Privacy Policy

In this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data — including name, email address, date of birth, national identity number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" means pin88, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of pin88 under a written data processing agreement, such as payment processors, KYC verification providers, and cloud hosting providers.
• "Platform" means the pin88 website at https://pin88.cam, including all sub-pages, account portals, and related services.
• "User" / "you" / "your" means any individual who accesses the Platform, whether registered or unregistered.
• "KYC" means Know Your Customer — the identity and age verification process required by our licensing obligations and anti-money-laundering controls.
• "Cookies" means small text files or similar tracking technologies placed on your device by the Platform to support session management, security, and analytics.

pin88 collects the following categories of Personal Data, depending on how you interact with the Platform:

We do not intentionally collect sensitive special-category data (such as health data, political opinions, or biometric data) unless it is directly volunteered by you in a support communication or required by a specific regulatory obligation.

pin88 collects Personal Data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical and Usage Data collected automatically by our servers and analytics systems when you access the Platform, via cookies, server logs, and similar technologies.
• Third-party sources: Identity verification data returned by KYC service providers; fraud and sanctions screening data from compliance databases; payment confirmation data from local Indonesian banks and e-wallet operators.
• Publicly available sources: In limited circumstances relevant to fraud prevention or KYC compliance, we may cross-reference information from public records or government-issued databases.

pin88 processes your Personal Data for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity at login, manage your profile settings, and maintain the integrity of your account.
• Transaction processing: To execute deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja, and any other payment methods available on the Platform.
• KYC and regulatory compliance: To verify your identity and age (21+), comply with anti-money-laundering (AML) requirements, and satisfy the obligations imposed by our operating license.
• Fraud prevention and security: To detect, investigate, and prevent unauthorized access, fraudulent transactions, multi-accounting, money laundering, and other prohibited activities.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behavior and to administer self-exclusion, deposit limit, and cool-off requests in accordance with our responsible gaming obligations.
• Customer support: To respond to your support queries, resolve disputes, and process complaints.
• Platform improvement: To analyze aggregate usage patterns and improve the performance, security, and features of the Platform. Analytics data used for this purpose is aggregated and not linked to individual user profiles where possible.
• Marketing communications: To send you promotional offers, bonus announcements, and relevant Platform updates by email, where you have not opted out of such communications. You may opt out at any time by contacting support.
• Legal obligations: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.

pin88 relies on the following legal bases to process your Personal Data:

• Contractual necessity: Processing required to provide the services you have requested under our Terms & Conditions — including account management, transaction processing, and KYC verification — is necessary for the performance of the contract between you and pin88.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, age verification requirements, licensing obligations, and lawful requests from competent authorities.
• Legitimate interests: Processing carried out in furtherance of pin88's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, provided those interests are not overridden by your data protection rights.
• Consent: Where we send optional marketing communications or use non-essential cookies, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pin88 does not sell, rent, or trade your Personal Data. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors and banking partners: Personal Data and financial details necessary to execute deposit and withdrawal transactions are shared with our partner banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These entities process your data as independent data controllers subject to their own privacy policies and Indonesian financial regulation.
• KYC and identity verification providers: Identity documents and personal details are shared with licensed third-party KYC providers to fulfill our age and identity verification obligations. These providers act as Data Processors under written agreements with pin88.
• Fraud and compliance screening services: Relevant personal data may be checked against sanctions lists, politically exposed persons (PEP) databases, and fraud intelligence networks as required by our AML compliance program.
• Game software providers: Aggregated session and bet-history data may be shared with our game providers — Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and Pocket Games Soft — to the extent required to operate their respective game integrations. These providers do not receive directly identifying personal data beyond what is technically necessary.
• Cloud and infrastructure providers: Our Platform is hosted on third-party cloud infrastructure. Hosting providers have access to server-level data solely for infrastructure operation under strict data processing agreements.
• Legal and regulatory authorities: We will disclose Personal Data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of pin88, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pin88's business assets, Personal Data held by pin88 may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

pin88 is operated from a jurisdiction outside Indonesia. As a result, your Personal Data may be transferred to, stored in, and processed in countries outside Indonesia, including the jurisdiction in which pin88 holds its gaming license and the locations of our cloud infrastructure providers.

Where Personal Data is transferred internationally, pin88 takes the following steps to ensure an adequate level of protection:

• Transfers to Data Processors are governed by contractual clauses that impose data protection obligations at least equivalent to those applied within Indonesia.
• We assess the data protection laws of recipient countries and implement additional safeguards — such as encryption at rest and in transit — where those laws provide a lower standard of protection than Indonesian data protection principles.
• We do not transfer your data to jurisdictions that are subject to international sanctions or that have no functioning data protection legal framework without additional contractual and technical safeguards in place.

By using the Platform, you acknowledge and consent to the international transfer of your Personal Data in accordance with this clause.

pin88 retains your Personal Data only for as long as necessary to fulfill the purposes described in this policy or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in order to satisfy AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping standards applicable to our licensing jurisdiction.
• KYC documents: Retained for a minimum of 5 years following the completion of the KYC process or account closure, whichever is later.
• Support and communications data: Retained for 2 years from the date of the interaction, unless the communication is relevant to an ongoing dispute or legal proceeding, in which case it is retained until the matter is fully resolved.
• Technical and usage data: Retained in identifiable form for up to 12 months. Aggregated, anonymized analytics data may be retained indefinitely.
• Marketing preferences and consent records: Retained for the duration of your account and for 2 years following account closure.

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where deletion is not immediately possible — for example, because data is held in secure backup archives — the data is isolated from active processing until deletion can be completed.

pin88 uses cookies and similar technologies — including local storage and session tokens — to support the operation, security, and performance of the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Required for core Platform functionality, including maintaining your authenticated session, remembering your language and currency preferences, and protecting against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing your ability to use the Platform.
• Security cookies: Used to detect and prevent fraudulent login attempts, automated bot activity, and unauthorized account access. These are essential for platform integrity and cannot be opted out of.
• Analytics cookies: Used to collect aggregated, anonymized data on how users navigate the Platform — such as page load times, error rates, and feature usage — to help us improve performance and user experience. These cookies do not identify you personally.
• Functional cookies: Used to remember user preferences and optional settings you have configured within your account dashboard.

pin88 does not use third-party behavioral advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. Your browsing activity on pin88 is not shared with external advertising networks.

Most web browsers allow you to control cookies through their settings. Blocking strictly necessary cookies will impair Platform functionality. Blocking analytics or functional cookies will not prevent you from using the core Platform features.

pin88 implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure:

• Encryption in transit: All data exchanged between your browser and our servers is encrypted using TLS 1.2 or higher, with 256-bit AES encryption.
• Encryption at rest: Sensitive data fields — including identity document images, financial account details, and KYC records — are encrypted at rest using AES-256.
• Access controls: Access to production systems containing Personal Data is restricted to authorized personnel on a strict need-to-know basis, enforced via role-based access controls and multi-factor authentication.
• Password security: Account passwords are stored as one-way cryptographic hashes using modern algorithms. Plain-text passwords are never stored or logged by pin88.
• Fraud monitoring: Our platform employs automated systems to detect anomalous login behavior, unusual transaction patterns, and multi-account activity in real time.
• Penetration testing and audits: We conduct periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: In the event of a personal data breach that poses a risk to your rights, pin88 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.

While we maintain robust security practices, no system is entirely immune to risk. You also have an important role in protecting your own data — keep your login credentials confidential, use a strong unique password, and contact support immediately if you suspect your account has been compromised.

Subject to applicable law and our legitimate processing obligations, you have the following rights in relation to your Personal Data held by pin88:

To exercise any of these rights, contact our support team at the email address in Clause 14. We will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days with prior notification.

Please note that certain rights are subject to exemptions. For example, we cannot erase Personal Data that we are legally required to retain for AML or licensing compliance purposes, even if you request deletion. In such cases, we will explain which data must be retained and why.

The pin88 platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21.

During the account registration and KYC process, we take active steps to verify that each user meets the minimum age requirement. Any account found to belong to a person under 21 will be immediately closed, all balances will be frozen pending investigation, and any winnings accrued will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered an account on pin88, please contact us immediately at the email address in Clause 14. We will investigate the matter promptly and take appropriate action, including erasure of the minor's data where no conflicting legal retention obligation applies.

pin88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. The date of the most recent revision is displayed prominently at the top of this page.

• Material changes — such as changes to the categories of data we collect, our data sharing practices, or your rights — will be communicated to registered users by email to the address on file at least 7 days before the updated policy takes effect.
• Non-material changes — such as typographical corrections, clarifications of existing practices, or updates to reflect new service features that do not alter your data rights — may be published without direct notification.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should close your account before the effective date and contact support to request deletion of your Personal Data, subject to our legal retention obligations.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a potential data protection concern, please contact the pin88 Data Support team using the details below.

Our support team is staffed by native Indonesian-speaking agents and is available 24 hours a day, 7 days a week, including public holidays observed across Indonesia.

Data & Privacy Support Email:
[email protected]

Please include your registered username, the email address associated with your account, and a clear description of your request or concern. For data access or deletion requests, we may need to verify your identity before fulfilling the request to protect against unauthorized disclosure.

Complaints: If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter through the formal complaint process described in our Terms & Conditions. We take all privacy complaints seriously and aim to resolve them fairly and promptly.