Privacy Policy — pov88 Platform

This Privacy Policy ("Policy") describes how pov88 ("we", "us", "our", or "the Operator") collects, uses, stores, and protects the personal data of individuals ("you", "Member", or "User") who access or use the pov88 Platform at https://pov88.pro. This Policy applies to all services provided through the Platform, including sportsbook betting, live casino, slot games, togel (Indonesia's traditional numbers lottery) draw markets, Bandar Q, Capsa Susun, and all associated account, payment, and support functions.

By registering a pov88 account and using any of our services, you acknowledge that you have read and understood this Policy and you consent to the collection and use of your personal data as described herein. If you do not agree to any part of this Policy, you must not use the pov88 Platform.

This Policy is incorporated by reference into the pov88 Terms & Conditions. Where any provision of this Policy conflicts with the Terms & Conditions, the Terms & Conditions shall prevail, except where this Policy expressly provides otherwise in relation to data protection matters.

pov88 collects the following categories of personal data from Members and visitors to the Platform. We collect only what is necessary to deliver our services and meet our regulatory obligations.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data — except where a Member voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case that data is held solely to action the request and is not used for any other purpose.

pov88 collects personal data through the following channels and mechanisms:

3.1 Directly from You. We collect personal data that you provide directly when you register a pov88 account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team, respond to a survey, or participate in a promotion. This is the primary source of the Identity, Contact, Account, Financial, and KYC data categories described in Clause 2.

3.2 Automatically During Platform Use. When you access and use the pov88 Platform, our servers and analytics tools automatically collect Technical Data and Usage Data. This includes your IP address (which we use to infer approximate geographic location for compliance purposes), device fingerprint, and session activity data. This collection happens whether or not you are logged in to your account.

3.3 Cookies and Similar Technologies. The Platform uses cookies, web beacons, and local storage objects to collect data about your browsing behaviour and session state. Details of the specific cookies we use and your opt-out options are described in Clause 7 of this Policy.

3.4 Third-Party Service Providers. We may receive data about you from third-party partners in the course of operating the Platform, including: payment processors and Indonesian banking partners who confirm transaction details; identity verification service providers who assist with KYC checks; fraud prevention and anti-money-laundering (AML) screening services; and game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe) who relay game session data to our platform in real time.

We use the personal data we collect from pov88 members for the following purposes:

• Account Management: To create, verify, maintain, and manage your pov88 member account, including processing your login credentials securely and maintaining your IDR balance.
• Service Delivery: To provide you with access to sportsbook markets, live casino tables, slot games, togel draw markets, Bandar Q, Capsa Susun, and all other Platform features you choose to use.
• Payment Processing: To process your deposits from and withdrawals to Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), verify that payment accounts are registered in your name, and maintain accurate transaction records in IDR.
• Identity Verification (KYC): To verify your identity, age (21+), and Indonesian residency in compliance with our regulatory obligations and to prevent identity fraud.
• Fraud & AML Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other financial crimes. We use automated risk-scoring tools as well as manual review by our compliance team.
• Responsible Gaming: To implement and honour deposit limits, self-exclusion requests, cooling-off periods, and other responsible gaming tools you activate on your account, and to identify Members who may be showing signs of problem gambling behaviour so that we can offer appropriate support.
• Customer Support: To respond to your enquiries, resolve disputes, handle complaints, and provide 24/7 support in English (with Indonesian-speaking agents available) via live chat and email.
• Platform Improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall quality and performance of the pov88 Platform for all Indonesian members.
• Marketing Communications: To send you promotional offers, bonus announcements, and event invitations — but only where you have given your explicit consent to receive such communications. You may withdraw consent at any time.
• Legal & Compliance Obligations: To comply with applicable laws, respond to lawful requests from regulatory bodies or law enforcement authorities, and to establish, exercise, or defend legal claims.

For each category of data processing described in Clause 4, pov88 relies on one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract with you (i.e., the pov88 Terms & Conditions), including account management, service delivery, and payment processing.
• Legal Obligation: Processing that is required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML screening, and record-keeping requirements.
• Legitimate Interests: Processing carried out for pov88's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing that is based solely on your freely given, specific, informed, and unambiguous consent — in particular, the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

pov88 does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to contractual data protection obligations:

6.1 Payment Processors and Banking Partners. We share your financial data (name, bank account or e-wallet details, transaction amounts in IDR) with Indonesian banking partners and payment processors solely to facilitate the processing of deposits and withdrawals. This includes integrations with BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja payment networks.

6.2 Identity Verification Providers. We share the identity documents and biometric data you submit during KYC verification with specialised third-party identity verification providers to confirm your identity and age. These providers are contractually bound to use your data solely for verification purposes and to delete it in accordance with defined retention schedules.

6.3 Game Providers. Game session data (bets placed, game results, wagers in IDR) is shared in real time with the relevant game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and others) to facilitate game play and settle outcomes. Your full identity data is not shared with game providers beyond what is technically necessary for session management.

6.4 Fraud Prevention and AML Services. We share transactional and identity data with specialist fraud prevention and anti-money-laundering screening services as part of our compliance obligations. These services may cross-reference your data against industry-wide fraud databases.

6.5 Legal and Regulatory Authorities. We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, court order, or lawful regulatory request. In such cases, we will disclose only the minimum data required to comply with the request and will notify you where we are legally permitted to do so.

6.6 Business Transfers. In the event of a merger, acquisition, reorganisation, or sale of all or part of pov88's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected Members in advance of any such transfer, and the acquiring entity will be bound by the data protection obligations in this Policy.

The pov88 Platform uses cookies and similar technologies to maintain session state, improve platform performance, and understand how Members use our services. The following categories of cookies are deployed on the Platform:

pov88 does not use third-party advertising cookies or behavioural tracking cookies that share your browsing data with external advertising networks. You may manage your cookie preferences through your browser settings; however, disabling essential or security cookies may prevent you from accessing your pov88 account.

pov88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

pov88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in Transit: All data exchanged between your device and pov88 servers is encrypted using TLS 1.2 or higher. The Platform enforces HTTPS across all pages and API endpoints without exception.
• Encryption at Rest: Sensitive data stored in our databases — including identity documents, payment account details, and passwords — is encrypted at rest using AES-256 encryption.
• Password Security: Member passwords are never stored in plain text. We use adaptive cryptographic hashing algorithms to store password credentials, and we enforce minimum password complexity requirements at the point of registration.
• Access Controls: Access to production systems and Member data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for internal systems.
• Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion detection systems and a dedicated security operations team. Anomalous access patterns trigger automated alerts and manual review.
• Regular Security Audits: We conduct periodic security assessments and penetration tests of our Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a data breach that is likely to result in a risk to Members, pov88 will notify affected Members promptly and take immediate steps to contain and remediate the breach.

As a pov88 member, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise.

• Right of Access: You may request a copy of the personal data pov88 holds about you, along with information about how it is being used. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For account-level data (name, address, contact details), you may be able to update this directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data. We will comply unless we are required to retain it by law (for example, to satisfy AML record-keeping obligations or to fulfil ongoing financial reporting duties). Where data must be retained, we will confirm the specific legal basis for retention.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while an accuracy dispute is being investigated, or where you have objected to processing under the legitimate-interests basis and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a machine-readable copy of your personal data so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing based on our legitimate interests (such as analytics or fraud prevention profiling) at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (in particular, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

We will respond to all data rights requests within 30 calendar days. In complex cases we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.

The pov88 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires users to confirm that they meet the 21+ age requirement, and we verify age as part of our KYC process before processing any withdrawal.

If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Any balance or winnings in an account subsequently confirmed as underage will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child has registered a pov88 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

The pov88 Platform may contain references to third-party services, payment providers, or game providers. While we take care to work only with reputable partners, pov88 is not responsible for the privacy practices or content of any third-party services. If you follow a link to an external service — such as your BCA or OVO mobile banking app to complete a payment — you should review that service's own privacy policy before providing any personal data.

This Policy applies solely to data collected and processed by pov88 through the Platform. It does not govern the data practices of game providers, payment processors, or any other third parties, even where those services are integrated into or accessed through the pov88 Platform.

pov88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law , or the services we offer. When we make material changes to this Policy, we will notify active Members by email (sent to the address registered on your account) and by posting a prominent notice on the Platform for at least 30 days following the change.

The "Last Updated" date at the top of this page reflects the date on which the most recent version of this Policy took effect. We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the pov88 Platform after a Policy update constitutes your acceptance of the revised terms.

Where a change to this Policy requires your fresh consent (for example, a new category of data processing that is consent-based), we will present a clear consent request before proceeding with that new processing activity. You are never obligated to consent, and declining will not affect your ability to use the existing features of the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data pov88 holds about you, please contact our Data & Privacy team through the following channel:

We are committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you retain the right to escalate your concern to the relevant data protection authority or to seek legal redress through the appropriate courts.