Privacy Policy

1. Introduction

subu88 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and safeguard the personal data of users ("you", "your", or "Player") who access and use our online gaming platform located at https://subu88.cam and all associated services (collectively, "the Service").

By creating an account, depositing funds, placing bets, or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this Privacy Policy, you must immediately cease using the Service and contact us to close your account.

This Privacy Policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification (KYC), payment processing, gameplay, customer support interactions, and marketing communications. We process your personal data in accordance with applicable data protection regulations and our licensing obligations under the Curacao Gaming Control Board.

subu88 reserves the right to modify, update, or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any material changes will be communicated through the Platform or via email. Your continued use of the Service following such changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

2. Data Controller

For purposes of data protection law, subu88 is the data controller responsible for processing your personal information. We determine how and why your personal data is processed and are accountable for ensuring that such processing complies with applicable privacy regulations.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, you may contact our Data Protection Officer through the following channels:

• Email: [email protected] (Subject: Data Protection Inquiry)
• Live Chat: Available 24/7 via the Platform
• WhatsApp: +62 812-3456-7890 (08:00-23:00 WIB)

3. Information We Collect

3.1 Personal Information Provided by You

When you register an account with subu88, you provide us with personal information that is necessary to create and manage your account, process transactions, and comply with regulatory requirements. This information includes:

• Identity Information: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form)
• Financial Information: Bank account details (bank name, account number, account holder name), payment method preferences, transaction history
• Verification Documents: Government-issued ID (Indonesian Identity Card/KTP, passport), proof of address (utility bills, bank statements), source of funds documentation
• Communication Content: Messages sent through customer support, live chat transcripts, email correspondence

3.2 Information Collected Automatically

When you access and use the Platform, we automatically collect certain technical and usage information through cookies, server logs, and similar tracking technologies:

• Device Information: IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers
• Usage Data: Pages visited, links clicked, games played, bet history, deposit and withdrawal records, session duration, access times, referral sources
• Location Data: Approximate geographic location derived from IP address (country, region, city level)
• Performance Data: Error reports, crash logs, loading times, connectivity issues

3.3 Information from Third Parties

We may receive information about you from third-party sources to verify your identity, prevent fraud, or comply with legal obligations:

• Payment Processors: Transaction verification data from BCA, BRI, BNI, Mandiri, and other Indonesian banks and e-wallets
• Identity Verification Services: KYC verification results from third-party identity validation providers
• Fraud Prevention Services: Risk assessment data from anti-fraud and anti-money laundering screening services
• Publicly Available Information: Data from public records or databases used for compliance and verification purposes

4. How We Use Your Information

subu88 uses your personal information for the following legitimate business purposes:

4.1 Account Management and Service Provision

• Create, maintain, and manage your user account
• Process deposits, withdrawals, and other financial transactions
• Provide access to games, betting markets, and platform features
• Process and settle bets on casino games, sports events, togel (lottery draws), and other wagering products
• Track gameplay activity and account balance
• Administer bonuses, promotions, and loyalty rewards

4.2 Identity Verification and Compliance

• Verify your identity and age to ensure compliance with 21+ age restrictions
• Conduct Know Your Customer (KYC) checks as required by anti-money laundering regulations
• Screen against sanctions lists and politically exposed persons databases
• Detect and prevent fraud, money laundering, underage gambling, and other illegal activities
• Comply with legal obligations and respond to regulatory inquiries
• Maintain records for audit and reporting requirements

4.3 Customer Support and Communications

• Respond to your inquiries, complaints, and support requests
• Provide technical assistance and troubleshooting
• Send account-related notifications (deposit confirmations, withdrawal updates, security alerts)
• Communicate important policy changes and service updates
• Conduct customer satisfaction surveys (with your consent)

4.4 Marketing and Promotions

• Send promotional offers, bonus opportunities, and special event notifications (only with your explicit consent)
• Personalize marketing content based on your gaming preferences
• Administer competitions, tournaments, and prize draws

4.5 Platform Improvement and Analytics

• Analyze usage patterns to improve user experience and platform performance
• Develop new features and gaming products
• Conduct security monitoring and vulnerability assessments
• Generate aggregated statistical reports (no personally identifiable information)

4.6 Responsible Gaming

• Monitor gameplay activity for signs of problem gambling
• Enforce deposit limits, loss limits, and self-exclusion settings
• Provide access to responsible gaming tools and resources
• Detect patterns of abusive or fraudulent betting behavior

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing payments, managing your account)
• Legal Obligation: Processing is required to comply with anti-money laundering laws, age verification requirements, tax reporting, and other legal mandates
• Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, security, platform improvement, customer support) provided such interests do not override your fundamental rights
• Consent: For marketing communications and optional data uses, we obtain your explicit consent which you may withdraw at any time

6. Data Sharing and Disclosure

subu88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients for legitimate business and legal purposes:

6.1 Service Providers and Business Partners

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, and other Indonesian banks and e-wallets that process your deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and other suppliers who provide gaming content and settlement services
• Identity Verification Services: Third-party KYC providers that verify your identity documents and conduct fraud screening
• Cloud Infrastructure Providers: Hosting and data storage services that maintain our servers and databases
• Customer Support Tools: Live chat platforms and ticketing systems used to provide customer service
• Analytics Providers: Services that help us understand platform usage and improve user experience

6.2 Legal and Regulatory Authorities

• Curacao Gaming Control Board and other licensing authorities
• Law enforcement agencies investigating illegal activities
• Tax authorities requiring transaction reporting
• Financial intelligence units conducting anti-money laundering investigations
• Courts and arbitration panels in connection with legal proceedings

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email or platform notice before your data is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with other third parties when you provide explicit consent for a specific purpose.

7. Data Security

subu88 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, payment details) is encrypted using AES-256 encryption
• Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis, subject to strict confidentiality obligations
• Secure Infrastructure: Our servers are hosted in secure data centers with 24/7 monitoring, redundant backups, and disaster recovery capabilities
• Regular Security Audits: We conduct periodic vulnerability assessments, penetration testing, and security audits by independent third parties
• Employee Training: All staff handling personal data receive regular training on data protection and security best practices
• Incident Response: We maintain incident response procedures to detect, respond to, and recover from security breaches

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials and for notifying us immediately if you suspect unauthorized access to your account.

8. Data Retention

subu88 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

Data Category	Retention Period	Justification
Account Information	Duration of account + 7 years	Regulatory compliance, legal claims, audit requirements
Transaction Records	7 years from transaction date	Anti-money laundering regulations, tax reporting
KYC Documents	7 years after account closure	Licensing obligations, fraud prevention
Gameplay History	7 years from bet settlement	Dispute resolution, regulatory audits
Communication Logs	3 years from last contact	Customer support quality, dispute resolution
Marketing Consent	Until consent withdrawn + 1 year	Evidence of consent, compliance records

After the retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical and research purposes.

9. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal data we hold about you, along with information about how we use it
• Right to Rectification: You may request correction of inaccurate or incomplete personal data
• Right to Erasure: You may request deletion of your personal data in certain circumstances (e.g., data no longer necessary, consent withdrawn), subject to legal retention obligations
• Right to Restrict Processing: You may request that we limit the processing of your personal data under certain conditions
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format and have it transferred to another service provider
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time (this does not affect the lawfulness of processing prior to withdrawal)

To exercise any of these rights, please contact our Data Protection Officer via email at [email protected] with the subject line "Privacy Rights Request." We will respond to your request within 30 days. Please note that certain rights may be subject to legal limitations, and we may need to verify your identity before processing your request.

10. Cookies and Tracking Technologies

subu88 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality (login, session management, security). These cannot be disabled
• Performance Cookies: Collect anonymous data on how you use the platform to help us improve performance
• Functional Cookies: Remember your preferences (language, currency, game favorites)
• Marketing Cookies: Track your browsing across sites to deliver personalized advertising (only with your consent)

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. For more information, please review our separate Cookie Policy.

11. Children's Privacy

subu88 strictly prohibits use of the Service by individuals under 21 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from a person under 21, we will immediately delete such information and permanently close the associated account. Parents or guardians who believe their child has provided personal information to subu88 should contact us immediately.

12. International Data Transfers

While subu88 primarily serves Indonesian residents, your personal data may be transferred to and processed in countries outside Indonesia, including Curacao (where we are licensed) and jurisdictions where our service providers operate. These countries may have different data protection laws than Indonesia. When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses to ensure your data receives adequate protection.

13. Changes to This Privacy Policy

subu88 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you through a prominent notice on the Platform or via email to your registered email address. The "Last Updated" date at the top of this document indicates when the policy was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 via the Platform
• WhatsApp: +62 812-3456-7890 (08:00-23:00 WIB, text only)

We will respond to your inquiry within 5 business days. For privacy rights requests, please allow up to 30 days for processing.