Members.
  • Security & Fraud Detection Cookies: Support our fraud-prevention systems by recording device fingerprint signals and session behavioural markers that help identify suspicious access patterns consistent with bot activity or account takeover attempts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the Platform. sby606 does not use third-party advertising cookies or behavioral retargeting cookies that track you across external websites.

10

Your Privacy Rights

As a Member of sby606, you hold the following rights with respect to your Personal Data. You may exercise any of these rights at any time by contacting our support team via in-app live chat or email. We will respond to all valid requests within 30 calendar days:

Right of Access

Request a copy of all Personal Data sby606 holds about you, along with information about how it is used and with whom it is shared.

Right to Rectification

Request correction of inaccurate or incomplete Personal Data held in your account. Update your contact or financial details directly in account settings where possible.

Right to Erasure

Request deletion of your Personal Data where processing is no longer necessary, subject to overriding legal retention obligations (e.g., AML record-keeping requirements).

Right to Restriction

Request that sby606 restrict the processing of your Personal Data in specific circumstances — for example, while the accuracy of data you have contested is being verified.

Right to Portability

Request a structured, machine-readable copy of the Personal Data you have provided to sby606, for transfer to another service provider where technically feasible.

Right to Object

Object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling for marketing purposes. You may opt out of promotional communications at any time.

To exercise any of the above rights, please contact our Data Protection team via in-app live chat or at [email protected] with the subject line "Privacy Rights Request." We may need to verify your identity before processing the request to ensure we do not inadvertently disclose or delete another person's data.

11

Protection of Minors

sby606 is an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process incorporates date-of-birth verification, and all accounts requesting withdrawals above defined thresholds are subject to mandatory KYC age verification before funds are released.

If sby606 becomes aware that a Member account belongs to an individual under 21 years of age, we will immediately:

  • Suspend the account and block all further access.
  • Initiate a review of all transactions conducted under the account.
  • Delete or securely anonymise all Personal Data associated with the account to the fullest extent permitted by applicable law, subject to any mandatory AML record-keeping obligations.
  • Return any net deposited balance (excluding winnings) to the original deposit source where technically feasible.

If you are a parent or guardian and believe that a minor in your care has accessed sby606 without your knowledge, please contact our support team immediately via in-app live chat so that we can take the appropriate remedial action promptly.

12

International Data Transfers

sby606's primary operations and data storage infrastructure are designed to serve the Indonesian market. However, some of our third-party Processors — including cloud infrastructure providers, identity verification services, and game content studios — may be based in, or operate data centres in, jurisdictions outside Indonesia.

Where Personal Data is transferred to processors in other jurisdictions, sby606 takes the following steps to ensure that your data remains protected to an equivalent standard:

  • Entering into binding data processing agreements with all Processors that impose equivalent privacy and security obligations to those described in this Policy.
  • Conducting due diligence on Processors' data security certifications, privacy practices, and jurisdictional legal environments before engagement.
  • Applying standard contractual data transfer clauses where required to ensure an adequate level of protection in the destination jurisdiction.
  • Minimising the categories and volume of Personal Data transferred internationally to only what is strictly necessary for the Processor to perform their contracted function.

Data Localisation: sby606 prioritises the use of data centres and processing facilities located within the Asia-Pacific region wherever operationally and commercially feasible, in recognition of the Indonesian market's data sovereignty expectations and to minimise cross-border transfer risks.

13

Policy Changes

sby606 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. When material changes are made, we will:

  • Update the "Last Updated" date at the top of this page.
  • Display a prominent notice on the Platform's login or home screen for a period of not less than 14 days following the change.
  • Where the change materially affects how we process data based on consent, notify affected Members directly via their registered contact details and request fresh consent where required.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. We encourage you to review this page periodically to stay informed of how sby606 protects your Personal Data. Archived versions of previous Privacy Policies are available upon request from our support team.

14

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which sby606 handles your Personal Data, please contact us through the following channels. All contact details are provided as plain text — please copy them manually as needed:

  • Data Protection Enquiries via Live Chat: Available 24/7 through the sby606 in-app live chat. Select "Account & Privacy" as your enquiry category for fastest routing to our data protection team.
  • Email: [email protected] — Please use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request" to ensure your message is directed to the appropriate team. Expected response time: 2–4 business hours during WIB business hours.
  • WhatsApp Support: Available 08:00–02:00 WIB. The WhatsApp contact number is displayed within the Platform's support section. For privacy rights requests involving sensitive data, we recommend using the encrypted live chat channel rather than WhatsApp.

sby606 is committed to addressing all privacy enquiries promptly, transparently, and in a manner that respects your rights as a Member. Formal complaints regarding data handling that cannot be resolved through our internal support process may be referred to the competent data protection authority in the relevant jurisdiction.

Our Privacy Commitments to You

End-to-End Encryption

Every byte of data transmitted between your device and sby606's servers is protected by TLS encryption. Your personal and financial information is never sent in plain text.

No Data Selling

sby606 will never sell, rent, or trade your personal information to third-party advertisers or marketing networks. Your data exists solely to support your gaming experience.

Minimal Data Collection

We collect only what is strictly necessary to operate our services, verify your identity, and comply with legal obligations. No superfluous data collection — ever.

Your Rights Respected

Access, correct, export, or request deletion of your data at any time. Our support team processes all privacy rights requests within 30 days with full transparency.

Strict 21+ Enforcement

sby606 applies rigorous age verification at registration and withdrawal. We take the protection of minors seriously and act immediately upon any indication of underage access.

Breach Notification

In the unlikely event of a data breach affecting your information, sby606 commits to notifying you within 72 hours with full details of the incident and remediation steps.

Questions About Your Privacy?

Our support team is ready to assist with any privacy-related queries, data access requests, or concerns about how your information is handled on the sby606 Platform. You can also review our related policies using the links below.