Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, and protection of personal data by habi88 (hereinafter referred to as "we," "us," "our," or "the Platform") in connection with your use of our online betting services, including our website, mobile applications, and all related services.

By creating an account with habi88, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you must immediately cease using our services and contact us to close your account.

This Privacy Policy applies specifically to users accessing habi88 services from Indonesia and complies with international data protection standards as well as Indonesian privacy regulations where applicable. We recognize that online privacy is a fundamental right and have designed our data practices to be transparent, secure, and respectful of your personal information.

2. Information We Collect

habi88 collects various types of personal information necessary to provide our services, verify your identity, comply with legal obligations, and improve your user experience. The categories of information we collect include:

2.1 Information You Provide Directly

• Account Registration Information: When you create an account, we collect your full name, date of birth, email address, phone number, residential address, and chosen username and password.
• Identity Verification Documents: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations, we collect copies of your Indonesian National Identity Card (KTP), proof of address documents (utility bills, bank statements), selfie verification photos, and payment method verification documents.
• Financial Information: We collect bank account details, e-wallet information (OVO, DANA, GoPay, etc.), transaction history, deposit and withdrawal records, and payment method ownership verification.
• Communication Records: When you contact customer support via live chat, email, WhatsApp, or Telegram, we retain records of your communications for quality assurance and dispute resolution purposes.
• Marketing Preferences: We record your consent status for receiving promotional emails, SMS messages, push notifications, and other marketing communications.

2.2 Information Collected Automatically

• Technical Data: We automatically collect your IP address, device type and model, operating system, browser type and version, screen resolution, time zone setting, and browser plug-in types and versions.
• Usage Data: We track your browsing patterns on our platform, including pages visited, games played, bet history, session duration, click patterns, and feature usage statistics.
• Location Data: We collect approximate location data based on your IP address to verify that you are accessing our services from within Indonesian territory and to comply with geographical restrictions.
• Cookies and Similar Technologies: We use cookies, web beacons, pixel tags, and local storage to recognize your device, remember your preferences, analyze platform performance, and deliver personalized content. For detailed information about our cookie practices, please refer to Section 8 below.

2.3 Information from Third Parties

• Payment Processors: We receive transaction confirmation data from BCA, BRI, BNI, Mandiri, and e-wallet providers to verify deposits and process withdrawals.
• Game Providers: We receive gameplay data from third-party game providers such as Pragmatic Play, Evolution Gaming, and Microgaming to track your gaming activity and calculate bonuses.
• Fraud Prevention Services: We may receive information from specialized security and fraud detection services to identify suspicious activity and protect against account takeovers, payment fraud, and other security threats.

3. How We Use Your Information

habi88 processes your personal data for the following legitimate purposes:

3.1 Service Provision and Account Management

• Create and manage your user account
• Process deposits, withdrawals, and other financial transactions
• Verify your identity and age (21+ enforcement)
• Provide access to sports betting, casino games, slots, and other gaming products
• Calculate and credit bonuses, loyalty points, and VIP rewards
• Maintain accurate transaction records and gaming history
• Respond to customer support inquiries and resolve disputes

3.2 Legal and Regulatory Compliance

• Comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations
• Prevent underage gambling and enforce age restrictions
• Detect and prevent fraud, money laundering, and other criminal activities
• Respond to lawful requests from Indonesian government authorities, regulatory bodies, and law enforcement agencies
• Maintain records required by gambling licensing authorities
• Enforce our Terms & Conditions and other legal agreements

3.3 Platform Security and Integrity

• Monitor for suspicious betting patterns, bonus abuse, and collusion
• Detect and prevent account hacking, credential stuffing, and unauthorized access
• Identify and block duplicate accounts created to exploit bonuses
• Protect against Distributed Denial of Service (DDoS) attacks and other security threats
• Ensure fair play and game integrity across all betting products

3.4 Marketing and Communication

• Send promotional offers, bonus announcements, and special event notifications (with your consent)
• Provide personalized game recommendations based on your playing history
• Notify you about important account changes, terms updates, and maintenance schedules
• Conduct customer satisfaction surveys to improve our services

3.5 Analytics and Service Improvement

• Analyze platform usage patterns to identify popular games and features
• Optimize website performance, page load times, and mobile app responsiveness
• Test new features and functionalities through A/B testing
• Generate statistical reports on betting trends and user behavior (in aggregated, anonymized form)

4. Legal Basis for Processing

Under applicable data protection laws, habi88 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms & Conditions you agreed to when creating your account, including providing betting services and processing payments.
• Legal Obligation: Processing is required to comply with Indonesian laws, international gambling regulations, KYC/AML requirements, and lawful government requests.
• Legitimate Interests: Processing is necessary for our legitimate business interests in preventing fraud, ensuring platform security, improving services, and communicating with customers, provided these interests do not override your fundamental privacy rights.
• Consent: For certain processing activities such as marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time through your account settings.

5. Data Sharing and Disclosure

habi88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers and Business Partners

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum necessary information to process your deposits and withdrawals.
• Game Providers: Companies like Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe receive anonymized or pseudonymized gaming data to deliver game content and calculate outcomes.
• Cloud Hosting Providers: Our platform infrastructure is hosted on secure cloud servers that store encrypted copies of our databases.
• Customer Support Tools: We use third-party live chat, ticketing, and CRM systems to manage customer communications efficiently.
• Analytics Services: We use analytics platforms to understand user behavior and improve platform performance.

5.2 Legal and Regulatory Authorities

We may disclose your information to Indonesian government agencies, law enforcement, regulatory bodies, and courts when:

• Required by law, court order, subpoena, or other legal process
• Necessary to investigate potential violations of our Terms & Conditions
• Required to detect, prevent, or address fraud, security issues, or criminal activity
• Necessary to protect the rights, property, or safety of habi88, our users, or the public

5.3 Corporate Transactions

In the event of a merger, acquisition, asset sale, or bankruptcy proceeding involving habi88, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

6. Data Security Measures

habi88 implements industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by SSL/TLS encryption (256-bit). Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized employees who require it to perform their job functions. All staff members sign confidentiality agreements.
• Secure Infrastructure: Our servers are hosted in secure data centers with 24/7 physical security, fire suppression systems, and redundant power supplies.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential weaknesses.
• Firewalls and Intrusion Detection: Our network is protected by enterprise-grade firewalls and intrusion detection/prevention systems that monitor for suspicious activity.
• Two-Factor Authentication: We offer optional two-factor authentication (2FA) for account login to provide an additional layer of security.

Despite these measures, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and notifying us immediately if you suspect unauthorized access to your account.

7. Data Retention

habi88 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

• Active Accounts: We retain all account information, transaction history, and gaming records for the duration of your active account.
• Closed Accounts: After account closure, we retain essential data for a minimum of five years to comply with financial record-keeping requirements, AML regulations, and potential legal claims.
• Marketing Data: If you opt out of marketing communications, we retain your email address and opt-out preference indefinitely to ensure we do not contact you again.
• Security Logs: System logs, IP addresses, and security-related data are typically retained for 12-24 months for fraud investigation and platform security purposes.

After the retention period expires, we securely delete or anonymize your personal data so that it can no longer identify you individually.

8. Cookies and Tracking Technologies

habi88 uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

Types of Cookies We Use:

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, account login, and secure transactions. Cannot be disabled.	Session / 1 year
Performance Cookies	Collect anonymous data about page views, load times, and user interactions to optimize platform performance.	1-2 years
Functionality Cookies	Remember your preferences such as language settings, favorite games, and display options.	1 year
Marketing Cookies	Track your browsing behavior to deliver relevant promotional offers and measure advertising campaign effectiveness.	1-2 years

You can manage cookie preferences through your browser settings. However, disabling essential cookies may affect platform functionality and prevent you from accessing certain features. Most browsers allow you to view, delete, and block cookies on a per-site basis.

9. Your Privacy Rights

As a habi88 user, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of all personal data we hold about you by contacting our Data Protection team.
• Right to Rectification: You may correct inaccurate or incomplete information through your account settings or by contacting customer support.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements for financial records and AML compliance.
• Right to Restrict Processing: You may request that we temporarily suspend processing of your data under certain circumstances.
• Right to Data Portability: You may request an export of your account data in a structured, machine-readable format.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time by unsubscribing or updating your communication preferences.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the information provided in Section 11 below. We will respond to your request within 30 days and may require identity verification to prevent unauthorized access to your data.

10. International Data Transfers

habi88 primarily stores and processes data within secure facilities designed to serve the Indonesian market. However, some of our service providers and technology partners may be located outside Indonesia. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Ensuring the recipient country provides adequate data protection standards
• Implementing additional security measures such as encryption and access controls

By using habi88 services, you acknowledge and consent to these international transfers as necessary for service provision.

11. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

12. Changes to This Privacy Policy

habi88 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on our platform homepage
• Sending an email notification to your registered email address
• Displaying an in-platform notification upon your next login

Changes become effective immediately upon posting. Your continued use of habi88 services after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically. The "Last Updated" date at the top indicates when the most recent revision was made.