Privacy Policy

x88vip is an internationally operated online casino and sportsbook platform accessible at https://x88vip.bio. We operate as a comprehensive digital entertainment service, offering sports betting, live casino, slot gaming, and related promotional services, with a primary focus on serving players across Indonesia — including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and beyond.

In the context of this Privacy Policy, references to "x88vip", "we", "us", or "our" mean the operator of the x88vip platform and all associated services delivered under the x88vip brand. This Policy applies to all users who access or interact with the x88vip website, including registered Members and unregistered visitors.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and x88vip. By using the x88vip platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.

x88vip collects personal data through several channels: directly from you when you register an account or contact support; automatically through your use of the platform; and, in limited circumstances, from third-party verification and payment service providers. The categories of data we collect are described below.

2.1 Registration & Account Data

When you create a x88vip Member account, we collect the personal information required to establish and manage your account, including:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, province, country)
• Username and password (password stored in hashed, non-reversible form)
• Preferred language and communication preferences

2.2 Identity Verification (KYC) Data

To comply with our internal anti-fraud and Know Your Customer (KYC) obligations, we may request the following identity and address verification documents:

• Government-issued photo identification (KTP national identity card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence, dated within three months)
• Evidence of payment method ownership (account name confirmation from BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja)
• Source of funds documentation (for Members with high transaction volumes)

2.3 Transaction & Financial Data

All financial activity on x88vip is denominated in Indonesian Rupiah (IDR/Rp). We record and retain transaction data including:

• Deposit and withdrawal amounts, timestamps, and associated payment channel identifiers
• Bank account or e-wallet account names linked to transactions (we do not store full bank account numbers)
• Transaction reference numbers issued by payment processors
• Bonus credit issuances, wagering activity records, and promotional participation history

2.4 Gaming Activity Data

x88vip records a complete log of your gaming activity on the platform, including game sessions, bet amounts, game results, and win/loss records across all verticals — sportsbook (including BRI Liga 1, Timnas Indonesia, EPL, Champions League, badminton, and Mobile Legends MPL e-sports markets), live casino, slots, and all other available game categories.

2.5 Technical & Usage Data

When you access x88vip, our servers automatically collect certain technical information including:

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser version
• Pages visited, click patterns, session duration, and navigation paths
• Referring URL (the page you visited immediately before arriving at x88vip)
• Time-zone settings (WIB/WITA/WIT — used to display accurate game schedules and draw times)

2.6 Communications Data

When you contact x88vip's support team via live chat or email, we retain records of those communications — including your enquiry, our response, and any attachments submitted — for quality assurance, dispute resolution, and training purposes.

x88vip uses the personal data we collect solely for legitimate operational purposes directly related to the delivery of the x88vip platform. The table below summarises the primary purposes for which each category of data is processed:

x88vip does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects without providing you the opportunity for human review. Where automated processes are applied (for example, in fraud detection scoring), a member of the x88vip compliance team reviews flagged cases before any account action is taken.

x88vip processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil the contractual relationship established when you register a Member account and accept our Terms & Conditions — including account management, payment processing, and gaming service delivery.
• Legitimate Interests: Processing carried out in pursuit of x88vip's legitimate business interests, where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, gaming activity logging, and analytics.
• Legal Obligation: Processing required to comply with applicable legal or regulatory obligations, including responding to lawful requests from competent authorities.
• Consent: Where we seek to send you direct marketing communications about promotions, seasonal offers (such as Idul Fitri, Imlek, or Ramadhan bonus campaigns), or new platform features, we will do so only on the basis of your prior express consent. You may withdraw this consent at any time by updating your communication preferences in the account dashboard or by contacting support.

x88vip does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your information in the limited circumstances described below:

5.1 Payment Processors

To process deposits and withdrawals in Indonesian Rupiah via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja, we share the minimum necessary financial and identity data with our appointed payment processing partners. These partners are contractually obligated to use your data solely for transaction processing and are prohibited from any secondary use.

5.2 Game Software Providers

Certain gaming verticals on x88vip are powered by third-party certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers receive session tokens and anonymised player identifiers necessary to deliver game content. They do not receive your full personal profile, payment details, or KYC documents.

5.3 Identity Verification Services

Where x88vip engages a third-party KYC verification service to assist with document validation, your submitted identity documents will be processed by that provider under a strict data processing agreement. The provider acts solely on x88vip's instructions and may not use your documents for any independent purpose.

5.4 Legal and Regulatory Disclosure

x88vip may disclose your personal data to competent legal, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or where x88vip has a good-faith belief that disclosure is necessary to investigate, prevent, or respond to illegal activity, suspected fraud, or threats to the safety of any person.

5.5 Business Transfers

In the event that x88vip undergoes a merger, acquisition, asset sale, or other corporate restructuring, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new entity before your data is subject to a materially different privacy policy.

x88vip uses cookies and similar tracking technologies to operate the platform effectively, maintain your session state, and improve the overall user experience. Below is a summary of the types of cookies used:

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to use core platform features, including login and the cashier. Disabling functional or analytics cookies will not affect your ability to play games or process transactions.

x88vip implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and x88vip's servers is encrypted using industry-standard TLS protocols. This applies to all platform interactions including login, cashier operations, and live chat.
• Encrypted Data at Rest: Sensitive account and payment data stored in x88vip's databases is encrypted at rest using AES-256 encryption. Passwords are stored exclusively as salted cryptographic hashes and cannot be recovered in plaintext by any employee.
• Access Controls: Access to Member personal data by x88vip personnel is restricted on a strict need-to-know basis. All internal data access is logged, audited, and subject to approval workflows.
• Two-Factor Authentication: x88vip strongly encourages all Members to enable two-factor authentication (2FA) on their accounts. 2FA is available via authenticator app or SMS to Members who have completed email verification.
• Regular Security Audits: x88vip's platform undergoes regular internal and independent third-party security assessments, including penetration testing of the web application and infrastructure.
• Fraud Detection Systems: Automated systems monitor all transactions and gaming activity in real time for anomalous patterns that may indicate account compromise, identity fraud, or money laundering.

x88vip retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your active membership on x88vip.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with standard financial recordkeeping practices applicable to internationally operated gaming platforms.
• KYC Documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for 2 years from the date of each interaction, unless the communication relates to an ongoing dispute or legal matter.
• Gaming Activity Logs: Retained for 2 years from the date of each gaming session, used for responsible gaming monitoring and dispute resolution.
• Closed Account Data: Following verified account closure, personal data that is not subject to a legal retention obligation will be securely deleted or anonymised within 90 days.

Where data is retained beyond its primary use period solely to comply with a legal retention obligation, it is segregated from active systems and access is restricted to authorised compliance personnel only.

As a Member of x88vip, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [your registered username]".

• Right of Access: You may request a copy of the personal data x88vip holds about you. We will provide this in a commonly used, machine-readable format within 5 business days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support or update your details directly via the account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing on legitimate interest grounds. This right is subject to applicable legal retention obligations.
• Right to Restriction: You may request that x88vip restrict processing of your data while a dispute about its accuracy or the lawfulness of its processing is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on x88vip's legitimate interests, subject to our demonstrating compelling grounds for continuing the processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

x88vip will respond to all data rights requests within 5 business days. Where a request is complex or numerous, we may extend this period by a further 10 business days, notifying you of the extension and the reasons for it.

x88vip is a platform strictly intended for adults. Access to and use of the platform is prohibited for any person under 21 years of age. x88vip does not knowingly collect, store, or process personal data belonging to individuals under 21.

During registration, all applicants are required to confirm their date of birth. Where x88vip has reasonable grounds to suspect that a Member may be under 21, the account will be suspended pending KYC age verification. If it is confirmed that a Member is under 21, the account will be permanently closed, all balances will be returned to the payment source used for deposits, and all personal data associated with the account will be deleted within 30 days of confirmation.

If you are a parent or guardian and believe that a minor has registered a x88vip account using false age information, please contact us immediately at [email protected]. We will investigate and act promptly on all such reports.

The x88vip platform integrates third-party services to deliver its full range of gaming and payment functionality. While x88vip carefully vets all third-party partners and requires contractual data protection obligations, please be aware that interactions with third-party services are also governed by those providers' own privacy policies.

Third-party providers currently integrated into the x88vip platform include game software studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), Indonesian payment networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja), and technical infrastructure providers. x88vip does not endorse or take responsibility for the privacy practices of any third-party provider beyond the contractual obligations imposed by our data processing agreements with them.

The x88vip website does not embed third-party social media tracking pixels, external advertising networks, or affiliate tracking scripts that would transmit your personal data to third parties for advertising targeting purposes without your consent.

x88vip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. When a material change is made to this Policy, we will notify you by one or more of the following methods: a prominent notice on the x88vip website, a notification within the Member account dashboard, or an email to your registered email address.

The "Effective date" displayed at the top of this page will be updated each time the Policy is revised. We encourage you to review this page periodically. Your continued use of the x88vip platform following notification of a Policy update constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, please discontinue use of the platform and contact support to request account closure.