Privacy Policy

1. Introduction

This Privacy Policy governs the collection, processing, storage, and use of personal data by supe88 (the "Company," "we," "us," or "our") through our website at https://supe88.cam and all associated services (collectively, the "Platform"). This policy applies to all users who access or use our Platform, including visitors, registered users, and customers (collectively, "you" or "users").

supe88 operates an online gaming platform serving the Indonesian market, offering casino games, sports betting, lottery services, and related entertainment products. Given the sensitive nature of financial transactions and personal data involved in online gaming, we have implemented comprehensive data protection measures aligned with international best practices and applicable data protection regulations.

We recognize that privacy is fundamental to building trust with our users. This policy is designed to be transparent about our data practices and to inform you of your rights regarding your personal information. We encourage you to read this policy carefully and contact us if you have any questions or concerns about how we handle your data.

2. Data Controller

supe88 is the data controller responsible for your personal information collected through the Platform. This means we determine the purposes for which and the manner in which your personal data is processed. For data protection inquiries or to exercise your privacy rights, you may contact our Data Protection Officer at:

• Email: [email protected]
• Subject Line: "Data Protection Inquiry" or "Privacy Rights Request"
• Response Time: We will respond to all data protection inquiries within 7 business days

3. Personal Data We Collect

To provide our services effectively and comply with legal obligations, we collect various categories of personal data. The specific data we collect depends on how you interact with our Platform:

3.1 Account Registration Data

When you create an account on supe88, we collect:

• Identification Information: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address
• Account Credentials: Username, password (stored in encrypted format)
• Security Questions: Optional security questions and answers for account recovery

3.2 Identity Verification Data (KYC)

To comply with anti-money laundering regulations and verify your identity, we collect:

• Government-Issued ID: Copy of Indonesian National Identity Card (KTP), passport, or driver's license
• Proof of Address: Utility bills, bank statements, or government correspondence showing your residential address
• Biometric Data: Photograph of you holding your identification document (selfie verification)
• Source of Funds: Documentation verifying the source of funds used for gaming activities (for large transactions)

3.3 Financial Transaction Data

When you deposit or withdraw funds, we collect:

• Payment Method Information: Bank account details, e-wallet account information, payment card details
• Transaction History: Deposit amounts, withdrawal amounts, transaction dates, payment method used
• Transaction Metadata: IP address at time of transaction, device used, transaction status

3.4 Gaming Activity Data

To operate our Platform and comply with gaming regulations, we collect:

• Betting History: Games played, bet amounts, win/loss records, bonus usage
• Account Balance: Current balance, pending withdrawals, bonus funds, loyalty points
• Responsible Gaming Settings: Deposit limits, session time limits, self-exclusion periods
• Game Preferences: Favorite games, frequently played categories, preferred betting markets

3.5 Technical and Usage Data

We automatically collect certain technical information when you access our Platform:

• Device Information: Device type, operating system, browser type and version, screen resolution
• Connection Data: IP address, internet service provider, approximate geographic location (city/region level)
• Usage Analytics: Pages visited, time spent on pages, click patterns, session duration
• Cookies and Tracking: Cookie IDs, session tokens, advertising IDs (see Section 10 for details)

3.6 Communication Data

When you communicate with our customer support team, we collect:

• Support Tickets: Content of support inquiries, email correspondence, live chat transcripts
• Phone Records: Call recordings for quality assurance and training purposes (with your consent)
• Feedback and Surveys: Your responses to customer satisfaction surveys and feedback forms

Data Category	Purpose	Legal Basis
Account Registration Data	Account creation and management	Contract performance
KYC Verification Data	Identity verification, fraud prevention, AML compliance	Legal obligation
Financial Transaction Data	Payment processing, transaction records	Contract performance
Gaming Activity Data	Service provision, responsible gaming, compliance	Contract performance, legal obligation
Technical and Usage Data	Platform optimization, security, analytics	Legitimate interest
Communication Data	Customer support, service improvement	Contract performance, legitimate interest

4. How We Use Your Personal Data

supe88 processes your personal data for specific, explicit, and legitimate purposes only. We do not use your data in ways you would not reasonably expect. The purposes for which we use your personal data include:

4.1 Service Provision

• Creating and managing your user account
• Processing deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay)
• Providing access to gaming services including casino games, sports betting, togel lottery draws, and sabung ayam streaming
• Processing bets and distributing winnings
• Managing bonus allocations and wagering requirements
• Calculating and awarding VIP loyalty points and tier benefits

4.2 Legal and Regulatory Compliance

• Verifying your age to ensure you are 21 years or older as required by Indonesian law
• Conducting Know Your Customer (KYC) identity verification
• Complying with anti-money laundering (AML) regulations and reporting suspicious transactions
• Maintaining accurate financial records for audit and regulatory purposes
• Responding to legal requests from law enforcement or regulatory authorities
• Enforcing our Terms & Conditions and investigating violations

4.3 Fraud Prevention and Security

• Detecting and preventing fraudulent activity, money laundering, and other illegal activities
• Identifying and blocking duplicate accounts and bonus abuse
• Monitoring for collusion, bot usage, and other prohibited activities
• Securing our Platform against cyberattacks, unauthorized access, and data breaches
• Verifying the legitimacy of withdrawals and payment method ownership

4.4 Customer Service and Support

• Responding to your inquiries via live chat, email, WhatsApp, or in-app messaging
• Resolving account issues, payment disputes, and technical problems
• Providing Indonesian-language support tailored to local banking systems and payment methods
• Gathering feedback to improve service quality

4.5 Platform Improvement and Personalization

• Analyzing usage patterns to optimize Platform performance and user experience
• Personalizing game recommendations based on your playing history
• Customizing promotional offers based on your preferences and activity
• Conducting A/B testing to improve Platform features

4.6 Marketing and Communication

• Sending promotional emails about new games, bonuses, and special offers (with your consent)
• Notifying you of important account updates, security alerts, and policy changes
• Delivering personalized marketing communications based on your interests (you can opt out at any time)

4.7 Responsible Gaming

• Implementing and monitoring deposit limits, session time limits, and self-exclusion requests
• Identifying potential problem gambling behavior through activity pattern analysis
• Providing access to responsible gaming tools and support resources
• Enforcing age restrictions and preventing underage gambling

5. Legal Basis for Processing

Under applicable data protection laws, we must have a valid legal basis to process your personal data. supe88 processes your data based on the following legal grounds:

5.1 Contract Performance

Processing is necessary to fulfill our contractual obligations to you as outlined in our Terms & Conditions. This includes account management, payment processing, game provision, and customer support.

5.2 Legal Obligation

Processing is required to comply with legal obligations imposed by Indonesian law and international gaming regulations, including age verification, KYC procedures, AML compliance, and financial record-keeping.

5.3 Legitimate Interest

Processing is necessary for our legitimate business interests, such as fraud prevention, Platform security, data analytics, and service improvement, provided these interests do not override your fundamental rights and freedoms.

5.4 Consent

For certain processing activities such as marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Data Sharing and Third-Party Disclosure

supe88 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, we may share your data with carefully selected third parties in the following limited circumstances:

6.1 Payment Processors

We share necessary payment information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These processors are contractually bound to use your data only for transaction processing and to maintain strict security standards.

6.2 Game Providers

We share limited data with certified game providers to deliver casino games, live dealer experiences, and sports betting markets. Game providers receive only the information necessary to operate games, such as player ID and bet amounts, but not your full personal details.

6.3 Verification Services

We may use third-party identity verification services to validate your KYC documents and prevent fraud. These services process your identification documents and biometric data under strict confidentiality agreements.

6.4 Technology Service Providers

We engage technology partners for hosting, data storage, cybersecurity, analytics, and customer support platforms. These providers have access only to the data necessary to perform their functions and are prohibited from using it for other purposes.

6.5 Legal and Regulatory Authorities

We may disclose your data to law enforcement, regulatory bodies, or courts when required by law, to comply with legal processes, to enforce our Terms & Conditions, or to protect the rights, property, or safety of supe88, our users, or the public.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

7. Data Security Measures

Protecting your personal data is a top priority for supe88. We have implemented comprehensive technical and organizational security measures to safeguard your information against unauthorized access, loss, misuse, alteration, or disclosure:

7.1 Encryption

• Transmission Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by banks
• Storage Encryption: Sensitive data such as passwords and financial information is encrypted at rest in our databases
• End-to-End Security: Payment transactions utilize end-to-end encryption ensuring your financial data never passes through our systems in unencrypted form

7.2 Access Controls

• Role-Based Access: Employee access to personal data is restricted based on job function and necessity
• Multi-Factor Authentication: Administrative systems require multi-factor authentication for access
• Activity Logging: All access to personal data is logged and regularly audited

7.3 Infrastructure Security

• Secure Data Centers: Your data is stored in secure, access-controlled data centers with 24/7 monitoring
• Firewall Protection: Multiple layers of firewalls protect against external threats
• Intrusion Detection: Real-time monitoring systems detect and respond to suspicious activity
• Regular Security Audits: Independent security experts conduct regular penetration testing and vulnerability assessments

7.4 Data Backup and Recovery

• Regular encrypted backups ensure data can be recovered in case of system failure
• Backup data is stored in geographically separate locations for redundancy
• Business continuity plans are tested regularly to ensure rapid recovery

7.5 Employee Training

• All employees undergo mandatory data protection and security training
• Confidentiality agreements bind all staff members
• Security awareness programs promote a culture of data protection

8. Data Retention

supe88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. Specific retention periods vary by data type:

8.1 Active Account Data

While your account remains active, we retain all associated data to provide continuous service. This includes account information, transaction history, gaming activity, and communications.

8.2 Closed Account Data

After you close your account, we retain certain data for legal and regulatory compliance purposes:

• Financial Records: Transaction history, payment records, and betting activity are retained for 7 years to comply with financial regulations and tax laws
• KYC Documents: Identity verification documents are retained for 5 years after account closure to meet anti-money laundering requirements
• Account Information: Basic account details are retained for 2 years to prevent duplicate account creation and address potential disputes

8.3 Marketing Data

If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you in the future. We delete other marketing-related data within 2 years of your last interaction.

8.4 Legal Hold

Data subject to legal proceedings, investigations, or regulatory inquiries is retained until the matter is resolved, regardless of standard retention periods.

8.5 Data Deletion

Upon expiration of retention periods, personal data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual. Deletion is performed using industry-standard methods to ensure data cannot be recovered.

9. Your Privacy Rights

supe88 respects your privacy rights and provides mechanisms to exercise control over your personal data. Depending on your jurisdiction, you may have the following rights:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This includes account information, transaction history, gaming activity, and communications. We will provide this information in a commonly used electronic format.

9.2 Right to Rectification

You can update your account information directly through your account settings. For data you cannot update yourself, you may request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances. However, we may be required to retain certain data to comply with legal obligations or for legitimate business purposes such as fraud prevention and financial record-keeping.

9.4 Right to Restrict Processing

You can request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of data or object to processing based on legitimate interests.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. Upon receiving your objection, we will cease processing unless we can demonstrate compelling legitimate grounds.

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with subject line "Privacy Rights Request." We will respond to your request within 30 days. You may be required to verify your identity before we process your request to ensure data security.

10. Cookies and Tracking Technologies

supe88 uses cookies and similar tracking technologies to enhance your experience on our Platform. A cookie is a small text file stored on your device that allows us to recognize you and remember your preferences.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for Platform functionality, such as maintaining your login session and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use our Platform to help us improve performance and user experience.
• Functional Cookies: Remember your preferences such as language settings and favorite games.
• Marketing Cookies: Used to deliver personalized advertisements and track campaign effectiveness. You can opt out of these through your browser settings.

10.2 Managing Cookies

You can control and delete cookies through your browser settings. However, disabling essential cookies may affect Platform functionality. Most browsers allow you to refuse cookies or delete specific cookies. Consult your browser's help documentation for instructions.

11. Changes to This Privacy Policy

supe88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you through:

• Prominent notice on our homepage
• Email notification to your registered email address
• In-Platform notification upon your next login

The "Last Updated" date at the top of this policy indicates when changes were last made. We encourage you to review this Privacy Policy periodically. Your continued use of supe88 services after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Question"
• Response Time: We will respond to privacy inquiries within 7 business days

For data protection complaints that remain unresolved after contacting us, you may have the right to lodge a complaint with your local data protection authority.