Privacy Policy

po188 ("we", "us", "our", or "the Platform") is an internationally licensed online betting platform serving players across Indonesia, including in Jakarta, Surabaya, Bandung, Bali, Yogyakarta, Medan, Semarang, and beyond. We recognize that the personal data you entrust to us is sensitive, and we treat its protection as a fundamental operational responsibility — not merely a legal formality.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between po188 and its Members. Defined terms used but not defined in this Policy carry the meanings given to them in the Terms & Conditions. Where this Policy and the Terms & Conditions conflict with respect to data handling, this Policy prevails.

We may update this Privacy Policy from time to time. The date of the most recent revision is displayed at the top of this page. Continued use of po188 following any update constitutes acceptance of the revised Policy.

po188 collects personal data in the following categories. We collect only the data that is necessary for the purposes described in Section 4 of this Policy, and we do not retain data beyond the periods described in Section 7.

2.1 Identity & Contact Data

When you register a po188 account, we collect your full legal name, date of birth, residential address, email address, and phone number. This data is required to verify your identity, confirm your eligibility to play (21 years of age or older), and communicate with you about your account.

2.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering (AML) and fraud-prevention obligations and to process withdrawal requests, we may collect copies of government-issued identity documents such as your Indonesian National Identity Card (KTP), passport, or driver's license; a selfie photograph for biometric identity confirmation; and documentation confirming ownership of your registered payment method, such as a bank statement from BCA, BRI, BNI, Mandiri, CIMB Niaga, or BSI, or a screenshot confirming ownership of an e-wallet account with OVO, DANA, GoPay, ShopeePay, or LinkAja.

2.3 Financial Data

We collect records of all deposit and withdrawal transactions processed through your po188 account, including the payment method used, the amount in Indonesian Rupiah (IDR), the date and time of the transaction, and the transaction reference number. We do not store full bank account numbers or e-wallet credentials — payment processing is handled by certified payment gateway partners.

2.4 Gameplay & Betting Data

We record details of every bet placed on the platform, including the product type (sportsbook, live casino, togel (Indonesia's traditional numbers lottery), Bandar Q, Sakong, slots), the stake amount, the odds or game parameters, the outcome, and the resulting balance change. This data is required to settle bets accurately, detect problem gambling indicators, and resolve disputes.

2.5 Technical & Device Data

We automatically collect certain technical data when you access po188, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data helps us secure your account, detect unauthorized access, and improve platform performance.

2.6 Communications Data

We retain records of communications between you and our support team, including live chat transcripts and emails sent to or from [email protected]. These records are stored to resolve disputes, train our support agents, and maintain an audit trail of account-related interactions.

po188 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical and device data collected automatically by our servers and analytics systems each time you access the platform.
• Cookies and similar technologies: Data collected via browser cookies, local storage, and session identifiers as described in Section 6 of this Policy.
• Third-party payment processors: Transaction confirmation data returned by our payment gateway partners after you initiate a deposit or withdrawal using a local Indonesian bank or e-wallet.
• Game studio data feeds: Session and outcome data passed to po188 by licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft when you play their titles on our platform.
• Identity verification partners: Results of document authenticity checks conducted by our KYC service providers in connection with your submitted identity documents.

po188 uses the personal data we collect exclusively for the following purposes. We do not use your data for purposes that are incompatible with those stated here without first obtaining your explicit consent.

4.1 Account Management

Your identity and contact data is used to create and maintain your po188 account, authenticate your login sessions, communicate important account notifications (such as deposit confirmations, withdrawal processing updates, and security alerts), and respond to support inquiries.

4.2 Service Delivery

We use your gameplay and financial data to accept and settle your bets accurately, process deposits and withdrawals to and from your registered Indonesian bank account or e-wallet, apply bonus credits in accordance with the applicable promotion terms, and display your account balance and transaction history.

4.3 Legal Compliance & Fraud Prevention

po188 uses KYC documents, financial records, and technical data to meet its anti-money-laundering (AML) obligations, prevent fraudulent account activity, detect and block the use of stolen or unauthorized payment credentials, identify and close duplicate accounts, and comply with any lawful requests from regulatory or law enforcement authorities.

4.4 Responsible Gaming

We analyze gameplay and session data to identify behavioral indicators of problem gambling, such as sharply escalating bet volumes, extended unbroken play sessions, or rapidly increasing deposit frequency. Where such patterns are detected, our responsible gaming team may proactively reach out to the Member to offer support tools including deposit limits, cooling-off periods, and self-exclusion options. This processing is conducted in the legitimate interests of Member wellbeing.

4.5 Platform Security

Technical and device data — including IP addresses, device fingerprints, and session timestamps — is used to detect unauthorized account access, block known fraud vectors, monitor for unusual login patterns, and protect the integrity of our platform infrastructure.

4.6 Service Improvement

Aggregated, anonymized usage data is analyzed to understand which features Members use most, identify performance bottlenecks, and guide product development decisions. This analysis does not involve the processing of individually identifiable personal data beyond what is necessary for the stated purpose.

4.7 Marketing Communications

With your consent (obtained at registration or subsequently via your account preferences), po188 may send you promotional communications about bonuses, seasonal promotions (such as Idul Fitri or Imlek offers), new game launches, and platform features. You may withdraw your consent to marketing communications at any time by updating your account notification preferences or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

po188 may share your personal data with the following categories of third party, strictly to the extent necessary to deliver our services and meet our legal obligations:

5.1 Payment Processors

To process deposits and withdrawals, po188 shares transaction data with certified payment gateway partners that facilitate transfers with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners receive only the data necessary to complete the transaction and are contractually prohibited from using it for any other purpose.

5.2 Game Studios

To deliver real-money gaming sessions, po188 shares a session token and your account identifier with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. Studios receive no personally identifiable information beyond what is technically required to authenticate and record your game session.

5.3 KYC & Fraud Prevention Partners

To verify the authenticity of identity documents submitted during KYC, po188 works with specialist identity verification service providers. These partners receive copies of the documents you submit and return a verification result. They are contractually bound by strict data processing agreements and may not retain your documents beyond the period required for verification.

5.4 Legal & Regulatory Authorities

po188 may disclose personal data to government agencies, law enforcement bodies, financial intelligence units, or courts where required to do so by law, by a valid legal order, or where we reasonably believe disclosure is necessary to prevent serious harm or illegal activity. Where legally permitted, we will notify the affected Member of such a request.

5.5 Corporate Successors

In the event of a merger, acquisition, or sale of all or part of po188's business, Member personal data may be transferred to the acquiring entity as part of the transaction, provided that the acquiring entity agrees to be bound by data protection obligations no less protective than those set out in this Policy. Members will be notified of any such transfer.

po188 uses cookies and similar browser storage technologies to deliver a functional, secure, and personalized experience. The following categories of cookies are used on the platform:

po188 does not use third-party advertising cookies or cross-site tracking pixels. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your account.

po188 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account data (identity & contact): Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years after the date of verification, or longer if required by a regulatory or legal hold instruction.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gameplay and betting records: Retained for a minimum of three (3) years from the date of each session, or until any related dispute is fully resolved, whichever is later.
• Support communications: Retained for a minimum of two (2) years from the date of the last communication in the relevant thread.
• Technical and device logs: Retained for a maximum of twelve (12) months, after which they are deleted or anonymized.
• Marketing consent records: Retained for the duration of your account membership, updated each time you change your marketing preferences.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Data subject to a legal hold or an active dispute investigation is retained beyond the standard retention period until the hold is lifted or the dispute is resolved.

po188 implements a layered security architecture to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• Encryption at rest: Sensitive data fields — including KYC document copies, payment reference data, and account credentials — are encrypted at rest using industry-standard symmetric encryption.
• Access controls: Access to Member personal data is restricted on a strict need-to-know basis. Only authorized personnel whose job functions require access to specific data categories are granted the corresponding system permissions.
• Password security: Member account passwords are stored as salted cryptographic hashes. po188 staff cannot view your password in plain text and will never ask you for it.
• Intrusion detection: Our infrastructure is monitored continuously for anomalous traffic patterns, unauthorized access attempts, and indicators of compromise by our security operations team.
• Vendor security assessments: Third-party service partners that handle Member data on our behalf are subject to security due diligence reviews and contractual data processing agreements before integration.
• Incident response: po188 maintains a formal data breach response plan. In the event of a breach that is likely to result in risk to Member rights or freedoms, affected Members will be notified promptly with details of the nature of the breach, the data involved, and the steps taken to contain it.

While we take every reasonable precaution to protect your data, no internet-based system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your po188 login credentials and for ensuring that your own device and network environment are adequately secured.

po188 respects your rights with respect to your personal data. You may exercise any of the following rights at any time by contacting our support team via live chat or by emailing [email protected]:

po188 will respond to all data rights requests within 30 days of receipt. We may request proof of identity before processing a request to protect your data against unauthorized access by third parties. Where a request is complex or involves a large volume of data, the response period may be extended by a further 60 days with prior notice.

Please note that the right to erasure is subject to limitations where po188 is required by law to retain certain records (for example, transaction records retained for AML compliance purposes). In such cases, we will explain the applicable legal basis for retention and delete all data that is not subject to that obligation.

If po188 discovers or is notified that personal data has been collected from an individual who was under 21 at the time of collection, we will immediately suspend the relevant account, delete the associated personal data to the extent not required for AML or fraud-investigation purposes, and void any bets or transactions associated with the account.

If you are a parent or guardian and believe that your child has submitted personal data to po188 without your consent, please contact our support team immediately at [email protected] so that we can take prompt corrective action.

po188 operates as an internationally licensed platform. Some of our service partners — including game studios, KYC verification providers, and cloud infrastructure providers — may process Member data on servers located outside of Indonesia. When personal data is transferred internationally, po188 ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses that bind the recipient to obligations equivalent to those described in this Policy.
• Restricting data transfers to service providers located in or subject to data protection frameworks that provide an adequate level of protection for personal data.
• Ensuring that game studios and payment partners processing Member session data operate under valid gaming licenses that impose data protection obligations as a condition of licensure.

By using po188, you acknowledge that your personal data may be transferred to and processed in countries other than Indonesia. po188 takes all reasonable steps to ensure that such transfers are conducted securely and in accordance with this Policy.

po188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When we make a material change to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Display a prominent notice on the po188 homepage and/or login screen for a minimum of 14 days following publication of the revised Policy.
• Where the change materially affects the way we process your personal data, send a direct notification to your registered email address with a summary of the key changes.

Your continued use of po188 following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change, you must stop using the platform and may request closure of your account by contacting our support team.

We encourage you to review this page periodically to stay informed of how po188 collects, uses, and protects your personal data. Previous versions of this Privacy Policy are available on request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way po188 handles your personal data, please contact our Data Support team through any of the following channels:

When submitting a data rights request, please include your registered username and email address so that we can locate your account and verify your identity efficiently. po188 will not process data rights requests submitted anonymously without a means of identity verification.