Privacy Policy

This Privacy Policy describes how stak88 ("we", "us", "our", or the "Company") collects, processes, stores, and protects the personal data of individuals ("you", "your", or the "Player") who access or use the stak88 platform at stak88.cam, including any associated mobile interfaces, sub-domains, and customer service channels.

stak88 operates as an online betting and casino platform serving players across Indonesia, including in Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, Semarang, Makassar, and Palembang. Our platform is intended exclusively for adults aged 21 years or older.

By registering an account on stak88, completing a transaction, using our customer support channels, or otherwise interacting with our platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. Where we rely on your consent as a legal basis for processing, you have the right to withdraw that consent at any time — see Section 11 (Your Rights) for details.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the broader legal relationship between you and stak88.

2.1 The data controller responsible for your personal information is the Company that operates the stak88 platform. The Company determines the purposes for which personal data is processed and the means by which that processing is carried out.

2.2 For all privacy-related enquiries, data subject requests, or complaints, you may contact the Company's designated Data Protection contact through the channels listed in Section 14 (Contact) of this policy.

2.3 Where stak88 engages third-party service providers to process personal data on its behalf — such as KYC verification partners, payment processors, or fraud prevention services — those providers act as data processors and are contractually bound to process data only on stak88's documented instructions and to maintain appropriate security standards.

stak88 collects personal data across several categories, depending on how you interact with the platform. The table below summarises the main categories and specific data points we may hold about you.

Special Category Data: stak88 does not intentionally collect special category data (such as health data or religious beliefs) as part of standard platform use. However, where a Player voluntarily discloses information relating to problem gambling, mental health, or financial vulnerability to our responsible gaming team, that information is processed under heightened confidentiality protocols and used solely to provide appropriate support.

stak88 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or opting into a promotion.
• Automated collection: Technical and behavioural data collected automatically when you access the platform — including cookies, server logs, and analytics tools — as described further in Section 10.
• Third-party sources: Identity verification data returned by our KYC partners; fraud risk signals provided by third-party fraud prevention services; payment confirmation data returned by bank transfer and e-wallet payment processors including OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Publicly available sources: In limited circumstances relevant to fraud prevention, stak88 may reference publicly available sources to verify the accuracy of information you have provided.

stak88 processes your personal data only where there is a lawful basis for doing so. The primary purposes and their corresponding legal bases are set out below.

6.1 Principles. stak88 does not sell your personal data to third parties. We do not share your data with advertising networks for the purpose of targeted advertising on third-party platforms. We share personal data only where necessary for the delivery of platform services, for legal compliance, or where you have provided explicit consent.

6.2 Service Providers. stak88 shares personal data with the following categories of third-party service providers, all of whom are bound by data processing agreements requiring them to maintain the confidentiality and security of your data:

• KYC and identity verification providers: to verify your identity and age as required before account activation and withdrawal processing.
• Payment processors: banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — to process deposit and withdrawal transactions.
• Fraud prevention and security services: to detect and prevent fraudulent activity, money laundering, and account compromise.
• Platform hosting and cloud infrastructure providers: to operate the technical infrastructure on which stak88 runs.
• Customer support technology providers: to power live chat and communications systems.
• Game content providers: such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and Spribe — minimal data (session tokens, bet references) is shared to facilitate gameplay. These providers are independently certified and maintain their own data security standards.

6.3 Legal Disclosure. stak88 may disclose your personal data to competent government authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or where stak88 reasonably believes such disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of stak88's assets, your personal data may be transferred to the successor entity. We will provide reasonable notice before your data becomes subject to a different privacy policy.

7.1 As a platform serving players across Indonesia, some of stak88's infrastructure, service providers, and game studio partners are located in jurisdictions outside Indonesia. As a result, your personal data may be transferred to, stored in, or processed in countries other than your country of residence.

7.2 Where personal data is transferred internationally, stak88 implements appropriate safeguards to ensure that your data continues to be protected to a standard equivalent to that required under this Privacy Policy. These safeguards include contractual data transfer agreements with receiving entities and, where available, reliance on jurisdictions that maintain recognised data protection frameworks.

7.3 By using stak88, you acknowledge that your personal data may be transferred internationally as described in this section.

8.1 Active Accounts. While your stak88 account is active, we retain all personal data necessary to provide platform services, process transactions, and comply with our legal obligations.

8.2 Closed Accounts. Following the closure of your stak88 account — whether at your request or by stak88 — we retain your personal data for a minimum period of five (5) years. This retention period reflects our obligations under applicable anti-money laundering standards and our need to be able to respond to disputes, regulatory enquiries, and legal proceedings that may arise after account closure.

8.3 Financial Records. Transaction records, including all deposit and withdrawal history denominated in IDR, are retained for a minimum of seven (7) years from the date of the transaction, in line with financial record-keeping standards.

8.4 KYC Documents. Identity verification documents (KTP copies, selfie photographs, bank account verification) are retained for the duration of account activity and for five years following account closure, unless a longer retention period is required by law.

8.5 Marketing Data. Where you have consented to marketing communications and have not subsequently withdrawn that consent, we retain your marketing preferences for as long as your account is active. If you opt out of marketing at any time, we will update your preferences within five business days and retain a record of your opt-out to ensure we do not contact you again.

8.6 Anonymisation. Where data is no longer required for any of the above purposes, we will either securely delete it or anonymise it so that it can no longer be associated with you as an individual.

stak88 implements a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our primary security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and stak88's servers — the same encryption standard used by major international banks.
• Encryption at rest for sensitive data fields including identity documents, bank account numbers, and financial records stored in stak88's databases.
• Two-factor authentication (2FA) available on all accounts and mandatory for staff accessing internal administrative systems.
• Role-based access controls ensuring that stak88 staff can access only the personal data necessary for their specific role. Access to KYC documents and financial records is restricted to a small number of authorised personnel.
• Continuous intrusion detection and monitoring of stak88's infrastructure to identify and respond to security threats in real time.
• Regular penetration testing and security audits conducted by independent third-party security firms.
• Incident response procedures ensuring that in the event of a data breach, affected Players are notified promptly and appropriate remedial action is taken.

10.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. stak88 uses cookies and similar technologies (including local storage, session tokens, and analytics pixels) to operate the platform and improve your experience.

10.2 Categories of Cookies We Use.

10.3 Managing Cookies. You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a site-by-site basis. Please note that disabling certain cookies may affect platform functionality — for example, your session may not persist correctly if essential cookies are blocked.

10.4 Do Not Track. Some browsers transmit a "Do Not Track" signal to websites. stak88's current platform infrastructure does not alter its data collection practices in response to DNT signals, but we remain open to adopting industry-standard DNT protocols as they mature.

You have the following rights in relation to the personal data stak88 holds about you. To exercise any of these rights, contact us via live chat or email (see Section 14). We will respond to all valid requests within 30 days.

• Right of Access: You may request a copy of the personal data stak88 holds about you, including the categories of data, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right to Rectification: If any personal data stak88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. This includes updating your email address, phone number, or bank account details on file.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the legal basis), or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to our legal retention obligations under Sections 8.2 and 8.3 — we cannot delete financial records or KYC data earlier than our minimum retention periods require.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where we rely on legitimate interest as the legal basis. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Opt Out of Marketing: You may opt out of promotional emails, SMS, and WhatsApp messages at any time by contacting support or using the unsubscribe mechanism included in marketing communications.

12.1 stak88 is an adults-only platform. We do not knowingly collect personal data from individuals under 21 years of age. Our KYC process is designed to detect and reject underage registrations, and stak88 actively monitors for indicators that an account may be operated by a minor.

12.2 If stak88 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data collected, and process any verified deposited funds for return to the payment source in accordance with our Terms & Conditions.

12.3 If you believe that a minor has registered on stak88 or is using this platform, please report this to our support team immediately at the contact details in Section 14. Such reports are treated as urgent and escalated to our compliance team within one hour.

13.1 stak88 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, applicable law, or platform features. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

13.2 Where a proposed change materially affects how we use your personal data — particularly data we have already collected — we will provide reasonable advance notice to registered Players via the email address on file or via an in-platform notification. We will also update the version number displayed at the top of this document.

13.3 Your continued use of the stak88 platform following notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change, you must cease using the platform and request account closure before the revised policy takes effect.

13.4 We recommend that you review this Privacy Policy each time you return to stak88 after a period of inactivity, as the policy may have been updated since your last visit.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a privacy concern, please contact stak88's Data Protection contact through any of the following channels:

• Live Chat: Available 24/7 directly within the stak88 platform — select "Privacy & Data" as the topic for priority routing to our data protection team. Average response: under 5 minutes.
• WhatsApp: 24/7 support — contact details available upon login. Please reference "Privacy Policy" or "Data Request" in your opening message.
• Email: support@stak88.cam — for formal data subject rights requests, please use the subject line "Data Subject Request — [Your Full Name]". We respond to privacy requests within 5 business days and fulfil them within 30 days.

When submitting a data subject rights request, please include your registered username and the email address associated with your account so we can verify your identity and locate your data records efficiently.

For responsible gaming concerns — including requests to activate self-exclusion, deposit limits, or cooling-off periods — please visit our dedicated Responsible Gaming page or contact live chat directly. These requests are handled by specialist agents with priority escalation.