Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "8988a" / "the Company" / "we" / "us" / "our" — refers to the operator of the 8988a online gaming platform accessible at https://8988a.org and all associated services.
• "Personal Data" — refers to any information that identifies or can reasonably be used to identify a living individual, either directly (e.g., full name, national ID number) or indirectly (e.g., IP address, device identifier, account username).
• "Processing" — refers to any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction, whether by automated means or otherwise.
• "Data Controller" — refers to the entity that determines the purposes and means of processing Personal Data. For all data collected via the 8988a platform, the Data Controller is 8988a.
• "Data Processor" — refers to any third-party entity that processes Personal Data on behalf of 8988a, including payment processors, KYC verification providers, and fraud-prevention systems.
• "Player" / "you" / "your" — refers to any individual who accesses, registers on, or uses the 8988a platform in any capacity.
• "KYC" (Know Your Customer) — refers to the identity and payment-method verification process required before withdrawals can be processed.
• "Cookies" — refers to small text files placed on your device by the platform to support functionality, session management, and analytics.
• "Sensitive Data" — refers to a subset of Personal Data that warrants heightened protection, including financial account details, government-issued identification numbers, and any information that could be used for identity theft or fraud.

8988a acts as the Data Controller for all Personal Data collected through the platform at https://8988a.org. As Data Controller, 8988a determines the purposes for which your Personal Data is collected and the manner in which it is processed, stored, and, where applicable, shared with authorised Data Processors.

All data processing activities carried out by 8988a are conducted in accordance with internationally recognised data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

If you have any questions about how 8988a processes your Personal Data, or if you wish to exercise any of the rights described in Clause 10 of this policy, please contact our Data Protection team at [email protected].

8988a collects the following categories of Personal Data in the course of operating the platform and providing services to Players:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identification document;
• Date of birth (for age verification — the platform is strictly 21+);
• Residential address in Indonesia (city, province, postal code);
• Email address (used as the primary account identifier and for all platform communications);
• Mobile phone number (used for account security verification and, where elected by the Player, for SMS notifications);
• Username and encrypted password hash (we do not store passwords in plain text).

3.2 KYC & Verification Data

• Copies of government-issued photo identification, such as your KTP (Kartu Tanda Penduduk), SIM (Surat Izin Mengemudi), or passport;
• Selfie photographs or short video verification clips used to match your identity document;
• Proof of payment method ownership (e.g., a screenshot or statement showing that the BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay account used for deposits is registered in your name).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amount (in IDR/Rupiah), timestamp (WIB), payment method, and transaction reference number;
• Payment method identifiers (e.g., bank account number last four digits, e-wallet registered phone number) — full account numbers are not stored on 8988a servers;
• Bonus and promotion redemption history;
• Account balance history.

3.4 Betting & Gaming Activity Data

• Records of all bets placed, game sessions, and wagering activity on the platform — including sports markets (BRI Liga 1, EPL, La Liga, Champions League, AFF Cup, badminton, MotoGP at Mandalika, E-sports), live casino tables, slots, and card games;
• Game session duration, staking patterns, and win/loss records (retained for account dispute resolution, responsible gaming monitoring, and regulatory compliance);
• Application of Responsible Gaming tools, including deposit limits set, session timers activated, and any self-exclusion periods elected.

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session timestamps and login history;
• Cookie identifiers and session tokens (see Clause 7).

3.6 Communications Data

• Records of all communications between you and the 8988a support team, including live chat transcripts, email correspondence, and any complaint submissions;
• Responses to surveys or promotional campaigns where you have voluntarily participated.

The following table summarises the primary data categories and the legal basis for processing each:

8988a collects Personal Data through the following channels:

1. Directly from You. The majority of Personal Data held by 8988a is provided directly by you during the registration process, when completing KYC verification, when submitting support requests, or when voluntarily participating in surveys and promotions.
2. Automatically via Platform Interaction. Technical data — including IP addresses, device identifiers, session data, and cookie information — is collected automatically when you access and interact with the 8988a platform. This data is essential for session management, security, and fraud prevention.
3. From Payment Processors. When you make a deposit or request a withdrawal, our payment processor partners (handling transactions via BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, and Mastercard) transmit transaction confirmation data to 8988a. This includes confirmation of payment amount, timestamp, and a masked payment method identifier. Full financial credentials are never transmitted to 8988a by these processors.
4. From KYC Verification Partners. Where identity verification is conducted via a third-party KYC partner, that partner may transmit a structured verification result (including pass/fail status and the verified data fields) to 8988a. The underlying document images may be processed and stored by the KYC partner in accordance with their own data retention policies.
5. From Fraud Prevention and Security Systems. 8988a uses automated risk-scoring systems that may cross-reference account activity against known fraud patterns and flagged device or IP databases to identify suspicious behaviour. These systems process Technical & Device Data and Betting & Gaming Activity Data.

8988a processes your Personal Data only for clearly defined purposes. The principal purposes and their corresponding legal bases are as follows:

1. Account Management and Service Delivery. Processing your Registration Data is necessary to create and maintain your 8988a account, authenticate your logins, and deliver the services you have contracted for. Legal basis: contract performance.
2. Identity Verification and Age Compliance. We are required to verify that all Players are at least 21 years of age and are who they claim to be. Processing KYC data fulfils this obligation and forms part of our Anti-Money Laundering (AML) programme. Legal basis: legal obligation.
3. Payment Processing. Financial and transaction data is processed to execute your deposit and withdrawal instructions and to maintain an accurate record of all account transactions in IDR. Legal basis: contract performance.
4. Fraud Detection and Platform Security. Technical, device, and behavioural data is analysed to detect and prevent fraudulent activity, account takeover attempts, bonus abuse, and money laundering. Legal basis: legitimate interests (protecting the integrity of the platform and the interests of honest players).
5. Responsible Gaming Monitoring. 8988a is committed to promoting responsible gaming. Betting and gaming activity data is monitored to identify patterns that may indicate problem gambling behaviour, enabling our team to proactively offer support tools such as deposit limits, session timers, and self-exclusion options. Legal basis: legitimate interests; legal obligation.
6. Customer Support. Communications data is retained to enable our support team to provide effective assistance, resolve disputes, and maintain a record of service interactions. Legal basis: contract performance; legitimate interests.
7. Regulatory Compliance and Legal Obligations. In certain circumstances, 8988a may be required to retain, disclose, or report Personal Data to satisfy legal obligations — including responding to court orders, regulatory enquiries, or law enforcement requests. Legal basis: legal obligation.
8. Marketing and Promotions (where consented). Where you have opted in to receive promotional communications, 8988a may use your email address and preferences data to send targeted offers. You may withdraw consent to marketing at any time by updating your communication preferences within your Account dashboard or by contacting support. Legal basis: consent.

8988a does not sell, rent, or trade your Personal Data to any third party. Data sharing is limited strictly to the following categories of authorised recipients, each of whom is bound by confidentiality obligations and data processing agreements:

1. Payment Processors. To execute your deposits and withdrawals, 8988a shares the minimum necessary transaction data with the relevant payment processing partners operating the BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja payment channels.
2. KYC and Identity Verification Partners. To fulfil our age verification and AML obligations, KYC documentation may be shared with our accredited identity verification partner(s). These partners are contractually required to process your data solely for verification purposes and must not use it for any other commercial purpose.
3. Fraud Prevention and Security Providers. Technical and behavioural data may be shared with specialist fraud detection services to identify and block suspicious activity. These providers act as Data Processors under strict contractual data processing agreements.
4. Game Content Providers. Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft provide game software integrated into the 8988a platform. These providers may receive a session token and anonymised player identifier for the purposes of game session management. They do not receive your full identity data.
5. Regulatory and Law Enforcement Authorities. 8988a will disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, by court order, or to protect the legal rights and interests of the Company or its Players. 8988a will notify affected Players of any such disclosure wherever legally permitted to do so.
6. Corporate Transactions. In the event of a merger, acquisition, or restructuring of the Company, your Personal Data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and the Privacy Policy of the successor entity in advance.

The 8988a platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following cookie categories are in use:

8988a does not use third-party advertising cookies, retargeting pixels, or any tracking technology designed to profile your browsing behaviour outside of the 8988a platform. You can manage cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not affect your ability to place bets or access your account balance, but it may reduce the personalisation of your experience.

8988a retains Personal Data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable regulatory and legal obligations. The following retention periods apply as general guidelines:

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where data forms part of a live dispute, investigation, or legal proceeding, it will be retained until that matter is fully resolved, regardless of the standard retention period.

8988a implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 8988a platform is encrypted in transit using industry-standard TLS 1.2 or higher.
• At-Rest Encryption: Sensitive data stored in our databases — including KYC documents, financial records, and identity information — is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. We use a strong one-way cryptographic hash function with individual salting to store password credentials.
• Access Controls: Access to Personal Data within 8988a's internal systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality agreements and undergo regular data security training.
• Intrusion Detection and Monitoring: Our infrastructure is monitored 24/7 by automated intrusion-detection systems. Any anomalous access attempts or data exfiltration patterns trigger immediate security alerts.
• Regular Security Audits: 8988a's platform and data infrastructure undergo regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable two-factor authentication on their accounts. 2FA adds a critical additional layer of security to the login process and is available for all registered accounts.

As a registered Player on the 8988a platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

1. Right of Access. You have the right to request a copy of all Personal Data that 8988a holds about you, together with information about how it is being used and on what legal basis.
2. Right to Rectification. If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data fields (such as your registered name and date of birth) can only be corrected by submitting updated KYC documentation.
3. Right to Erasure. You may request that 8988a delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to any overriding legal retention obligations — for example, we are required to retain transaction and KYC records for a minimum of five years post-account closure for regulatory compliance purposes.
4. Right to Restrict Processing. You may request that 8988a restrict the processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed or while you contest the lawfulness of processing.
5. Right to Data Portability. You have the right to receive the Personal Data you have provided to 8988a in a structured, commonly used, and machine-readable format (such as CSV or JSON), so that you can transfer it to another service provider if you wish.
6. Right to Object. You have the right to object to the processing of your Personal Data where that processing is based on legitimate interests or is for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
7. Right to Withdraw Consent. Where 8988a processes your data on the basis of consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

The 8988a platform is strictly intended for individuals who are 21 years of age or older. 8988a does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and all Players must confirm their date of birth at registration.

If 8988a becomes aware or has reasonable grounds to suspect that Personal Data has been submitted by an individual who is under 21 years of age, we will immediately suspend the associated account, refrain from further processing the relevant data, and take steps to delete or return it to the extent permitted by applicable law.

If you are the parent or legal guardian of an individual under 21 who you believe has registered on the 8988a platform, please contact us immediately at [email protected]. We will investigate and close the account as quickly as possible.

The 8988a platform integrates services and software provided by reputable third parties, including game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft), payment processors (handling BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, Mastercard transactions), and KYC and fraud prevention partners.

Each third-party partner with access to any element of your Personal Data is engaged under a formal data processing agreement that:

• Restricts their use of your data to the specific purpose for which it was shared;
• Prohibits any onward transfer or commercial use of your data;
• Requires them to maintain security standards at least equivalent to those of 8988a;
• Obliges them to notify 8988a of any data breach affecting your information within 24 hours of discovery.

8988a is not responsible for the privacy practices of any website or service that is not operated by 8988a, even if a link to that external service appears on the platform. Players are encouraged to review the privacy policies of any third-party service they use independently.

8988a reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or improvements to our services. When material changes are made, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date;
• Send a notification email to all registered Players summarising the key changes, at least 14 days before the new policy takes effect (except where immediate changes are required by law or to address a security risk).

Your continued use of the 8988a platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you should cease using the platform and request account closure as described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8988a handles your Personal Data, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related enquiries within 30 days of receipt.

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)

When submitting a data rights request, please include your registered account username and the email address associated with your account so that we can verify your identity before processing the request. 8988a will never charge a fee for handling data rights requests submitted in good faith.