Privacy Policy

1 Definitions

For the purposes of this Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, email address, financial account details, and online identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means pola88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of pola88 under a written data-processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your wishes by which you agree to the processing of your Personal Data.
• "Cookies" means small data files placed on your device by the pola88 Platform for functionality, analytics, and session-management purposes.
• "Services" means all products, features, content, and functionalities provided through the pola88 Platform.
• "KYC" means the Know Your Customer identity verification process required prior to withdrawal processing.
• "WIB" means Western Indonesia Time (UTC+7), the default time zone for all processing and logging activities on the Platform.

2 Scope & Applicability

This Policy applies to all Personal Data collected by pola88 in connection with the provision of its Services, including data collected through the website at https://pola88.cam, customer support channels (live chat, WhatsApp, Telegram, email), and any other medium through which pola88 interacts with Users.

This Policy applies to all Users regardless of their geographic location; however, pola88's primary market is Indonesia and our data practices are designed with the needs and regulatory context of Indonesian Users in mind. Where you access the Platform from outside Indonesia, you remain subject to this Policy, and by doing so you confirm that your access is lawful under the laws of your jurisdiction.

This Policy does not apply to third-party websites, applications, or services that may be referenced within the Platform. pola88 is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external service you interact with.

3 Data We Collect

pola88 collects only the Personal Data that is necessary for the provision of its Services, compliance with legal obligations, and the prevention of fraud and money laundering. The categories of data we collect are described below.

3.1 Identity Data

Full legal name, date of birth, nationality, and a copy of your Indonesian National Identity Card (KTP — Kartu Tanda Penduduk) or equivalent government-issued identity document. A selfie photograph holding your identity document may also be requested as part of the KYC verification process.

3.2 Contact Data

Email address, mobile phone number, and residential address as provided at registration and updated by you from time to time.

3.3 Financial Data

Bank account details (including account name, account number, and bank name — for example, BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, or BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and records of all deposits and withdrawal transactions, including amounts in Indonesian Rupiah (IDR / Rp), timestamps, and transaction reference numbers.

3.4 Account & Gaming Data

Login credentials (username and hashed password), account preferences, betting history, game session data, bonus usage history, and responsible gaming tool settings including deposit limits and self-exclusion status.

3.5 Technical & Usage Data

IP address, device type, operating system, browser type and version, session duration, pages visited within the Platform, clickstream data, time zone (defaulting to WIB for Indonesian Users), and referral source.

3.6 Communications Data

Records of your communications with our customer support team via live chat, WhatsApp, Telegram, or email, including the content of those communications, timestamps, and resolution outcomes.

4 How Data Is Collected

pola88 collects Personal Data through the following channels and mechanisms:

Where data is collected automatically through cookies or similar technologies, we will notify you via our cookie consent mechanism on your first visit and provide clear opt-out options for non-essential tracking categories.

5 Legal Basis for Processing

pola88 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing is required to perform the contract between you and pola88 — for example, managing your account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory obligations, including KYC verification, anti-money laundering (AML) record-keeping, and responding to lawful requests from Indonesian or international authorities.
• Legitimate Interests: Processing is necessary for the legitimate interests of pola88, such as fraud prevention, platform security, abuse detection, and product improvement — provided those interests are not overridden by your fundamental rights.
• Consent: For processing activities not covered by the above bases — in particular, certain marketing communications and non-essential analytics cookies — we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

pola88 uses the Personal Data we collect for the following purposes, each supported by an appropriate legal basis as described in Section 5:

6.1 Account Management

To create, maintain, and administer your pola88 account, including processing your registration, verifying your identity, managing your login credentials, and updating your account preferences.

6.2 Financial Transactions

To process deposits made via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, and ShopeePay, and to facilitate withdrawal requests to your registered bank account or e-wallet. Financial transaction records are maintained for a minimum of five (5) years in accordance with AML obligations.

6.3 Identity Verification & Compliance

To conduct KYC verification, screen against sanctions lists, comply with anti-money laundering requirements, and respond to lawful requests from regulatory authorities or law enforcement agencies.

6.4 Customer Support

To respond to your inquiries, resolve disputes, process complaints, and deliver the 24/7 Indonesian-speaking support service available via live chat, WhatsApp, and Telegram.

6.5 Security & Fraud Prevention

To monitor for suspicious account activity, detect and investigate fraud, identify unauthorized access attempts, enforce the one-account-per-user policy, and protect the integrity of games and betting markets.

6.6 Responsible Gaming

To enforce self-exclusion requests, apply deposit and loss limits you have set, monitor betting patterns for signs of problem gambling, and communicate with you if our responsible gaming systems flag concern indicators.

6.7 Platform Improvement

To analyze aggregated usage data, conduct A/B testing, improve the user experience, optimize game performance, and develop new features. Analytics processing uses pseudonymized or aggregated data wherever possible.

6.8 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates via email or messaging platforms, where you have consented to receive such communications. You may opt out of marketing messages at any time by using the unsubscribe link in any marketing email or by contacting our support team.

7 Disclosure & Data Sharing

pola88 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Payment Processors & Financial Institutions

We share necessary financial data with our payment processing partners and the banking institutions involved in processing your transactions — including BCA, BRI, BNI, Mandiri, and e-wallet operators such as OVO, DANA, GoPay, and ShopeePay — solely for the purpose of completing those transactions.

7.2 Identity Verification Providers

We may engage third-party KYC and identity verification service providers to assist with the review of identity documents and sanctions screening. These providers are bound by strict data-processing agreements and are prohibited from using your data for any purpose other than the specific verification service.

7.3 Technology & Infrastructure Providers

We share limited technical data with our hosting infrastructure providers, content delivery networks, and cybersecurity partners in order to operate, maintain, and secure the Platform. All such providers are vetted and bound by confidentiality and data-processing obligations.

7.4 Legal & Regulatory Disclosure

pola88 may disclose Personal Data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by applicable law, court order, or regulatory instruction. We will, where permitted by law, notify you of such a disclosure.

7.5 Corporate Transactions

In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving pola88, Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity before the transfer takes effect.

8 Cookies & Tracking Technologies

pola88 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate and improve the Platform. Below is a summary of the cookie categories we use:

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies may impair the functionality of the Platform. Detailed instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's respective help documentation.

8.1 Cookie Retention

Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for the period specified at the time of placement, typically between 30 days and 12 months depending on their category. You may delete persistent cookies at any time via your browser settings.

9 Data Retention

pola88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The following retention schedule provides general guidance:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in accordance with our internal data destruction procedures. Anonymized or aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

10 Data Security

pola88 implements a comprehensive, multi-layered security framework designed to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• Transport-Layer Encryption: All data transmitted between your device and the pola88 Platform is encrypted using industry-standard TLS 1.2 or higher (256-bit SSL), ensuring that your Personal Data and financial information cannot be intercepted in transit;
• Database Encryption: Sensitive fields within our databases — including identity document references, financial account identifiers, and KYC data — are encrypted at rest using AES-256;
• Access Controls: Access to Personal Data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) for all internal systems;
• Penetration Testing: The Platform undergoes regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited;
• Incident Response: pola88 maintains a documented data breach response procedure. In the event of a security incident affecting your Personal Data, we will notify affected users and relevant authorities within the timeframes required by applicable law;
• Employee Training: All staff with access to Personal Data receive mandatory data protection training upon onboarding and at regular intervals thereafter.

11 Your Privacy Rights

pola88 respects your rights over your Personal Data. Subject to applicable law and certain limited exceptions (such as where retaining data is required for AML compliance), you have the following rights with respect to Personal Data we hold about you:

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Privacy Rights Request." We will acknowledge your request within 48 hours and respond substantively within 30 calendar days. We may need to verify your identity before processing certain requests.

12 Minors & Age Restriction

pola88 uses date-of-birth verification at registration and KYC document review to enforce the 21+ age requirement. If you are a parent or guardian and believe that a minor in your care has registered an account on pola88, please contact our support team immediately at [email protected] so that we can take prompt action.

13 International Data Transfers

pola88's primary data infrastructure is hosted in data centers serving the Southeast Asian region to minimize latency for Indonesian Users. However, certain service providers and data processors (such as cloud infrastructure partners, cybersecurity vendors, or game content providers) may be located outside Indonesia.

Where Personal Data is transferred internationally, pola88 ensures that such transfers are conducted only to recipients that offer an adequate level of data protection, whether through contractual safeguards (such as standard contractual clauses), certification under recognized international frameworks, or equivalent legal mechanisms. By using the Platform, you consent to such international transfers where they are necessary for the delivery of our Services.

14 Third-Party Links & Services

The pola88 Platform may reference or integrate services from third-party providers, including game studio software from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. While pola88 vets its technology partners, we do not control the data practices of third-party software providers operating within their own sandboxed game environments.

This Policy does not extend to any third-party website, application, or service that is not directly operated by pola88. We strongly encourage you to review the privacy policies of any third-party service with which you interact. pola88 accepts no liability for the data practices of third parties, including external payment providers or affiliated promotional partners.

15 Changes to This Policy

pola88 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify you by sending a notice to your registered email address and by posting a prominent update notice on the Platform, with at least 7 days' advance notice before the revised Policy takes effect.

The date of the most recent revision is always displayed at the top of this page. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with a revised Policy, you should cease using the Platform and request account closure before the changes take effect. The current version of this Policy is always accessible at https://pola88.cam/privacy-policy.

16 Contact & Data Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way pola88 handles your Personal Data, please reach out to our dedicated privacy team through any of the channels below. For formal data subject rights requests, written correspondence via email is strongly preferred to ensure accurate documentation and timely resolution.

We aim to resolve all privacy-related enquiries within 30 calendar days of receipt. For complex or contested requests, we will provide a progress update within 14 days and keep you informed until the matter is resolved.