dam88 Privacy Policy

dam88 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our online gaming platform at dam88.bio. This Privacy Policy is a formal statement of how dam88 collects, processes, stores, shares, and protects your personal information in the course of providing our sportsbook, live casino, slots, esports betting, and related services to players across Indonesia and other eligible markets.

This policy is written in plain, professional English so that all of our players — including those in Jakarta, Surabaya, Bandung, Bali, Medan, and other cities across Indonesia — can clearly understand their rights and our obligations. Where technical or legal terms are used, we have provided explanations to ensure clarity.

dam88 operates as a data controller with respect to the personal data of its Members. This means we determine the purposes for which and the means by which your personal data is processed. Where we engage third-party processors to handle data on our behalf, those processors act under our instructions and are bound by contractual data protection obligations.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and dam88.

dam88 collects personal data across several categories depending on how you interact with the platform. The table below provides a comprehensive overview of the categories of personal data we collect and why each category is necessary.

dam88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data unless specifically required by applicable law or regulation and disclosed to you separately at the point of collection.

dam88 collects your personal data through the following channels and methods:

• Direct collection: Data you provide voluntarily when you register an account, complete the KYC process, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automated collection: Data collected automatically when you visit or interact with the dam88 platform, including via cookies, web beacons, pixel tags, and server logs. See Section 6 (Cookies & Tracking) for full details.
• Third-party sources: Data received from identity verification and KYC service providers, payment processors, fraud detection services, and publicly available sources (such as sanctions lists and politically exposed persons databases) used to meet our AML and compliance obligations.
• Referral sources: Where you access dam88 via an affiliate or referral link, we may receive limited information from the referring partner to attribute the referral for commission purposes. No personally sensitive data is shared in this process.

dam88 processes personal data only for the specific, legitimate purposes listed below. For each purpose, we have identified the legal basis under which processing is carried out:

• Account creation and management — To register your account, authenticate your identity, and manage your membership on the platform. Legal basis: Contract performance.
• Transaction processing — To process deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records. Legal basis: Contract performance and legal obligation.
• KYC and age verification — To verify that you meet the 21+ age requirement and that your identity matches the payment methods associated with your account. Legal basis: Legal obligation and legitimate interest.
• Fraud prevention and security — To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct. Legal basis: Legitimate interest and legal obligation.
• Responsible gaming monitoring — To monitor gameplay patterns and identify indicators of problem gambling behavior, enabling us to intervene with appropriate support measures. Legal basis: Legitimate interest and legal obligation.
• Customer support — To respond to your inquiries, resolve disputes, and provide technical assistance. Legal basis: Contract performance.
• Marketing communications — To send promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. Legal basis: Consent. You may withdraw consent at any time.
• Platform improvement — To analyze usage patterns and technical performance data to improve the dam88 user experience, game selection, and platform reliability. Legal basis: Legitimate interest.
• Legal and regulatory compliance — To comply with applicable anti-money-laundering regulations, international gaming licensing requirements, and lawful requests from regulatory or law enforcement authorities. Legal basis: Legal obligation.

dam88 does not use automated decision-making or profiling in any way that produces legal effects concerning you or similarly significantly affects you, without your explicit consent or a clear legal basis.

dam88 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Your data may be shared only in the limited circumstances described below:

• Payment processors: We share financial data with payment service providers — including Indonesian bank networks, e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), and any international card processors used by the platform — strictly to the extent required to process your transactions.
• KYC and identity verification partners: We share identity documents and personal data with licensed KYC verification service providers to fulfill our age and identity verification obligations. These partners process data solely under our instruction and may not use it for any other purpose.
• Fraud prevention and AML services: We may share transactional and identity data with fraud detection platforms and share relevant data with financial intelligence units or law enforcement bodies where required by applicable AML regulations.
• Platform technology providers: Third-party providers who host, maintain, or support the dam88 platform infrastructure may access personal data to the extent technically necessary to provide their services. All such providers are bound by appropriate data processing agreements.
• Game studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe may receive anonymized or pseudonymized session data to support game delivery. Personal identifiers are not shared with game studios for marketing purposes.
• Regulatory and legal authorities: dam88 will disclose personal data to governmental, regulatory, or law enforcement agencies where required by law, court order, or licensing authority mandate — including obligations under international AML and counter-terrorism financing frameworks.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of the dam88 business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer via the registered email address on your account.

dam88 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on dam88:

You can manage or disable non-essential cookies at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the dam88 platform. dam88 does not respond to browser "Do Not Track" signals at this time, as no uniform standard for such signals has been established across browsers.

dam88 retains your personal data only for as long as is necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. The following retention schedule applies:

• Active account data: Retained for the full duration of your membership on dam88, plus a post-closure retention period as described below.
• Financial transaction records: Retained for a minimum of 5 years following the date of the transaction, in accordance with international AML and financial record-keeping regulations. In certain jurisdictions, this period may be extended to 7 years.
• KYC and identity documents: Retained for a minimum of 5 years after account closure or the last transaction, whichever is later.
• Customer support communications: Retained for up to 3 years from the date of the interaction, to support dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of your account membership or until you withdraw consent, plus 1 year thereafter for evidentiary purposes.
• Technical and usage logs: Anonymized or deleted after 12 months unless specific logs are required to be retained in connection with an ongoing fraud investigation, legal proceeding, or regulatory inquiry.

Where retention is mandated by law — particularly under Indonesian financial regulations or international AML frameworks applicable to dam88's licensed jurisdiction — data will be retained for the legally required period even if it exceeds the operational periods above. Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymized.

dam88 implements a comprehensive set of technical and organizational security measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Key security controls include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and dam88 servers, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted storage of sensitive fields — including passwords (hashed using industry-standard algorithms), KYC document images, and financial account identifiers — at rest in our database infrastructure.
• Two-factor authentication (2FA) available to all Members as an optional but strongly recommended account security layer. Enable 2FA from your account security settings dashboard.
• Access controls limiting internal access to personal data on a strict need-to-know basis. dam88 staff access to Member data is logged, monitored, and subject to regular audit.
• Intrusion detection and monitoring systems that continuously scan dam88 infrastructure for anomalous activity, unauthorized access attempts, and potential security vulnerabilities.
• Regular security assessments including penetration testing and vulnerability scanning conducted by qualified third-party security specialists.

While dam88 applies rigorous security standards, no digital system can be guaranteed 100% secure against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, dam88 will notify affected Members without undue delay and will take all reasonable steps to contain and remediate the breach.

As a data subject, you hold specific rights regarding the personal data dam88 holds about you. dam88 is committed to honoring these rights within the timeframes required by applicable law. Your rights include:

• Right of Access: You may request a copy of all personal data dam88 holds about you, including details of how it is processed and with whom it has been shared.
• Right to Rectification: If any personal data held by dam88 is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that this right is subject to overriding legal retention obligations — for example, transaction records required under AML law cannot be deleted on request.
• Right to Restriction of Processing: You may request that dam88 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being evaluated.
• Right to Data Portability: You may request that dam88 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to dam88's processing of your personal data where that processing is based on legitimate interests. Where processing is for direct marketing purposes, you have an absolute right to object at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., receiving marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact dam88 customer support via live chat from your account dashboard or by email at [email protected]. dam88 will respond to all verified data rights requests within 30 days. Where a request is complex or involves a high volume of data, this period may be extended by up to a further 60 days, with notification provided to you within the initial 30-day window.

dam88 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorized individuals. Where identity cannot be satisfactorily verified, dam88 reserves the right to decline the request.

dam88 does not knowingly collect personal data from individuals under the age of 21. During the registration process, you are required to confirm that you meet the minimum age requirement. Prior to processing any withdrawal, dam88 requires completion of KYC verification which includes submission of a government-issued photo ID confirming your date of birth.

If dam88 discovers or has reasonable grounds to suspect that a Member is under the age of 21, we will immediately suspend the account, freeze all associated funds pending investigation, and — if the suspicion is confirmed — permanently close the account, refund any unplayed deposits to the originating payment method, and securely delete any personal data collected from the underage individual in excess of what is required for AML record-keeping purposes.

If you are a parent or guardian and believe your child has registered on dam88, please contact us immediately at [email protected] with the relevant account details. We will investigate and take appropriate action with the utmost urgency.

dam88 operates as an internationally licensed gaming platform. Your personal data may be transferred to and processed in countries other than Indonesia, including jurisdictions where dam88's servers, data processors, or licensing authority are located. Such transfers are carried out in accordance with applicable data protection standards.

Whenever personal data is transferred outside of Indonesia, dam88 implements appropriate safeguards to ensure that your data receives a level of protection equivalent to that provided within Indonesia. These safeguards include:

• Contractual clauses in agreements with international data processors that impose data protection obligations equivalent to those applied by dam88.
• Transfer only to jurisdictions that maintain adequate data protection frameworks recognized by international standards bodies.
• Use of pseudonymization and encryption techniques where technically feasible to limit the risk associated with cross-border data flows.

For further information about the specific safeguards applied to any particular international data transfer, please contact [email protected].

dam88 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and — where the changes are significant — notify registered Members via the email address associated with their account.

We encourage all Members to review this Privacy Policy periodically. Your continued use of the dam88 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any material change, you should close your account before the new policy takes effect and cease use of the platform.

The current version of the Privacy Policy is always accessible at dam88.bio/privacy-policy and supersedes all prior versions. Historical versions are available on request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data dam88 holds about you, please reach out to our support team through one of the following channels:

• Live Chat: Available 24/7 directly from your dam88 account dashboard. Our native Indonesian-speaking support agents are on hand to assist with all account and data inquiries.
• Email: [email protected] — please allow up to 24 hours for a response. When submitting a data rights request by email, include your registered username, a clear description of your request, and a copy of a valid photo ID so that we can verify your identity before processing the request.

dam88 is committed to resolving all privacy-related inquiries promptly and professionally. We serve players across all Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) — and our support team is equipped to handle data inquiries from Members in Jakarta, Surabaya, Bandung, Bali, Medan, Semarang, Makassar, and all other regions of Indonesia.