Your privacy is a fundamental commitment at tos88. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is used, and the rights you hold over your information as a Member of the Platform.
Six principles that govern how tos88 handles your personal data — before you read the full policy below.
All data transmitted between your device and tos88 servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Indonesian banks such as BCA and BNI.
tos88 does not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial marketing purposes. Your information is used solely to operate and improve the Platform.
We collect only the data that is strictly necessary to operate your account, verify your identity (KYC), process payments, and comply with applicable legal obligations — nothing more.
You have the right to access, correct, export, or request deletion of your personal data at any time. Submit a request to our support team and we will respond within 14 calendar days.
Personal data is retained only as long as necessary to fulfil the stated purpose or comply with legal obligations. Account data is deleted within 90 days of a verified account-closure request.
In the unlikely event of a data breach affecting your personal information, tos88 will notify affected Members within 72 hours of becoming aware of the incident, in line with international best practice.
This Privacy Policy ("Policy") describes how tos88 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Member") who access or use the tos88 online gambling platform at https://tos88.cam (the "Platform").
This Policy applies to all personal data collected through the Platform, including data gathered during account registration, identity verification (KYC), deposit and withdrawal transactions, customer-support interactions, promotional participation, and general browsing of the Platform. It covers all Members, regardless of whether they access the Platform from Jakarta, Surabaya, Medan, Bandung, Bali, or any other location in Indonesia.
By registering an account or using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy is incorporated by reference into the tos88 Terms & Conditions and should be read alongside them.
tos88 acts as the data controller in respect of the personal data collected and processed through the Platform. As data controller, tos88 determines the purposes and means of processing your personal data in accordance with this Policy.
Where tos88 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or cloud infrastructure suppliers — those providers act as data processors and are contractually bound to process your data only on tos88's documented instructions, with appropriate security measures in place.
For all data protection enquiries, requests to exercise your rights, or concerns about the handling of your personal data, please contact us at: [email protected]
For the purposes of this Policy, the following terms have the meanings set out below:
tos88 collects the following categories of personal data from Members and Platform users:
| Category | Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Indonesian National Identity Card (KTP) number or passport number. |
| Contact Data | Email address, mobile phone number, residential address (including city, province, and postal code within Indonesia). |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR, deposit and withdrawal records. |
| Gaming Data | Bet history, wagering amounts, game types played (sports, togel, live casino, slots), session durations, win/loss records, bonus utilization history. |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, unique device identifier, session logs, Platform feature interaction data. |
| Communication Data | Records of live chat conversations, email correspondence with support, and any feedback submitted through the Platform. |
| Marketing Data | Marketing communication preferences, promotional participation history, and referral source information (only where explicit consent has been provided). |
tos88 collects personal data through the following channels and methods:
tos88 processes your personal data only where a lawful basis exists. The primary purposes and their corresponding legal bases are set out below:
| Purpose | Legal Basis |
|---|---|
| Account Registration & Management | Performance of contract — necessary to establish and maintain your Member account. |
| Identity Verification (KYC) | Legal obligation — required to comply with anti-money laundering (AML) and know-your-customer (KYC) obligations under applicable law. |
| Deposits & Withdrawals | Performance of contract — necessary to process financial transactions in IDR via Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets. |
| Fraud Prevention & Security | Legitimate interest — tos88 has a compelling interest in preventing financial fraud, unauthorized account access, and money laundering. |
| Customer Support | Performance of contract — necessary to respond to your enquiries and resolve account issues. |
| Responsible Gaming Compliance | Legal obligation & legitimate interest — monitoring gameplay for signs of problem gambling and applying self-exclusion tools where requested. |
| Direct Marketing Communications | Consent — only where you have explicitly opted in to receive promotional communications from tos88. |
| Platform Analytics & Improvement | Legitimate interest — aggregated and anonymized usage data to improve Platform performance, user experience, and product features. |
tos88 does not sell your personal data. We share personal data only in the following limited circumstances, and only to the minimum extent necessary:
As an internationally operated platform, tos88 may transfer your personal data to servers and service providers located outside of Indonesia. Where such transfers occur, tos88 takes appropriate steps to ensure that your data receives an equivalent level of protection as it would within Indonesia, including:
By using the Platform and accepting this Policy, you explicitly consent to the transfer of your personal data to jurisdictions outside Indonesia where such transfers are necessary to deliver the services described in this Policy.
tos88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with legal retention obligations. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | For the duration of account activity, plus 5 years after account closure (to satisfy AML legal obligations). |
| Financial Transaction Records | 7 years from the date of the transaction, in accordance with standard financial record-keeping obligations. |
| KYC Verification Documents | 5 years from account closure or from the date of the last verified transaction, whichever is later. |
| Gaming / Bet History | 3 years from the date of the bet, or for the duration of any active dispute relating to that bet, whichever is longer. |
| Customer Support Communications | 2 years from the date of the interaction, unless the communication is part of an unresolved dispute. |
| Marketing Preference Data | Until you withdraw consent or request deletion, whichever is earlier. |
| Technical / Log Data | 90 days, after which logs are aggregated and anonymized for analytics purposes. |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. You may request early deletion of certain data categories by contacting our support team, subject to any overriding legal retention obligations.
tos88 implements a layered security architecture designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:
tos88 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent you from accessing the Platform but may reduce the quality of your experience.
As a Member of tos88 and a data subject, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team:
Request a copy of all personal data tos88 holds about you. We will respond within 14 calendar days of receiving a verified request.
Request correction of any inaccurate or incomplete personal data held in your account profile or KYC records.
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to any overriding legal retention obligations.
Request that tos88 temporarily restrict the processing of your personal data while a correction or objection request is being investigated.
Receive your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider, where technically feasible.
Object to the processing of your personal data on the basis of legitimate interest, including direct marketing communications. Objections to marketing will be honored immediately.
To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and your registered account email address. We may require proof of identity before processing your request.
The tos88 Platform is strictly restricted to individuals aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. The KYC verification process is specifically designed to detect and prevent underage registration.
If tos88 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, reverse any financial transactions, and notify the appropriate authorities where required by law.
If you believe that a minor has accessed or registered on the Platform, please contact our support team immediately at [email protected]. We take underage access to gambling platforms extremely seriously and will act on all reports without delay.
The tos88 Platform integrates with third-party services — including payment gateways, game software providers, KYC verification tools, and analytics services — that are necessary to deliver the Platform's core functionality. Each of these services has its own privacy policy governing its handling of data.
tos88 conducts data protection assessments of all third-party providers before integration and requires all providers to sign data processing agreements that comply with applicable data protection standards. These agreements prohibit providers from using your personal data for any purpose other than delivering the contracted service to tos88.
The Platform does not contain links to third-party websites for external marketing or commercial purposes. Any reference to third-party brands (such as Pragmatic Play, Evolution Gaming, BCA, BRI, or DANA) is made in the context of describing the services available on the tos88 Platform and does not constitute an endorsement of those parties' data practices.
tos88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services offered on the Platform. When material changes are made to this Policy, we will notify registered Members by email and by displaying a prominent notice on the Platform for a minimum of 7 days before the changes take effect.
The "Last Updated" date displayed at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically to stay informed about how tos88 protects your personal data. Archived versions of this Policy are available on request.
Your continued use of the Platform after the effective date of an updated Policy constitutes your acceptance of the changes. If you do not agree with any changes to this Policy, you should cease using the Platform and contact our support team to request account closure.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by tos88, please contact us through the following channels:
If you are not satisfied with tos88's response to your privacy concern, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in your jurisdiction. tos88 will cooperate fully with any such enquiry.
Our FAQ answers the most common questions about account data, KYC, and security. Or review our Terms & Conditions for a complete picture of your rights and obligations.