Privacy Policy

1. Introduction

This Privacy Policy describes how main88 ("we", "us", "our") collects, uses, discloses, and protects the personal information of users ("you", "your") who access or use our online gaming platform at main88.cam and associated services. This policy applies to all players, visitors, and anyone who interacts with our website, mobile applications, or customer support channels.

By creating an account with main88, depositing funds, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with our data practices, please do not use our services.

main88 operates under international data protection standards and takes seriously our obligation to protect your privacy. We employ industry-leading security technologies, limit data access to authorized personnel only, and never sell your personal information to third parties for marketing purposes.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of main88 services. Together, these documents form the complete legal agreement between you and main88.

2. Information We Collect

main88 collects several categories of personal information necessary to provide our gaming services, ensure platform security, comply with legal obligations, and improve user experience. The types of information we collect include:

2.1 Account Registration Information

When you create a main88 account, we collect:

• Personal Identifiers: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code)
• Account Credentials: Username, encrypted password, security questions and answers
• Preferred Currency: Indonesian Rupiah (IDR) and preferred payment methods

All registration information must be accurate and truthful. Providing false information violates our Terms & Conditions and may result in account closure.

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering (AML) regulations and verify your identity, we collect:

• Government-issued photo identification (Indonesian KTP, passport, or driver's license)
• Proof of residential address (utility bill, bank statement, or government correspondence dated within 3 months)
• Selfie photograph holding your ID document
• Bank account statements or ownership verification documents

These documents are securely stored with restricted access and used solely for verification purposes. We do not share KYC documents with third parties except as required by law or regulatory authorities.

2.3 Financial Transaction Data

When you deposit or withdraw funds, we collect:

• Bank account details (bank name, account number, account holder name)
• E-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers)
• Transaction amounts, dates, times, and payment methods
• Deposit and withdrawal history

Payment card details (credit/debit card numbers) are processed through encrypted payment gateways and are not stored on main88 servers. We retain only the last 4 digits for transaction reference purposes.

2.4 Gaming Activity Data

To operate our gaming platform and ensure fair play, we automatically collect:

• Bets placed, game selections, wager amounts, win/loss records
• Game session durations, timestamps, and gameplay patterns
• Bonus claims, wagering requirement progress, and promotional participation
• Communication with customer support (chat logs, email correspondence)

This data helps us detect fraud, prevent bonus abuse, resolve disputes, and improve game offerings based on player preferences.

2.5 Technical and Device Information

When you access main88, we automatically collect certain technical data including:

• IP address, device type, operating system, browser type and version
• Screen resolution, language settings, timezone
• Referring website, pages visited, clickstream data, session duration
• Cookies, web beacons, and similar tracking technologies (see Section 6)

This information helps us optimize platform performance, diagnose technical issues, prevent unauthorized access, and personalize your experience.

2.6 Marketing Preferences and Communications

If you opt in to receive marketing communications, we collect:

• Email marketing subscription status and preferences
• SMS/WhatsApp notification preferences
• Promotional email open rates and click-through data

You may opt out of marketing communications at any time through your account settings or by clicking unsubscribe links in emails. Opting out does not affect transactional communications (account notifications, withdrawal confirmations, security alerts).

3. How We Use Your Personal Data

main88 uses the personal information we collect for the following purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your player account
• Processing deposits, withdrawals, and internal account transfers
• Providing access to casino games, sports betting, and other gaming products
• Calculating and crediting winnings, bonuses, and promotional rewards
• Managing loyalty programs and VIP tier status

3.2 Security, Fraud Prevention, and Compliance

• Verifying your identity through KYC procedures
• Detecting and preventing fraudulent transactions, money laundering, and account takeover attempts
• Monitoring gameplay for bonus abuse, collusion, and unfair gaming practices
• Complying with legal and regulatory obligations including AML and responsible gaming requirements
• Enforcing our Terms & Conditions and investigating violations
• Protecting the security and integrity of our platform against hacking, DDoS attacks, and cyber threats

3.3 Customer Support and Communication

• Responding to your inquiries via live chat, email, or WhatsApp
• Resolving disputes, processing complaints, and investigating technical issues
• Sending transactional notifications (deposit confirmations, withdrawal approvals, security alerts)
• Providing account statements and transaction history upon request

3.4 Marketing and Personalization (With Your Consent)

• Sending promotional emails, SMS, or push notifications about bonuses, tournaments, and new games
• Personalizing game recommendations based on your play history
• Tailoring promotional offers to your gaming preferences and activity level
• Conducting player satisfaction surveys and feedback requests

Marketing communications are sent only to players who have opted in. You may withdraw consent at any time.

3.5 Platform Improvement and Analytics

• Analyzing user behavior to optimize website navigation and game placement
• Testing new features, games, and platform improvements
• Generating aggregated, anonymized reports on player trends and platform performance
• Conducting research to improve responsible gaming tools and player protection measures

3.6 Legal Obligations and Law Enforcement

We may process your personal data to comply with legal obligations, respond to lawful requests from government authorities, enforce our legal rights, or defend against legal claims.

4. Data Sharing and Disclosure

main88 does not sell your personal information to third parties. However, we may share your data with certain trusted partners and service providers under strict confidentiality agreements:

4.1 Payment Processors

We share necessary financial information with authorized payment gateways and banking partners to process deposits and withdrawals. These providers include Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay). Payment processors are required to protect your data under their own privacy policies and payment card industry (PCI-DSS) standards.

4.2 Gaming Software Providers

We share limited data with licensed game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe) to deliver casino games, live dealer tables, and sports betting platforms. Providers receive only the information necessary to operate games and settle bets (player ID, bet amounts, game results). They do not have access to your personal identification documents or financial details.

4.3 Identity Verification Services

We may use third-party KYC verification services to authenticate identity documents, verify addresses, and screen against fraud databases. These services receive copies of your submitted documents and return verification results. They are contractually prohibited from using your data for any purpose other than identity verification.

4.4 Customer Support Tools

Our customer support team uses helpdesk software and CRM systems to manage player inquiries. Support agents can access your account information, transaction history, and communication records to resolve your issues efficiently. Access is logged and monitored for security purposes.

4.5 Analytics and Marketing Platforms

We use analytics tools (Google Analytics, similar services) to understand website traffic patterns and user behavior. These tools collect anonymized or pseudonymized data and do not reveal your personal identity. Marketing platforms may receive hashed email addresses for delivering targeted advertisements on social media or partner websites (only if you have opted in to marketing).

4.6 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, courts, regulatory bodies, or government authorities when:

• Required by law, court order, subpoena, or legal process
• Necessary to investigate fraud, money laundering, or other criminal activity
• Requested by gambling regulators or licensing authorities
• Required to protect the rights, property, or safety of main88, our players, or the public

4.7 Business Transfers

In the event main88 is acquired, merged, or undergoes a business restructuring, your personal information may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer, and the new entity will remain bound by this Privacy Policy.

5. Data Security Measures

main88 employs robust technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

5.1 Encryption Technologies

• SSL/TLS Encryption: All data transmitted between your device and main88 servers is protected by 256-bit Secure Socket Layer (SSL) encryption, the same standard used by banks and financial institutions.
• Data Encryption at Rest: Personal information stored in our databases is encrypted using industry-standard encryption algorithms.
• Password Hashing: Your account password is hashed using bcrypt or similar one-way hashing algorithms and cannot be reverse-engineered by anyone, including main88 staff.

5.2 Access Controls

• Personal data access is restricted to authorized personnel only, on a need-to-know basis
• Multi-factor authentication (MFA) is required for administrative access to sensitive systems
• All data access is logged and regularly audited for suspicious activity
• Employees with data access undergo background checks and sign confidentiality agreements

5.3 Infrastructure Security

• Servers hosted in secure data centers with physical access controls, surveillance, and 24/7 monitoring
• Firewalls, intrusion detection systems (IDS), and anti-DDoS protection
• Regular security vulnerability assessments and penetration testing by independent auditors
• Automated backup systems with geographically distributed redundancy

5.4 Account Security Best Practices

While we implement strong security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password (minimum 8 characters with uppercase, lowercase, numbers, and symbols)
• Never share your password with anyone, including main88 staff (we will never ask for your password)
• Log out when using shared or public devices
• Enable two-factor authentication (2FA) if available on your account
• Monitor your account for unauthorized activity and report suspicious transactions immediately

5.5 Breach Notification

In the unlikely event of a data breach that compromises your personal information, main88 will notify affected users within 72 hours of discovering the breach (or as required by applicable law). Notifications will include the nature of the breach, data affected, measures taken, and recommended actions to protect yourself.

6. Cookies and Tracking Technologies

main88 uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze platform usage.

6.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They contain information about your visit to our website and help us recognize you on return visits. Cookies do not contain viruses and cannot access other files on your device.

6.2 Types of Cookies We Use

6.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can block all cookies, accept only first-party cookies, or delete cookies after each session. However, disabling essential cookies will prevent you from logging in and using main88 services. To manage cookies:

• Google Chrome: Settings > Privacy and Security > Cookies and other site data
• Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions

7. Data Retention

main88 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.

7.1 Active Account Data

While your account is active, we retain all personal information, transaction history, and gaming records to provide ongoing services, comply with regulations, and resolve disputes.

7.2 Closed Account Data

After you close your account, we retain certain information for legal and regulatory compliance:

• Transaction Records: 7 years (required by anti-money laundering laws)
• Identity Verification Documents: 7 years (regulatory requirement)
• Dispute Records: 7 years (statute of limitations for legal claims)
• Marketing Preferences: Until you withdraw consent or 2 years of inactivity

7.3 Anonymized Data

We may retain anonymized or aggregated data indefinitely for statistical analysis, research, and platform improvement. Anonymized data cannot be linked back to you personally and is not considered personal information under privacy laws.

7.4 Deletion Requests

If you wish to delete your personal data before the standard retention period, you may submit a request to our Data Protection team. We will honor deletion requests unless we are legally required to retain the data (e.g., for tax, AML, or legal dispute purposes). See Section 8 for instructions on exercising your data rights.

8. Your Privacy Rights

Under applicable data protection laws, you have certain rights regarding your personal information. main88 respects these rights and provides mechanisms to exercise them:

8.1 Right to Access

You have the right to request a copy of all personal information we hold about you. This includes your account details, transaction history, KYC documents, communication logs, and gameplay records. We will provide the data in a structured, commonly used format (typically PDF or CSV) within 30 days of your request.

8.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information (email, phone number, address) directly through your account settings. For corrections to identity documents or name changes, contact customer support with supporting documentation.

8.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected or if you withdraw consent. However, we may retain data if required by law (AML compliance, tax obligations) or if needed to establish, exercise, or defend legal claims.

8.4 Right to Restrict Processing

You can request that we temporarily suspend processing your personal data if you contest its accuracy, object to processing, or need the data preserved for legal purposes while we are no longer required to hold it.

8.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider. We will provide your data in JSON, CSV, or XML format upon request.

8.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing emails by clicking unsubscribe links or adjusting preferences in your account settings.

8.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications, cookies), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

8.8 How to Exercise Your Rights

To exercise any privacy rights, contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Rights Request - [Your Account Username]"
• Include: Your full name, account username, detailed description of your request, and proof of identity (for security purposes)

We will respond to valid requests within 30 days. Complex requests may require an additional 30-day extension, of which you will be notified.

9. Children's Privacy

main88 services are intended exclusively for adults aged 21 years or older. We do not knowingly collect personal information from individuals under the legal gambling age.

Our age verification processes include:

• Date of birth collection during registration
• Government-issued ID verification through KYC
• Automated age checks against identity databases

If we discover that we have inadvertently collected personal information from a minor, we will immediately delete the data, close the account, void all transactions, and refund any deposits to the source. If you believe a minor has accessed main88 services, please contact us immediately at [email protected].

Parents and guardians are encouraged to monitor their children's internet usage and use parental control software to prevent access to gambling websites.

10. International Data Transfers

main88 operates internationally and may transfer your personal data to servers located outside Indonesia. These transfers are necessary to provide our services, process payments, and ensure platform security.

When transferring data internationally, we ensure appropriate safeguards are in place:

• Data processing agreements with all international partners requiring equivalent data protection standards
• Use of Standard Contractual Clauses (SCCs) approved by data protection authorities
• Encryption of data in transit and at rest
• Regular audits of international partners' data security practices

By using main88 services, you acknowledge and consent to international data transfers as described. If you do not consent to international transfers, please do not use our services.

11. Changes to This Privacy Policy

main88 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you through:

• Email notification to your registered email address
• Prominent notice on the main88 website homepage
• In-account notification upon your next login

The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of main88 services after policy changes take effect constitutes acceptance of the revised policy. If you do not agree with the changes, you must stop using our services and close your account.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact main88 through the following channels:

General Privacy Inquiries

• Email: [email protected]
• Live Chat: Available 24/7 through the main88 website
• WhatsApp: +62 812-3456-7890

Data Protection Officer

For formal privacy rights requests, data protection concerns, or complaints:

• Email: [email protected]
• Subject: Include "Data Protection Request" in the subject line
• Response Time: We will acknowledge your request within 72 hours and provide a full response within 30 days

Regulatory Complaints

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with your local data protection authority or supervisory body.