y200 Privacy Policy

This page describes what we collect when you use y200 and how we keep that data protected. When you register an account, deposit via DANA, e-wallet, mobile banking, or a bank virtual account, or place bets on Liga 1, Piala AFF, Champions League, or live-dealer games, we gather personal information. We use this data only to operate our platform, process your payments, and comply with legal obligations.

We do not sell or rent your personal information to third parties for marketing purposes. We do share data with payment processors (e.g., local payment, online payment) and our hosting providers as needed to deliver our service. Our servers may sit outside your jurisdiction—data transfers are encrypted and governed by this policy.

Your privacy is a commitment we take seriously. If you have questions about how we handle your data, contact our support team. You have the right to access, correct, or delete your personal information—request these rights from our data protection team at any time.

What Data We Collect on y200

We collect data in several categories. First, registration data: your email address, full legal name, date of birth, phone number, and password. Second, identity verification data: scans of your national ID (KTP), passport, or driving licence; proof of address (utility bill or bank statement); and a selfie for facial verification. Third, payment data: your bank account number, e-wallet account details (DANA, e-wallet, mobile banking), or virtual account code.

Fourth, transaction data: every deposit, withdrawal, bet, game play, and balance change is logged with timestamps. Fifth, device and IP data: we record the device you use to access y200 (phone, tablet, computer), your IP address, browser type, and operating system. Sixth, support and communication data: if you contact our team, we log your messages, attachments, and our responses.

We do not collect biometric data beyond the selfie needed for identity verification (which we use only to confirm you match your ID photo). We do not track your browsing outside y200. We do not install spyware or keyloggers. We do not access your device's contacts, photos, or other apps without your permission.

Personal data: Information that identifies you (name, email, phone, ID number). We collect this to open and manage your y200 account.
Financial data: Bank account numbers, e-wallet credentials, transaction history. Used solely for deposits, withdrawals, and fraud prevention.
Technical data: IP address, device type, browser version, cookies. Used to secure your account, prevent fraud, and improve platform stability.

How We Use Your Data on y200

We use your data for these purposes: (1) Account management — to open your account, verify your identity, and manage your profile. (2) Payment processing — to route your local payment, online payment, e-wallet, or bank deposits to your balance and process withdrawals. (3) Legal compliance — to comply with anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and fraud prevention laws. (4) Support — to respond to your queries, resolve disputes, and investigate account issues.

(5) Platform operation — to prevent fraud, detect unauthorized access, maintain server security, and troubleshoot technical problems. (6) Analytics — to understand how you use y200 (e.g., which games you play, which markets you bet on) so we can improve our service. (7) Marketing — to send you optional promotional emails (which you can unsubscribe from anytime).

We do not use your data to profile you for credit or employment decisions. We do not sell your data to advertisers. We do not use your information to manipulate odds or outcomes on Liga 1, Piala Indonesia, Champions League, or any other market we offer.

Third Parties Who Access Your Data

We share your data with payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank operators (online payment, e-wallet, mobile banking, local payment). They access your data to process your deposits and withdrawals. They are bound by their own privacy policies and are not permitted to use your data for unrelated purposes.

We share with our hosting provider (the company that runs our servers). They see your account data only as needed to store and retrieve your information. They do not have access to your passwords or payment details. We also share with law enforcement if legally required—for example, if a court orders us to produce evidence related to suspected illegal activity.

Data transfers: Our servers operate in multiple regions. Your data may be transferred across borders during backup, disaster recovery, or optimization. All transfers are encrypted end-to-end using TLS 1.2 or higher.

How We Protect Your Data on y200

We use industry-standard encryption (SSL/TLS) for all communications between your device and our servers. Your password is hashed and salted—we never store it in plain text. Sensitive data (ID numbers, bank account details) is encrypted in our database and decrypted only when needed for processing.

We maintain access logs so we can detect unauthorized access attempts. We conduct regular security audits and penetration testing. Our support staff can see only the minimum information needed to help you—they cannot view your full password or full bank account number.

You should use a strong password (minimum 12 characters, mixed case, numbers, symbols), enable two-factor authentication if available, and never share your login details. If you suspect unauthorized access, contact our support team immediately.

Cookies and Tracking on y200

We use cookies (small text files stored on your device) to remember your login session, remember your language preference, and track your activity within y200. These cookies help us detect fraud (e.g., if someone in Jakarta and someone in Bandung simultaneously log into your account, we flag it). You can disable cookies in your browser settings, but some y200 features may not work correctly if you do.

We do not use third-party tracking pixels or ad networks. We do not pass your data to Google Analytics or Facebook Pixel. Any analytics we perform on y200 data stays within our own systems.

Your Rights Under Our y200 Privacy Policy

You have the right to request access to all personal data we hold about you. You have the right to correct inaccurate data (e.g., if your registered name is misspelled). You have the right to request deletion of your data, subject to legal retention requirements (e.g., we may need to keep records for seven years for AML compliance).

You have the right to withdraw consent for promotional emails anytime by clicking "Unsubscribe" in any email or by contacting our support team. You have the right to data portability—we can provide your data in machine-readable format so you can transfer it to another service.

To exercise these rights, contact our data protection team via email or support chat. We will respond within 30 days. If you believe we have mishandled your data or violated this policy, you can lodge a complaint with the relevant data protection authority in your jurisdiction.

How Long We Keep Your Data

We retain account and transaction data for as long as your account is active and for seven years after closure (for anti-money-laundering compliance). We retain support tickets and communication logs for five years. We delete cookies after your session ends (or after 12 months if you enable "remember me").

If you request account deletion, we remove your personal data from our active systems but may retain anonymized transaction records for seven years. Anonymized data does not identify you and is used only for fraud detection and platform analytics.

Contact Us About Privacy

If you have questions about this privacy policy, want to access your data, or believe we have violated your privacy rights, contact our data protection team. They are available via email during business hours and can be reached through our main support contact form. We will acknowledge your request within 24 hours and provide a substantive response within 30 days.

Our commitment to your privacy is core to how we operate y200. We continuously review our practices to ensure they meet the highest standards. This policy was last updated in May 2026 and will be updated if our practices change. Your continued use of y200 after an update means you accept the new version.