Privacy Policy

1. Introduction and Scope

poa88 is committed to protecting the privacy and security of your personal information. We understand that when you entrust us with your data to create an account, deposit funds, and enjoy our gaming services – including sports betting, live casino, slot games, table games, togel (Indonesian lottery), and other offerings – you expect that information to be handled responsibly, securely, and in compliance with applicable laws.

This Privacy Policy describes our practices concerning the personal data of individual users of the poa88 platform. It covers data collected through our website at https://poa88.cam, mobile-optimized site, customer support channels (live chat, email, WhatsApp), and any other touchpoint where you interact with poa88 services. This policy applies to residents of Indonesia who are at least 21 years of age, in accordance with Indonesian gambling age restrictions and our Terms & Conditions.

We collect and process personal data only for legitimate business purposes: to provide you with gaming services, process financial transactions, verify your identity and age, prevent fraud and money laundering, provide customer support, comply with legal and regulatory obligations, and improve our platform. We do not collect unnecessary data, and we never sell your personal information to third parties for their marketing purposes.

2. Data Controller and Responsibility

poa88, operating under the jurisdiction of its primary gaming license, is the data controller responsible for the collection, use, and protection of your personal information. As data controller, we determine the purposes and means of processing your personal data and are accountable for ensuring compliance with applicable data protection laws and regulations.

For questions, concerns, or requests related to your personal data or this Privacy Policy, you may contact our Data Protection Officer (DPO) through the contact channels listed at the end of this document. Our DPO is responsible for overseeing data privacy compliance, responding to data subject requests, and serving as the point of contact for data protection authorities.

3. Information We Collect

We collect several categories of personal information necessary to provide poa88 services, comply with legal obligations, and maintain platform security. The specific data we collect includes:

3.1 Registration and Account Information

When you create a poa88 account, we collect:

• Personal Identifiers: Full legal name (as it appears on your Indonesian national identity card / KTP), date of birth, gender, nationality, and place of birth.
• Contact Information: Residential address (street, city, province, postal code), valid email address, and active Indonesian mobile phone number.
• Account Credentials: Username and encrypted password hash (we do not store plaintext passwords).
• Security Questions: Optional security question answers for account recovery purposes.

3.2 Identity Verification (KYC) Documents

To comply with Know Your Customer (KYC) regulations, anti-money laundering (AML) requirements, and age verification mandates, we collect:

• Government-Issued ID: Copy or photograph of your Indonesian national identity card (Kartu Tanda Penduduk / KTP) showing your photograph, full name, date of birth, ID number, address, and validity dates.
• Proof of Address: Recent utility bill, bank statement, or government correspondence confirming your residential address (may be requested at our discretion for enhanced verification).
• Selfie Verification: Photograph of you holding your KTP next to your face (may be requested to prevent identity fraud).

3.3 Financial and Transaction Information

To process deposits, withdrawals, and financial transactions, we collect:

• Payment Method Details: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) or e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) registered in your name.
• Transaction History: Records of all deposits, withdrawals, wagers placed, winnings, bonuses claimed, and account balance changes.
• Payment Metadata: Transaction timestamps, amounts in Indonesian Rupiah (IDR), payment processor reference numbers, and transaction statuses.

3.4 Gaming and Behavioral Data

To provide personalized service, detect fraud, and improve platform features, we collect:

• Gaming Activity: Games played, bet amounts, bet outcomes, game session durations, favorite games, betting patterns, and responsible gaming limit settings.
• Bonus and Promotion Usage: Bonuses claimed, wagering progress toward requirements, bonus expiry dates, and promotional email preferences.
• Customer Support Interactions: Live chat transcripts, email correspondence, WhatsApp messages, support ticket history, and resolution outcomes.

3.5 Technical and Device Information

When you access poa88, our systems automatically collect certain technical data:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and device identifiers.
• Network Information: IP address, approximate geographic location (city/region level based on IP), internet service provider, and connection type.
• Usage Data: Pages viewed, features accessed, clickstream data, session duration, referral sources, and navigation patterns within our platform.
• Cookies and Tracking Technologies: Cookie IDs, session tokens, and local storage data as described in our Cookies Policy (Section 9).

4. How We Use Your Personal Data

poa88 processes your personal information for the following specific purposes, each based on a lawful legal basis:

4.1 Account Management and Service Delivery (Contractual Necessity)

We use your registration information, login credentials, and account preferences to create and maintain your poa88 account, authenticate your identity when you log in, provide access to our gaming platform, process your game selections and wagers, calculate and credit winnings, and deliver the online gaming services you requested. This processing is necessary to fulfill our contractual obligations to you under our Terms & Conditions.

4.2 Financial Transactions (Contractual Necessity & Legal Obligation)

We use your payment method details, bank account information, and e-wallet identifiers to process your deposits in Indonesian Rupiah, credit your account balance instantly, process your withdrawal requests to your registered Indonesian bank account or e-wallet, maintain accurate transaction records, and reconcile payments with our banking partners. Financial transaction processing is necessary to fulfill our contract with you and comply with financial regulations.

4.3 Identity Verification and KYC Compliance (Legal Obligation)

We use your KTP documentation, proof of address, and biometric selfies to verify your identity, confirm you are at least 21 years of age as required by Indonesian law and our gaming license, detect and prevent identity fraud, comply with Know Your Customer (KYC) regulations, fulfill anti-money laundering (AML) obligations, and prevent multiple account creation. This processing is mandated by law and our licensing conditions.

4.4 Fraud Prevention and Security (Legitimate Interest & Legal Obligation)

We analyze your behavioral data, device information, IP addresses, and transaction patterns to detect unusual activity indicative of fraud, identify potential money laundering, prevent unauthorized account access, protect against bonus abuse and multi-accounting, maintain platform integrity and fair play, and safeguard our business and other users from harm. This processing is necessary for our legitimate interest in operating a secure and trustworthy platform.

4.5 Customer Support (Contractual Necessity & Legitimate Interest)

We use your contact information, account details, and support interaction history to respond to your inquiries via live chat, email, or WhatsApp, troubleshoot technical issues, resolve payment or game disputes, provide guidance on account features and responsible gaming tools, and improve our support quality. This processing is necessary to provide the service you expect and maintain customer satisfaction.

4.6 Marketing and Promotions (Consent)

With your explicit consent, we may use your email address and phone number to send promotional offers, bonus announcements, VIP program updates, and platform news relevant to your interests. You can opt out of marketing communications at any time via the unsubscribe link in emails or by updating your communication preferences in your account settings. We respect your choice and will not send promotional messages to users who have opted out.

4.7 Platform Improvement and Analytics (Legitimate Interest)

We analyze aggregated, anonymized usage data to understand how players interact with our platform, identify popular games and features, optimize website performance and loading times, develop new features based on user needs, and conduct business intelligence and market research. This processing supports our legitimate interest in improving our services and staying competitive.

4.8 Legal and Regulatory Compliance (Legal Obligation)

We retain and may disclose your data as required to comply with gaming license conditions, respond to lawful requests from Indonesian or international authorities, fulfill tax reporting obligations, participate in dispute resolution or legal proceedings, and meet regulatory audit and record-keeping requirements. This processing is mandatory under applicable laws and regulations.

5. Data Sharing and Third-Party Disclosure

poa88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with limited categories of trusted third parties in specific circumstances:

5.1 Payment Processors and Financial Institutions

We share necessary financial information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These entities process data according to their own privacy policies and applicable banking regulations. We only share the minimum information required to complete transactions.

5.2 Game Providers and Platform Partners

We share limited account information (username, session tokens, bet amounts) with licensed third-party game studios that supply slots, live dealer games, and other content on our platform. These providers require this data to deliver game functionality, calculate results, and report outcomes back to poa88. Game providers are contractually bound to protect your data and use it only for service delivery purposes.

5.3 Identity Verification and KYC Service Providers

We may use specialized third-party KYC verification services to authenticate your identity documents, perform facial recognition matching, check against fraud databases, and validate your age and identity. These providers operate under strict data protection agreements and retain your KYC data only for the duration necessary to complete verification.

5.4 Customer Support and Communication Tools

We use third-party platforms for live chat software, email service providers, and WhatsApp Business API to communicate with you. These tools may process your messages, contact information, and support interaction history. We select reputable providers with strong privacy protections and data processing agreements.

5.5 Analytics and Performance Monitoring

We use analytics services to understand website usage patterns, monitor technical performance, and track conversion funnels. These services process anonymized or pseudonymized data where possible. We do not share personally identifiable information with analytics providers unless necessary for fraud detection purposes.

5.6 Legal and Regulatory Authorities

We may disclose your personal information to gaming regulators, law enforcement agencies, tax authorities, or courts when required by law, compelled by subpoena or court order, necessary to investigate suspected illegal activity or fraud, or required to defend our legal rights. We will notify you of such disclosures where permitted by law.

5.7 Business Transfers

In the event poa88 undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the successor entity as part of the business assets. We will notify you via email and/or prominent notice on our platform before your data is transferred and becomes subject to a different privacy policy.

6. Data Security Measures

poa88 implements comprehensive technical, administrative, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

6.1 Encryption and Secure Transmission

All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) / TLS (Transport Layer Security) protocols – the same encryption standard used by banks and financial institutions. Sensitive data stored in our databases is encrypted at rest using AES-256 encryption algorithms.

6.2 Access Controls and Authentication

Access to personal data is restricted to authorized poa88 employees and contractors on a need-to-know basis. Our systems employ multi-factor authentication, role-based access controls, and strict permission hierarchies. Employees with data access undergo background checks and receive data protection training. All data access is logged and audited.

6.3 Secure Infrastructure and Network Protection

Our servers are hosted in secure data centers with 24/7 physical security, biometric access controls, surveillance monitoring, and redundant power and cooling systems. Network security includes firewalls, intrusion detection systems, DDoS protection, and regular vulnerability scanning.

6.4 Regular Security Audits and Testing

We conduct regular security assessments, penetration testing, and vulnerability scans performed by independent security firms. Our security practices are reviewed as part of our gaming license compliance audits. We maintain an incident response plan to quickly address any security breaches.

6.5 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities without undue delay (within 72 hours of discovery where required by law). Notifications will describe the nature of the breach, affected data categories, potential consequences, and remedial actions taken.

7. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and contractual obligations:

Data Category	Retention Period	Legal Basis
Account Registration Data	Duration of account + 5 years after closure	Gaming license requirement, legal claims period
KYC/Identity Documents	Duration of account + 5 years after closure	AML/KYC regulations, regulatory audit requirements
Financial Transaction Records	7 years from transaction date	Tax law, accounting standards, AML requirements
Gaming Activity Logs	Duration of account + 3 years after closure	Gaming license conditions, dispute resolution
Customer Support Communications	3 years from last interaction	Quality assurance, dispute resolution
Marketing Consent Records	Duration of consent + 2 years	Proof of consent, regulatory compliance
Technical Logs (IP, cookies)	12 months	Security, fraud prevention, system optimization

After the applicable retention period expires, we securely delete or anonymize your personal data using industry-standard data destruction methods. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical analysis and business intelligence purposes.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request. You may access much of your data directly through your poa88 account dashboard (transaction history, account details, communication preferences).

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information (email, phone number, address) directly in your account settings. For KYC document updates, contact customer support with valid updated documentation.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, you withdraw consent, you object to processing, or the data was unlawfully processed. Note that we may be legally required to retain certain data (financial records, KYC documents) for specified periods even after you request deletion. Once legal retention periods expire, we will delete your data.

8.4 Right to Restrict Processing

You can request that we limit how we use your data while we investigate a dispute about the accuracy or lawfulness of processing. During restriction, we will store your data but not actively process it except with your consent or for legal claims.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and transmit it to another service provider. This right applies to data you provided to us based on consent or contract.

8.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing, we will stop sending promotional communications immediately. For other objections, we will assess whether we have compelling legitimate grounds to continue processing.

8.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you can withdraw that consent at any time via the unsubscribe link in emails or your account settings. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer using the contact information in Section 13. We will respond within 30 days and may request additional information to verify your identity before processing certain requests.

9. Cookies and Tracking Technologies

poa88 uses cookies, web beacons, local storage, and similar tracking technologies to enhance your experience, maintain security, and analyze platform usage. A cookie is a small text file stored on your device that helps our website remember your preferences and session information.

9.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality, authentication, and security. These cannot be disabled. Examples: session tokens, login authentication, load balancing.
• Functional Cookies: Remember your preferences and settings. Examples: language preference, currency display, game favorites.
• Analytics Cookies: Help us understand how visitors interact with our platform. Examples: page views, bounce rates, navigation paths (anonymized where possible).
• Fraud Prevention Cookies: Detect suspicious activity and protect against multi-accounting. Examples: device fingerprinting, behavioral analysis tokens.

9.2 Managing Cookies

Most web browsers allow you to control cookies through settings. You can block or delete cookies, but this may impact platform functionality (e.g., inability to stay logged in, loss of preferences). Essential cookies cannot be disabled as they are necessary for service delivery. To manage cookies, consult your browser's help documentation.

10. International Data Transfers

poa88 primarily serves Indonesian residents, and your personal data is stored on servers located in secure data centers within jurisdictions approved by our gaming license. However, some third-party service providers (payment processors, game studios, cloud infrastructure) may be located outside Indonesia. When we transfer your data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for multinational service providers
• Explicit consent where required by law

We only share your data with international partners who commit to protecting it to the same standards outlined in this Privacy Policy.

11. Protection of Minors

poa88 services are strictly prohibited for individuals under 21 years of age, in accordance with Indonesian law and our gaming license conditions. We do not knowingly collect personal information from minors. Our registration process requires users to declare they are at least 21 years old, and we verify age through KYC documentation (Indonesian national identity card showing date of birth).

If we discover that a user is under 21, we will immediately suspend the account, void all wagers and bonuses, return deposited funds to the registered payment method, and delete the minor's personal data from our systems. Parents or guardians who believe their child has provided personal information to poa88 should contact us immediately so we can remove the data.

12. Changes to This Privacy Policy

poa88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this document indicates the effective date of the current version.

Material changes that significantly affect your privacy rights or how we process your data will be communicated via prominent notice on our platform (banner, pop-up) and email notification to your registered address. We encourage you to review this Privacy Policy periodically. Continued use of poa88 services after changes take effect constitutes your acceptance of the updated policy. If you do not agree with modifications, you may close your account as outlined in our Terms & Conditions.

13. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy, your personal data, or exercising your privacy rights, please contact our Data Protection Officer:

• Email: [email protected] (mark subject line "Data Protection Inquiry" for priority routing)
• Live Chat: Available 24/7 via our website – select "Privacy/Data Request" as inquiry type
• WhatsApp: +62-xxx-xxxx-xxxx (available during WIB business hours)

When contacting us regarding privacy matters, please provide your full name, registered email address, and account username to help us locate your records and verify your identity. For data access requests or deletion requests, we may request additional verification to prevent unauthorized disclosure of personal information.

We aim to respond to all data protection inquiries within 30 calendar days. For complex requests, we may extend this period by an additional 30 days and will notify you of the extension and reasons. There is no fee for exercising your privacy rights unless your request is manifestly unfounded or excessive.

Acknowledgment: By using poa88 services, you acknowledge that you have read, understood, and agree to the data collection, use, and protection practices described in this Privacy Policy. You confirm that you are at least 21 years of age and a resident of Indonesia. You understand your privacy rights and how to exercise them.