Privacy Policy

1. Introduction

sapi88 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our services. This Privacy Policy sets out in transparent, plain-English terms what personal information we collect from Players and visitors to the sapi88 platform, the purposes for which that information is used, with whom it may be shared, and the rights available to you under applicable data protection principles.

sapi88 primarily serves Players located in Indonesia, and the data practices described in this Policy have been developed to reflect both our international operational standards and the expectations of Indonesian players who have entrusted us with their personal information. We take that trust seriously, and our approach to data privacy is built around the principles of transparency, purpose limitation, data minimization, and security.

As a responsible gaming operator, we are also required under our licensing conditions and anti-money-laundering obligations to collect certain categories of personal data. Where data collection is a legal requirement, we will always make this clear and explain the consequences of not providing it.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that directly or indirectly identifies a living individual, including name, date of birth, national identity number, email address, mobile number, IP address, and bank account details.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means sapi88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of sapi88, under a data processing agreement, and subject to sapi88's instructions.
• "Player" / "User" means any individual who has created a registered account on the sapi88 Platform.
• "KYC" means Know Your Customer — the mandatory identity and age verification procedure conducted by sapi88 as a condition of account activation and withdrawal processing.
• "Sensitive Data" means a special category of personal information requiring heightened protection, including national identity card numbers, biometric data, financial account numbers, and health-related information.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

3. Data We Collect

sapi88 collects personal data through several channels: information you provide directly during registration and KYC, data generated automatically through your use of the Platform, and data received from trusted third-party service providers. The categories of data we collect are set out below.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

4. How We Use Your Data

sapi88 processes your personal data for the following operational, legal, and service-delivery purposes:

• Account Management — creating, maintaining, and securing your registered sapi88 account, including password resets and session authentication;
• Identity Verification (KYC) — confirming your identity, age, and eligibility to participate in real-money gaming, as required by our licensing conditions;
• Transaction Processing — processing deposits and withdrawals through your designated bank account or e-wallet, reconciling balances, and maintaining financial records;
• Fraud Prevention & Security — detecting, investigating, and preventing fraudulent activity, money laundering, account takeovers, and abuse of promotional offers;
• Responsible Gaming Compliance — monitoring gaming behavior for indicators of problem gambling and enforcing self-exclusion, deposit limit, and cool-off requests;
• Customer Support — responding to your inquiries, resolving disputes, and improving the quality of our support service;
• Legal & Regulatory Compliance — meeting our obligations under applicable anti-money-laundering, counter-terrorism-financing, and data-protection regulations;
• Platform Improvement — analyzing aggregated usage data to improve site performance, game selection, and user experience;
• Marketing Communications — sending you promotional offers, bonus notifications, and relevant platform news where you have provided explicit consent to receive such communications.

5. Legal Bases for Processing

sapi88 processes your personal data on one or more of the following legal grounds, depending on the purpose of processing:

6. Data Sharing & Disclosure

sapi88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may, however, share your information with the following categories of recipients where necessary and lawful:

6.1 Service Providers & Data Processors

We engage trusted third-party service providers who process data on our behalf and under our instruction, bound by written data processing agreements. These include:

• Payment processing partners and local banking intermediaries (for deposit and withdrawal facilitation via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and similar providers);
• Identity verification and KYC service providers;
• Fraud detection and anti-money-laundering analytics platforms;
• Customer support software and live chat platform providers;
• Cloud hosting and server infrastructure providers;
• Game content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and similar studios) — who may receive limited session data necessary to deliver game content.

6.2 Legal & Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, where disclosure is necessary to protect the safety of individuals, or where disclosure is required to enforce our Terms & Conditions and defend legal claims.

6.3 Business Transfers

In the event that sapi88 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected Players prior to any such transfer and ensure the receiving entity provides equivalent data protection standards.

6.4 Aggregate & Anonymized Data

sapi88 may share aggregated, anonymized statistical data — such as platform-wide betting volume or game popularity metrics — with business partners, game studios, or industry analysts. This data cannot be used to identify any individual Player.

7. Cookies & Tracking Technologies

sapi88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that enable the Platform to recognize your browser, maintain your session, and remember your preferences.

7.1 Types of Cookies We Use

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log into and use the Platform.

8. Data Retention

sapi88 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and our licensing obligations. The standard retention periods applied by sapi88 are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data is required for ongoing legal proceedings or regulatory investigations, retention is extended for the duration of those proceedings.

9. Data Security

sapi88 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers;
• AES-256 encryption for sensitive data stored in our databases, including identity document information and financial account details;
• Role-based access controls ensuring that only authorized personnel with a defined operational need may access Player data;
• Multi-factor authentication for internal systems access by sapi88 staff;
• Regular penetration testing and security audits conducted by qualified third-party security firms;
• Incident response procedures to detect, contain, and remediate any data security incidents within defined timeframes;
• Staff training on data protection obligations and information security best practices.

While sapi88 takes all reasonable steps to secure your personal data, no internet-based system can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, sapi88 will notify affected Players without undue delay and take all necessary remedial action.

10. Your Rights

As a Player on the sapi88 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Protection team at the address provided in Section 15.

• Right of Access — you may request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared;
• Right to Rectification — you may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restriction of Processing — you may request that we temporarily restrict the processing of your data while a dispute over its accuracy or lawfulness is resolved;
• Right to Data Portability — you may request that we provide your personal data in a structured, machine-readable format for transfer to another controller;
• Right to Object — you may object to processing based on legitimate interests, including profiling for marketing purposes, at any time;
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

We will respond to all valid rights requests within 30 days. In complex or high-volume cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

11. Children's Privacy

The sapi88 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or submitted personal data, we will immediately close the account, delete the associated data, and return any deposited funds in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child may have registered an account with sapi88, please contact our support team immediately at [email protected] so that we can take the appropriate action without delay.

12. International Data Transfers

sapi88 operates internationally and may transfer your personal data to servers, service providers, or game studios located in countries outside Indonesia. Where such transfers occur, sapi88 ensures that appropriate safeguards are in place to maintain an equivalent level of data protection, including:

• Data processing agreements incorporating standard contractual clauses recognized under applicable data protection frameworks;
• Transfers only to jurisdictions or entities that provide an adequate level of data protection as assessed by relevant regulatory standards;
• Technical and organizational security measures applied consistently regardless of the location of the data processor.

By using the sapi88 Platform, you acknowledge that your data may be processed in countries outside Indonesia and consent to such transfers where they are necessary for the delivery of our services.

13. Third-Party Services & Links

The sapi88 Platform integrates with third-party game providers (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe) to deliver gaming content. These providers operate under their own privacy policies and data practices. While sapi88 maintains data processing agreements with all integrated providers, we recommend reviewing the privacy policies of any third-party provider whose services you engage with directly.

sapi88 is not responsible for the privacy practices or data security standards of third parties operating independently of our Platform. Any data you voluntarily provide directly to a third-party service — outside of the sapi88 platform interface — is governed exclusively by that third party's own privacy terms.

14. Amendments to This Policy

sapi88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we provide. When material changes are made, we will post the revised Policy on this page with an updated "Last Updated" date and, where appropriate, notify active Players via email or on-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how sapi88 protects your personal data. Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms.

15. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way sapi88 handles your personal data, please contact our Data Protection and Privacy team through the following channels:

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. sapi88 is committed to cooperating fully with such authorities in the resolution of any complaints.

For general Platform queries not related to data protection, you may also visit our FAQ page or review our Terms & Conditions.