Data & Privacy
Your privacy matters to us. This Privacy Policy explains what personal data pho88 collects from players across Indonesia, how that data is used, who it may be shared with, and what rights you have over your information. By registering an account or continuing to use the pho88 Platform, you acknowledge that you have read and understood this Policy.
How We Handle Your Data
All personal data is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access is restricted to authorised pho88 personnel only, subject to strict need-to-know controls.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a data request to our support team and we will respond within 30 days.
pho88 will never sell, rent, or trade your personal data to third-party marketers. Data is shared only with regulated service providers who are contractually bound to protect your information.
We use strictly necessary, functional, and analytics cookies only. We do not deploy third-party advertising cookies or cross-site tracking pixels. Our cookie usage is documented fully in Section 7 below.
Your data is held only for as long as necessary to deliver our services and meet legal obligations. Transaction records are retained for a minimum of five years in line with anti-money-laundering requirements.
pho88 recognises the data expectations of Indonesian players. Local payment data — including BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay transaction records — is handled with the same rigorous security standards as all other account data.
pho88 is an internationally operated online gaming platform accessible at https://pho88.vu. We offer sports betting, live casino, slot games, and lottery products — including togel (Indonesia's traditional numbers lottery) — primarily to English-preference players across Indonesia. For the purposes of this Privacy Policy, pho88 acts as the data controller in respect of all personal data collected through the Platform.
This Privacy Policy applies to all data subjects who interact with the pho88 Platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team. It covers data collected through our website, mobile-optimised interface, live chat system, and email correspondence.
pho88 collects personal data through several channels: directly from you when you register, make transactions, or contact support; automatically when you use the Platform; and from regulated third-party service providers such as payment processors and KYC verification partners. The categories of data we collect include:
| Data Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (e.g., Indonesian KTP number, passport number) |
| Contact Data | Email address, mobile phone number, residential address (city, province — e.g., Jakarta, Surabaya, Bandung, Bali) |
| Account Data | Username, encrypted password hash, account creation date, account status, login history, IP address at login |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal amounts in IDR, transaction timestamps |
| KYC & Verification Data | Scanned copies of government-issued ID, selfie photographs, proof of address documents, source-of-funds declarations |
| Gaming & Betting Data | Game session history, bet amounts, bet outcomes, bonus usage, wagering records, responsible gaming preferences |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, referring URL, session duration, pages visited |
| Communications Data | Live chat transcripts, support email content, feedback submissions, survey responses |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS notifications, and push alerts |
pho88 processes your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. Our primary uses are as follows:
pho88 processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:
| Legal Basis | Applicable Processing Activities |
|---|---|
| Contractual necessity | Account registration, transaction processing, game delivery, customer support — all activities required to fulfil our obligations under the Terms & Conditions. |
| Legal obligation | KYC/AML verification, age verification (21+), record retention for regulatory purposes, responding to lawful authority requests. |
| Legitimate interests | Fraud detection, Platform security monitoring, abuse prevention, anonymised analytics — where our interests do not override your fundamental rights. |
| Consent | Direct marketing communications (email, SMS, push notifications). You may withdraw consent at any time by contacting support or using the unsubscribe link in any marketing email. |
pho88 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. We may share your data with the following categories of recipients, solely to the extent necessary for the stated purpose:
As an internationally operated platform, pho88 may transfer your personal data to servers or service providers located outside Indonesia. Where such transfers occur, pho88 implements appropriate safeguards to ensure that your data receives a level of protection equivalent to that which it would receive if it remained within a jurisdiction with robust data protection law.
Safeguards used for international transfers may include:
You may request further information about the specific safeguards applied to any international transfer of your data by contacting us at [email protected].
pho88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how players use our services. We do not deploy third-party advertising cookies or cross-site tracking pixels. The cookies we use fall into the following categories:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login state, security tokens, CSRF protection. These cookies are essential for the Platform to function and cannot be switched off without breaking core features. | No |
| Functional | Remembering your language preference, display settings, last-visited game category, and responsible gaming configuration. | Yes |
| Analytics | Aggregated, anonymised data on page views, session duration, click paths, and feature usage — used to improve the Platform. No personally identifiable information is included in analytics reports. | Yes |
You can manage your cookie preferences through your browser settings at any time. Please note that disabling functional or analytics cookies will not affect your ability to place bets or access games, but may result in a less personalised experience. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
pho88 retains your personal data only for as long as it is necessary for the purposes set out in this Policy, or as required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of account plus 5 years after closure, to satisfy AML and legal record-keeping requirements. |
| Financial transaction records | Minimum 5 years from the date of each transaction, in line with standard financial record-keeping obligations. |
| KYC documents | 5 years from account closure or from the date the document was submitted, whichever is later. |
| Customer support communications | 3 years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter. |
| Gaming and betting history | 5 years from account closure, to support dispute resolution and regulatory compliance. |
| Marketing consent records | Until consent is withdrawn, plus 2 years thereafter as evidence of the consent status. |
| Technical / log data | Up to 12 months from collection, unless required for an active fraud or security investigation. |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.
Subject to applicable law, you have the following rights in relation to the personal data that pho88 holds about you. To exercise any of these rights, contact us at [email protected]. We will respond to all verified requests within 30 calendar days.
pho88 operates a strict 21+ age policy. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. Registration by a person under 21 is a breach of our Terms & Conditions and will result in immediate account closure and forfeiture of all funds in the account.
If pho88 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on the Platform, please notify us at [email protected] immediately.
pho88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
Whilst pho88 applies industry-leading security measures, no system can guarantee absolute security. You play an important role in keeping your account safe — use a strong, unique password, do not share your credentials with anyone, and contact support immediately if you suspect unauthorised access to your account.
The pho88 Platform does not contain links to external third-party websites for commercial or affiliate purposes. However, where any such links do appear incidentally — for example, in a game information panel from a licensed studio — pho88 is not responsible for the privacy practices or data handling of those third-party sites. We recommend that you review the privacy policy of any external site before providing personal data to it.
Game content delivered within the Platform by licensed studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft operates within the pho88 Platform environment. These studios may collect anonymised technical session data for game performance purposes; they do not have access to your pho88 account details, financial information, or KYC data.
pho88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When we make material changes, we will notify registered players via the email address on their account and post a prominent notice on the Platform at least 7 days before the changes take effect.
The "Last Updated" date at the top of this page always reflects the most recent revision. Your continued use of the Platform after the effective date of any change constitutes your acknowledgement of the revised Policy. If you do not agree with any material change, you may close your account by contacting our support team before the effective date.
We encourage you to review this Policy periodically. All previous versions of this Policy are archived and available upon request — contact us at [email protected] if you need to review a prior version.
If you have any questions, concerns, or requests relating to this Privacy Policy or to pho88's handling of your personal data, please contact us through any of the following channels:
pho88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. The DPO can be reached directly at [email protected] with the subject line "DPO — Privacy Matter".
We are committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.
Plain-English Summary
Every byte of data you share with pho88 — from your BCA account number to your KTP scan — is encrypted, access-controlled, and stored on secured infrastructure. We treat your information with the same care we expect for our own.
pho88 only sends promotional communications — such as bonus offers during Ramadhan or Idul Fitri — to players who have explicitly opted in. You can unsubscribe from any marketing message instantly, at no cost.
You can request access to your data, correct inaccuracies, download a full export, or request account and data deletion at any time. Our support team processes all such requests free of charge within 30 days.
Ready to Play?
Now that you understand how pho88 protects your privacy, dive into our full range of games and betting markets — from live casino tables and BRI Liga 1 sportsbook odds to premium slots and togel draws. Your data is safe; your next win is waiting.