🔒 Privacy Policy

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — directly or indirectly — including name, identification number, location data, online identifier, or factors specific to that person's physical, physiological, genetic, mental, economic, cultural, or social identity.
• "Processing" means any operation performed on personal data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means gayo88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party entity that processes personal data on behalf of gayo88, such as payment processors, identity verification providers, and cloud hosting services.
• "Cookies" means small text files placed on your device by our Platform to recognise your browser, remember preferences, and support analytics and security functions.
• "KYC Documents" means identity and address verification documents submitted by you in fulfilment of Know Your Customer obligations, including national ID cards (KTP), passports, utility bills, and bank statements.
• "Sensitive Data" means a subset of personal data warranting heightened protection, including government-issued identification numbers, financial account details, and data relating to health or legal status.

gayo88 is an internationally licensed online gaming platform operating at gayo88.cam. We serve a global player base with a primary focus on Indonesia's English-speaking gaming community, with players concentrated across major Indonesian cities including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and Palembang.

As Data Controller, gayo88 is responsible for determining how and why your personal data is processed. Where we engage third-party Data Processors — such as payment gateways handling BCA, BRI, BNI, and Mandiri transfers, or identity verification providers — we ensure contractual data protection obligations are in place before any data is shared.

For all privacy-related enquiries, you may contact our Data Protection team at [email protected]. We do not operate a separate data protection email address; our single support channel is monitored by trained privacy-compliance staff.

gayo88 collects personal data in the following categories:

gayo88 collects personal data through the following channels:

• Directly from You: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or participate in a promotion, you actively provide personal data to us.
• Automatically via Technology: When you visit or interact with our Platform, certain technical and behavioural data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device fingerprint, and session activity.
• From Third-Party Verification Providers: During the KYC process, we may receive confirmation data from third-party identity verification services engaged to cross-check the documents you submit against public identity databases.
• From Payment Processors: When you complete a deposit or withdrawal via BCA, BRI, BNI, Mandiri, or an e-wallet provider, our payment processing partners may share transaction reference data with us to reconcile your account balance.
• From Fraud Prevention Services: We may receive risk signals from fraud detection partners that help us identify potentially fraudulent account activity, unusual betting patterns, or suspicious login attempts.

Every processing activity conducted by gayo88 rests on one of the following recognised legal bases:

1. Contractual Necessity: Processing your registration data, KYC documents, and financial data is necessary to perform the contract between you and gayo88 — specifically, to provide gaming services, process payments, and maintain your account.
2. Legal Obligation: We are required by our international operating licence to conduct KYC verification, maintain transaction records, and report certain activities to relevant authorities. This processing is mandatory and cannot be opted out of while you hold an active account.
3. Legitimate Interests: We process technical and behavioural data to maintain platform security, prevent fraud, improve our services, and personalise your gaming experience. These legitimate interests are balanced against your privacy rights; we do not process data under this basis where your interests clearly override ours.
4. Consent: Where we process data for marketing communications or non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

gayo88 uses your personal data for the following specific and disclosed purposes:

• Account Management: Creating and maintaining your player account, authenticating logins, managing account preferences, and processing account closure requests.
• Payment Processing: Verifying deposit and withdrawal requests, reconciling transactions against your account balance, and detecting payment fraud. All IDR-denominated transactions are logged with full traceability.
• Identity Verification (KYC): Confirming that you meet the 21+ age requirement and that your identity matches the payment methods registered to your account, in compliance with our licensing obligations.
• Responsible Gaming Monitoring: Analysing your gaming activity to identify patterns consistent with problem gambling. Where such patterns are detected, our Responsible Gaming team may proactively reach out to offer support tools including deposit limits, cooling-off periods, and self-exclusion.
• Platform Security: Detecting and preventing unauthorised access, account takeovers, bonus abuse, money laundering, and collusion between players.
• Service Improvement: Using aggregated and anonymised behavioural data to improve platform usability, optimise page performance, and develop new features that better serve Indonesian players.
• Customer Support: Referencing your account history and communication logs when responding to support queries, resolving disputes, and processing complaints.
• Legal Compliance: Fulfilling record-keeping obligations under our operating licence, responding to lawful requests from regulatory authorities, and defending against legal claims.
• Marketing (Consent-Based Only): Sending you promotional offers, bonus notifications, and seasonal campaign updates relevant to Indonesian gaming — such as Idul Fitri or Imlek promotions — where you have opted in to receive such communications. You may opt out at any time.

gayo88 does not sell your personal data. We share your data only in the limited circumstances described below:

• Payment Service Providers: Bank transfer processors facilitating transactions with BCA, BRI, BNI, Mandiri, CIMB Niaga, and Bank Permata, as well as e-wallet platforms including OVO, DANA, GoPay, ShopeePay, and LinkAja, receive the minimum data necessary to process your transactions. These providers operate under contractual data-processing agreements with gayo88.
• Identity Verification Partners: Third-party KYC providers receive your identity documents and verification data for the sole purpose of confirming your eligibility. These partners are prohibited from using your data for any independent purpose.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, and Spribe may receive anonymised session identifiers to support game delivery and resolve technical disputes. They do not receive your full personal profile.
• Fraud Prevention & Security Services: Risk management platforms receive technical identifiers (IP address, device fingerprint) to evaluate transaction risk scores. No financial account details are transmitted in this context.
• Legal and Regulatory Authorities: gayo88 will disclose personal data to law enforcement agencies, regulators, or courts of competent jurisdiction where required by law, pursuant to a valid legal order, or where disclosure is necessary to protect the safety of any individual.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of substantially all of our assets, your data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

gayo88 operates internationally, and your personal data may be transferred to and processed in countries outside Indonesia. When such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards we employ for international transfers include:

• Standard contractual clauses incorporated into agreements with all Data Processors receiving data from Indonesian players.
• Restricting data transfers to jurisdictions that maintain internationally recognised data protection frameworks.
• Conducting due diligence assessments on third-party processors before any cross-border data sharing is established.
• Applying encryption and pseudonymisation to data sets before transfer wherever technically feasible.

By using the gayo88 platform, you acknowledge that your data may be processed in countries outside Indonesia. If you would like specific information about the countries to which your data may be transferred, please contact us at [email protected].

gayo88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our operating licence. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

gayo88 uses cookies and similar tracking technologies to operate the Platform effectively and to improve the experience for all players. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for core Platform functions including secure login sessions, account authentication, and fraud prevention. These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used solely to improve Platform performance.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
• Marketing Cookies (Consent Required): Used only where you have provided explicit consent, these cookies support personalised promotional content based on your gaming preferences and activity patterns on gayo88.

You may manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from accessing the core gaming services on gayo88, though some personalisation features may be reduced.

As a gayo88 player, you hold the following rights over your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 days.

gayo88 operates exclusively as an adult gaming platform. Our services are strictly prohibited for anyone under the age of 21. We do not knowingly collect, process, or retain any personal data from individuals under 21 years of age.

If we discover that personal data has been collected from an individual who is under 21, we will immediately suspend the associated account, delete all personal data collected in connection with that account, and reverse any financial transactions where technically and legally feasible.

If you are a parent or guardian and believe that your child has accessed gayo88 and provided personal data without your consent, please contact us immediately at [email protected]. We will treat such reports with the highest priority and take appropriate action within 24 hours of notification.

gayo88 implements a multi-layered security framework to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys. HTTPS is enforced across every page of the Platform with no unencrypted fallback.
• Encryption at Rest: Sensitive personal data — including KYC document files, financial account details, and identification numbers — is encrypted at the database level using AES-256 encryption.
• Access Controls: Internal access to personal data is governed by a strict role-based access control (RBAC) system. Only personnel with a direct operational need to access specific data categories are granted permission. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication (2FA): All internal staff accounts with access to player data require 2FA authentication. Players are also strongly encouraged to enable 2FA on their own accounts for an additional layer of protection.
• Regular Security Audits: gayo88 commissions periodic independent penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.
• Payment Data Isolation: Full bank account numbers and e-wallet credentials are processed exclusively through PCI-DSS-compliant payment gateways and are never stored in plain text on gayo88's own servers.

The gayo88 Platform may contain references to game studios, sports data providers, or other third-party services. This Privacy Policy applies solely to personal data collected and processed by gayo88. It does not govern the privacy practices of any third party whose services are integrated into or referenced from our Platform.

We encourage you to review the privacy policies of any third-party service providers you interact with in connection with your gaming activity. gayo88 accepts no responsibility for the data practices of third parties operating independently of our Platform.

gayo88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable law. Where a material change is made to how we collect or use your personal data, we will notify you by email or by a prominent notice on the Platform at least 14 days before the change takes effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We recommend reviewing this page periodically. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If you do not agree with a material change, you may close your account before the change takes effect by contacting our support team. Closing your account does not affect the retention of data we are legally required to retain under Section 9 of this Policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the gayo88 privacy team through the following channels:

• Email: [email protected] — plaintext only, not a clickable link
• Live Chat: Available 24 hours a day, 7 days a week, from any page on the Platform
• Response Time: We aim to acknowledge all privacy-related requests within 48 hours and to provide a full response within 30 calendar days

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or to seek resolution through the dispute mechanism described in our Terms & Conditions.