Privacy Policy

abs88 operates the online gambling platform accessible at https://abs88.vu (the "Platform"), which serves members primarily based in Indonesia. This Privacy Policy describes the types of personal information abs88 collects from its members and prospective members, the reasons for collecting that information, how it is stored and protected, the circumstances in which it may be shared with third parties, and the rights you hold over your own data.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an account with abs88 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the processing of your personal data as described herein.

abs88 takes its data-protection obligations seriously. We apply the principle of data minimisation — collecting only the information we genuinely need to operate the Platform, verify your identity, process payments, and comply with our regulatory obligations. We do not sell your personal data to unaffiliated third parties for marketing purposes under any circumstances.

The following terms carry the meanings set out below throughout this Privacy Policy.

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly — including names, identification numbers, location data, online identifiers, or factors specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, restriction, erasure, or destruction.
• "Data Controller" means abs88, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of and under the instructions of abs88 — for example, our payment service providers and certified game studios.
• "Member" / "You" means any individual who has registered a personal account with abs88 or who accesses the Platform without registration.
• "KYC Documents" means identity verification documents submitted by a member to satisfy abs88's Know Your Customer obligations, including but not limited to national identity cards (KTP), passports, and proof of address.

abs88 collects Personal Data across several categories, depending on how you interact with the Platform. The table below summarises what we collect and why.

abs88 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team via live chat, email, or WhatsApp, or participate in a promotion.
• Automatically during platform use — through server logs, cookies, session tracking technologies, and our gaming platform's event-logging systems. These capture Technical & Device Data each time you access the Platform.
• From payment service providers — when your bank (BCA, BRI, BNI, Mandiri, or other local Indonesian banks) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) confirms or declines a transaction, we receive confirmation data necessary to update your account balance.
• From identity verification partners — where abs88 uses a third-party KYC service to verify the authenticity of documents you submit, that partner may return verification status data to abs88.
• From publicly available sources — in cases of fraud investigation or responsible gaming reviews, abs88 may cross-reference publicly available information to verify the accuracy of data you have provided.

abs88 processes your Personal Data for the following specific purposes:

To create and maintain your abs88 account, authenticate your login sessions, process bets and game rounds across all product categories (sportsbook, live casino, slots, Domino QQ, Baccarat, and togel), calculate and credit winnings, and provide you with access to your account history and transaction records.

To verify that you are at least 21 years of age and to confirm your identity as required by our responsible gaming commitments and international licensing obligations. abs88 strictly enforces the 21+ age restriction across all products and jurisdictions it serves, with a particular focus on members resident in Indonesia.

To execute deposits from and withdrawals to your verified Indonesian bank accounts and e-wallets, to maintain accurate financial records, and to reconcile transactions. All financial data is shared with our payment service providers only to the minimum extent necessary to complete each transaction.

To detect and investigate suspicious activity, prevent bonus abuse, identify unauthorised account access, comply with anti-money laundering (AML) obligations, and report to relevant international regulatory or law enforcement bodies where legally required.

To respond to your enquiries, resolve disputes, process complaints, and improve the quality of our support service. Communications records are retained to provide context for ongoing or future interactions and may be reviewed during internal quality assessments.

To monitor gaming behaviour for indicators of problem gambling, administer self-exclusion and deposit limit requests, enforce cooling-off periods, and comply with our responsible gaming obligations. For full details, see our Responsible Gaming page.

Where you have provided explicit consent, to send you promotional offers, bonus notifications, and news about new games or sportsbook markets. You may withdraw marketing consent at any time by contacting support or updating your account preferences. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

To monitor platform performance, diagnose technical faults, conduct A/B testing on user interface improvements, prevent denial-of-service attacks, and ensure the ongoing integrity and availability of the abs88 platform.

abs88 relies on the following legal bases for processing your Personal Data:

• Contractual necessity — processing required to perform our obligations under the Terms & Conditions you agreed to at registration, including account management, payment processing, and game operation.
• Legal obligation — processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming mandates imposed by our international licensing body.
• Legitimate interests — processing carried out in pursuit of abs88's legitimate business interests, including fraud prevention, platform security, customer support quality, and product improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent — processing based on your freely given, specific, informed, and unambiguous consent, primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

abs88 does not sell your Personal Data. We may share your data with the following categories of third party, strictly on a need-to-know basis and subject to appropriate data-processing agreements:

• Payment service providers — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transactional data necessary to process your deposits and withdrawals.
• Certified game studios — providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive your member session token to authenticate your game sessions and calculate game outcomes. These studios do not receive your full identity profile.
• Identity verification partners — third-party KYC service providers that assist with document authentication receive the KYC documents you submit and return a verification status to abs88. These partners operate under strict confidentiality obligations.
• Fraud prevention and AML services — specialist third-party providers may receive anonymised or pseudonymised transaction data to assist with pattern-analysis for fraud and money-laundering detection.
• Regulatory and law enforcement authorities — abs88 will disclose Personal Data to competent authorities where legally required to do so, including in response to lawful court orders, regulatory investigations, or mandatory AML reporting obligations.
• Professional advisors — lawyers, auditors, and accountants engaged by abs88 may access Personal Data to the minimum extent necessary to perform their professional services, subject to binding confidentiality obligations.

abs88 operates servers and engages service providers in multiple international jurisdictions. As a result, your Personal Data may be transferred to and processed in countries other than Indonesia. Where such transfers occur, abs88 takes appropriate safeguards to ensure that your data receives a level of protection equivalent to that required under internationally recognised data-protection standards.

Safeguards used by abs88 for international transfers include:

• Contractual data-processing agreements with all international Data Processors that incorporate standard data-protection clauses;
• Transfer only to service providers who maintain industry-standard security certifications (such as ISO 27001 or SOC 2);
• Strict limitation of data transferred to the minimum necessary for the specific processing purpose.

abs88 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law or legitimate business need. Our general retention schedule is as follows:

• Account and identity data — retained for the duration of your active membership and for a minimum of five (5) years following account closure, to meet regulatory and AML record-keeping requirements.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, in accordance with international financial record-keeping standards applicable to our licensing jurisdiction.
• KYC documents — retained for a minimum of five (5) years following account closure or the date of the last KYC verification, whichever is later.
• Customer support communications — retained for three (3) years from the date of the last communication in each case, to support dispute resolution and quality improvement.
• Gaming session logs — retained for two (2) years from the session date for operational and dispute resolution purposes.
• Marketing preference data — retained until you withdraw consent or close your account, after which it is deleted within 30 days.

At the end of each applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

abs88 implements a layered information-security architecture designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or mobile device and abs88 servers — the same standard used by international financial institutions.
• Encryption at rest for all stored Personal Data and financial records using AES-256 encryption.
• Role-based access controls ensuring that abs88 staff can access only the Personal Data necessary for their specific job function.
• Multi-factor authentication required for all abs88 internal administrative systems that handle Personal Data.
• Continuous intrusion-detection monitoring and automated alerting on anomalous access patterns.
• Regular third-party penetration testing and security audits conducted by independent cybersecurity specialists.
• Secure data-centre facilities with physical access controls, environmental monitoring, and redundant power and connectivity.

Despite these measures, no system is entirely immune to security incidents. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, abs88 will notify affected members promptly via their registered contact method and will take all reasonable remediation steps without delay.

abs88 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your session preferences, detect fraud, and — where consent has been given — measure the effectiveness of promotional campaigns.

• Strictly necessary cookies — essential for the Platform to function. These enable session authentication, load balancing, and security features. They cannot be disabled without breaking core platform functionality.
• Functional cookies — remember your preferences such as display settings and game lobby filters to improve your experience across sessions.
• Analytical cookies — collect aggregated, anonymised data about how members navigate the Platform, which pages and games are most popular, and where technical errors occur. This data is used solely to improve the Platform.
• Marketing cookies — only deployed where you have provided explicit consent. These help abs88 understand which promotional campaigns brought you to the Platform, so we can optimise future offers for members with similar interests.

You may control or disable non-essential cookies through your browser settings at any time. Note that disabling functional or analytical cookies may affect the quality of your experience on the abs88 platform. Strictly necessary cookies cannot be disabled through browser settings without impacting platform availability.

As a member of abs88, you have the following rights in respect of the Personal Data we hold about you. To exercise any of these rights, contact our Data Protection team via live chat or at [email protected]. We will respond to all rights requests within 30 calendar days.

abs88 does not knowingly collect Personal Data from any person under the age of 21. The Platform is intended exclusively for adults aged 21 and over. If abs88 becomes aware that Personal Data has been collected from a person under 21 without verifiable parental or guardian consent, we will take immediate steps to delete that information and close the associated account.

If you are a parent or guardian and you believe that a minor in your care has provided Personal Data to abs88 or has accessed the Platform, please contact us immediately at [email protected]. We will investigate promptly and take all appropriate action.

abs88 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, operational requirements, or applicable law. When we make material changes, we will notify registered members via a platform notification or email to the address on file no less than seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the abs88 platform following the effective date of any revision constitutes your acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the Personal Data abs88 holds about you, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly within the abs88 platform — the fastest route for urgent data concerns.
• Email: [email protected] — please include "Privacy Request" in the subject line so your message is routed to the correct team.
• WhatsApp: +62 811-0000-8800 — available 24/7 in WIB, with native Indonesian-speaking agents available at all hours.

abs88 aims to acknowledge all Privacy Policy enquiries within two hours and to provide a substantive response within five business days. Complex rights requests (such as full data access or erasure requests) may require up to 30 calendar days to process, in line with international data-protection standards.