Summary: 888pw collects only the personal data necessary to operate a safe, compliant, and high-quality betting platform for Indonesian players. We do not sell your data to third parties. We protect your information using industry-standard encryption and access controls. You have the right to access, correct, or delete your data at any time by contacting us at
[email protected].
1 Introduction
888pw ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our online betting and gaming services, accessible at 888pw.vu. This Privacy Policy ("Policy") sets out, in clear and plain language, the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, how long we retain it, the circumstances under which we may share it with third parties, and the rights available to you as a data subject.
This Policy applies to all Members, visitors, and users of the 888pw platform, including individuals who browse the site without registering an account, individuals who register and maintain an active Member Account, and individuals whose accounts have been closed but whose data we are required to retain for regulatory or legal purposes.
By accessing 888pw or registering a Member Account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, you must discontinue use of the Platform and may contact us to request deletion of any data already collected.
2 Definitions
The following definitions apply throughout this Privacy Policy:
- "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, including name, identification number, contact details, IP address, device identifiers, and financial account details.
- "Processing" — any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, storage, retrieval, use, disclosure, and deletion.
- "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, 888pw is the Data Controller for all Member data collected via the Platform.
- "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a binding contractual arrangement, such as a payment gateway provider or KYC verification service.
- "Member" / "User" / "You" — any individual who registers an account with 888pw or accesses any part of the Platform.
- "KYC" — Know Your Customer — the identity and age verification procedures 888pw carries out to comply with applicable anti-money-laundering obligations and to enforce its 21+ age restriction.
- "Cookies" — small text files or similar tracking technologies placed on a user's device by a website to store session state, preferences, or analytical data.
3 Data We Collect
888pw collects the following categories of personal data from Members and site visitors:
3.1 Identity & Registration Data
- Full legal name as it appears on your government-issued identity document
- Date of birth (used to verify compliance with the 21+ age requirement)
- Gender (optional, collected during registration for personalisation purposes)
- Nationality and country of residence
- Government-issued ID number (KTP number for Indonesian residents, or passport number for non-Indonesian residents)
3.2 Contact Data
- Email address (primary communication channel for account notifications and support)
- Mobile telephone number (used for SMS verification and two-factor authentication)
- Residential address (collected during KYC verification)
3.3 Financial Data
- Bank account details including account holder name, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), and account number — for the purpose of processing withdrawals
- E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja accounts registered for withdrawal
- Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
- Wagering history: bet amounts, game type, outcome, and timestamps
3.4 Technical & Device Data
- IP address and geolocation data derived from IP lookup
- Device type, operating system, and browser version
- Session logs: login timestamps, session duration, pages visited, and in-session actions
- Cookie identifiers and similar tracking technology data (see Section 10)
3.5 KYC & Verification Documents
- Scanned or photographed copies of government-issued identity documents (KTP, passport, driver's licence)
- Proof-of-address documents such as bank statements or utility bills dated within three months
- Selfie photographs submitted for liveness verification, where required
3.6 Communications Data
- Content of messages sent to and received from 888pw customer support (email correspondence, live chat transcripts)
- Feedback, complaints, and dispute submissions
- Responses to optional surveys or promotional communications, where you have opted in
4 How We Collect Data
888pw collects personal data through the following channels:
- Directly from you: when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
- Automatically: through cookies, server logs, and similar tracking technologies as you interact with the Platform. This includes your IP address, browser fingerprint, and session activity data.
- From payment processors: our payment gateway partners transmit transaction confirmation data — such as payment status, transaction reference number, and originating payment instrument — to 888pw upon settlement of a deposit or withdrawal.
- From KYC and identity verification providers: third-party KYC services may return identity match scores, document authenticity assessments, and watchlist screening results to 888pw as part of the verification process.
- From analytics and fraud-detection tools: device fingerprinting and behavioural analytics platforms may supply aggregated or pseudonymised data to help 888pw identify suspicious activity and protect Members from unauthorised account access.
5 Purpose of Processing
888pw processes your personal data for the following specific and documented purposes:
| Purpose |
Data Categories Used |
| Account creation and management — registering your account, authenticating logins, and maintaining your profile |
Identity data, contact data, technical data |
| Age and identity verification (KYC) — confirming that you meet the 21+ age requirement and that your identity is genuine |
Identity data, KYC documents |
| Payment processing — processing deposits and withdrawals via Indonesian banks and e-wallets |
Financial data, identity data |
| Regulatory compliance and AML — meeting anti-money-laundering obligations and responding to lawful requests from authorities |
Identity data, financial data, KYC documents |
| Fraud prevention and security — detecting and preventing account fraud, bonus abuse, and unauthorised access |
Technical data, financial data, communications data |
| Platform operation and improvement — ensuring the technical stability of the site and improving the user experience based on aggregated behavioural data |
Technical data, session data |
| Customer support — responding to your queries, resolving disputes, and managing complaints |
Identity data, contact data, communications data |
| Marketing communications — sending promotional offers, bonus notifications, and seasonal promotions (only where you have provided consent) |
Contact data, wagering history (for personalisation) |
| Responsible gaming — monitoring wagering patterns to identify signs of problem gambling and applying self-exclusion or deposit limits at your request |
Financial data, wagering history, contact data |
6 Legal Basis for Processing
888pw relies on the following legal bases to process your personal data, depending on the purpose:
- Contractual necessity: processing required to perform the Member Account agreement with you, including account management, payment processing, and customer support.
- Legal obligation: processing required to comply with applicable anti-money-laundering regulations, identity verification requirements, and any lawful order from a competent authority.
- Legitimate interests: processing for fraud prevention, platform security, and internal analytics, where our legitimate interests are not overridden by your fundamental rights and freedoms.
- Consent: processing for direct marketing communications and non-essential cookies, where you have given explicit, freely given, and withdrawable consent. You may withdraw consent at any time by contacting [email protected] or adjusting your account notification preferences.
7 Data Sharing & Third Parties
888pw does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipient only to the extent necessary for the stated purpose:
- Payment processors and banking partners: Indonesian bank networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial data required to execute your deposit and withdrawal transactions.
- KYC and identity verification providers: specialist third-party services receive copies of your identity documents and return verification results. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond the KYC service they perform for 888pw.
- Fraud prevention and security vendors: device fingerprinting and risk-scoring platforms receive technical and behavioural data to help 888pw identify and block fraudulent activity. All such vendors are bound by contractual data protection obligations.
- Technology and hosting providers: cloud infrastructure, database, and content delivery providers that host and operate the Platform may have access to personal data stored on their infrastructure. These providers are engaged under binding data processing agreements.
- Game studios and content providers: studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe may receive a pseudonymised player identifier and session data necessary to deliver and log game outcomes. No directly identifying personal data (such as full name or bank details) is shared with game studios.
- Legal and regulatory authorities: 888pw may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are under a legal obligation to do so, or where disclosure is necessary to protect the rights, property, or safety of 888pw, its Members, or the public.
- Professional advisers: lawyers, auditors, and insurers engaged by 888pw on a confidential basis may access personal data to the extent required to provide their professional services.
Cross-border transfers: Some of the third parties listed above may process your data outside Indonesia. Where such transfers occur, 888pw ensures that adequate contractual safeguards are in place, consistent with internationally recognised data protection standards, to protect your data to a standard at least equivalent to that described in this Policy.
8 Data Retention
888pw retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:
- Active account data: all personal data associated with an active Member Account is retained for the duration of your membership and for a period of five (5) years following account closure, in line with standard anti-money-laundering record-keeping obligations.
- KYC documents: identity verification documents are retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
- Financial transaction records: deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of the relevant transaction.
- Customer support communications: correspondence with the 888pw support team is retained for three (3) years from the date of the last message in a support thread.
- Technical and session logs: server access logs and session activity data are retained for up to twelve (12) months, after which they are either deleted or irreversibly anonymised.
- Marketing consent records: records of your marketing consent (or withdrawal of consent) are retained for as long as required to demonstrate compliance with applicable marketing regulations, and for a minimum of three (3) years.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data set no longer constitutes personal data and may be retained indefinitely for statistical or analytical purposes.
9 Security Measures
888pw implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:
- SSL/TLS encryption: all data transmitted between your browser or device and the 888pw platform is encrypted using industry-standard TLS 1.2 or higher, preventing interception in transit.
- Encryption at rest: sensitive personal data — including identity documents, financial account details, and password hashes — is encrypted at rest using AES-256 or equivalent encryption standards.
- Access controls: access to personal data within 888pw's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and are bound by confidentiality obligations.
- Two-factor authentication (2FA): 888pw strongly recommends that Members enable 2FA on their accounts. Account access from unrecognised devices triggers additional verification steps.
- Penetration testing and vulnerability management: the 888pw platform undergoes regular security assessments. Identified vulnerabilities are triaged and remediated in accordance with a documented patch management process.
- Incident response: in the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 888pw will notify affected Members and, where required by applicable law, the relevant supervisory authority, within the timeframe prescribed by law.
While 888pw applies robust security measures, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential. If you suspect that your account has been compromised, contact
[email protected] immediately.
10 Cookies & Tracking Technologies
888pw uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse site traffic, and deliver relevant content. The following categories of cookie are used:
- Strictly necessary cookies: essential for the Platform to function correctly. These include session cookies that maintain your logged-in state and security cookies that help prevent cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
- Functional cookies: store your preferences such as language settings, display options, and previously selected payment methods, so you do not need to re-enter them on each visit.
- Analytics cookies: collect pseudonymised data about how visitors interact with the Platform — such as pages visited, time on page, and click paths — to help 888pw improve navigation, content, and performance. No directly identifying personal data is collected by analytics cookies.
- Fraud-prevention and security cookies: device fingerprinting and behavioural analytics tools use persistent identifiers to detect anomalous activity, including the use of multiple accounts or automated betting tools.
You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the performance or availability of some Platform features. 888pw does not use third-party advertising cookies or behavioural retargeting pixels for the purpose of displaying advertisements on external websites.
11 Your Privacy Rights
As a Member of 888pw, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your registered email address and a description of your request. 888pw will respond within thirty (30) calendar days.
- Right of access: you may request a copy of the personal data 888pw holds about you, together with information about how it is being processed.
- Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Account profile details can be updated directly from within your Member Account settings for some fields.
- Right to erasure ("right to be forgotten"): you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that we may be unable to erase data we are legally required to retain (e.g., KYC and financial records subject to regulatory retention obligations).
- Right to restriction of processing: in certain circumstances you may request that 888pw restricts processing of your data — for example, while the accuracy of data is being contested or a legitimate-interests objection is being assessed.
- Right to data portability: where processing is based on your consent or on a contractual basis and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
- Right to object: you have the right to object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, and we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
12 Minors
The 888pw platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and accounts where the registered Member is found to be under 21 will be suspended immediately and all associated data will be deleted, subject to any legal obligation to retain records of the detection of an underage account.
If you are a parent or guardian and believe that a minor has registered an account with 888pw using false age information, please contact us immediately at [email protected]. We will investigate and take appropriate remedial action, including account suspension and deletion of the minor's personal data.
21+ Only: Access to 888pw is restricted to adults aged 21 and above. If you are under 21, you must not attempt to register or access this platform. See our
Responsible Gaming page for guidance on protecting young people from gambling-related harm.
13 Changes to This Policy
888pw reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify active Members via email or a prominent notice on the Platform.
Your continued use of the 888pw Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any changes, you must cease using the Platform and may request account closure and data deletion in accordance with Section 11 above.