loto88 Privacy Policy

1. Introduction

loto88 is committed to protecting the privacy and personal data of every individual who interacts with our platform. We recognise that Members entrust us with sensitive personal and financial information — information we treat with the highest standards of confidentiality, security, and transparency.

This Policy applies to all personal data processed in connection with your use of the loto88 platform, including data collected through our website at https://loto88.cam, our mobile-optimised interfaces, our customer support channels (email, live chat), and any communications we send you, including promotional messages where you have given your consent.

loto88 primarily serves Members resident in Indonesia. We are therefore attentive to the personal data protection expectations of Indonesian residents, and we structure our data practices to reflect a high standard of care appropriate for Members across all regions including Jakarta, Surabaya, Bandung, Bali, Medan, and beyond. Where applicable, we also observe internationally recognised data protection principles consistent with frameworks such as GDPR as a benchmark for best practice.

If you have any questions about this Policy or our data practices at any point, you may contact our Data Protection Officer (DPO) at [email protected]. We aim to respond to all privacy-related enquiries within 48 hours.

2. Definitions

• "Personal Data" means any information that, alone or in combination with other information, identifies or could identify a living individual. Examples include full name, date of birth, Indonesian KTP number, email address, mobile number, and bank account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any other form of handling.
• "Data Controller" means loto88, the entity that determines the purposes and means by which your Personal Data is processed.
• "Data Processor" means any third party that processes Personal Data on behalf of loto88 under a contractual data processing agreement — for example, payment gateways, fraud-detection services, or cloud hosting providers.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — i.e., you, the Member.
• "KYC" (Know Your Customer) means the identity and age verification process required of all loto88 Members prior to withdrawal and at other points determined by our compliance team.
• "Cookies" means small text files placed on your device by the loto88 website to facilitate functionality, security, performance analysis, and personalisation.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

3. Data We Collect

loto88 collects the following categories of Personal Data from Members and prospective Members:

4. How We Collect Data

Personal Data enters the loto88 system through three primary channels:

4.1 Data You Provide Directly

The majority of Personal Data is provided voluntarily by Members at specific points in their journey:

• Account Registration: When creating your loto88 Account, you provide your full name, date of birth, email address, mobile number, and create a secure password.
• KYC Verification: To comply with anti-money-laundering and identity-verification regulations, Members submit a copy of their Indonesian KTP or passport, a selfie holding that document, and proof of ownership of the registered payment method (bank statement, e-wallet screenshot).
• Deposits and Withdrawals: You provide bank account details (account holder name, account number, bank name) or e-wallet identifiers when initiating financial transactions.
• Customer Support: When you contact loto88 support via email or live chat, you provide the content of your enquiry, which may include Personal Data relating to your Account or identity.
• Marketing Preferences: You may opt in to receive promotional messages or modify your communication preferences through Account settings or via unsubscribe links in emails.

4.2 Data Collected Automatically

The loto88 Platform automatically collects certain Technical and Usage Data through standard web technologies including server logs, cookies, and session management systems:

• Your IP address, device type, browser software, and operating system are logged each time you access the Platform.
• Wagering activity — including games played, bet timestamps, stake amounts, and outcomes — is recorded to maintain accurate Account balances and comply with regulatory obligations.
• Session information, including login times, session duration, and navigation paths, is collected to optimise Platform performance and security.

4.3 Data from Third Parties

loto88 may receive limited Personal Data from external sources in specific circumstances:

• Fraud Prevention Services: We use third-party fraud-detection and risk-scoring services that return risk assessments associated with your IP address or device fingerprint. These services do not share your Personal Data with us but provide aggregated risk indicators.
• Payment Processors: Payment gateways confirm transaction success/failure status and may provide limited transaction metadata (timestamp, amount, method) but do not share full bank account credentials with loto88.
• Game Providers: When you play games from Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, or Pocket Games Soft, those studios may share gameplay session IDs and outcome data with loto88 for the purpose of crediting your Account and resolving disputes.

5. Legal Basis for Processing

loto88 processes your Personal Data only where we have a lawful basis to do so. The legal bases applicable to our processing activities are:

5.1 Contractual Necessity

Processing is necessary to perform the contract between you and loto88 established by the Terms & Conditions. This covers registration, identity verification, processing deposits and withdrawals, crediting winnings, applying bonus terms, maintaining accurate Account records, and providing customer support.

5.2 Legal Obligation

Processing is necessary to comply with legal and regulatory obligations to which loto88 is subject, including Know Your Customer (KYC) and anti-money-laundering (AML) requirements, age verification, self-exclusion registers, and tax reporting where mandated by applicable law.

5.3 Legitimate Interest

Processing is necessary for loto88's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interests include fraud prevention, platform security, business analytics, marketing to existing customers (subject to opt-out rights), improving user experience, and defending legal claims.

5.4 Consent

Where none of the above bases apply, we seek your explicit consent before processing your Personal Data. For example, consent is required for setting non-essential cookies, sending promotional communications where not covered by soft opt-in, or sharing data with third parties beyond those necessary to operate the Platform.

You may withdraw consent at any time by adjusting your Account preferences or contacting support, though withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

6. How We Use Your Data

loto88 processes Personal Data for the following specific purposes:

• Account Management: Creating and maintaining your Account, authenticating your identity at login, managing Account settings and preferences, applying responsible gaming limits.
• Identity Verification: Conducting mandatory KYC checks to verify your age (21+), identity, and address in compliance with regulatory obligations and to prevent underage gambling and fraud.
• Financial Transactions: Processing deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported methods; processing withdrawal requests; reconciling payment records; investigating transaction disputes.
• Gaming Services: Providing access to casino games, sports betting markets (BRI Liga 1, EPL, La Liga, Champions League, etc.), togel draws, sabung ayam streams; recording wagers and outcomes; crediting winnings; applying bonus terms and wagering requirements.
• Customer Support: Responding to enquiries submitted via email or live chat; resolving complaints; assisting with Account recovery; providing technical support.
• Security and Fraud Prevention: Detecting and preventing unauthorised access, fraudulent transactions, bonus abuse, collusion, multi-accounting, money laundering, and other prohibited activities; maintaining logs for security incident investigation.
• Regulatory Compliance: Meeting obligations under anti-money-laundering (AML) legislation, responsible gaming requirements, self-exclusion registers, and licensing conditions; responding to lawful requests from regulatory authorities.
• Marketing and Promotions: Sending promotional emails, SMS messages, or push notifications about bonuses, tournaments, and VIP rewards (where you have consented or we rely on soft opt-in for existing customers); personalising promotional offers based on your gaming preferences.
• Platform Improvement: Analysing usage patterns to optimise website performance, user interface design, game selection, payment method availability, and customer support efficiency; conducting A/B testing of features; gathering aggregated statistics.
• Legal Defence: Establishing, exercising, or defending legal claims; complying with court orders; assisting law enforcement investigations where legally required.

7. Data Sharing & Disclosure

loto88 does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. We do share Personal Data with carefully selected third-party service providers and in specific legal circumstances as outlined below:

7.1 Service Providers (Data Processors)

We engage trusted third-party companies to perform specific functions on our behalf. These companies process Personal Data strictly under our instructions and are contractually bound to maintain confidentiality:

• Payment Processors: Financial institutions and payment gateways that facilitate deposits via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game Providers: Software studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe that deliver casino content and process gameplay sessions.
• KYC Verification Services: Specialised identity verification platforms that conduct automated document checks and biometric matching during the KYC process.
• Cloud Hosting: Infrastructure providers that host the loto88 Platform, databases, and backup systems.
• Customer Support Tools: Live chat software providers and email service platforms that enable our support team to respond to your enquiries.
• Fraud Detection: Third-party fraud-prevention services that analyse device fingerprints, IP addresses, and transaction patterns to identify suspicious activity.
• Email Marketing: Email service providers that send promotional messages on our behalf (where you have opted in or we rely on soft opt-in).

7.2 Legal and Regulatory Obligations

loto88 may disclose Personal Data where required by law or to protect the rights, property, and safety of loto88, our Members, or the public:

• To comply with lawful requests from regulatory authorities, courts, or law enforcement agencies.
• To enforce our Terms & Conditions or investigate suspected breaches.
• To detect, prevent, or respond to fraud, security incidents, or other illegal activity.
• In connection with a corporate transaction such as a merger, acquisition, asset sale, or bankruptcy proceeding (in which case the acquiring entity would be bound by this Privacy Policy).

7.3 Aggregated and Anonymised Data

loto88 may share aggregated, anonymised data — such as overall platform usage statistics, popular game categories, or regional betting trends — with business partners, game providers, or for public reporting. Such data does not identify individual Members and is not considered Personal Data under this Policy.

8. Data Retention

loto88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal and regulatory retention obligations:

• Active Accounts: Identity, Contact, Financial, and Usage Data are retained for the duration of your Account's active status.
• Closed Accounts: Following Account closure (whether initiated by you or by loto88), we retain core identity and transaction records for 7 years from the date of closure to comply with anti-money-laundering regulations, tax reporting requirements, and to resolve any disputes that may arise post-closure.
• Marketing Data: If you opt out of marketing communications, we retain a suppression record of your email address or mobile number indefinitely to ensure we do not re-contact you. Other marketing preference data is deleted within 90 days of opt-out.
• Support Transcripts: Live chat and email support records are retained for 3 years to maintain service quality and for training purposes.
• Technical Logs: Server logs, IP addresses, and session data are retained for 12 months for security monitoring and troubleshooting purposes.

After the applicable retention period expires, Personal Data is securely deleted or anonymised such that it can no longer identify an individual.

9. Data Security

loto88 implements industry-standard technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction, or damage:

• Encryption: All data transmitted between your device and the loto88 Platform is protected by SSL/TLS 256-bit encryption. Sensitive data stored in our databases — including passwords and financial details — is encrypted at rest.
• Access Controls: Access to Personal Data is restricted to authorised loto88 employees and contractors on a need-to-know basis. All personnel with access to Personal Data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their Accounts for an additional layer of login security.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security patching.
• Secure Payment Processing: Financial transactions are processed through PCI-DSS compliant payment gateways. loto88 does not store full bank account credentials or card numbers on our servers.
• Regular Audits: loto88 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, loto88 will notify affected Members and relevant supervisory authorities in accordance with applicable breach notification requirements.

While we take all reasonable precautions, no system is entirely immune to security risks. Members also have a responsibility to safeguard their Account credentials, enable 2FA, and report suspicious activity to loto88 immediately.

10. Cookies & Tracking Technologies

The loto88 Platform uses cookies and similar tracking technologies to enhance functionality, security, and user experience. A cookie is a small text file stored on your device by your web browser.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable you to log in, navigate pages, and use secure features. Without these cookies, core services cannot be provided. These cookies do not require your consent.
• Performance Cookies: These cookies collect aggregated information about how visitors use the Platform — for example, which pages are most visited, and whether users encounter error messages. This data helps us improve Platform performance and user experience.
• Functionality Cookies: These cookies remember your preferences (such as language or region) and provide enhanced, personalised features.
• Targeting/Advertising Cookies: These cookies track your browsing activity to deliver personalised promotional offers and measure the effectiveness of marketing campaigns. These cookies are only set with your consent.

10.2 Managing Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may impair certain Platform features. Strictly necessary cookies cannot be disabled without preventing access to core functionality.

To opt out of third-party advertising cookies, you may visit industry opt-out tools such as the Digital Advertising Alliance's consumer choice page (note: loto88 does not provide direct external links; please search for these tools independently).

11. Your Rights as a Data Subject

As a Member whose Personal Data is processed by loto88, you hold specific rights under applicable data protection law. You may exercise these rights by contacting our Data Protection Officer at [email protected].

loto88 aims to respond to all data subject access requests within 30 calendar days. If your request is particularly complex or we receive multiple requests from you, we may extend this period by a further 60 days and will notify you of the extension. We do not charge a fee for the first request; excessive or manifestly unfounded requests may incur a reasonable administrative charge.

12. Minors & Age Restriction

loto88 enforces a strict 21+ age policy. The Platform is intended exclusively for adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21.

All Members undergo mandatory age verification as part of the KYC process, during which we verify date of birth against a government-issued identity document (Indonesian KTP or passport). If we discover that an individual under 21 has registered an Account, we will immediately suspend that Account, void all associated wagers and bonuses, and delete the minor's Personal Data (subject to any legal retention requirements for safeguarding and investigation purposes).

If you are a parent or guardian and believe your child has provided Personal Data to loto88, please contact us immediately at [email protected] so we can take appropriate action.

13. International Data Transfers

loto88 primarily serves Members resident in Indonesia. However, some of the third-party service providers we engage — including cloud hosting providers, game studios, and payment processors — may operate servers or data centres located outside Indonesia.

Where Personal Data is transferred to countries that do not provide an equivalent level of data protection to that in Indonesia or the European Economic Area, loto88 ensures appropriate safeguards are in place. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Binding corporate rules governing intra-group data transfers within multinational service providers.
• Adequacy decisions recognising certain jurisdictions as providing adequate protection.
• Explicit consent from the Data Subject for the specific transfer.

If you would like further information about the safeguards applied to international transfers of your Personal Data, please contact our Data Protection Officer.

14. Third-Party Websites & Services

The loto88 Platform may contain links to external websites operated by game providers, payment processors, or other third parties. This Privacy Policy applies exclusively to loto88 and does not cover any Personal Data you provide to third-party websites after following external links.

We recommend that you review the privacy policy of any third-party website before submitting Personal Data. loto88 is not responsible for the privacy practices or content of external sites.

15. Changes to This Privacy Policy

loto88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Material changes — such as changes to the purposes for which we process Personal Data, new categories of Personal Data collected, or changes to data retention periods — will be communicated to Members via email and/or a prominent notice on the Platform at least 14 calendar days before the changes take effect.

The "Effective Date" and "Last Reviewed" dates at the top of this Policy indicate when this version came into force and when it was last assessed. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data.

Your continued use of the loto88 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should cease using the Platform and contact support to close your Account.

16. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or loto88's data practices, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer (DPO):

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Data Privacy Enquiry — [Your Account Username or Email]"
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 calendar days.

For general customer support enquiries unrelated to data privacy (Account balance, bonus questions, game issues), please use our standard live chat or email support channels. For privacy-specific matters — including data access requests, rectification, erasure, objection to processing, or complaints about how your Personal Data has been handled — please use the subject line above to ensure your enquiry is routed to the appropriate team.