Privacy Policy

poa88 ("we", "us", "our", "the Platform") operates the online betting and casino website accessible at https://poa88.ws and serves members primarily located across Indonesia, including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Palembang, and Makassar. We are committed to protecting and respecting the privacy of every individual who interacts with our Platform.

This Privacy Policy describes how poa88 collects, uses, stores, shares, and protects personal data relating to:

• Registered members of the Platform who hold an active IDR Wallet account;
• Prospective members who have begun the registration process but have not yet completed it;
• Visitors to the Platform who browse without registering an account;
• Former members whose accounts have been closed or terminated, to the extent that data retention obligations apply.

This policy should be read alongside poa88's Terms & Conditions and our Responsible Gaming page. By using the Platform, you confirm your acceptance of this policy in its entirety.

poa88 collects personal data across several categories. The table below provides a clear overview of what we collect and why:

We do not collect sensitive personal data such as biometric data, health information, religious beliefs, or political opinions, except where a member voluntarily discloses such information in the course of a support interaction.

poa88 collects personal data through the following channels and methods:

• Direct Input: Data you provide when completing the registration form, updating your profile, submitting KYC documents, initiating a deposit or withdrawal, or contacting our support team via live chat or email.
• Automated Technical Collection: Data collected automatically when you access and interact with the Platform, including your IP address, browser fingerprint, device identifiers, session duration, and page navigation patterns. This data is collected through server logs, session tracking technology, and first-party analytics tools.
• Payment Processors: When you deposit or withdraw via a supported Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment processor may share confirmation details with us including transaction reference numbers and account name matching results for fraud prevention purposes.
• KYC Verification Partners: poa88 uses third-party identity verification services to cross-check the documents you submit during the KYC process. These services may return a verification status result and risk score to us, but they do not grant us access to government databases beyond what you directly submit.
• Cookies and Tracking Technologies: First-party cookies, local storage, and similar technologies are used to maintain your session state, remember your preferences, and collect aggregate usage analytics. See Section 10 (Cookies) for full details.

poa88 processes personal data for the following specific and legitimate purposes:

• Account Creation and Management: To register your Member Account, authenticate your identity at login, maintain your account profile, and communicate with you regarding account-related matters.
• Age and Identity Verification (KYC): To verify that you are at least 21 years of age and that your identity matches the details provided at registration, in accordance with our responsible gaming and anti-fraud obligations.
• Payment Processing: To process deposits to your IDR Wallet from your nominated bank account or e-wallet, and to process withdrawals back to your verified payment account. All transactions are denominated in Indonesian Rupiah (IDR / Rp).
• Game and Betting Services: To facilitate your access to all Platform products including sportsbook markets (BRI Liga 1, EPL, Champions League, MotoGP Mandalika), live casino tables, slot games from providers such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft, togel (Indonesia's traditional numbers lottery) pools, Bandar Q, and Domino QQ.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming Monitoring: To monitor betting and deposit patterns that may indicate problem gambling behaviour, and to facilitate member-initiated tools including deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and handle formal complaints submitted via live chat or email.
• Legal Compliance: To meet our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws, and to cooperate with lawful requests from regulatory or law enforcement authorities.
• Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and event announcements relevant to Indonesian players, including seasonal promotions tied to Idul Fitri, Ramadhan, Indonesian Independence Day (17 August), and major sporting events. You may withdraw your marketing consent at any time by contacting [email protected].
• Platform Improvement and Analytics: To analyse aggregate usage patterns, identify technical issues, and improve the overall quality, speed, and reliability of the Platform for all members.

poa88 relies on the following legal bases to process your personal data, depending on the specific processing activity involved:

• Contractual Necessity: The majority of our processing — including account creation, payment processing, game access, and customer support — is necessary to perform the contract between you and poa88 as set out in our Terms & Conditions. Without this processing, we cannot provide the services you have signed up for.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, age verification, anti-money laundering record-keeping, and cooperation with law enforcement — are required by law or by the conditions of our international operating licence.
• Legitimate Interests: We process technical data, usage data, and fraud-prevention signals on the basis of our legitimate interest in maintaining a secure, fair, and commercially viable platform. We have conducted balancing assessments to confirm that our interests do not override your rights and freedoms.
• Consent: Where we send marketing communications or deploy non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time with immediate effect on future processing (withdrawal does not affect the lawfulness of processing carried out prior to withdrawal).

poa88 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Processors and Banking Partners: We share the minimum necessary financial and identity data with our payment processing partners to facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners are contractually bound to process your data solely for payment purposes.
• KYC and Identity Verification Providers: Your submitted identity documents and personal details are shared with licensed third-party KYC verification services for the purpose of confirming your age and identity. These providers operate under strict data processing agreements and are prohibited from retaining or using your data for any other purpose.
• Game Content Providers: When you access live casino or slot products powered by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, or Spribe), session data including your member ID, bet amounts, and game results are shared with the relevant provider's platform to facilitate game play. These providers do not receive your name, bank details, or contact information.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to governmental, regulatory, or law enforcement bodies where required by a lawful order, warrant, or regulatory obligation. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: We may share data with our legal advisers, auditors, or insurers on a confidential basis where necessary for the conduct of their professional services to poa88.
• Business Transfers: In the event of a merger, acquisition, restructure, or sale of all or part of poa88's business, member data may be transferred to the acquiring entity as part of that transaction. We will notify affected members in advance where practicable and ensure that the receiving entity commits to privacy standards no less protective than those set out in this policy.

poa88 operates its infrastructure internationally. As a result, your personal data may be transferred to, stored in, and processed in countries outside the Republic of Indonesia. The following safeguards apply to all international data transfers:

• Where personal data is transferred to countries not deemed to offer an equivalent level of data protection to Indonesia, poa88 implements appropriate contractual safeguards — such as standard data protection clauses — to ensure that your data receives a consistent level of protection regardless of where it is processed.
• All third-party data processors (payment providers, KYC services, game providers) who receive your data internationally are required to enter into data processing agreements with poa88 that impose obligations equivalent to those described in this policy.
• Server infrastructure used by poa88 is located in jurisdictions with established data security frameworks. Access to production systems is restricted to authorised personnel with multi-factor authentication enforced.

poa88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention schedule applies:

When personal data is no longer required for any of the above purposes, it is securely deleted or anonymised. Anonymised aggregate data (from which individual members cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

As a member of poa88, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of all personal data that poa88 holds about you. We will respond within 30 calendar days of receiving your verified request.
• Right to Rectification: You have the right to request correction of any personal data we hold about you that is inaccurate or incomplete. You may update basic profile information directly through your account settings; for KYC document corrections, please contact support.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data. This right is subject to limitations — where we are legally required to retain data (e.g., KYC records under AML regulations), we cannot erase it until our legal retention period has expired. We will advise you of the applicable limitation at the time of your request.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in specific circumstances, for example while the accuracy of your data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing of your personal data carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring purposes. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (including marketing communications and non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal date.

poa88 uses cookies and similar technologies on the Platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your IDR Wallet state, and enable core navigation features. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences such as your default language setting, previously viewed game categories, and notification preferences. They improve your experience but are not essential to platform operation.
• Analytics Cookies: We use first-party analytics to measure aggregate usage patterns — such as which game categories are most visited, average session duration, and deposit funnel completion rates. This data is collected in aggregate and does not identify individual members. You may opt out of analytics cookies by contacting [email protected].
• Security Cookies: These short-lived cookies are used to detect and mitigate potential security threats such as cross-site request forgery (CSRF) attacks and session hijacking. They are strictly necessary and cannot be disabled.

poa88 does not use third-party advertising cookies or retargeting pixels. We do not participate in cross-site tracking networks.

Most browsers allow you to manage cookie settings through the browser's built-in privacy controls. Please note that disabling all cookies may prevent certain features of the Platform from working correctly.

poa88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your device and poa88's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption. The Platform enforces HTTPS on all pages and connections.
• Encryption at Rest: Sensitive data stored in our databases — including KYC documents, bank account details, and password hashes — is encrypted at rest using AES-256. Passwords are never stored in plain text; they are stored as salted cryptographic hashes.
• Access Controls: Internal access to member data is restricted to authorised staff on a strict need-to-know basis. Access rights are reviewed quarterly and revoked immediately upon staff role changes or departures. All administrative access is logged and auditable.
• Intrusion Detection and Monitoring: poa88 maintains continuous security monitoring on its infrastructure, including automated anomaly detection, rate limiting, and distributed denial-of-service (DDoS) mitigation. Suspicious activity generates immediate alerts to our security team.
• Regular Security Audits: Our platform and infrastructure undergo regular independent security assessments. Critical vulnerabilities are remediated on an emergency basis; lower-severity findings are addressed within scheduled maintenance windows.
• Staff Training: All poa88 staff with access to personal data undergo mandatory data protection and security awareness training upon onboarding and at regular intervals thereafter.

While poa88 takes all reasonable steps to protect your data, no system is completely immune to security risks. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, poa88 will notify affected members without undue delay in accordance with applicable legal obligations.

poa88 is strictly an adults-only platform. You must be at least 21 years of age to register an account, deposit funds, or participate in any betting or gaming activity on the Platform. This requirement applies to all members regardless of their location within Indonesia.

• poa88 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. All new member registrations are subject to age verification as part of our KYC process.
• If we discover or are notified that a member account has been registered by or on behalf of a person under the age of 21, we will immediately suspend the account, void any pending bets or bonuses, return deposited funds to the source payment account (net of any withdrawals already made), and permanently delete the personal data associated with that account.
• If you are a parent or guardian and believe that a minor has registered an account on poa88 using falsified identity information, please contact us immediately at [email protected] with subject line "Minor Account Report". We take all such reports seriously and will act within 24 hours of receiving a verified notification.
• poa88 supports the use of parental control software and internet filtering tools that can restrict access to gambling websites. We encourage parents and guardians of minors in Indonesian households to make use of such tools.

The poa88 Platform may contain references to game providers, payment partners, and sporting organisations that operate their own independent services. This Privacy Policy applies solely to personal data collected and processed by poa88 directly.

• Where game content is delivered via an embedded interface from a third-party provider (such as Pragmatic Play, Evolution Gaming, Spribe, or Pocket Games Soft), that provider operates under its own privacy policy and data processing terms. poa88 shares only the minimum data required to authenticate and facilitate your game session.
• Payment providers (including Indonesian banks such as BCA, BRI, BNI, and Mandiri, and e-wallets such as OVO, DANA, and GoPay) are independent controllers of any personal data you submit directly to their platforms. Their privacy practices are governed by their own privacy policies.
• poa88 is not responsible for the privacy practices, content, security, or data handling of any third-party service, even where that service is referenced or integrated within the Platform. We encourage you to review the privacy policy of any third-party service you interact with.

poa88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The following process governs how changes are communicated:

• When material changes are made to this Privacy Policy, the "Last Updated" date at the top of this page will be revised and, where reasonably practicable, active members will be notified via their registered email address or via a prominent in-platform notification.
• Your continued use of the Platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the Platform and contact support to request account closure.
• Minor clarifications — such as fixing typographical errors or adding further explanatory detail without altering the substantive meaning of a section — may be made without specific notification and take effect immediately upon publication.
• We recommend that you review this Privacy Policy periodically, particularly before making a new deposit or submitting updated personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way poa88 handles your personal data, please contact our Privacy and Data Protection team using the following details:

• Email: [email protected] — please use subject line "Privacy Enquiry" for data protection matters. We aim to respond within 3 business days.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Our support agents are trained to handle data rights requests and will escalate to our data protection team where required.
• Formal Data Rights Requests: Use subject line "Data Rights Request" in your email. We will verify your identity before processing the request and provide a full response within 30 calendar days.
• Data Breach Reports: If you believe your poa88 account has been accessed without authorisation or that your personal data has been compromised, contact us immediately at [email protected] with subject line "Security Incident". Our security team operates 24/7 and will respond to urgent matters within 2 hours (WIB, UTC+7).