sis88 Privacy Policy

1 Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "sis88" (also "we", "us", "our") refers to the operator of the sis88 platform accessible at https://sis88.vip and all associated subdomains and mobile interfaces.
• "Member" / "User" / "you" refers to any individual who visits, browses, registers an account on, or interacts with the sis88 platform in any capacity.
• "Personal Data" refers to any information that identifies or could reasonably identify a natural person, including name, date of birth, email address, mobile number, payment details, device identifiers, and IP address.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "KYC" stands for Know Your Customer — the identity and age verification process sis88 operates to confirm a Member's identity before processing withdrawals or flagged transactions.
• "Cookies" refers to small text files placed on your device by the sis88 platform that store session information and usage preferences.
• "Third-Party Service Providers" refers to companies engaged by sis88 to deliver platform components, including payment processors, game studios, fraud detection services, and analytics providers, each of whom processes data only under written instruction from sis88.
• "IDR" / "Rp" refers to Indonesian Rupiah, the sole transaction currency on the sis88 platform.

2 Data Controller

sis88 acts as the data controller for all Personal Data collected through the sis88 platform. As data controller, sis88 determines the purposes and means by which your Personal Data is processed. Where sis88 engages Third-Party Service Providers to process data on its behalf, those parties act as data processors and are bound by data processing agreements that restrict their use of your data to the specific purposes authorized by sis88.

All inquiries, requests, and complaints relating to the processing of your Personal Data should be directed to our dedicated privacy contact at [email protected]. We will acknowledge receipt of your request within 48 hours and provide a substantive response within 14 calendar days.

3 Data We Collect

sis88 collects the following categories of Personal Data, depending on how you interact with the platform:

3.1 Registration Data

When you create a sis88 account, we collect the information you provide directly:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Indonesian mobile phone number
• Email address
• Username and encrypted password
• City and province of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Medan)

3.2 Identity Verification (KYC) Data

Before processing your first withdrawal — or at any time we are required to verify your identity — we may collect:

• A copy of a valid government-issued photo ID (Indonesian KTP, passport, or SIM)
• A selfie photograph holding your ID document
• Proof of residential address (utility bill or bank statement dated within the previous three months)
• Proof of ownership of the payment method used for deposits (e.g., a screenshot of your BCA, BRI, BNI, or Mandiri mobile banking screen showing your registered account name and number)

3.3 Financial Transaction Data

Each time you make a deposit or request a withdrawal via local bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), sis88 records:

• Transaction type, amount in IDR, timestamp (WIB, UTC+7), and transaction reference number
• Payment method name and the last four digits or abbreviated account identifier of the payment source
• Transaction status (pending, approved, failed, reversed)

3.4 Gaming Activity Data

For operational, regulatory, and responsible gaming purposes, sis88 records your full gaming activity, including:

• Games played, bet amounts, game outcomes, and session durations across all product categories (live baccarat, slots, sportsbook, sabung ayam (traditional cockfighting wagering), and togel (Indonesia's traditional numbers lottery))
• Bonus claims, wagering progress, and promotion participation history
• Responsible gaming tool activations (deposit limits, session limits, self-exclusion requests)

3.5 Technical & Device Data

When you access the sis88 platform, our systems automatically collect:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session start and end timestamps
• Referring URL and pages visited within the platform
• Cookie identifiers (see Section 8 for full details)

3.6 Communications Data

When you contact our support team via live chat, email, or WhatsApp, sis88 retains a record of the conversation, including the subject matter, timestamps, and the resolution provided. This data is used for quality assurance, staff training, and dispute resolution purposes.

4 How We Collect Data

sis88 collects your Personal Data through the following channels:

• Directly from you: Via the registration form, KYC document submission portal, deposit/withdrawal forms, support chat, and any other form or interface through which you voluntarily submit information.
• Automatically: Via cookies, web server logs, and session tracking technologies that operate whenever you access the sis88 platform — whether or not you are logged in.
• From Third-Party Service Providers: Payment processors and fraud detection services may share transaction verification results, risk scores, and identity confirmation data with sis88 in the course of processing your financial transactions.
• From Public Sources: In limited circumstances related to fraud prevention or KYC verification, sis88 may consult publicly available information, such as public records or professionally maintained identity verification databases.

5 Legal Basis for Processing

sis88 processes your Personal Data on one or more of the following legal bases:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract (your membership agreement with sis88)
Processing deposits and withdrawals	Performance of contract; legal obligation (AML/financial compliance)
Identity verification (KYC)	Legal obligation; performance of contract
Fraud detection and prevention	Legitimate interest of sis88 and protection of Members
Responsible gaming monitoring	Legal obligation; legitimate interest
Marketing communications	Consent (you may withdraw at any time)
Analytics and platform improvement	Legitimate interest of sis88
Legal dispute resolution	Legal obligation; legitimate interest

6 How We Use Your Data

sis88 uses your Personal Data exclusively for the following purposes:

• Account Administration: Creating and maintaining your Member account, processing password resets, and managing account settings.
• Payment Processing: Facilitating deposits and withdrawals through supported Indonesian payment channels including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Identity Verification: Conducting KYC checks to confirm your age (21+), identity, and the ownership of payment methods linked to your account.
• Fraud & Security: Detecting and preventing unauthorized access, duplicate accounts, bonus abuse, collusion, money laundering, and other prohibited activities as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring gaming behavior to identify patterns that may indicate problem gambling, enforcing self-imposed limits and exclusions, and proactively contacting Members who may benefit from responsible gaming support.
• Customer Support: Responding to inquiries, resolving disputes, and maintaining a record of support interactions for quality assurance purposes.
• Promotions & Bonuses: Administering promotional offers, verifying eligibility, and crediting bonuses to qualifying accounts — including seasonal promotions tied to Indonesian events such as Idul Fitri, Ramadhan, and Independence Day.
• Legal Compliance: Meeting obligations imposed by applicable international licensing requirements, anti-money laundering (AML) regulations, and lawful requests from competent authorities.
• Platform Improvement: Analyzing aggregated usage data to improve platform performance, game selection, and the overall Member experience.
• Marketing (with consent): Sending promotional emails, WhatsApp messages, or in-platform notifications about new games, bonuses, and events — only where you have consented to receive such communications. You may withdraw this consent at any time.

7 Data Sharing

sis88 does not sell, rent, or trade your Personal Data. We share your data only in the following limited, controlled circumstances:

7.1 Service Providers

sis88 engages trusted third-party service providers to operate components of the platform. These providers act solely as data processors under written agreements and may only use your data for the specific purposes authorized by sis88. Categories of service providers include:

• Payment gateway and local bank integration providers (facilitating transactions in IDR via BCA, BRI, BNI, Mandiri, and e-wallets)
• Identity verification and KYC platform providers
• Fraud detection and risk management services
• Game content studios (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming) — limited to the session tokens and game-round data necessary to run each game session
• Cloud hosting and infrastructure providers who store platform data in secure, access-controlled environments
• Customer communication platform providers (live chat, email delivery infrastructure)

7.2 Legal & Regulatory Disclosure

sis88 may disclose your Personal Data to law enforcement agencies, regulatory bodies, or other competent authorities where required by law, court order, or lawful regulatory request. sis88 will, where legally permissible, notify you of such a disclosure request before complying.

7.3 Business Transfers

In the event that sis88 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify registered Members via email or in-platform notification before any such transfer takes effect and prior to your data becoming subject to a different privacy policy.

7.4 Aggregated & Anonymized Data

sis88 may share aggregated, anonymized statistical data (from which no individual can be identified) with business partners, industry analysts, or game studios for research and reporting purposes. This data does not constitute Personal Data and is not subject to the restrictions of this Privacy Policy.

8 Cookies & Tracking Technologies

sis88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyze usage patterns. The following table describes the categories of cookies we use:

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Required to operate the platform — session authentication, security tokens, fraud prevention flags.	No — disabling these cookies prevents platform access.
Functional	Remember your language preferences, display settings, and saved payment methods for a smoother experience.	Yes — disabling reduces convenience but does not block access.
Analytics	Track aggregated usage patterns (pages visited, session length, feature engagement) to improve the platform. Data is anonymized before analysis.	Yes — contact support to opt out of analytics tracking.
Marketing	Measure the effectiveness of promotional campaigns and, where consent has been given, deliver personalized offers based on your activity.	Yes — withdraw consent via the marketing opt-out process described in Section 6.

Most web browsers allow you to manage cookies through your browser settings. Deleting or blocking cookies may affect your ability to use certain features of the sis88 platform, including maintaining an active login session. Refer to your browser's help documentation for instructions on managing cookies on your specific device.

9 Data Retention

sis88 retains your Personal Data for as long as is necessary to fulfill the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following retention periods apply:

Data Category	Retention Period
Account registration data	Duration of active membership plus 5 years after account closure
KYC identity documents	5 years after account closure or last transaction, whichever is later
Financial transaction records	7 years after the date of each transaction (AML compliance requirement)
Gaming activity logs	5 years after account closure
Customer support communications	3 years from the date of the final interaction in each support case
Marketing consent records	Until consent is withdrawn, plus 2 years thereafter as proof of compliance
Technical/device logs	13 months from the date of collection

When your data reaches the end of its applicable retention period and no legal hold or ongoing investigation requires further retention, sis88 will securely delete or irreversibly anonymize it.

10 Data Security

sis88 implements a layered security framework to protect your Personal Data against unauthorized access, accidental loss, destruction, and disclosure. Our security measures include:

• Transport Encryption: All data transmitted between your device and sis88 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies equally to the website, mobile interface, and API connections used by game studios.
• At-Rest Encryption: Sensitive data fields — including identity document images, payment account identifiers, and KYC records — are encrypted in the database using AES-256 encryption. Passwords are hashed using bcrypt and are never stored in plaintext.
• Access Controls: Access to Member Personal Data within sis88's internal systems is restricted on a strict need-to-know basis. Staff access is logged, audited, and subject to regular access review. No employee may access payment credentials in full.
• Intrusion Detection: sis88 operates continuous network monitoring and intrusion detection systems. Anomalous access patterns trigger automated alerts and are escalated for manual review within minutes.
• Penetration Testing: sis88 engages qualified independent security firms to conduct regular penetration testing of the platform. Critical findings are remediated within agreed service-level timeframes.
• Data Breach Response: In the event of a confirmed data breach that is likely to result in risk to Members, sis88 will notify affected Members and relevant authorities within the timeframe required by applicable law, and no later than 72 hours after becoming aware of the breach.

11 Your Data Rights

As a Member of sis88, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and the specific right you wish to exercise.

• Right of Access: You may request a copy of all Personal Data sis88 holds about you. We will provide this in a structured, commonly used format within 14 calendar days of receiving a verified request.
• Right to Rectification: If any Personal Data sis88 holds about you is inaccurate or incomplete, you may request that we correct it. Account profile details can also be updated directly within your Member dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request that sis88 delete your Personal Data. This right is subject to limitations — sis88 is legally required to retain certain data (particularly financial transaction records and KYC documents) for defined periods regardless of a deletion request. We will inform you of any data we are unable to delete and the reason why.
• Right to Restriction: You may request that sis88 restrict the processing of your Personal Data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that sis88 transfer your account and gaming data to you in a machine-readable format (JSON or CSV) to the extent technically feasible.
• Right to Object: You may object to sis88 processing your Personal Data on the basis of legitimate interest, including profiling for marketing purposes. This objection will be honored unless sis88 has compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

sis88 will not charge a fee for exercising any data right. We will respond within 14 calendar days. Where a request is complex or numerous, we may extend this period by a further 14 days, in which case we will notify you of the extension and the reason for it.

12 Children's Privacy

The sis88 platform is strictly intended for adults aged 21 years and above. sis88 does not knowingly collect, store, or process Personal Data from individuals under the age of 21. If you believe that a person under 21 has registered an account on sis88 or has submitted Personal Data to us, please notify us immediately at [email protected]. Upon confirmation, sis88 will immediately close the account, delete the associated Personal Data, and return any deposited funds to the source.

13 International Data Transfers

sis88 operates as an internationally licensed gaming platform. In the course of operating the platform and delivering services to Members across Indonesia — including cities such as Jakarta, Surabaya, Bandung, Bali, and Medan — your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Indonesia where sis88's infrastructure providers, game studios, and service partners operate.

Where such transfers occur, sis88 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards include data processing agreements incorporating standard contractual clauses, vendor security assessments, and, where required, supplementary technical measures such as encryption in transit and at rest.

By registering an account and using the sis88 platform, you acknowledge that your Personal Data may be transferred and processed internationally as described in this section.

14 Policy Amendments

sis88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where an amendment is material — meaning it substantively changes how we collect, use, or share your Personal Data — we will notify registered Members via email or an in-platform notification at least 7 days before the change takes effect.

Non-material changes (such as typographical corrections or clarifications that do not alter the substance of any provision) may be made without advance notice and will be reflected by updating the "Last Updated" date at the top of this document.

Your continued use of the sis88 platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must close your account and withdraw any remaining balance before the effective date of the amendment. To close your account, contact our support team at [email protected].

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by sis88, please contact us through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Policy Inquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24 hours a day, 7 days a week, via the chat widget within your Member dashboard. Indonesian-speaking agents are available at all hours.
• WhatsApp: +62 811 0000 8888 (plain text — not a clickable link)

Our support team operates around the clock (WIB, UTC+7) and is fully equipped to assist with all data-related inquiries, including access requests, deletion requests, and marketing opt-outs. For complex data rights requests, we recommend submitting via email to create a clear written record of your request and our response.