b200m Privacy Policy — Data Protection and User Rights

This page describes what we collect when you use b200m and how we keep that data protected. We at b200m collect information necessary to verify your identity, process your payments, deliver our service, and comply with local regulations. Our privacy practices prioritise transparency—you'll know what data we hold, why we hold it, and how long we keep it.

We operate on a jurisdiction-restricted model, meaning our services are available only where local law permits. Your data remains your own. We do not sell user information to third parties. We do not use your account history to profile you for external marketing. This policy outlines our commitments to data security, your rights as an account holder, and how to contact us if you have privacy questions.

Whether you access b200m from Jakarta, Surabaya, Bandung, Medan, or Semarang, the same privacy standards apply. Our data handling practices comply with Indonesian data protection norms and international best practices for financial service platforms.

What We Collect and How We Use It

We collect data in several categories to deliver b200m services safely and transparently. First, account information: your name, email, phone number, and date of birth when you register. Second, identity and address verification documents (ID card, address proof, selfie) during KYC verification. Third, payment information: the payment methods you link (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account details), transaction history, and deposit/withdrawal records. Fourth, device and browsing data: your IP address, device type, operating system, and app usage patterns for fraud detection and service optimisation.

We use this data to deliver core b200m services. Identity verification protects your account from unauthorised access and ensures compliance with local regulations. Payment information processes your deposits and withdrawals—we never store full card numbers or bank credentials, only tokenised references that payment processors manage. Device and IP data help us detect fraudulent login attempts, unusual withdrawal patterns, and account abuse. We also use aggregated, non-identifiable data to understand service performance—for example, how many users access b200m during Liga 1 finals or Idul Fitri holidays—so we can scale customer support and infrastructure accordingly.

Third-party processors and data sharing

We work with third-party vendors to deliver b200m services. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and banks) receive only the information necessary to execute transactions—never your full account details. Fraud-detection services analyse transaction patterns to flag suspicious activity. Cloud hosting providers store encrypted user data and transaction logs. Customer support platforms record chat transcripts and email conversations so our team can assist you across sessions. All third parties sign data protection agreements and handle your information according to our standards.

• Payment processors: transaction processing, fund transfers, payment verification.
• Fraud and security vendors: login pattern analysis, unusual activity detection.
• Cloud infrastructure: encrypted storage, backup, system logs.
• Customer support platforms: chat history, ticket management, case resolution.
• Regulatory bodies: disclosure only when required by applicable law.

Your Rights and Our Commitments

We at b200m keep your data only as long as needed to deliver service and comply with law. Account information remains active while your account exists. Transaction records are retained for at least five years to satisfy regulatory requirements. KYC documents are encrypted and archived; we delete them if you request account closure, except where legal obligation requires longer retention. Device logs and IP records are retained for 90 days for fraud prevention, then purged.

You have the right to request access to your personal data, correct inaccuracies, and request deletion where permitted by law. Submit these requests via our account settings or by contacting our support team. Identity verification requests take 5 business days; we'll confirm deletion once complete (except where law requires us to retain records). You can also enable two-factor authentication in your security settings to add a protection layer around account access and data viewing. If you believe your data has been misused or compromised, contact us immediately via live chat or support email.

Cookies and tracking

We use cookies to remember your login session, remember your language preference, and analyse how you interact with b200m. These are functional (required for service) and analytical (help us improve). We do not use third-party tracking cookies that follow you across other websites. Your browser settings allow you to reject cookies or clear them anytime; note that rejecting functional cookies may disable some b200m features. We provide a cookie notice on first visit and update it when our practices change.

Changes to this policy

We may update this policy as our business and regulations evolve. We'll notify you of material changes via email or in-app notification at least 30 days before the change takes effect. Your continued use of b200m after notification constitutes acceptance of the updated policy. If you disagree with any change, you can request account closure anytime.

Questions about your privacy on b200m? Contact our support team via live chat, email, or phone. We're committed to responding to data inquiries within five business days. Your trust is our priority, and we take data protection seriously across all b200m operations and jurisdictions.