Privacy Policy

1. Introduction

harbet ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access and use our online betting platform at harbet.cam and any associated mobile applications or services.

This Privacy Policy applies to all Indonesian residents who register for, access, or use harbet services. By creating an account or using our platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must not use our services.

harbet operates in accordance with international data protection standards including General Data Protection Regulation (GDPR) principles and industry best practices for online gaming platforms. We are the data controller responsible for your personal information and are committed to transparency, fairness, and lawfulness in all data processing activities.

2. Information We Collect

harbet collects several categories of personal information necessary to provide, maintain, and improve our services, comply with legal obligations, and ensure platform security. The information we collect includes:

2.1 Information You Provide Directly

When you register for a harbet account, you provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, and Indonesian identity card (KTP) number.
• Contact Information: Email address, mobile phone number registered in Indonesia, residential address including city, province, and postal code.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet details (OVO, DANA, GoPay, ShopeePay account information), and transaction history.
• Verification Documents: Digital copies of your Indonesian KTP, proof of address documents (utility bills, bank statements), and selfie photographs for facial verification.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers.

2.2 Information Collected Automatically

When you access and use harbet services, we automatically collect:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features used, time spent on platform, click patterns, game sessions, betting history, deposit and withdrawal patterns, and login/logout times.
• Location Data: IP address, approximate geographic location based on IP (city and region level), and time zone (primarily Western Indonesia Time / WIB).
• Communication Data: Customer support chat transcripts, email correspondence, WhatsApp messages sent to our support channels, and feedback submitted through our platform.
• Technical Data: Server logs, error reports, performance metrics, and security event logs.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) confirming transaction details.
• Identity verification services validating your KYC documentation.
• Fraud prevention and security services flagging suspicious activity.
• Game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt) reporting game play data.

3. How We Use Your Information

harbet uses your personal information for the following purposes, each based on a lawful processing ground:

3.1 Account Management and Service Delivery

• Create, maintain, and manage your harbet account.
• Process deposits, withdrawals, and betting transactions.
• Provide access to sports betting, live casino, slots, and lottery (togel) games.
• Calculate and credit bonuses, promotions, cashback, and VIP rewards.
• Maintain accurate transaction and betting history for your account.

3.2 Identity Verification and Compliance

• Verify your identity and age (21+ requirement) through KYC procedures.
• Prevent underage gambling and ensure regulatory compliance.
• Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Detect and prevent fraudulent activity, account abuse, and bonus manipulation.
• Maintain records required by licensing authorities and gaming regulators.

3.3 Customer Support and Communication

• Respond to your inquiries via live chat, email, WhatsApp, and in-app messaging.
• Send transactional notifications about deposits, withdrawals, bet settlements, and account changes.
• Provide updates about platform maintenance, new features, and important policy changes.
• Send promotional communications about bonuses, special offers, and tournaments (with your consent).

3.4 Security and Fraud Prevention

• Monitor platform usage for suspicious activity and potential security threats.
• Detect and prevent hacking attempts, account takeovers, and unauthorized access.
• Investigate reports of fraudulent betting patterns, collusion, or match-fixing.
• Protect harbet's intellectual property and enforce our Terms and Conditions.

3.5 Platform Improvement and Analytics

• Analyze user behavior to improve platform performance, game selection, and user experience.
• Conduct market research to understand Indonesian player preferences for games like bandar bola (football betting) and sabung ayam (cockfighting).
• Develop new features, payment methods, and responsible gaming tools.
• Generate anonymized statistics and reports for internal business purposes.

4. How We Share Your Information

harbet does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

4.1 Service Providers and Business Partners

We share necessary information with trusted third-party service providers who assist in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive transaction details to process deposits and withdrawals.
• Game Providers: Software suppliers like Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt receive your gameplay data to deliver gaming services and calculate results.
• Identity Verification Services: Third-party KYC providers verify your identity documents and detect fraudulent documents.
• Cloud Hosting Providers: Secure data centers store encrypted copies of our databases and backups.
• Customer Support Tools: Live chat and ticketing platforms process your support inquiries and maintain conversation history.

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

4.2 Legal and Regulatory Obligations

We may disclose your information when required by law or to protect our rights:

• To comply with court orders, subpoenas, or legal processes.
• To cooperate with law enforcement investigations or regulatory inquiries.
• To report suspected money laundering or terrorist financing activities.
• To enforce our Terms and Conditions and prevent fraud or illegal activity.
• To protect the safety and security of harbet, our employees, and other users.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the business assets. You will be notified of any such transfer and your rights regarding your information.

5. Data Security Measures

harbet employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols.
• Database Encryption: Sensitive data including passwords, KTP numbers, and financial information is encrypted at rest using AES-256 encryption.
• Firewall Protection: Multi-layered firewalls prevent unauthorized access to our servers and databases.
• Intrusion Detection: Real-time monitoring systems detect and alert us to suspicious activity or potential breaches.
• Secure Infrastructure: Our servers are hosted in certified data centers with physical security, redundant power, and disaster recovery capabilities.

5.2 Organizational Security

• Access Controls: Personal data is accessible only to authorized employees who need it to perform their duties.
• Employee Training: All staff receive regular training on data protection principles and security best practices.
• Confidentiality Agreements: Employees and contractors sign non-disclosure agreements protecting customer information.
• Security Audits: We conduct regular internal audits and third-party penetration testing to identify vulnerabilities.
• Incident Response: We maintain a documented incident response plan to address any data breaches quickly and effectively.

5.3 Your Security Responsibilities

You also play a critical role in protecting your account:

• Choose a strong, unique password and do not share it with anyone.
• Enable two-factor authentication if available.
• Log out after each session, especially on shared or public devices.
• Do not click suspicious links or download attachments from unknown sources.
• Report any suspected unauthorized account activity immediately to our support team.

6. Cookies and Tracking Technologies

harbet uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

6.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for platform functionality, login sessions, and security. Cannot be disabled.	Session or 30 days
Performance Cookies	Collect anonymous data about how visitors use our platform to improve performance.	1 year
Functional Cookies	Remember your preferences like language, currency, and display settings.	1 year
Marketing Cookies	Track your activity across websites to deliver relevant promotions. Can be disabled.	90 days

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit platform functionality.

7. Your Data Protection Rights

As a harbet user, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you, including account details, transaction history, and betting records.
• Right to Rectification: Request correction of inaccurate or incomplete personal information through your account settings or by contacting support.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements and pending transactions. Note that account closure is permanent.
• Right to Restriction: Request that we limit processing of your personal data in certain circumstances, such as while disputing data accuracy.
• Right to Data Portability: Request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: Object to processing of your personal data for marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent for optional data processing activities like promotional communications at any time.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or via live chat. We will respond to your request within 30 days.

8. Data Retention

harbet retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Personal data is retained for the duration of your account activity and as long as your account remains open.
• Closed Accounts: After account closure, we retain essential data (identity verification, transaction records) for 6 years to comply with anti-money laundering regulations and financial record-keeping requirements.
• Marketing Data: If you unsubscribe from marketing communications, we retain minimal contact information to honor your opt-out preference.
• Legal Obligations: We may retain data longer if required by court order, legal proceedings, or regulatory investigation.

9. Children's Privacy

harbet services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21. Our KYC verification processes are designed to prevent underage registration and gambling.

If we become aware that we have inadvertently collected information from someone under 21, we will immediately delete that information and permanently close the associated account. Parents or guardians who believe their child has provided personal information to harbet should contact us immediately at [email protected].

10. International Data Transfers

While harbet primarily serves Indonesian players, your personal data may be transferred to and processed in countries outside Indonesia where our service providers, cloud hosting partners, or data centers are located. These countries may have different data protection laws than Indonesia.

When we transfer your data internationally, we ensure appropriate safeguards are in place including standard contractual clauses approved by data protection authorities, adequacy decisions confirming equivalent protection levels, and binding corporate rules within our organization. Your data remains protected regardless of where it is processed.

11. Changes to This Privacy Policy

harbet reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated via email notification, prominent platform announcement, or login notification at least 14 days before taking effect.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Your continued use of harbet services after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how harbet handles your personal information, please contact us through the following channels:

• Data Protection Officer: [email protected]
• 24/7 Live Chat: Available via the support icon on all platform pages
• WhatsApp Support: +62 812-3456-7890 (08:00-24:00 WIB daily)
• Mailing Address: harbet Data Protection Department (for written correspondence)

We aim to respond to all privacy inquiries within 48 hours for urgent matters and within 30 days for formal data subject access requests.