Privacy Policy

Last Updated: January 1, 2026

This Privacy Policy ("Policy") describes how bar88 ("bar88", "we", "us", "our") collects, uses, discloses, stores, and protects personal information provided by users ("you", "User", "Player") when you access or use the bar88 website at https://bar88.cam and all associated services (collectively, the "Service"). This Policy forms part of our Terms and Conditions and should be read alongside that document.

We are committed to protecting your privacy and handling your personal data responsibly in accordance with applicable data protection laws and internationally recognized privacy principles. By registering an account or using the Service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your information as described herein.

1. Definitions

1.1. "Personal Data" means any information that can directly or indirectly identify you as a natural person, including your name, national identity number, date of birth, address, email address, phone number, IP address, and financial account details.

1.2. "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.

1.3. "KYC Documents" means identity verification documents submitted by you, including government-issued photo identification (KTP, passport, driving license), proof of address, and proof of payment method ownership.

1.4. "Cookies" means small text files stored on your device by your web browser, used to remember your preferences and track usage patterns on the Service.

1.5. "Third-Party Providers" means external companies and individuals engaged by bar88 to deliver services on our behalf, including game studios, payment processors, analytics platforms, and fraud-detection services.

2. Information We Collect

bar88 collects Personal Data through several channels. The categories of information we collect are outlined below.

2.1. Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, residential address (including city and province within Indonesia), and chosen username and password.
• KYC verification data: Copies of government-issued photo ID (KTP, passport, or driving license), utility bills or bank statements as proof of address, and screenshots or statements from bank accounts or e-wallets used on the platform (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Financial data: Bank account numbers, e-wallet identifiers, transaction amounts in Indonesian Rupiah (IDR), deposit and withdrawal history, and payment method preferences.
• Communications data: Messages sent to our customer support team via live chat, email ([email protected]), or WhatsApp, including the content of those communications and any attachments.
• Responsible gaming data: Self-exclusion requests, deposit limit preferences, session time-out settings, and any cooling-off period requests submitted by you.

2.2. Information Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and connection type.
• Usage data: Pages visited, time spent on each page, features used, games played, betting history, search queries within the Service, links clicked, and session duration.
• Geolocation data: Approximate location derived from your IP address (country, region, city — typically accurate to the city level, covering Jakarta, Surabaya, Bandung, Medan, Semarang, Makassar, Bali, Yogyakarta, and other Indonesian cities).
• Cookie and tracking data: Information collected via cookies, pixel tags, and similar tracking technologies as described in Section 7 of this Policy.

2.3. Information from Third Parties

• Payment processors: Transaction confirmation and status updates from Indonesian banks and e-wallet providers to verify deposits and facilitate withdrawals.
• Identity verification services: Supplementary identity data from third-party KYC/AML verification providers used to confirm the authenticity of documents you submit.
• Fraud detection providers: Risk scores, device fingerprints, and flagged activity indicators from fraud-prevention platforms used to protect the integrity of the Service.
• Game providers: Game session data, including game results, wager amounts, and Return to Player (RTP) data, from licensed studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe.

3. How We Use Your Information

bar88 processes your Personal Data for the following purposes, each supported by a legitimate legal basis:

Purpose	Legal Basis
Creating and managing your Account	Contract performance
Processing deposits and withdrawals in IDR	Contract performance
KYC identity and age verification (21+)	Legal obligation / legitimate interest
Anti-money laundering (AML) compliance	Legal obligation
Fraud prevention and platform security	Legitimate interest
Customer support and communications	Contract performance / legitimate interest
Responsible gaming enforcement (deposit limits, self-exclusion)	Legal obligation / legitimate interest
Sending promotional offers and bonus notifications (with your consent)	Consent
Service analytics and performance improvement	Legitimate interest
Legal compliance and responding to regulatory requests	Legal obligation

4. Disclosure of Your Information

bar88 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

4.1. Service Providers: We share Personal Data with carefully selected third-party providers who assist us in operating the Service. These include payment processors (Indonesian banks and e-wallet operators), game platform providers, cloud hosting and infrastructure providers, identity verification services, customer support tools, and analytics platforms. All such providers are contractually bound to process your data only for the purposes we specify and to maintain appropriate security measures.

4.2. Legal and Regulatory Requirements: We may disclose your Personal Data when required by law, court order, government directive, or regulatory authority. This includes disclosures required under Indonesian law, international AML regulations, and any lawful requests from competent authorities investigating fraud, financial crime, or other illegal activities.

4.3. Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of bar88's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to this Policy that result from it.

4.4. Responsible Gaming Enforcement: If you have registered with a national self-exclusion register or if we are required to share information with problem gambling support organizations as part of our responsible gaming obligations, we may disclose relevant data to those organizations.

4.5. Protection of Rights: We may disclose information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of bar88, our players, or the public — for example, in cases of suspected fraud, account takeover, money laundering, or other criminal activity.

5. Data Retention

5.1. bar88 retains your Personal Data for as long as your Account is active and for a minimum period of five (5) years after Account closure, in accordance with applicable financial record-keeping requirements and anti-money laundering regulations.

5.2. KYC documents and identity verification records are retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.

5.3. Transaction records (deposits, withdrawals, bets, and bonus activities) are retained for a minimum of seven (7) years for financial compliance and audit purposes.

5.4. Customer support communications are retained for three (3) years from the date of the last interaction.

5.5. When Personal Data is no longer required for its stated purpose and no legal retention obligation applies, we will securely delete or anonymize it in accordance with our data disposal procedures.

6. Data Security

6.1. bar88 implements appropriate technical and organizational measures to protect your Personal Data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including financial account details and KYC document files.
• Multi-factor authentication (MFA) options for Account login.
• Role-based access controls limiting which staff members can access Personal Data.
• Regular security audits, penetration testing, and vulnerability assessments.
• Secure data centers with physical access controls and 24/7 monitoring.
• Employee training on data protection and information security best practices.

6.2. While we take all reasonable precautions, no online transmission or storage system is 100% secure. In the event of a data breach that is likely to result in significant risk to your rights or freedoms, we will notify you and relevant authorities as required by law, typically within 72 hours of becoming aware of the breach.

7. Cookies and Tracking Technologies

7.1. Essential Cookies: Required for the Service to function properly. These cookies enable core features such as Account login sessions, shopping cart functionality (for deposit flows), and security features. You cannot opt out of essential cookies while using the Service.

7.2. Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with the Service — which pages are most visited, where users drop off in registration flows, and how features are used. This data helps us improve the Service.

7.3. Preference Cookies: Store your preferences such as language settings, display preferences, and notification settings so you don't have to re-enter them each visit.

7.4. Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of our advertising campaigns. These cookies may track your browsing across different websites. You may opt out of marketing cookies through your Account settings or browser settings.

7.5. You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service. For more information about cookies, visit www.allaboutcookies.org.

8. Your Rights and Choices

Subject to applicable law, you have the following rights regarding your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: You may request deletion of your Personal Data where there is no compelling reason for its continued processing. Note that legal retention obligations may limit our ability to fulfill this request in full.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of your Personal Data in a commonly used format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. We will stop that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond to all valid requests within 30 calendar days. We may need to verify your identity before processing your request.

9. International Data Transfers

9.1. bar88 operates primarily for the Indonesian market. Your Personal Data is stored on servers that may be located in multiple jurisdictions. When we transfer your data outside Indonesia, we ensure appropriate safeguards are in place, such as contractual data protection clauses equivalent to international standards, to ensure your data receives a level of protection consistent with this Policy.

9.2. Game providers (Pragmatic Play, Evolution Gaming, Microgaming, etc.) and technology partners may process your gaming data on servers outside Indonesia. All such providers are required to maintain security standards consistent with those described in Section 6 of this Policy.

10. Children's Privacy

10.1. The Service is strictly for adults aged 21 years and older. bar88 does not knowingly collect Personal Data from individuals under the age of 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete that data and close the associated Account. If you believe we may have collected data from a minor, please contact us immediately at [email protected].

11. Third-Party Links and Services

11.1. The Service may contain links to third-party websites (such as payment processor portals). bar88 is not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of any third-party site you visit. This Policy applies solely to information collected through the bar88 Service.

12. Changes to This Policy

12.1. bar88 reserves the right to modify this Privacy Policy at any time. Material changes will be communicated via email notification or a prominent notice on the Service at least 14 days before taking effect. Your continued use of the Service after any changes constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

13. Contact and Data Protection Inquiries

13.1. If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

Email: [email protected]
Live Chat: Available 24/7 via the Service
Support Hours: 24/7 (WIB, UTC+7)

13.2. We are committed to resolving privacy complaints promptly and fairly. If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.