Privacy Policy

This Privacy Policy governs the collection and processing of personal data by pho88 (referred to as "we," "us," or "our") through our website at https://pho88.cam, mobile applications, and all related services (collectively, the "Platform"). This policy applies to all users, visitors, and registered players (referred to as "you" or "your") who access or interact with our Platform.

By accessing or using the pho88 Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must discontinue use of our services immediately. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform.

Geographic Scope: The pho88 Platform is designed primarily for users located in Indonesia. We process personal data in accordance with applicable Indonesian privacy laws and international data protection standards. Users accessing the Platform from jurisdictions with different privacy regulations do so at their own risk and remain responsible for compliance with local laws.

pho88 collects various categories of personal information necessary to provide gaming services, maintain platform security, comply with legal obligations, and improve user experience. The types of information we collect include:

2.1 Information You Provide Directly:

• Account Registration Data: When you create an account, we collect your full legal name, date of birth, email address, mobile phone number, residential address, and preferred currency (Indonesian Rupiah). This information is mandatory for account creation and legal compliance.
• Identity Verification Documents: To comply with Know Your Customer (KYC) and anti-money laundering regulations, we require government-issued identification such as Kartu Tanda Penduduk (KTP) or Indonesian passport, proof of address (utility bills or bank statements), and verification photographs. These documents confirm your identity and legal age (21+).
• Payment Information: We collect bank account details, e-wallet account identifiers, and transaction history related to deposits and withdrawals. Payment data is processed through secure payment gateways and we do not store complete credit card numbers or sensitive payment credentials on our servers.
• Communications: When you contact customer support via email, live chat, or other channels, we collect the content of your messages, support tickets, and related correspondence to address your inquiries and improve service quality.
• Voluntary Information: Any additional information you choose to provide, such as profile preferences, communication preferences, or feedback through surveys.

2.2 Information Collected Automatically:

• Device and Technical Data: We automatically collect information about the device you use to access pho88, including device type, operating system, browser type and version, screen resolution, IP address, mobile network information (such as Telkomsel, Indosat, XL, or Tri), and unique device identifiers.
• Usage Data: We track how you interact with the Platform, including pages visited, games played, bets placed, time spent on specific features, click patterns, and navigation paths. This helps us understand user preferences and optimize platform performance.
• Location Data: We collect approximate geographic location based on your IP address to verify that you are accessing the Platform from a permitted jurisdiction and to tailor content appropriately. We do not track precise GPS location unless you explicitly grant permission through mobile app settings.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance user experience, remember preferences, maintain login sessions, prevent fraud, and analyze platform usage. Details of our cookie practices are provided in Section 9 below.

2.3 Information from Third Parties:

• Payment Processors: We receive transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify deposits and process withdrawals.
• Identity Verification Services: We may use third-party verification services to authenticate identity documents and perform anti-fraud checks during the KYC process.
• Game Providers: Gaming software providers (such as Pragmatic Play, Evolution Gaming, Microgaming, and others) provide aggregated game performance data, but we do not receive personally identifiable information from these providers beyond what is necessary for game operation.

pho88 processes your personal information for the following legitimate purposes:

3.1 Service Provision and Account Management:

• Create, maintain, and manage your player account
• Authenticate your identity and verify you meet age and jurisdictional requirements (21+ and Indonesian residency)
• Process deposits, withdrawals, and manage your account balance in Indonesian Rupiah (IDR)
• Enable you to place bets on sports events, play casino games, slots, and participate in promotions
• Track your gaming activity, transaction history, and bonus eligibility
• Provide customer support and respond to your inquiries through live chat, email, or other channels

3.2 Legal and Regulatory Compliance:

• Comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Verify legal age and prevent underage gambling (strictly 21+ only)
• Detect, prevent, and investigate fraudulent activity, payment disputes, and terms violations
• Respond to legal requests from law enforcement, regulatory authorities, or courts
• Maintain records required by applicable gaming and financial regulations

3.3 Platform Security and Fraud Prevention:

• Monitor for suspicious account activity, duplicate accounts, or coordinated betting patterns
• Protect against unauthorized access, hacking attempts, and cybersecurity threats
• Enforce our Terms & Conditions and prevent platform abuse
• Maintain the integrity of games and sports betting markets

3.4 Communications and Marketing:

• Send transactional notifications about deposits, withdrawals, bonus activations, and account changes
• Provide customer support updates and respond to your queries
• Send promotional offers, bonus announcements, and platform updates (with your consent where required)
• Conduct surveys and request feedback to improve our services
• Deliver personalized content and recommendations based on your gaming preferences

3.5 Platform Improvement and Analytics:

• Analyze usage patterns to optimize user experience and identify popular features
• Test new features, games, and betting markets before full rollout
• Monitor platform performance, identify technical issues, and maintain system stability
• Generate aggregated, anonymized statistics for business intelligence purposes

3.6 Responsible Gaming:

• Monitor betting patterns that may indicate problem gambling behavior
• Enforce deposit limits, loss limits, and self-exclusion requests
• Provide access to responsible gaming tools and support resources
• Comply with safe gambling obligations and player protection requirements

pho88 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

4.1 Technical Security Measures:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by major Indonesian banks like BCA, BRI, and BNI.
• Database Encryption: Sensitive personal information and financial data stored in our databases are encrypted at rest using advanced encryption algorithms.
• Secure Payment Processing: Payment transactions are processed through PCI-DSS compliant payment gateways. We do not store complete credit card numbers or sensitive authentication data on our servers.
• Firewall Protection: Our servers are protected by enterprise-grade firewalls that filter malicious traffic and prevent unauthorized access attempts.
• Intrusion Detection Systems: We employ automated monitoring tools that detect and alert us to potential security breaches or suspicious activity in real-time.
• Regular Security Audits: Our platform undergoes periodic security assessments and penetration testing by independent cybersecurity experts to identify and remediate vulnerabilities.

4.2 Access Control and Authentication:

• Personal data access is restricted to authorized personnel on a strict need-to-know basis
• All employees with data access undergo background checks and sign confidentiality agreements
• Multi-factor authentication is required for administrative access to sensitive systems
• User accounts are protected by encrypted passwords that we cannot retrieve (only reset)
• Automatic session timeouts prevent unauthorized access to inactive accounts

4.3 Physical Security:

• Our servers are housed in secure, climate-controlled data centers with 24/7 physical security monitoring
• Access to data center facilities is restricted through biometric authentication and video surveillance
• Backup systems and disaster recovery protocols ensure data availability even during emergencies

4.4 Organizational Policies:

• Comprehensive data protection policies govern how employees handle personal information
• Regular privacy and security training for all staff members
• Incident response procedures to address data breaches or security incidents promptly
• Vendor management protocols ensure third-party service providers meet our security standards

While we implement robust security measures, no system is completely invulnerable. You also play a crucial role in protecting your account by maintaining confidential login credentials, using strong unique passwords, enabling two-factor authentication where available, avoiding public Wi-Fi for transactions, and logging out after each session. Never share your account credentials with anyone, including individuals claiming to be pho88 staff—our legitimate support team will never ask for your password.

pho88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

5.1 Service Providers and Business Partners:

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process deposits and withdrawals. They receive only the transaction details necessary to complete payments.
• Identity Verification Services: Third-party KYC providers verify identity documents and perform anti-fraud checks. They are bound by strict confidentiality obligations.
• Game Providers: Software developers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) provide gaming content. They receive limited data necessary for game operation but do not have access to your full personal profile.
• Customer Support Tools: Live chat, email, and ticketing system providers assist with customer service delivery.
• Analytics and Marketing Services: We may use analytics platforms to understand user behavior and marketing platforms to deliver promotional communications (with your consent).

All service providers are contractually obligated to maintain confidentiality, use your information only for specified purposes, implement appropriate security measures, and comply with applicable data protection laws.

5.2 Legal and Regulatory Requirements:

We may disclose your personal information when required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests from Indonesian or international authorities
• Respond to valid requests from law enforcement agencies investigating suspected illegal activity
• Enforce our Terms & Conditions and investigate potential violations
• Protect the rights, property, or safety of pho88, our users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems

5.3 Business Transfers:

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy involving pho88, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email or prominent notice on the Platform before your information becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data:

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you personally. Such data may be used for industry analysis, demographic profiling, marketing research, and other legitimate business purposes.

pho88 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations. Specific retention periods vary depending on data category and regulatory requirements:

• Active Account Data: We retain registration information, KYC documents, transaction records, and gaming activity data for the duration of your active account and for a period after account closure as required by anti-money laundering regulations (typically 5-7 years).
• Financial Records: Transaction history, deposit and withdrawal records, and tax-related documentation are retained for at least seven (7) years to comply with Indonesian financial regulations and facilitate audits.
• Communications: Customer support correspondence and chat logs are retained for one (1) year unless longer retention is necessary to resolve disputes or comply with legal requirements.
• Marketing Data: Marketing preferences and communication history are retained until you withdraw consent or close your account, after which they are deleted within sixty (60) days.
• Technical and Usage Data: Server logs, IP addresses, and device information are typically retained for ninety (90) days unless needed for security investigations or legal proceedings.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data destruction policies. However, some information may be retained in aggregated, anonymized form for statistical and analytical purposes indefinitely, as it can no longer identify you personally.

If you close your account, we will begin the deletion process for non-essential data within thirty (30) days, while retaining records required by law. You may contact us to request information about our retention practices for your specific data.

As a pho88 user, you have certain rights regarding your personal information. Depending on your jurisdiction, these rights may include:

7.1 Access and Portability: You have the right to request access to the personal information we hold about you and receive a copy in a structured, commonly used, machine-readable format. To request your data, contact our support team at [email protected] with your account details.

7.2 Correction and Update: You can update your account information at any time through your account settings. If you notice any inaccuracies in your personal data, you may request corrections by contacting customer support. We will verify your identity before making changes to sensitive information.

7.3 Deletion (Right to be Forgotten): You may request deletion of your personal information, subject to certain exceptions. We must retain some data to comply with legal obligations (such as AML/KYC records) and to defend against potential legal claims. To request deletion, close your account and contact support with a formal deletion request.

7.4 Restriction of Processing: In certain circumstances, you may request that we limit how we use your personal information while maintaining the data on our systems. For example, if you contest the accuracy of your data or believe processing is unlawful.

7.5 Objection to Processing: You have the right to object to processing of your personal information for direct marketing purposes at any time. You can opt out of promotional emails by clicking the unsubscribe link in any marketing message or by updating your communication preferences in account settings.

7.6 Withdrawal of Consent: Where we rely on your consent to process personal information (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Exercising Your Rights: To exercise any of these rights, contact our Data Protection Officer at [email protected] with your full name, registered email address, and a detailed description of your request. We will respond within thirty (30) days after verifying your identity. There is no fee for reasonable requests, but we reserve the right to charge a fee or refuse excessive, repetitive, or manifestly unfounded requests.

The pho88 Platform primarily serves users in Indonesia, and your personal information is processed and stored on servers located within secure data centers that may be in Indonesia or other jurisdictions with adequate data protection standards. In some cases, your information may be transferred to, stored at, or accessed from destinations outside Indonesia, including by service providers and business partners operating internationally.

When we transfer personal information across borders, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws. These safeguards may include:

• Standard contractual clauses approved by data protection authorities
• Transfers to jurisdictions recognized as providing adequate data protection
• Binding corporate rules ensuring consistent protection across our organization
• Explicit consent from you where required by law

If you have questions about international data transfers or the safeguards we employ, please contact our Data Protection Officer.

pho88 uses cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, maintain security, and analyze platform usage. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Strictly necessary for platform operation. Enable login authentication, session management, security features, and basic functionality. These cannot be disabled without preventing platform use.
• Performance Cookies: Collect anonymized information about how you use pho88, including pages visited, time spent, and errors encountered. Help us optimize performance and identify technical issues.
• Functional Cookies: Remember your preferences such as language settings, currency display, and favorite games to provide a personalized experience.
• Advertising Cookies: Used to deliver relevant promotional content and measure campaign effectiveness. These are only set with your consent and can be disabled.

Managing Cookies: Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies will prevent you from accessing certain platform features. To manage cookie preferences, adjust settings in your browser's privacy menu or contact us for assistance.

Third-Party Cookies: Some cookies are placed by third-party service providers we work with (such as analytics providers and payment processors). We do not control these third-party cookies and recommend reviewing their respective privacy policies.

The pho88 Platform is intended exclusively for users who are twenty-one (21) years of age or older. We do not knowingly collect, use, or solicit personal information from individuals under the legal gambling age. All users must verify they meet age requirements during account registration through mandatory identity verification (KYC) procedures.

If we discover that we have inadvertently collected personal information from an individual under 21 years of age, we will immediately delete that account, void all associated transactions, and remove all related personal data from our systems. If you believe we have mistakenly collected information from a minor, please contact us immediately at [email protected] with details, and we will investigate and take appropriate action.

Parents and guardians are encouraged to monitor their children's internet usage and prevent underage access to gambling platforms. We recommend implementing parental control software and discussing responsible internet behavior with minors in your household.

pho88 reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes that significantly affect your rights or how we handle your personal information, we will notify you through one or more of the following methods:

• Email notification sent to the email address registered to your account
• Prominent notice displayed on the Platform homepage or login screen
• In-account notification requiring acknowledgment before continued use

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Your continued use of the pho88 Platform after we publish or communicate changes constitutes your acceptance of the updated Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you must discontinue use of our services and may request account closure and data deletion in accordance with Section 7 (Your Privacy Rights).

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer or customer support team:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 through the Platform (select "Privacy/Security" as your inquiry topic)
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours

When contacting us about privacy matters, please provide sufficient detail to help us understand and address your concern. We may request additional information to verify your identity before responding to requests involving access, correction, or deletion of personal data.

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority or supervisory body overseeing privacy regulations in Indonesia.