cili88 Privacy Policy

Introduction

cili88 ("we", "us", "our") operates the online casino and sportsbook platform accessible at cili88.cam, serving registered players across Indonesia including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and beyond. We take the privacy and security of our players' personal data extremely seriously and are committed to handling all information entrusted to us with the highest standards of care, transparency, and integrity.

This Privacy Policy ("Policy") describes the types of personal data we collect when you visit the cili88 website or use the cili88 platform, the purposes for which that data is processed, the conditions under which it may be shared with third parties, how long we retain it, and the rights you have in relation to your own data. This Policy applies to all users of the cili88 platform, including registered Account holders, prospective players browsing the website, and individuals who contact cili88 customer support.

By accessing the cili88 website or registering a cili88 Account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue your use of the cili88 platform immediately.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

Definitions

The following definitions apply throughout this Privacy Policy:

Data We Collect

cili88 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party verification and payment service providers. The categories of personal data we collect are set out below.

3.1 Registration & Identity Data

• Full legal name as it appears on a valid government-issued identification document;
• Date of birth (to verify you meet the minimum age requirement of 21 years);
• Residential address in Indonesia;
• Email address;
• Mobile telephone number registered in Indonesia;
• Username and encrypted password hash.

3.2 KYC Verification Data

• Copy of a valid Indonesian National Identity Card (KTP), passport, or driving licence (SIM);
• Proof of address document (bank statement, utility bill, or official government correspondence issued within the last three months);
• Proof of payment method (bank account passbook or e-wallet account screenshot confirming the account is registered in your name).

3.3 Financial & Transaction Data

• Bank account details (bank name, account number, and account holder name) for deposit and withdrawal processing via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata;
• E-wallet account details for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions;
• Deposit history, withdrawal history, and running account balance denominated in IDR;
• Betting and wagering history across all cili88 product verticals.

3.4 Technical & Usage Data

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Session duration, pages visited, and features used within the Platform;
• Log data including timestamps of login, logout, wager placement, and account changes;
• Cookies and similar tracking technologies (see Section 6).

3.5 Communications Data

• Live chat transcripts between you and cili88 support agents;
• Email correspondence sent to or received from cili88 support;
• Voluntary feedback, survey responses, and promotional participation records.

How We Use Your Data

cili88 processes your personal data for the following specific, documented purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.

Legal Basis for Processing

cili88 processes your personal data on the following legal grounds:

• Contract Performance: Processing is necessary to provide the cili88 service to you under the Terms & Conditions you accepted at registration. This covers account creation, payment processing, and the delivery of gaming and betting services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money-laundering legislation, KYC obligations, and any reporting requirements imposed by cili88's licensing authority.
• Legitimate Interests: Processing is necessary for cili88's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and customer support quality assurance, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we process your data for marketing communications or optional analytics, we do so on the basis of your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Cookies & Tracking Technologies

The cili88 Platform uses cookies and similar tracking technologies to deliver a seamless, personalised experience and to support the security, fraud prevention, and analytics functions described in this Policy. By continuing to use the cili88 Platform, you consent to the use of cookies in accordance with this section.

Types of Cookies Used:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens, security cookies that protect against cross-site request forgery (CSRF), and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and recently played games to personalise your cili88 experience across sessions.
• Analytics Cookies: Collect anonymised, aggregated data about how users navigate the Platform, which pages are visited most frequently, and how long sessions last. This data is used solely to improve Platform performance and does not identify you personally.
• Security & Fraud Detection Cookies: Used to identify unusual login patterns, detect automated bot activity, and flag suspicious transaction behaviour as part of cili88's fraud prevention programme.

cili88 does not use third-party advertising cookies or allow external ad networks to place tracking cookies on the Platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to your cili88 Account.

Data Sharing & Disclosure

cili88 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: We share transaction data (name, bank account number, IDR amount) with the relevant Indonesian bank or e-wallet operator (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit or withdrawal instruction.
• KYC & Identity Verification Providers: cili88 may engage a third-party KYC technology provider to assist with document verification. Any such provider processes KYC data under a binding data processing agreement and is prohibited from using your data for any purpose other than identity verification on cili88's behalf.
• Game Studio Providers: When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, or Spribe, your player session data (player ID, bet amount, win/loss outcome) is shared with the relevant studio solely to deliver the game and settle the wager. These studios operate under independent privacy policies and security certifications.
• Regulatory & Law Enforcement Authorities: cili88 may disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where required by applicable law, a court order, or a lawful regulatory request. We will notify you of any such disclosure unless legally prohibited from doing so.
• Fraud Prevention Networks: cili88 may share data with industry fraud prevention services to identify patterns of fraudulent or abusive behaviour that affect the broader online gaming industry. Data shared for this purpose is limited to identifiers (hashed email, device fingerprint) and risk signals and does not include full KYC documents.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of cili88's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via the email address associated with your Account, and the acquiring entity will be required to honour the terms of this Privacy Policy.

International Data Transfers

The cili88 Platform is operated from servers located in jurisdictions that provide an adequate level of data protection. Where personal data is transferred to a third-party processor located outside Indonesia — for example, a cloud infrastructure provider or a game studio's settlement system — cili88 ensures that appropriate safeguards are in place to protect your data throughout the transfer and in the destination jurisdiction.

These safeguards include, but are not limited to:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those described in this Policy;
• Transfer only to jurisdictions recognised as providing adequate data protection by cili88's licensing authority;
• Technical measures including end-to-end encryption of all data in transit, ensuring that personal data cannot be intercepted or read during international transfer.

If you wish to obtain further information about the specific international transfer mechanisms applied to your data, you may contact cili88 at the email address provided in Section 15.

Data Retention

cili88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum and maximum retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

Your Data Rights

As a registered cili88 player, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting cili88 support as described in Section 15.

• Right of Access: You may request a copy of all personal data held about you by cili88, together with information about how that data is being processed.
• Right of Rectification: If any personal data held by cili88 is inaccurate or incomplete, you may request that it be corrected or updated. Note that changes to KYC-verified data require re-submission of supporting documents.
• Right of Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing. This right is subject to cili88's legal obligation to retain certain data as described in Section 9.
• Right to Restrict Processing: You may request that cili88 restrict the processing of your data while the accuracy of that data is contested, while an objection to processing is being assessed, or where processing is unlawful and you prefer restriction over erasure.
• Right to Data Portability: You may request a copy of the personal data you provided to cili88 in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data on the basis of cili88's legitimate interests, including profiling. You may also object to the use of your data for direct marketing at any time, and cili88 will cease such processing immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your Account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

cili88 will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further two months, and you will be informed of the extension within the initial thirty-day period.

Children's Privacy

The cili88 Platform is strictly intended for adults aged 21 years and above. cili88 does not knowingly collect personal data from individuals under the age of 21. The minimum age requirement is enforced through mandatory age declaration at registration and through the KYC verification process, which requires submission of a valid government-issued identity document confirming date of birth.

If cili88 becomes aware that personal data has been collected from a person under the age of 21, the Account will be immediately suspended, the balance will be withheld pending investigation, and all personal data associated with the Account will be deleted within five (5) business days, except where retention is required by applicable law.

If you are a parent or guardian and believe that a minor in your care has registered a cili88 Account, please contact our support team immediately at [email protected]. We take reports of underage access extremely seriously and will act on all credible reports without delay.

Security Measures

cili88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption: All personal data is encrypted at rest using AES-256 encryption. All data transmitted between your device and the cili88 Platform is protected by TLS 1.3, providing full end-to-end encryption in transit. The cili88 website enforces HTTPS on all pages.
• Access Controls: Access to personal data is restricted to authorised cili88 personnel who have a documented business need to access that data. All internal access is subject to role-based access control (RBAC), and access logs are retained and reviewed regularly.
• Password Security: Player passwords are stored as salted cryptographic hashes. cili88 staff cannot view your plaintext password. You will never be asked for your password via email, live chat, or telephone.
• Fraud Monitoring: cili88 operates a 24/7 fraud detection system that monitors login attempts, transaction patterns, and gameplay activity for anomalies indicative of account takeover, bonus abuse, or money laundering.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, cili88 will notify affected players via the email address associated with their Account within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the data categories affected, and the steps cili88 has taken or will take to remediate the breach.
• Penetration Testing: cili88's platform undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.

While cili88 takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials and for notifying cili88 immediately if you suspect that your Account has been accessed without your authorisation.

Third-Party Links

The cili88 Platform does not contain links to external third-party websites. All links within the Platform direct users to pages within the cili88.cam domain. cili88 is not responsible for the privacy practices or content of any external website that you may access independently of the cili88 Platform.

Game content provided by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and others) is delivered within an embedded iframe on the cili88 Platform. While these studios process limited player session data to deliver their games, that processing is governed by their own privacy policies and security certifications. cili88 contractually requires all studio partners to maintain data protection standards consistent with this Policy.

Updates to This Privacy Policy

cili88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform features. When material changes are made, we will notify registered players via the email address associated with their Account and display a prominent notice on the cili88 Platform at least seven (7) days before the changes take effect.

The effective date at the top of this document indicates when the current version entered into force. Your continued use of the cili88 Platform following the effective date of any revision constitutes your acknowledgement and acceptance of the updated Policy.

We encourage you to review this Privacy Policy periodically. The current version is always available at cili88.cam/privacy-policy. If you have any questions about a specific change, please contact our support team before the effective date of the revision.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cili88, please contact our Data Support team through the following channels:

• Live Chat: Available 24/7 directly within the cili88 Platform after login. Indonesian-speaking agents are available at all times to assist with both gameplay and data-related queries.
• Email: [email protected] — responses within 24 hours. For data rights requests, please use the subject line "Data Rights Request — [Your Username]".

For formal data rights requests (access, rectification, erasure, portability, restriction, or objection), please email [email protected] with the subject line "Data Rights Request — [Your Username]" and include a brief description of the right you wish to exercise and the data categories concerned. cili88 will acknowledge your request within 48 hours and provide a full response within 30 calendar days.

cili88's support team operates primarily in the Western Indonesia Time zone (WIB, UTC+7). Live chat response times are typically under sixty (60) seconds during peak hours (08:00–24:00 WIB) and under five (5) minutes during off-peak hours.