Privacy Policy — 88idr

88idr ("we", "us", "our") operates the online betting and gaming platform accessible at 88idr.vu. We are committed to protecting the privacy and personal data of every individual who interacts with our platform — whether as a registered Account holder, a visitor browsing our website, or a person contacting our support team.

This Privacy Policy describes the types of personal data we collect, the purposes for which we collect and use that data, the circumstances under which we may share it with third parties, the security measures we employ to protect it, and the rights available to you as a data subject. This Policy applies to all 88idr services, including the website, mobile interface, customer support channels, and all associated betting and gaming products.

This Privacy Policy forms part of our broader legal framework alongside the Terms & Conditions and the Responsible Gaming policy. By registering an Account or continuing to use the 88idr platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

Throughout this Privacy Policy, the following terms carry the meanings defined below:

88idr collects Personal Data that is necessary to provide our services, comply with legal obligations, and maintain a secure and fair gaming environment. The categories of data we collect are described below:

3.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID — KTP or passport).
• Date of birth (used to verify that you meet the 21+ age requirement).
• Gender (optional, collected for account personalisation).
• Residential address in Indonesia.
• Email address and mobile telephone number.
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of your Indonesian National Identity Card (KTP) or valid passport.
• Proof of address document (utility bill, bank statement, or equivalent issued within the past 90 days).
• Payment method ownership evidence (bank account screenshot, e-wallet account confirmation) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, or other supported channels.
• Source-of-funds documentation where required by our risk and compliance processes.

3.3 Financial & Transaction Data

• Deposit and withdrawal history, including amounts (in IDR / Rp), timestamps, and payment method used.
• Bank account details and e-wallet account identifiers associated with your Account.
• Bonus and promotion redemption records.
• Wagering history — game titles played, bet amounts, outcomes, and session durations.

3.4 Technical & Device Data

• IP address at the time of registration and each subsequent login.
• Device type, operating system, browser type and version.
• Geolocation data derived from IP address (country and city level — 88idr does not request GPS-level location).
• Session duration and navigation patterns within the Platform.
• Unique device identifiers where applicable.

3.5 Communications Data

• Records of your interactions with our customer support team via live chat and email, including the content of those communications.
• Responses to surveys, feedback forms, or promotional communications where you have opted in.

3.6 Responsible Gaming Data

• Deposit limit settings, loss limit settings, session time reminder preferences, and self-exclusion status, where you have activated these tools.
• Problem gambling indicators flagged by our responsible gaming monitoring systems, used solely to protect player welfare.

88idr collects Personal Data through the following channels and mechanisms:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, place a bet, use a bonus, contact support, or respond to any Platform communication.
• Automatically through your use of the Platform: Technical and device data (see Section 3.4) is collected automatically as you navigate the website or mobile interface, via server logs, session tracking software, and Cookies (see Section 7).
• From third-party service providers: Identity verification partners and payment processors may return confirmed data points to 88idr as part of the KYC and transaction processing workflows. For example, your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) confirms transaction success or failure to our payment gateway, and that confirmation is recorded on your Account.
• From fraud prevention and compliance tools: Risk monitoring systems may cross-reference registration data against sanction lists, known fraud databases, and duplicate-account detection systems as part of our security obligations.

88idr processes your Personal Data only when there is a clear purpose and a legitimate legal basis for doing so. The table below summarises the primary processing activities, their purposes, and the legal basis applied:

We do not use your Personal Data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a fresh legal basis.

88idr does not sell, rent, or trade your Personal Data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• KYC & Identity Verification Providers: Specialist third-party identity verification firms that process your identity documents (KTP, passport) and proof-of-address documents on our behalf under a formal data processing agreement. These providers are contractually prohibited from using your data for any purpose other than completing your KYC check for 88idr.
• Payment Processors & Financial Partners: Banks and e-wallet operators — including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja — receive only the minimum transaction data necessary to process your deposit or withdrawal (e.g., account number, transaction amount in IDR, reference code). 88idr does not share your full profile or gaming history with payment providers.
• Game Studio & Technology Providers: Certified game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive a pseudonymised player identifier and bet data necessary to operate and settle their games. These providers do not receive your full name, KTP details, or financial account information.
• Fraud Detection & Risk Management Partners: Third-party risk platforms that help 88idr identify suspicious activity, duplicate accounts, and prohibited conduct. Data shared is limited to technical identifiers (IP address, device ID, account behaviour patterns) and is governed by strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Where 88idr is required by applicable law, court order, or lawful regulatory request to disclose Personal Data, we will comply with such requirements. We will, where legally permitted, notify you of any such disclosure request.
• Corporate Restructuring: In the event of a merger, acquisition, or sale of substantially all of 88idr's assets, your Personal Data may be transferred to the acquiring entity, provided that the acquiring entity agrees to honour the commitments set out in this Privacy Policy.

88idr uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience on the Platform. The categories of cookies we use are as follows:

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. For analytics and preference cookies, you may opt out without affecting your ability to play.

88idr retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or legitimate business necessity. The following retention periods apply as a general guide:

• Account & Registration Data: Retained for the duration of your active Account, plus a minimum of 5 years following Account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of verification or from the date of Account closure, whichever is later, in accordance with applicable regulatory requirements.
• Transaction & Financial Records: Retained for a minimum of 5 years from the date of each transaction.
• Betting & Gaming History: Retained for the duration of your active Account plus 3 years following Account closure, for dispute resolution and audit purposes.
• Customer Support Communications: Retained for 3 years from the date of the most recent communication, to support dispute resolution and quality assurance.
• Technical & Device Logs: Retained for up to 12 months for security and fraud investigation purposes.
• Marketing Consent Records: Retained for the duration of your opt-in consent, plus 3 years following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and product development purposes.

88idr implements a layered, defence-in-depth security architecture to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• TLS 1.3 / SSL 256-Bit Encryption: All data in transit between your browser or app and the 88idr servers is encrypted using current Transport Layer Security standards. Our SSL certificate is maintained and renewed continuously.
• Encryption at Rest: Sensitive data — including KYC documents, payment account details, and passwords — is encrypted at rest using AES-256 or equivalent standards. Passwords are never stored in plaintext; they are hashed using a modern bcrypt or Argon2 algorithm.
• Access Controls: Access to Personal Data within 88idr's systems is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls, multi-factor authentication, and audit logging are applied to all internal systems that process player data.
• Segregated Data Storage: Financial data, identity documents, and wagering history are stored in logically segregated environments, reducing the blast radius of any potential security incident.
• Vulnerability Management: 88idr conducts regular security assessments, penetration testing, and code reviews. Critical vulnerabilities are remediated within defined SLA windows.
• Incident Response: 88idr maintains a documented data breach response procedure. In the event of a breach that poses a material risk to your rights, we will notify affected Account holders by email within a reasonable timeframe of confirming the breach.

88idr's primary player base is located in Indonesia, and we process the majority of Personal Data within systems hosted in the Asia-Pacific region. However, some of our third-party service providers — including game studio technology platforms, fraud detection tools, and cloud infrastructure providers — may process data in jurisdictions outside Indonesia.

Where Personal Data is transferred outside Indonesia, 88idr ensures that such transfers are governed by appropriate safeguards, which may include:

• Data processing agreements incorporating standard contractual clauses that impose data protection obligations on the receiving party equivalent to those applied by 88idr.
• Transfer to service providers located in jurisdictions with data protection frameworks recognised as adequate by applicable international standards.
• Your explicit consent to the transfer, where required by applicable law.

By using the 88idr platform and submitting your Personal Data, you acknowledge that your data may be transferred to and processed in countries other than Indonesia, subject to the safeguards described above.

As a player on 88idr, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [Your Account Username]".

• Right of Access: You have the right to request a copy of the Personal Data 88idr holds about you, including the categories of data, the purposes of processing, and any third parties to whom it has been disclosed.
• Right to Rectification: You have the right to request correction of any Personal Data that is inaccurate or incomplete. For certain data points (e.g., name, date of birth), we may require supporting documentation before making corrections.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where: (a) the data is no longer necessary for the purpose it was collected; (b) you have withdrawn consent and no other legal basis applies; or (c) the data has been unlawfully processed. Note that we may retain certain data where required by law or for legitimate defence of legal claims (see Section 8).
• Right to Restriction of Processing: You may request that we limit processing of your data in certain circumstances, such as while a rectification request is under review.
• Right to Data Portability: Where processing is based on your consent or contract performance, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data where that processing is based on legitimate interest. You also have the right to object to your data being used for direct marketing, at any time and without providing a reason.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, use the unsubscribe link in any 88idr email or contact support directly.

88idr will acknowledge your data rights request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you in advance.

88idr does not knowingly collect Personal Data from any individual under the age of 21. Our Platform is strictly intended for adults aged 21 and over. The 21+ age requirement is enforced at registration through a date-of-birth declaration and reinforced during KYC verification.

If we become aware that Personal Data has been collected from an individual who is under 21, we will take immediate steps to delete that data and close the associated Account. If you are a parent or guardian and believe your child has created an 88idr Account, please contact us immediately at [email protected].

The 88idr Platform may contain references or links to third-party services, such as game studio demonstration portals, payment provider help pages, or affiliated sporting organisations (e.g., BRI Liga 1 official statistics). These third-party websites operate independently of 88idr and are governed by their own privacy policies.

88idr does not accept responsibility for the privacy practices or data security of any third-party website or service. We encourage you to review the privacy policy of any third-party site you visit before providing any Personal Data. The presence of a link or reference on the 88idr Platform does not constitute an endorsement of that third party's privacy practices.

88idr reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will:

• Publish the revised Policy on this page with an updated "Last Revised" date at the top of the document.
• Notify active Account holders by email to their registered address where the changes are significant and affect their rights or our processing activities in a meaningful way.

Your continued use of the 88idr platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any revision, you should cease using the Platform and contact support to close your Account and request deletion of your data.

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or want to raise a complaint about how your Personal Data has been handled, please contact the 88idr Data & Privacy team through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request — [Your Account Username]" for faster routing.
• Live Chat: Available 24/7 within your logged-in 88idr Account. Indonesian-speaking agents are on duty at all times, including during Ramadhan and all Indonesian national holidays. Average response time is under 3 minutes (WIB).

We will acknowledge all privacy-related enquiries within 2 business days. Formal data rights requests (access, erasure, portability, etc.) will receive a substantive response within 30 calendar days as described in Section 11.