Privacy Policy

1. Introduction and Scope

1.1 Controller Identity: This Privacy Policy applies to all personal data collected and processed by poi88 ("we," "us," "our"), the online gaming platform accessible at https://poi88.cam. poi88 acts as the data controller responsible for your personal information.

1.2 Applicability: This policy covers all individuals who interact with poi88 services, including registered players, website visitors, newsletter subscribers, and individuals who contact our customer support team.

1.3 Geographic Scope: Our services are designed for residents of Indonesia. This policy complies with applicable Indonesian data protection regulations and international standards where our licensing jurisdiction requires.

1.4 Contact Information: For questions, concerns, or requests related to your personal data, please contact our Data Protection Officer at [email protected] with "Privacy Inquiry" in the subject line.

2. Information We Collect

poi88 collects several categories of personal information to provide, improve, and secure our gaming services. The specific data we collect includes:

2.1 Account Registration Data:

• Full legal name (as shown on your Indonesian national identity card/KTP)
• Date of birth (for age verification purposes)
• Email address (primary communication channel)
• Mobile phone number (for account security and notifications)
• Residential address (city, province, postal code)
• Username and encrypted password
• Preferred language and currency (IDR/Rupiah)

2.2 Identity Verification Documents (KYC):

• Government-issued photo identification (Indonesian KTP or passport)
• Proof of address documents (utility bills, bank statements dated within 90 days)
• Selfie photographs holding identification documents
• Additional documentation may be requested for enhanced due diligence in certain circumstances

2.3 Financial and Transaction Data:

• Bank account details (account number, bank name, account holder name for BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata)
• E-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers)
• Deposit and withdrawal transaction history
• Payment method verification documents
• Cryptocurrency wallet addresses (if applicable for future payment methods)

2.4 Gaming Activity and Behavioral Data:

• Betting history across all gaming categories (casino, sports betting, togel, live dealer games)
• Game preferences and play patterns
• Win/loss records and account balance fluctuations
• Bonus claims and wagering progress
• Session duration and frequency
• Responsible gaming limit settings (deposit limits, loss limits, session timers)

2.5 Technical and Device Information:

• IP address and geolocation data (to verify Indonesian residency)
• Device type, operating system, and browser information
• Screen resolution and device identifiers
• Cookies and similar tracking technologies (see Cookie Policy section)
• Website navigation patterns and page interactions
• Error logs and technical diagnostic data

2.6 Communication Records:

• Customer support chat transcripts and email correspondence
• Phone call recordings (when using voice support channels)
• Survey responses and feedback submissions
• Marketing communication preferences

3. How We Use Your Information

poi88 processes your personal data for specific, legitimate purposes. We use your information to:

3.1 Account Management and Service Delivery:

• Create and maintain your gaming account
• Process deposits, withdrawals, and internal fund transfers
• Enable gameplay across casino, sports betting, and lottery products
• Calculate and credit winnings, bonuses, and loyalty rewards
• Provide customer support and resolve technical issues
• Communicate important account updates, transaction confirmations, and policy changes

3.2 Legal and Regulatory Compliance:

• Verify your identity and age (21+ requirement for Indonesian players)
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detect and prevent fraud, money laundering, and other illegal activities
• Respond to legal requests from law enforcement or regulatory authorities
• Maintain records required by our gaming license jurisdiction
• Enforce our Terms & Conditions and protect our legal rights

3.3 Security and Risk Management:

• Monitor for unauthorized account access and suspicious activity
• Prevent multiple account creation and identity fraud
• Detect collusion, bonus abuse, and unfair betting patterns
• Protect against technical attacks, hacking attempts, and system vulnerabilities
• Investigate disputes, complaints, and potential Terms violations

3.4 Responsible Gaming Protection:

• Monitor betting behavior for signs of problem gambling
• Enforce deposit limits, loss limits, and self-exclusion requests
• Provide reality-check reminders and responsible gaming tools
• Intervene when behavioral patterns indicate potential gambling harm
• Maintain records of voluntary exclusions and cooling-off periods

3.5 Service Improvement and Personalization:

• Analyze usage patterns to improve platform functionality and user experience
• Personalize game recommendations based on your preferences
• Develop new features and gaming products tailored to Indonesian players
• Optimize website performance and mobile responsiveness
• Conduct market research and player satisfaction surveys

3.6 Marketing and Promotional Communications (With Your Consent):

• Send promotional offers, bonus announcements, and special event notifications
• Deliver personalized marketing based on your gaming preferences
• Provide information about new games, features, and platform updates
• Invite participation in tournaments, leaderboards, and loyalty programs
• You may opt out of marketing communications at any time via account settings or unsubscribe links

4. Legal Basis for Data Processing

poi88 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is required to perform our contract with you (providing gaming services as outlined in our Terms & Conditions).
• Legal Obligations: We must process certain data to comply with KYC, AML, age verification, and gaming license requirements.
• Legitimate Interests: We process data to prevent fraud, ensure platform security, improve services, and protect our business interests, provided these interests do not override your privacy rights.
• Consent: For marketing communications and certain non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.
• Vital Interests: In rare cases, we may process data to protect your vital interests or those of another person (e.g., responding to emergency situations).

5. Data Sharing and Third-Party Disclosure

poi88 does not sell your personal data to third parties. However, we may share your information with trusted partners and service providers in the following circumstances:

5.1 Payment Processors: We share necessary financial information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process your deposits and withdrawals. These entities have their own privacy policies and data protection obligations.

5.2 Game Providers and Software Partners: Your betting activity may be shared with third-party game studios and platform providers to deliver gaming content, calculate results, and track progressive jackpots. These partners are contractually obligated to protect your data.

5.3 Identity Verification Services: We use specialized KYC/AML service providers to verify your identity documents against official databases. These services process your identification data on our behalf under strict confidentiality agreements.

5.4 Customer Support Tools: Our customer service team uses cloud-based ticketing and live chat platforms to manage support requests. These platforms securely store communication records in accordance with data protection standards.

5.5 Analytics and Marketing Services: We may share anonymized or aggregated data with analytics providers to understand player behavior and improve services. No personally identifiable information is included in these reports.

5.6 Legal and Regulatory Authorities: We may disclose personal data when required by law, court order, or regulatory investigation. We will notify you of such disclosures unless legally prohibited from doing so.

5.7 Business Transfers: In the event of a merger, acquisition, or sale of poi88 assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change in ownership and given options regarding your data.

5.8 Fraud Prevention Networks: We participate in industry-wide fraud prevention databases to identify and block known fraudsters, multiple account holders, and self-excluded individuals attempting to circumvent restrictions.

6. Data Security Measures

poi88 implements robust technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Personal data is accessible only to authorized personnel who require it to perform their job functions. All employees sign confidentiality agreements.
• Secure Infrastructure: Our servers are hosted in secure data centers with 24/7 monitoring, intrusion detection systems, and regular security audits.
• Password Protection: Your account password is hashed using strong cryptographic algorithms. We cannot retrieve your password; you can only reset it.
• Two-Factor Authentication: Optional 2FA is available to add an extra layer of security to your account.
• Regular Security Testing: We conduct penetration testing, vulnerability assessments, and security reviews to identify and address potential weaknesses.
• Data Backup: Regular encrypted backups ensure data recovery in case of technical failures while maintaining confidentiality.
• Incident Response: We maintain a data breach response plan. In the unlikely event of a security incident affecting your data, we will notify you and relevant authorities as required by law.

Your Responsibility: While we implement strong security measures, you are responsible for maintaining the confidentiality of your login credentials and not sharing your account with others. Notify us immediately if you suspect unauthorized access.

7. Data Retention Periods

poi88 retains your personal data only for as long as necessary to fulfill the purposes outlined in this policy and comply with legal obligations:

Data Category	Retention Period	Rationale
Account registration data	Duration of account + 7 years	Legal compliance, dispute resolution
KYC documents	Duration of account + 7 years	AML/KYC regulatory requirements
Transaction history	Duration of account + 7 years	Tax obligations, financial audits
Gaming activity logs	Duration of account + 5 years	Dispute resolution, fraud investigation
Customer support records	3 years from last interaction	Service improvement, complaint handling
Marketing consent records	Until consent withdrawn + 1 year	Proof of consent, preference management
Website cookies	Up to 24 months (varies by type)	Session management, analytics
Self-exclusion records	Permanent (never deleted)	Player protection, prevent re-registration

After the applicable retention period expires, we securely delete or anonymize your personal data. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical and research purposes.

8. Your Privacy Rights

As a poi88 user, you have the following rights regarding your personal data:

8.1 Right of Access: You may request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.

8.2 Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most information directly in your account settings.

8.3 Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances. However, this right is subject to legal limitations—we must retain certain data for regulatory compliance, ongoing investigations, or legal claims.

8.4 Right to Restriction of Processing: You may request that we limit how we use your data in specific situations, such as during a dispute about data accuracy.

8.5 Right to Data Portability: You may request a machine-readable copy of your data to transfer to another service provider.

8.6 Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds.

8.7 Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time via account settings or by contacting support.

8.8 Right to Lodge a Complaint: If you believe we have violated your privacy rights, you may file a complaint with the relevant data protection authority in your jurisdiction.

Exercising Your Rights: To exercise any of these rights, contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days and may request identity verification to prevent unauthorized disclosure.

9. Cookies and Tracking Technologies

poi88 uses cookies and similar technologies to enhance your browsing experience, analyze traffic, and deliver personalized content:

9.1 Essential Cookies: Necessary for website functionality, including session management, security features, and payment processing. These cannot be disabled without breaking site functionality.

9.2 Performance Cookies: Collect anonymous data about how visitors use our site (pages visited, time spent, error messages) to help us improve performance.

9.3 Functionality Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience on return visits.

9.4 Advertising and Analytics Cookies: Track your behavior across sessions to deliver relevant promotional offers. You may opt out of non-essential cookies via your browser settings or our cookie consent banner.

Managing Cookies: Most browsers allow you to refuse cookies or delete existing ones. Note that disabling essential cookies will impair website functionality. For detailed cookie management instructions, visit your browser's help section.

10. International Data Transfers

While poi88 primarily serves Indonesian players, some of our service providers and data processors may be located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Data Processing Agreements with contractual clauses requiring equivalent data protection standards
• Use of service providers certified under recognized international data protection frameworks
• Encryption of data in transit and at rest to protect against unauthorized access

By using poi88 services, you consent to such international transfers where necessary to provide gaming services, process payments, or comply with legal obligations.

11. Children's Privacy

poi88 services are strictly for adults aged 21 years and older. We do not knowingly collect personal data from individuals under 21. If we discover that a minor has created an account, we will immediately close the account and delete all associated data. Parents or guardians who believe their child has registered should contact us immediately at [email protected].

12. Changes to This Privacy Policy

poi88 may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated via email and prominently displayed on our platform. The "Last Updated" date at the top of this policy indicates the most recent revision. Continued use of poi88 services after changes take effect constitutes acceptance of the updated policy. We encourage you to review this policy regularly.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

• Data Protection Officer: [email protected] (Subject: "Privacy Inquiry")
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the poi88 platform

We aim to respond to all privacy-related inquiries within 30 days. For urgent matters, please mark your communication as "Urgent Privacy Request."