888id Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "888id," "We," "Us," "Our" refers to the operating entity behind the 888id platform at https://888id.app.
• "You," "Member," "User," "Data Subject" refers to any individual who accesses or registers on the 888id platform.
• "Personal Data" refers to any information relating to an identified or identifiable natural person — including name, email address, phone number, date of birth, financial account details, device identifiers, and IP address.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Third Party" refers to any entity other than you and 888id that may receive or process Personal Data in connection with the services described in this Privacy Policy.
• "KYC" (Know Your Customer) refers to the identity verification procedures 888id may conduct to confirm a member's identity and comply with anti-money laundering (AML) obligations.
• "Cookies" refers to small text files placed on your device by the 888id platform to support session management, analytics, and personalisation.
• "IDR Wallet" refers to the Indonesian Rupiah-denominated account balance held within your 888id member account.

Data We Collect

888id collects the following categories of Personal Data from members and prospective members:

2.1 Identity Data

Full legal name, date of birth, nationality, government-issued identification number (e.g., Indonesian KTP number, SIM, or passport number). This information is required for account registration and KYC verification.

2.2 Contact Data

Email address, Indonesian mobile phone number, and — where provided — residential address. Contact data is used to send account notifications, transaction confirmations, and support communications.

2.3 Financial Data

Bank account details (bank name, account number, account holder name) for banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, and OCBC NISP; e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. We do not store full payment card numbers; card processing is handled exclusively by certified third-party payment processors.

2.4 Transaction Data

Records of all deposits, withdrawals, bonus claims, bets placed, games played, and winnings or losses recorded on your 888id account. Transaction data is retained for AML compliance and dispute resolution purposes.

2.5 Technical Data

IP address, browser type and version, device type and operating system, screen resolution, session timestamps, referring URL, and pages visited within the 888id platform. This data is collected automatically through server logs and analytics tools.

2.6 Behavioural Data

Game preferences, betting patterns, session duration, frequency of play, and bonus usage. This data is used for responsible gaming monitoring, platform personalisation, and fraud detection.

2.7 Communications Data

Records of communications between you and 888id's support team, including live chat transcripts and email correspondence. These records are retained for quality assurance and dispute resolution.

How We Collect Data

3.1 Directly From You

Most Personal Data is collected directly from you when you register an 888id account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional offer. You are not obligated to provide any data beyond what is strictly necessary to create and maintain an account — however, failure to provide required data may limit your ability to use certain platform features, including withdrawals.

3.2 Automatically Through Platform Use

Technical and behavioural data is collected automatically when you interact with the 888id platform. This includes data transmitted by your browser or mobile device each time you load a page, place a bet, launch a game, or interact with an on-screen element. 888id uses server-side logging and first-party analytics to capture this data.

3.3 From Third Parties

888id may receive Personal Data about you from third-party sources, including identity verification service providers used for KYC checks, payment processors that confirm the ownership and validity of a payment method, and fraud detection partners. Data received from third parties is handled with the same care as data collected directly from you.

Purpose of Processing

888id processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your 888id member account, including authentication of your 888id login credentials.
• Transaction Processing: Processing deposits and withdrawals in Indonesian Rupiah (IDR) through local banking channels and e-wallets, verifying payment method ownership, and maintaining accurate financial records.
• KYC & AML Compliance: Verifying your identity and the legitimate origin of funds deposited on 888id, in compliance with applicable anti-money laundering obligations.
• Customer Support: Responding to enquiries, resolving disputes, investigating complaints, and providing account assistance via live chat and email.
• Responsible Gaming: Monitoring betting patterns and session behaviour to identify members who may be experiencing gambling-related harm, and to enforce responsible gaming tools such as deposit limits and self-exclusion.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct as defined in the 888id Terms & Conditions.
• Platform Improvement: Analysing aggregated, anonymised behavioural and technical data to improve the 888id user experience, optimise game performance, and develop new features.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to members who have provided consent. You may withdraw marketing consent at any time by contacting 888id support.
• Legal Obligations: Retaining and disclosing data as required by applicable law, court order, regulatory directive, or law enforcement request.

Legal Basis for Processing

888id processes your Personal Data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to fulfil our obligations to you under the 888id Terms & Conditions — including account management, transaction processing, and support services.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, financial record-keeping obligations, and lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing necessary for 888id's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing

6.1 Disclosure to Service Providers

888id shares Personal Data with carefully selected third-party service providers who process data on 888id's behalf under binding data processing agreements. These providers include:

• KYC and identity verification providers
• Payment processors and banking partners supporting IDR transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other local channels
• Cloud hosting and infrastructure providers
• Customer support platform providers (live chat software)
• Anti-fraud and cybersecurity service providers
• Analytics providers (using anonymised or pseudonymised data only)

6.2 Game Studios

When you launch a game from a third-party studio — such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Pocket Games Soft — limited technical data (including your member ID, session token, and stake amounts) is transmitted to that studio's servers to facilitate gameplay. Game studios receive no more data than is necessary to run the game session and are contractually prohibited from using member data for their own marketing purposes.

6.3 Legal Disclosures

888id may disclose Personal Data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by law, court order, or legitimate regulatory directive — regardless of the jurisdiction from which the request originates.

6.4 No Sale of Personal Data

888id does not sell, rent, or trade your Personal Data to any third party for their independent marketing or commercial purposes. Any sharing of data is strictly limited to the purposes described in this Privacy Policy.

Data Retention

888id retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Accounts: All Personal Data associated with an active 888id account is retained for the lifetime of the account.
• Closed Accounts: Following account closure, 888id retains transaction records, KYC documents, and identity data for a minimum of five years to comply with AML obligations and to handle any post-closure disputes or regulatory enquiries.
• Marketing Data: Where processing is based on consent, marketing preferences and contact data are retained until consent is withdrawn or the member requests deletion — whichever occurs first.
• Technical Logs: Server logs and IP address records are typically retained for 90 days unless a specific investigation requires longer retention.
• Support Records: Live chat transcripts and email correspondence are retained for up to two years following the resolution of the relevant support interaction.

When Personal Data is no longer required, 888id takes appropriate steps to securely delete or anonymise that data so that it can no longer be linked to an identifiable individual.

Cookies & Tracking Technologies

8.1 What Cookies 888id Uses

The 888id platform uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Session cookies that maintain your logged-in state across pages, remember your language preference, and manage your IDR Wallet session. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Cookies that remember your display preferences, recently played games, and customer support chat history to improve continuity across sessions.
• Analytics Cookies: First-party analytics cookies that collect anonymised data about how members navigate the 888id platform — which pages are visited most, which games are launched most frequently, and where users encounter friction. This data is used solely to improve the platform and is never linked back to individual identities.
• Security Cookies: Cookies used to detect and mitigate fraud, identify suspicious login attempts, and prevent automated bot access to the 888id platform.

8.2 Managing Cookies

You can control or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your 888id account or using core platform features. Disabling analytics or functional cookies will not affect your ability to place bets or process transactions, but may reduce the quality of your personalised experience.

Security Measures

888id implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and the 888id platform is encrypted in transit using TLS 1.2 or higher. The padlock icon in your browser confirms that your 888id login and all subsequent page interactions are encrypted.
• Data Encryption at Rest: Sensitive Personal Data — including KYC documents, financial records, and password hashes — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to member Personal Data within 888id's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role.
• Multi-Factor Authentication (MFA): Internal 888id systems that contain member data are protected by MFA for all staff access.
• Penetration Testing: 888id's technical infrastructure is subject to periodic security assessments by qualified third-party security specialists.
• Incident Response: 888id maintains a documented data breach response plan. In the event of a security incident affecting member Personal Data, affected members will be notified promptly in accordance with applicable notification obligations.

While 888id takes all reasonable precautions, no digital system is entirely immune to security risks. Members are encouraged to use strong, unique passwords for their 888id login, enable two-factor authentication where offered, and notify 888id support immediately if they suspect unauthorised access to their account.

Your Privacy Rights

As a member of the 888id platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact 888id support via live chat or email at [email protected]:

• Right of Access: You may request a copy of the Personal Data that 888id holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any Personal Data that is inaccurate or incomplete. For name, date of birth, and identity number corrections, supporting documentation may be required.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing was unlawful. Note that 888id may be required to retain certain data (particularly transaction and KYC records) for a minimum period to meet legal obligations — in which case your erasure request will be fulfilled to the extent permitted by law.
• Right to Restriction of Processing: You may request that 888id temporarily restrict processing of your Personal Data while a rectification or objection request is under review.
• Right to Data Portability: You may request a structured, machine-readable export of Personal Data you have provided to 888id, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time. 888id will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

888id will respond to verified data subject requests within 30 days of receipt. Where a request is complex or numerous, the response period may be extended by up to an additional 60 days with prior notification.

Minors

The 888id platform is strictly intended for adults aged 21 years and above. 888id does not knowingly collect Personal Data from persons under the age of 21. If we become aware that Personal Data belonging to a person under 21 has been collected — whether through false registration information or otherwise — we will immediately suspend the relevant account, delete the associated Personal Data, and take appropriate action including forfeiture of any balance held in that account.

Parents and guardians who believe that a minor in their household may have accessed the 888id platform are encouraged to contact us immediately at [email protected]. We take underage access seriously and will investigate all such reports promptly.

Third-Party Links

The 888id platform does not include links to external third-party websites as a standard feature. However, game studios embedded within the platform operate their own servers and may have independent privacy practices. When you launch a game from a third-party provider such as Pragmatic Play, Evolution Gaming, or Spribe, that session is technically governed in part by the relevant studio's own data practices in addition to this Privacy Policy. 888id selects game studio partners on the basis of their compliance with recognised data protection and gaming industry standards, but takes no responsibility for the independent privacy practices of those studios.

Changes to This Privacy Policy

888id reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When a material change is made, 888id will post the revised Privacy Policy on this page with an updated "Last updated" date and, where the change is significant, will notify active members by email or via a platform notification. Your continued use of the 888id platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you should stop using the platform and request account closure.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to report a privacy concern, please contact the 888id data team through the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within the 888id platform after login — select "Privacy / Data Request" as your enquiry type
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days
• Language: Privacy enquiries may be submitted in English or Bahasa Indonesia — our support team includes native Indonesian-speaking agents
• Support Hours: 24 hours a day, 7 days a week — WIB (UTC+7), Jakarta time zone