Privacy Policy

01 Definitions

The following defined terms are used consistently throughout this Privacy Policy. Where terms are also defined in our Terms & Conditions, the same meanings apply unless the context requires otherwise.

• "Personal Data" means any information relating to an identified or identifiable natural person — the data subject — who can be directly or indirectly identified by reference to that information, including but not limited to a name, identification number, IP address, or one or more factors specific to that person's physical, economic, or online identity.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means emon88, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of emon88 under written instruction and appropriate data-processing agreements.
• "Member" / "You" means any registered user of the emon88 Platform, or any individual who visits the Platform without registering.
• "KYC" means the Know Your Customer identity verification process undertaken by emon88 in accordance with applicable anti-money-laundering and responsible gaming obligations.
• "Cookies" means small data files placed on your device by the Platform to enable functionality, improve performance, and support analytics.

02 Data We Collect

emon88 collects several categories of Personal Data to operate the Platform safely, comply with regulatory requirements, and deliver a high-quality experience to Indonesian Members. The categories of data we collect are outlined in the table below:

03 How We Collect Your Data

emon88 collects Personal Data through several distinct channels, each serving a specific operational or compliance purpose:

3.1 Directly from You

The majority of your Personal Data is provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact our support team, participate in a promotion, or update your Account preferences. You are not obligated to provide all requested data; however, failure to provide data that is required by law (e.g., KYC documents) or that is necessary to operate the Platform (e.g., a valid email address) may result in restricted access to certain services.

3.2 Automatically via Technology

When you visit the emon88 Platform, we automatically collect certain Technical Data through server-side logging, cookies, pixel tags, and similar tracking technologies. This data includes your IP address, device identifiers, browser configuration, pages visited, and session duration. This automated collection happens regardless of whether you are a registered Member or an unregistered visitor. Please refer to Section 10 (Cookies & Tracking) for full details.

3.3 From Third Parties

emon88 may receive Personal Data about you from trusted third-party sources in limited circumstances, including:

• Payment Processors: Confirmation of transaction status from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify deposit and withdrawal requests.
• Identity Verification Providers: Third-party KYC service providers may return verification status results to emon88 after processing submitted identity documents.
• Fraud Prevention Services: Shared fraud-indicator data from industry-standard anti-fraud networks to identify and prevent misuse of the Platform.
• Game Content Providers: Studios such as Evolution Gaming, Pragmatic Play, PG Soft, and Ezugi may share game session data with emon88 for integrity monitoring, dispute resolution, and RNG audit trail purposes.

04 Purposes of Processing

emon88 processes your Personal Data only for specific, legitimate purposes. We do not process your data in a manner incompatible with the purposes for which it was collected. Our key processing purposes are:

• Account Management: Creating, maintaining, and securing your Account; verifying your identity and age (21+ policy); authenticating logins; and managing Account preferences and responsible gaming settings.
• Transaction Processing: Facilitating deposits and withdrawals via Indonesian bank transfers and e-wallets; maintaining accurate financial records; investigating and resolving payment disputes.
• Regulatory Compliance: Meeting obligations under applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and international gaming license conditions, including mandatory reporting to regulatory bodies where required by law.
• Platform Security: Detecting, preventing, and investigating fraudulent activity, unauthorized Account access, collusion, bonus abuse, and other forms of Platform misuse.
• Service Improvement: Analyzing aggregated usage data and betting patterns to improve Platform functionality, optimize game offerings, and develop new features tailored to the preferences of Indonesian Members.
• Customer Support: Responding to inquiries, resolving complaints, and maintaining support interaction records for quality assurance and staff training purposes.
• Responsible Gaming: Monitoring betting behavior for indicators of problem gambling; enforcing self-exclusion, deposit limit, and loss-limit elections; and providing targeted support resources where appropriate.
• Marketing & Promotions: Sending promotional communications about bonuses, tournaments, and seasonal offers (Idul Fitri, Ramadhan specials, Independence Day promotions) to Members who have opted in to receive such communications. You may withdraw your marketing consent at any time via Account settings or by contacting support.
• Legal Defense: Establishing, exercising, or defending emon88's legal rights in connection with disputes, regulatory investigations, or litigation.

05 Legal Basis for Processing

emon88 processes your Personal Data on the following legal bases, which correspond to the processing purposes described in Section 4:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you entered into when registering an Account — in cluding Account management, transaction processing, and delivering betting and gaming services.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including AML obligations, KYC requirements, and mandatory reporting duties imposed by our international gaming licenses.
• Legitimate Interests: Processing is necessary for emon88's legitimate business interests, including fraud prevention, Platform security, service improvement, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not required by contract or law, we rely on your freely given, specific, and informed consent — for example, when sending optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Data Sharing & Disclosure

emon88 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

6.1 Service Providers & Data Processors

We engage carefully selected third-party service providers who process Personal Data on our behalf under binding data-processing agreements. These providers include payment gateway operators (facilitating transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja), cloud hosting providers, identity verification platforms, customer support software vendors, and email delivery services. All such processors are contractually prohibited from using your data for any purpose beyond the specific service they provide to emon88.

6.2 Game Content Partners

To deliver live casino games, RNG slots, and other gaming content, emon88 shares necessary session data with licensed game studios including Evolution Gaming, Ezugi, Pragmatic Play, PG Soft, Microgaming, NetEnt, and Spribe. The data shared is limited to what is required for game session authentication, result recording, and regulatory audit trails. Each studio operates under its own data-protection framework consistent with its gaming license obligations.

6.3 Regulatory & Law Enforcement Authorities

emon88 will disclose Personal Data to regulators, law enforcement agencies, tax authorities, or courts when required to do so by applicable law, valid legal process, or regulatory instruction. Where legally permissible, we will notify the affected Member of such disclosure in advance.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of emon88's assets, your Personal Data may be transferred to the acquiring or successor entity as part of that transaction. We will provide notice of any such transfer and ensure that the successor entity is bound by privacy obligations no less protective than those set out in this Policy.

6.5 With Your Consent

Outside of the circumstances described above, emon88 will share your Personal Data with third parties only with your prior explicit consent, which you may withdraw at any time by contacting [email protected].

07 International Data Transfers

emon88 is an internationally operated platform serving Members primarily based in Indonesia. Your Personal Data may be transferred to, and stored or processed in, countries outside Indonesia — including the jurisdictions where our game-content partners, cloud hosting infrastructure, and third-party processors are located.

Whenever Personal Data is transferred internationally, emon88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under this Policy. These safeguards may include:

• Standard contractual clauses approved by recognized data protection authorities, incorporated into agreements with all international data processors.
• Transfers to jurisdictions recognized as providing an adequate level of data protection by relevant international standards.
• Binding corporate rules where transfers occur within a group of companies subject to a common data-protection governance framework.

08 Data Retention

emon88 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

When Personal Data is no longer required for any of the above purposes, emon88 will securely delete or anonymize it in accordance with our internal data lifecycle management procedures. Anonymized data that cannot be re-linked to any individual may be retained indefinitely for statistical and analytical purposes.

09 Security Measures

emon88 implements a comprehensive, multi-layered security framework to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and emon88 servers is encrypted using industry-standard 256-bit Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols. Look for the padlock icon and "https://" prefix in your browser's address bar when using the Platform.
• Data Encryption at Rest: Sensitive Personal Data stored in our databases — including KYC documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within emon88 is strictly limited to personnel who require it to perform their job functions. All internal access is role-based, logged, and subject to regular access reviews.
• Two-Factor Authentication (2FA): emon88 supports optional 2FA for Member Accounts and enforces mandatory 2FA for all internal administrative access to systems holding Personal Data.
• Penetration Testing & Vulnerability Management: The Platform undergoes regular independent security assessments, penetration tests, and vulnerability scans conducted by qualified third-party security firms.
• Incident Response: emon88 maintains a documented data breach response plan. In the event of a security incident that poses a risk to your Personal Data, we will notify affected Members and, where required, relevant regulatory authorities within the timeframes prescribed by applicable law.

10 Cookies & Tracking Technologies

emon88 uses cookies and similar tracking technologies (including pixel tags and local storage objects) to operate the Platform effectively, remember your preferences, analyze traffic patterns, and support fraud prevention. The categories of cookies we use are described below:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, CSRF protection cookies, and load-balancer routing cookies. No Personal Data collected via strictly necessary cookies is used for marketing purposes.

10.2 Functional Cookies

Functional cookies remember your Platform preferences — such as language settings, preferred odds format, and responsible gaming notification intervals — so that you do not need to reconfigure them on each visit.

10.3 Analytics Cookies

We use analytics cookies to collect aggregated, anonymized data about how Members use the Platform — including which pages are visited most frequently, how long Members spend on each section, and which features generate the most engagement. This data informs Platform improvements and new feature development. Analytics data is not used to identify individual Members.

10.4 Fraud Prevention Cookies

Certain cookies support our fraud-detection systems by assigning a session fingerprint that helps identify suspicious activity patterns, such as multiple Account registrations from the same device or automated bot behavior. These cookies are essential to maintaining the integrity and fairness of the Platform for all Members.

10.5 Managing Cookies

You can manage cookie preferences through your browser's settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your Account. For detailed instructions on managing cookies in your specific browser, please refer to your browser's official help documentation.

11 Your Data Protection Rights

As a Member of emon88, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the Personal Data emon88 holds about you, together with information about how it is used and who it has been shared with. We will provide this information in a clear, structured format free of charge.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. You may update most of your contact and preference data directly through your Account settings without needing to contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that emon88 may be required to retain certain data for regulatory compliance purposes (see Section 8) notwithstanding an erasure request.
• Right to Restrict Processing: You have the right to request that emon88 restricts processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.
• Right to Data Portability: You have the right to receive the Personal Data you have provided to emon88 in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your Personal Data based on legitimate interests, including profiling for marketing purposes. You can opt out of marketing communications at any time via Account settings or by contacting our support team.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

12 Minors & Age Restriction

The emon88 Platform is strictly intended for use by adults who are at least 21 years of age. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes a mandatory date-of-birth declaration, and our KYC verification process is specifically designed to identify and prevent underage access.

If emon88 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will immediately suspend the relevant Account, delete the associated Personal Data without undue delay (subject to any mandatory legal retention obligations), and return any deposited funds to the original payment source where technically and legally feasible.

If you are a parent or guardian and believe that your child has registered an Account on emon88 without your knowledge, please contact us immediately at [email protected] so that we can take appropriate action.

13 Third-Party Links & Services

The emon88 Platform may contain references to or integrations with third-party services — including game-studio interfaces, payment-gateway landing pages, and customer-support tools — that operate under their own privacy policies. emon88 is not responsible for the privacy practices or content of any third-party service or website. We encourage you to review the privacy policies of any third-party service you access in connection with your use of emon88.

The presence of a third-party integration on the Platform does not constitute an endorsement of that third party's data practices. Where emon88 shares data with third-party processors, we do so under binding contractual arrangements as described in Section 6.

14 Policy Amendments

emon88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or business operations. When material changes are made, we will notify active Members via email to the registered address and by displaying a prominent notice on the Platform for at least 7 days prior to the amended Policy taking effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to remain informed of how emon88 protects your data. Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the updated terms.

If a proposed amendment materially reduces your privacy rights and you do not agree to the amended Policy, you should close your Account before the effective date of the amendment and contact [email protected] to request return of your remaining Balance.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data protection rights as described in Section 11, please contact the emon88 Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link) — mark your subject line "Privacy / Data Request" for priority routing.
• Live Chat: Available 24/7 via the Platform interface. Please identify your inquiry as a "Privacy Request" when initiating the chat session.
• WhatsApp: +62 812-3456-7890 — available 24/7 (WIB), including Indonesian public holidays.

We aim to acknowledge all privacy-related inquiries within 48 hours and to resolve substantive requests within 30 calendar days. For complex requests — particularly those involving large volumes of data or requiring coordination with third-party processors — we may extend this period by up to an additional 60 days, in which case we will notify you of the extension and the reason for it.