spv88 Privacy Policy

spv88 ("we", "us", "our") is the operator of the online gaming platform accessible at https://spv88.one (the "Platform"). We provide a comprehensive suite of online gaming products to registered members located in Indonesia, including sportsbook betting, live casino games, slot games, roulette, and keno, all denominated in Indonesian Rupiah (IDR).

For the purposes of this Privacy Policy, spv88 is the data controller — the entity that determines the purposes and means by which your personal data is collected and processed. We are committed to handling all member data responsibly, transparently, and in accordance with internationally recognised privacy principles.

If you have any questions about this Privacy Policy or about how spv88 handles your personal data, you may contact our Data Protection contact at: [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

spv88 collects personal data through several channels: directly from you when you register and use the Platform, automatically through technical means as you interact with the Platform, and in limited cases from third-party service providers. The categories of personal data we collect are set out in the table below.

Special Category Data: spv88 does not intentionally collect special category personal data (such as health information, religious beliefs, or political opinions). If you disclose such information voluntarily — for example, when discussing a gambling-related health concern with our Responsible Gaming team — it will be handled with the highest level of confidentiality and used solely to provide the support you have requested.

Data You Provide About Others: If you provide personal data about a third party in any context on the Platform, you warrant that you have obtained all necessary consents from that individual to share their data with spv88 and for spv88 to process it in accordance with this Privacy Policy.

spv88 uses the personal data we collect for the following purposes. Each purpose is tied to a lawful basis described in Clause 4.

• Account Creation and Management: To register your spv88 account, verify your identity, maintain your account profile, and provide you with access to the full range of Platform services.
• Transaction Processing: To process your deposits and withdrawals via Indonesian payment channels (including local bank transfers to BCA, BRI, BNI, Mandiri, and e-wallets such as OVO, DANA, GoPay, ShopeePay, and LinkAja), reconcile your account balance, and issue receipts.
• Identity and Age Verification (KYC): To verify that you are who you claim to be and that you meet the minimum age requirement of 21 years, in accordance with our platform policies and international responsible gaming standards.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities that could harm you or other members of the Platform.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) frameworks, record-keeping requirements under our operating licence, and any lawful requests from competent authorities.
• Customer Support: To respond to your enquiries, resolve account disputes, process complaints, and provide 24/7 Indonesian-speaking customer support.
• Personalisation and Gaming Experience: To customise the Platform content you see, recommend relevant games or promotions based on your activity history, and improve the overall user experience.
• Responsible Gaming Monitoring: To identify patterns of gaming behaviour that may indicate problem gambling (such as rapid deposit escalation, very long session durations, or self-exclusion requests) and to proactively offer support tools in accordance with our Responsible Gaming Policy.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, reload offers, and VIP programme updates via email or other agreed communication channels. You may withdraw this consent at any time by contacting [email protected].
• Platform Improvement and Analytics: To analyse aggregated, anonymised usage data to understand how members interact with the Platform, identify technical issues, and guide product development decisions.

spv88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your explicit consent.

spv88 processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you — specifically, to operate your Account, process transactions, and deliver the gaming services you have subscribed to. Without this processing, we cannot provide the Platform to you.
• Legal Obligation: Processing that is required to comply with a legal obligation applicable to spv88, including KYC identity checks, AML record-keeping, and responding to lawful regulatory or law-enforcement requests.
• Legitimate Interests: Processing that is necessary for spv88's legitimate business interests (or those of a third party), provided that those interests are not overridden by your data protection rights. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics. We carefully balance our legitimate interests against your rights before relying on this basis.
• Consent: Where we rely on consent — primarily for sending you marketing communications and for certain non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal. Withdrawal of marketing consent does not affect your ability to use the Platform.

spv88 does not sell, rent, or trade your personal data to unaffiliated third parties for their independent marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

• Payment Processors: We share your financial data with licensed payment processing partners that facilitate deposits and withdrawals via Indonesian bank transfers and e-wallets (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja). These partners are contractually bound to process your data only on our instructions and in accordance with applicable data protection requirements.
• KYC and Identity Verification Partners: We use regulated third-party identity verification services to cross-check the identity documents you submit during the KYC process. These partners are prohibited from using your data for any purpose other than completing the verification check on spv88's behalf.
• Game Studio Providers: To deliver certain casino and gaming products, your session data (such as player ID, bet amounts, and game outcomes) may be transmitted to the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft). These studios operate under strict data processing agreements and may not use member data for independent purposes.
• Regulatory and Law Enforcement Authorities: spv88 will disclose personal data to competent authorities when required to do so by applicable law, valid legal process, or a binding order from a regulatory body. Where legally permitted, we will endeavour to notify you of such a request before disclosure.
• Fraud Prevention and Security Services: We may share data with specialist fraud-detection and cybersecurity service providers to protect the integrity of the Platform and the security of member accounts.
• Professional Advisers: In connection with legal proceedings, audits, or corporate transactions, we may disclose your data to our lawyers, auditors, or financial advisers under strict confidentiality obligations.

spv88 uses cookies and similar tracking technologies (such as web beacons and local storage objects) on the Platform to ensure the site functions correctly, to remember your preferences, and to analyse how members navigate and use the site. The table below summarises the categories of cookies we use.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, particularly session management and payment flows. Most modern browsers allow you to view, manage, and delete cookies via the browser's privacy or settings menu. Consult your browser's help documentation for specific instructions.

spv88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our operating licence obligations. The general retention periods we apply are set out below.

• Active Account Data: For as long as your spv88 Account remains active and open. This includes Identity Data, Contact Data, Financial Data, and Gaming Activity Data required to operate your account on a day-to-day basis.
• KYC and Identity Verification Records: A minimum of five (5) years from the date of your last transaction or account closure (whichever is later), in compliance with applicable anti-money laundering record-keeping requirements.
• Transaction Records: A minimum of five (5) years from the date of each transaction, to satisfy financial record-keeping obligations under our operating licence.
• Customer Support Communications: Three (3) years from the date of the last communication in each support interaction, to allow for the resolution of any subsequent disputes or complaints.
• Marketing Preference Records: For as long as your Account is active, and for a period of three (3) years following Account closure, to demonstrate compliance with consent obligations in the event of a regulatory enquiry.
• Technical and Log Data: Up to twelve (12) months, after which log data is either deleted or irreversibly anonymised and aggregated for analytical purposes.

When personal data is no longer required for any of the above purposes, spv88 will securely delete or anonymise it. Where deletion is not immediately possible due to technical constraints (for example, data held in backup archives), the data will be isolated from active processing and deleted as soon as reasonably practicable.

spv88 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS protocols. Our SSL certificate is maintained and regularly renewed to ensure uninterrupted protection.
• Encryption at Rest: Sensitive data stored in our databases — including Identity Data, Financial Data, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to member personal data within spv88 is restricted on a strict need-to-know basis. Staff members are granted only the minimum access permissions required to perform their specific job function. All access is authenticated, logged, and subject to regular review.
• Penetration Testing and Security Audits: The spv88 Platform undergoes regular security assessments, including third-party penetration tests, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: spv88 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a material risk to affected members, we will notify impacted individuals without undue delay, providing details of the nature of the breach, the data affected, and the steps we are taking to contain and remediate the incident.
• Employee Training: All spv88 staff with access to member data receive mandatory data protection and information security training upon onboarding and on an annual refresher basis.

While spv88 employs robust security measures, no method of electronic transmission or digital storage is completely immune to risk. Members are also responsible for maintaining the security of their own account credentials. You should use a strong, unique password for your spv88 account, not share your login details with anyone, and contact us immediately at [email protected] if you suspect your account has been compromised.

As a member of the spv88 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that spv88 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay. You may also update certain information directly through your Account profile settings.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you have the right to request that spv88 delete your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for continued processing. This right is subject to overriding legal retention obligations (see Clause 7).
• Right to Restriction of Processing: You may request that spv88 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interests and we are assessing your objection.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data where spv88 relies on legitimate interests as the lawful basis. You also have an absolute right to object to the processing of your data for direct marketing purposes; upon receiving such an objection, spv88 will immediately cease all marketing communications to you.
• Right to Withdraw Consent: Where spv88 relies on your consent as the lawful basis for any processing activity (e.g., marketing emails), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

The spv88 Platform is strictly intended for adults aged 21 and above. spv88 does not knowingly collect, use, or store personal data from individuals under the age of 21. Registration on the Platform by persons under 21 is prohibited.

If spv88 becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation at the time of registration or otherwise — we will take immediate steps to close the associated account, void any transactions made through that account, and permanently delete the personal data in question from our systems.

If you are a parent or guardian and believe that a person under your care has created a spv88 account or provided their personal data to spv88, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

spv88 operates as a platform serving members in Indonesia. In order to deliver our services, your personal data may be processed by certain service providers — including game studios, KYC verification partners, and payment infrastructure providers — whose servers are located outside of Indonesia.

Where personal data is transferred to recipients in other countries, spv88 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Contractual clauses that require the recipient to protect your data to the same standard as spv88;
• Verification that the recipient operates in a jurisdiction recognised as providing an adequate level of data protection; or
• Other approved transfer mechanisms available under applicable privacy frameworks.

By using the spv88 Platform and providing your personal data to us, you acknowledge that your data may be transferred to and processed in countries outside Indonesia in accordance with the safeguards described above. If you would like more information about the specific safeguards applied to any international transfer involving your data, please contact us at [email protected].

The spv88 Platform may, from time to time, contain references or links to third-party websites, services, or resources. These may include game studio portals, payment provider information pages, or sports data providers. spv88 has no control over, and assumes no responsibility for, the content, privacy practices, or data-handling policies of any third-party websites or services.

This Privacy Policy applies solely to the spv88 Platform at spv88.one. If you follow a link to a third-party site, we strongly encourage you to review that site's own privacy policy before providing any personal information. Your interaction with any third-party site is governed entirely by that site's terms and policies, not by this Privacy Policy.

spv88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data-handling practices, the services we offer, or applicable legal requirements. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post a prominent notice on the spv88 Platform for a minimum of 14 calendar days following the update; and
• Where the change materially affects how we process your personal data, send a direct notification to the email address registered on your Account.

Your continued use of the spv88 Platform after a revised Privacy Policy has come into effect constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must cease using the Platform and contact [email protected] to request account closure prior to the effective date of the changes.

The version of this Privacy Policy published at spv88.one/privacy-policy is the current and operative version. Previous versions are available upon request.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way spv88 handles your personal data, please reach out to our team using the contact details below. We take all privacy enquiries seriously and aim to provide a substantive response within 5 business days.

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays (WIB, UTC+7)
• Language: Support available in both English and Indonesian (Bahasa Indonesia)
• Subject Line for Privacy Requests: Use "Privacy Policy Enquiry" or "Data Rights Request" for faster routing

For concerns specifically related to your account security, please also review our FAQ page. For questions about responsible gaming, self-exclusion tools, or deposit limits, please visit our Responsible Gaming page.