88cas Privacy Policy

The following definitions apply throughout this Privacy Policy and all related 88cas data-handling documentation:

• "88cas" / "we" / "us" / "our" — the 88cas online gaming platform, accessible at https://88cas.net, including all associated services and digital infrastructure.
• "Player" / "you" / "your" — any individual who has registered an account on the 88cas platform or who accesses any part of the platform's services.
• "Personal Data" — any information that identifies or can reasonably identify a living individual, either alone or in combination with other data. This includes name, date of birth, email address, phone number, bank account details, device identifiers, and IP address.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this policy, 88cas acts as the data controller for all personal data collected from players.
• "Processor" — a third party that processes personal data on behalf of 88cas under a formal data processing agreement, such as a payment gateway or cloud hosting provider.
• "Consent" — a freely given, specific, informed, and unambiguous indication by a player that they agree to the processing of their personal data for a stated purpose.
• "Cookies" — small text files placed on a player's device by the 88cas platform to store session data, preferences, and analytics information.
• "KYC" (Know Your Customer) — the identity and age verification process required prior to withdrawal approval and at other points where 88cas deems verification necessary to comply with its internal controls and applicable international standards.

88cas collects personal data across several categories, each serving a distinct operational or compliance purpose. The table below summarizes the categories of data we collect and the primary reason for collecting each.

88cas collects personal data through the following channels:

• Direct submission: Data you provide voluntarily during account registration, the KYC verification process, deposit or withdrawal requests, support interactions, and promotional opt-ins.
• Automated technical collection: Data collected automatically when you interact with the platform, including IP address, session identifiers, device fingerprints, and behavioral clickstream data gathered via platform analytics and cookie technologies.
• Third-party sources: In limited circumstances, 88cas may receive data about you from third-party identity verification services, fraud prevention databases, or payment processors to supplement or verify information you have provided directly. Such third parties are required to have a lawful basis for sharing this data with us.
• Publicly available sources: 88cas may cross-reference publicly available records — such as sanctions lists or adverse media — as part of enhanced due diligence procedures for high-value accounts or where there is a specific compliance requirement.

88cas processes personal data for the following specific and legitimate purposes:

• Account creation and management: Registering your account, maintaining your player profile, and enabling access to the platform's full range of services.
• Identity and age verification: Confirming that all players are at least 21 years of age and are who they claim to be, in accordance with responsible gaming principles and our internal KYC standards.
• Transaction processing: Crediting deposits to your account and disbursing withdrawal requests to your nominated bank account or e-wallet in Indonesian Rupiah (IDR).
• Fraud and security monitoring: Detecting, investigating, and preventing unauthorized access, money laundering, multi-account abuse, bonus exploitation, and other fraudulent or illegal activity.
• Responsible gaming: Monitoring gameplay patterns to identify potential indicators of problem gambling behavior, applying account limits where appropriate, and facilitating self-exclusion requests.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Marketing and promotions: Sending promotional offers, seasonal bonuses (including Idul Fitri, Ramadhan, and Indonesian Independence Day promotions), and product updates to players who have opted in to receive such communications.
• Platform improvement: Analyzing aggregated and anonymized usage data to understand player behavior, improve game performance, and enhance the overall user experience.
• Legal and regulatory compliance: Fulfilling obligations under applicable international anti-money laundering (AML) and counter-financing of terrorism (CFT) standards, and cooperating with lawful requests from competent authorities.

88cas processes your personal data under the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and 88cas — specifically, to operate your account, process transactions, and deliver the platform's services.
• Legitimate interests: Processing necessary for 88cas's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable international AML, CFT, and identity verification standards to which 88cas is subject as a licensed gaming operator.
• Consent: Processing for marketing and promotional communications, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

88cas does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited circumstances, and only to the extent necessary for each purpose:

• Payment processors and banking partners: Financial data is shared with the relevant payment gateway or Indonesian banking institution (such as BCA, BRI, BNI, or Mandiri) solely to execute your deposit or withdrawal transaction.
• Identity verification providers: Identity and document data submitted during KYC may be shared with third-party verification service providers engaged to confirm the authenticity of your identity documents and your eligibility to use the platform.
• Game content providers: Certain technical and gameplay data is shared with our licensed third-party game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — to the extent necessary for game delivery, fairness auditing, and technical support.
• Cloud hosting and infrastructure providers: Platform data, including account information, is stored on secure cloud infrastructure operated by reputable providers under formal data processing agreements that require equivalent data protection standards.
• Fraud and AML screening services: Data may be shared with third-party fraud prevention and sanctions screening services to support our security and compliance obligations.
• Competent authorities: 88cas will disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by a valid legal order or where we have a good-faith belief that disclosure is necessary to prevent imminent harm or illegal activity.

All third-party processors engaged by 88cas are required to handle personal data solely in accordance with our documented instructions and to maintain security standards at least equivalent to those described in this Privacy Policy.

88cas retains personal data for the periods set out below. Once the applicable retention period expires, data is securely deleted or irreversibly anonymized:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure, to satisfy AML record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction in order to support dispute resolution, audit requirements, and regulatory compliance.
• KYC and identity documents: Retained for the duration of the account relationship plus five years post-closure, consistent with international AML standards. Copies are stored in encrypted form with access restricted to authorized compliance personnel.
• Support communications: Live chat transcripts and email correspondence are retained for two years from the date of the interaction, unless the record is material to an ongoing dispute or investigation.
• Marketing preference records: Opt-in records are retained for the duration of the account's active status. Following account closure or opt-out, a minimal record of the opt-out event is retained for three years as proof of consent management.
• Technical and session data: Server logs and session data are retained for up to 12 months for security monitoring and platform diagnostics, after which they are aggregated and anonymized.

88cas implements a layered, defense-in-depth approach to data security. Our technical and organizational measures include, but are not limited to:

• Transport-layer encryption: All data transmitted between player devices and the 88cas platform is encrypted using TLS 1.2 or higher, enforced across all platform endpoints.
• Data-at-rest encryption: Sensitive personal data stored in our databases — including identity documents, financial account details, and authentication credentials — is encrypted at rest using AES-256.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis, enforced through role-based access controls, multi-factor authentication for internal staff, and regular access reviews.
• Intrusion detection: Automated monitoring systems continuously scan for anomalous access patterns, unauthorized login attempts, and potential data exfiltration activity across all production environments.
• Regular security assessments: The 88cas platform undergoes periodic vulnerability assessments and penetration testing conducted by independent security professionals. Critical findings are remediated on a priority basis.
• Incident response: In the event of a confirmed personal data breach that poses a risk to player rights and freedoms, 88cas will notify affected players without undue delay and provide guidance on recommended protective actions.

While 88cas applies robust security measures, no internet-based system is entirely immune to risk. Players are encouraged to use strong, unique passwords for their 88cas accounts and to enable two-factor authentication (2FA) where available. Report any suspected security incidents to [email protected] immediately.

The 88cas platform uses cookies and similar tracking technologies to deliver core functionality, maintain your session, and analyze platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the platform. These include session authentication cookies that keep you logged in while you navigate between pages, and security cookies that help detect and prevent fraudulent account activity. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Store your preferences — such as your nominated language setting, saved display preferences, and notification options — so that the platform behaves consistently across sessions.
• Analytics cookies: Collect aggregated and anonymized data about how players use the platform, including which games are most visited, how long sessions last, and where navigation errors occur. This data is used to improve the platform experience. No individual player is identified from analytics data.
• Marketing cookies: Where you have consented to receive personalized promotional content, marketing cookies may be used to track which promotions you have engaged with and to avoid showing you the same offer repeatedly. You may withdraw consent for marketing cookies at any time via your account preferences.

Most browsers allow you to view, manage, and delete cookies through their settings menus. Please note that disabling strictly necessary cookies may prevent you from logging in or using core platform features. For specific guidance on managing cookies in your browser, consult your browser's help documentation.

As a player on the 88cas platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected].

The 88cas platform is strictly intended for adults aged 21 years and older. 88cas does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered an account or submitted personal data to 88cas, please contact us immediately at [email protected] so that the relevant account can be investigated and closed, and any associated personal data deleted.

88cas employs age verification controls during the registration process and as part of KYC procedures specifically to prevent minors from accessing the platform. Any account confirmed to belong to a person under the age of 21 will be permanently closed and all associated funds forfeited in accordance with the Terms & Conditions.

88cas operates as an international online gaming platform. Certain personal data may be transferred to and processed in countries other than Indonesia, including locations where our cloud infrastructure, game content providers, or verification service partners maintain their systems.

Where personal data is transferred internationally, 88cas ensures that appropriate safeguards are in place to maintain the protection of your data at a level consistent with the standards described in this Privacy Policy. Such safeguards may include contractual data protection clauses with the receiving party, binding corporate rules, or reliance on internationally recognized adequacy frameworks.

Players in Jakarta, Surabaya, Bali, Bandung, Medan, and other Indonesian cities should be aware that by using the 88cas platform and consenting to this Privacy Policy, they acknowledge and accept that their personal data may be processed in jurisdictions outside Indonesia in accordance with the safeguards described above.

88cas may update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or platform functionality. When material changes are made, registered players will be notified by email to the address on file and/or via a prominent notice on the platform. The updated policy will take effect on the date stated in the notification.

Continued use of the 88cas platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must cease using the platform and contact the support team to close your account. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 88cas holds about you, please contact our Data Privacy team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the 88cas platform. Average first response time: under 2 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered account username to help us locate your record and respond efficiently.
• Support Hours: 00:00–24:00 WIB (Western Indonesia Time, UTC+7), every day of the year, including Indonesian public holidays.

We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days of receiving a verified request. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you promptly of the extension and the reason for it.