bento4 Platform Privacy Notice
This page describes what data we collect when you use bento4 and how we keep that data protected. We at bento4 take privacy seriously—your personal information is encrypted, stored securely, and never shared with third parties except where the law requires it or where necessary to process your payments and withdrawals. When you log into bento4 on Android, iOS, or desktop, you trust us with sensitive details like your identity, bank account information, and gaming history. We explain exactly what we collect, why we collect it, and how long we keep it.
Our privacy practices align with data protection standards. We collect information only for legitimate purposes: account verification (KYC), fraud prevention, payment processing, and compliance with legal obligations. You have rights over your data—you can request a copy, ask us to correct inaccuracies, or request deletion after your account closes (subject to legal retention windows). This notice applies to all users on bento4, whether you access via the Android app, iOS browser, or desktop.
If you have questions about our privacy practices, contact us through Help in the bento4 app or visit our FAQ page
What Data We Collect on bento4
Account Information
When you create an account on bento4, we collect your legal name, email address, phone number, and date of birth. These details are necessary to set up your account and to comply with anti-money-laundering regulations. We also collect your postal address so we can verify your physical location and meet know-your-customer (KYC) requirements.
Your username and password are encrypted using industry-standard hashing—we never store your password in plain text. If you enable two-factor authentication, we generate and store a secure token on your device. Your account preferences (notification settings, language, betting limits) are stored on our servers so they sync across your devices.
Identity and KYC Documents
To verify your identity and meet regulatory requirements, we ask you to upload a government-issued document: a passport, national ID, or driver's licence. We scan and store this document digitally using encrypted cloud storage. We do not retain the physical document—only the digital copy. This document is used solely for identity verification; we do not share it with marketing partners or third parties outside our compliance and payment teams.
Payment and Banking Information
When you deposit funds, we collect payment information from your chosen method: DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or your bank (mobile banking, local payment, online payment, e-wallet). We do not store your full bank account number or credit card details—our payment providers (third-party processors) handle that encryption. We store only a reference token that links your deposit to your account, which we use to process future withdrawals to the same account.
Your transaction history—date, amount, payment method, and status—is stored on our servers. We keep this data for seven years to meet tax and regulatory requirements.
Data we collect
- Legal name, email, phone, date of birth, postal address
- Government-issued identity document (encrypted)
- Payment method reference tokens (not full card or bank details)
- Deposit and withdrawal transaction history
- Gaming activity: game selections, bets placed, outcomes, balance changes
- Device information: IP address, device type, browser, operating system
- Cookies and analytics data (see Cookies section below)
Gaming and Account Activity
We log every game you play on bento4. This includes slot games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger, Sic Bo), football and esports markets (Liga 1, Piala Indonesia, Piala AFF, Mobile Legends, Free Fire, PUBG Mobile), and any other offerings. For each activity, we record the date, time, amount wagered, outcome, and resulting balance change.
This data helps us prevent fraud, resolve disputes, and comply with gambling regulations. Your game history is visible to you in the "Game History" section of your account and is never shared with third parties except to law enforcement if legally compelled.
Device and Network Information
When you log into bento4, we record your IP address, device type (iPhone, Android, desktop), operating system version, browser type, and approximate location (based on IP geolocation). This information helps us detect unauthorized access and prevent fraud. If you log in from an unusual location or device, we may ask for additional verification before allowing access.
How We Use Your Data and Your Rights
How We Use Data on bento4
We use your data for several purposes: to operate your account, process deposits and withdrawals, verify your identity (KYC), detect and prevent fraud, comply with legal and tax requirements, and respond to your support requests. We do not use your data for marketing emails or third-party advertising unless you opt in explicitly.
Your data may be shared with payment processors (to complete transactions), our hosting provider (to store and secure data), and law enforcement (if legally compelled by subpoena or court order). We do not sell your data to advertisers or data brokers.
Data Retention and Deletion
We retain account data for as long as your account is active. After you close your account, we keep transaction records for seven years to meet tax and regulatory requirements. Personal data (name, address, ID document) is deleted after three years unless we have a legal obligation to retain it longer. Gaming history is deleted after five years.
If you request deletion of your data before the retention period expires, we will delete it except where law requires us to keep it. Submit deletion requests through Help in the bento4 app, and we will process them within 30 days.
Your Rights on bento4
You have the right to request a copy of all your personal data. You can ask us to correct inaccurate information, restrict how we use your data, or export your data in a portable format. You can also request deletion of your data (subject to legal retention requirements). To exercise any of these rights, contact us through Help in the bento4 app or via the channels listed in the Contact section below.
We will respond to all data requests within 30 days. If we deny your request, we will explain the reason (usually due to legal retention requirements or ongoing disputes).
- Data access
- Request a copy of your personal data by contacting Help in the bento4 app. We respond within 30 days.
- Correction
- If your information is inaccurate, update it yourself in Account Settings or request that we correct it.
- Deletion
- Request deletion after your account closes. Some data (transactions) must be kept for seven years by law.
Cookies and Tracking on bento4
We use cookies to keep you logged in, remember your preferences, and improve your experience on bento4. Most cookies expire after one session (when you log out), but some persist for up to one year so we can remember your language preference or notification settings. We also use analytics cookies to track how users navigate the app and website—this helps us fix bugs and improve features.
You can disable cookies in your device's browser settings, but this may prevent bento4 from functioning properly. Third-party cookies (from advertisers or analytics partners) are not used on bento4.
Data Storage and Security
We store all account data on encrypted servers hosted in data centres with multiple security layers. Our servers may sit outside your jurisdiction (for example, outside Indonesia), but they are protected by the same encryption and access controls regardless of location. Employees who access your data are trained on data protection and sign confidentiality agreements.
We encrypt all data in transit (between your phone and our servers) using TLS/SSL encryption. Data at rest (stored on our servers) is encrypted using AES-256 encryption. We conduct regular security audits and penetration testing to identify and fix vulnerabilities.
Our security practices
- Industry-standard encryption for all data
- Secure password hashing; no plain-text storage
- Regular security audits and penetration testing
- Employee training on data protection
What we avoid
- Never sell your data to third parties
- Never share your data for marketing or advertising
- Never store your full card or bank account numbers
- No third-party tracking cookies or analytics
Contact Us About Privacy
If you have a privacy question, complaint, or request, contact our support team through Help in the bento4 app. We respond during standard business hours (8 AM to 10 PM Jakarta time, Monday to Sunday). For urgent data breaches or security concerns, mark your message as urgent so it receives priority review.
You can also reach our compliance team through the contact details on our About Us page. We handle all privacy requests confidentially and will not share your inquiry with other departments without your permission.
Changes to This Privacy Notice
We may update this privacy notice from time to time to reflect changes in our practices or legal requirements. Material changes will be notified to you through the bento4 app at least 30 days before taking effect. Continued use of bento4 after the notice period constitutes acceptance of the updated policy.
For more details on our overall platform practices, visit our Terms and Conditions page. If you have concerns about how a specific city's data center works—for example, if you're in Jakarta, Surabaya, Bandung, or Medan and want to know where your data is stored—contact us and we can explain the location and security measures at that facility. We remain committed to protecting your privacy and operating transparently on bento4.
Legal and Jurisdiction Guidance
Service availability
We at bento4 offer our gaming and sportsbook services only in jurisdictions where such services are legally permitted under local law. We do not operate in jurisdictions where online gaming, sports betting, or live-dealer casino games are prohibited by statute or regulation. Our compliance team continuously monitors the legal landscape in regions where we operate, and we adjust our service availability as required by law.
If you are located in a jurisdiction where our services are restricted or prohibited, we will not permit you to open an account or access our platform. During the account creation process, we verify your location through your IP address, phone number, and identity documents. If we determine that you are in a restricted jurisdiction, we will deny your account application or suspend your existing account. This is not a limitation on our part—it is our obligation to comply with the law where you are located.
Service availability can change. If we withdraw our services from your jurisdiction due to legal changes, we will notify all affected users at least 30 days in advance through email and in the app. Users will have the opportunity to request a full withdrawal of their account balance before services are terminated in that jurisdiction. We will not retain funds from users in jurisdictions where we can no longer operate.
Account eligibility
We require that all account holders meet certain eligibility criteria under applicable law. Account eligibility is determined by your jurisdiction's laws, not by bento4 directly. In most jurisdictions where we operate, users must be of legal age to enter into financial contracts and to participate in gaming activities. The specific age threshold varies by jurisdiction and is set by local law, not by us.
During KYC verification, we confirm your identity and age using government-issued documents. You must provide accurate, up-to-date information. If we discover that you do not meet eligibility criteria—for example, if you are underage or located in a prohibited jurisdiction—we will close your account immediately and process a full withdrawal of your remaining balance within 30 days.
Some users may be subject to additional restrictions based on regulatory lists or sanctions. We screen all account holders against publicly available sanctions lists maintained by international authorities. If you appear on such a list, we will not open your account or will suspend your account immediately if you are already a user. This is a legal requirement we must enforce, and it applies equally to all users regardless of jurisdiction.
Local-law responsibility
You, the user, are solely responsible for verifying that your access to and use of bento4 complies with the laws of your jurisdiction. We provide our services on the assumption that you have checked your local laws and confirmed that participation is legal where you live. We do not provide legal advice, and we cannot advise you on the legality of gaming in your jurisdiction.
If you are uncertain about the legality of online gaming or sports betting where you live, you should consult a qualified lawyer in your jurisdiction before opening an account or using our platform. Many jurisdictions have complex regulations regarding online gaming, and what is permitted in one region may be restricted or prohibited in another. It is your responsibility—not ours—to understand and comply with these regulations.
We reserve the right to suspend or terminate any account if we become aware that the user is located in a jurisdiction where our services are prohibited or if we have reason to believe the user is in breach of local law. Suspension or termination for legal reasons is final, and we will not be liable for any loss resulting from your use of bento4 in violation of local law.
Data and privacy scope
We collect and process personal data from all users to comply with KYC (Know Your Customer) requirements and to operate our platform securely. The data we collect includes your legal name, date of birth, phone number, email address, postal address, and government-issued identity document (passport, national ID, or driver's license). We may also collect payment information, including your bank account or mobile wallet details, and records of your transactions and gaming activity.
We store this data securely using encryption and access controls. Your data is never shared with third parties except where required by law (such as to tax authorities or law enforcement) or to process your payments (payment providers receive only the information necessary to complete a transaction). Our full privacy practices are outlined in our Privacy Policy (this page). We recommend that you read this policy carefully to understand how we handle your information.
You have the right to request a copy of your personal data at any time. You can also request that we correct inaccurate information or delete your data after your account is closed (subject to legal retention requirements). Submit data requests through Help in the bento4 app, and we will respond within 30 days.
Contact for legal inquiries
If you have a legal question, a compliance inquiry, or wish to report a potential violation of this privacy notice, you can contact our support team through Help in the bento4 app. English-language queries are handled during standard business hours (8 AM to 10 PM Jakarta time, Monday to Sunday). We aim to respond to all inquiries within five working days.
For urgent compliance or legal matters, you can also reach out through the contact details listed on our About Us page. Please provide as much detail as possible about your inquiry so we can assist you quickly. If your matter requires escalation, our compliance team will review your submission and respond within ten working days.
We take all legal and compliance inquiries seriously. If you report a potential breach of this privacy notice or law, we will investigate and take appropriate action. You will not face retaliation for reporting a concern in good faith. All communications regarding legal and compliance matters are treated as confidential.