st88 Casino & Sportsbook Data Care
This page describes what we collect when you use st88 and how we keep that data protected. We at st88 operate a live-dealer casino and sportsbook platform, and we ask you to share certain information so we can verify your identity, process your deposits, and deliver service where applicable law permits. Your data security is our priority—we use encryption, regular security reviews, and careful processor selection to protect what you share with us.
Whether you're based in Jakarta, Surabaya, Bandung, Medan, or Semarang, our data practices are the same. We collect your email and password for account access, your national ID and address for KYC verification, and payment details when you fund your account via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers from mobile banking, local payment, online payment, and e-wallet. We also track your betting and casino activity so we can settle your wagers and manage withdrawals fairly.
We do not sell your data to advertisers or marketing firms. We share information only with payment processors, identity-verification partners, and legal authorities when required by law. This guide outlines what we collect, why, how long we keep it, and what rights you have under data-protection law.
Data We Collect and How We Use It on st88
We collect information in three categories: account information, payment information, and activity logs. When you register on st88, we ask for your email address, password, full name, date of birth, and phone number. This lets us create your account, send you login alerts, and contact you about your account or service changes. We also ask for a government-issued ID (passport, national identity card, or driver's license) and proof of residence (utility bill or bank statement) so we can verify you are who you claim to be and that you are located in a supported jurisdiction. KYC verification typically completes within one business day after you upload documents.
When you deposit funds, we collect payment method details and transaction history. If you use DANA, e-wallet, mobile banking, or local payment, we receive your phone number and a transaction reference from that service. If you use online payment, e-wallet, or a direct bank transfer from mobile banking, local payment, online payment, or e-wallet, we collect your bank account identifier and the amount transferred. We store these details so we can process withdrawals, detect fraud, and comply with anti-money-laundering regulations. We never store your full credit-card number or full bank-account password—payment processors handle those securely on their systems.
We log your activity on st88: which matches you view, which bets you place, when you log in, what device you use, and your IP address. We use these logs to detect fraud, prevent account abuse, settle your bets accurately, and improve our platform. Activity logs are kept for at least one year. We also track which version of our app you use (Android or iOS), your screen size, and whether you use a browser or our native app. This helps us optimize the mobile experience and diagnose technical issues when you report them.
Third-Party Processors and Data Sharing
We do not own all the systems that process your data. Our payment processing runs through licensed payment gateways that connect to mobile banking, local payment, online payment, and bank partners. These gateways see your payment method and transaction amount but not your betting history. Our identity-verification partner (a third-party KYC service) receives your uploaded ID and address documents to confirm they are genuine. This partner is contractually bound to delete documents 90 days after verification unless we request retention for compliance.
We use cloud hosting in Southeast Asia to store account and activity data. Our host has ISO 27001 certification and maintains data centres in multiple countries. Because our servers sit outside your jurisdiction, data transfers may occur. We ensure all data in transit is encrypted via TLS 1.3 and all data at rest is encrypted with AES-256. We also share minimal information with law enforcement when required by court order or local regulation. For example, if a Bandung police investigation requests account details linked to a specific email, we provide the requested information but notify you unless the order forbids it.
Cookies and Tracking
Our st88 website and mobile app use cookies and similar tracking tools to recognize you, remember your preferences, and measure how you use our platform. Session cookies expire when you log out; persistent cookies remain for up to 12 months. We use these to store your login state, language preference, and dark-mode setting. We do not use third-party tracking pixels or share cookies with external advertisers. Analytics cookies help us understand which pages users visit most and which features are used least; we use this data to prioritize improvements but do not tie it to your identity.
On our website, we comply with cookie-consent requirements. When you first visit st88.bet, you see a banner asking whether you consent to non-essential cookies. We set essential cookies (login, security, basic functionality) without your consent; analytics and preference cookies require opt-in. You can manage cookie settings anytime in your browser or in st88 account preferences.
Your Rights and Data Requests
You have the right to request a copy of the personal data we hold about you. To do so, email [email protected] with the subject line "Data access request" and we will respond within 30 days. You also have the right to correct inaccurate information—if your name or address changed, you can update it in account settings or contact support. You can request deletion of your account and associated data; we will close your account immediately and delete activity logs within 90 days. Identity documents and KYC records may be retained for seven years for legal compliance.
You have the right to withdraw consent for non-essential cookies, marketing emails, and push notifications. Withdrawing consent does not affect the lawfulness of our prior use. You can object to your data being used for fraud detection or market research; however, objecting to fraud detection may prevent you from using st88. If you believe we have handled your data incorrectly, you can lodge a complaint with your local data-protection authority.
Two-factor authentication protects your account
We recommend enabling 2FA in your account settings. This adds a second security layer: even if someone obtains your password, they cannot log in without your authentication code. 2FA is especially important during high-betting periods like Liga 1 season or Piala AFF tournaments.
Data Retention and Account Closure
We keep your data only as long as necessary. If your account is active, we retain all data indefinitely so we can process bets and withdrawals. If you close your account, we retain activity logs for one year (to settle disputes), payment records for seven years (tax and fraud compliance), and identity documents for seven years (financial-crime regulation). After these periods expire, we delete or anonymize the data. You can request early deletion; we will comply unless legal hold applies.
If you do not log in for two years, we may suspend your account and flag it for review. We will email you before suspending to give you a chance to log in again. Suspended accounts are not deleted; data remains in our systems so you can reactivate anytime. However, if your account remains inactive for five years, we may permanently close it and delete associated data after the legal-retention periods have passed.
Contact Us About Your Data
If you have questions about your data, how we use it, or want to submit a data request, contact us at [email protected] or through the in-app support chat. Include "Privacy" or "Data Request" in your subject line. Our support team will acknowledge your request within one business day and provide a substantive response within 30 days. For urgent matters—such as suspected account compromise—call the support phone line listed in your account settings.
We review and update this privacy policy annually. If we make material changes (such as adding a new processor or extending data-retention periods), we will notify all active users by email and in-app notification at least 30 days before the change takes effect. Continued use of st88 after notification means you accept the updated policy. This policy is available in English; if you need a translation, contact support and we will provide one in your preferred language.