Privacy Policy — alb88

This Privacy Policy applies to all personal data collected and processed by alb88 through our website at alb88.net, our mobile-optimised interface, and any associated platform services including the sportsbook, live casino, slots, togel (Indonesia's traditional numbers lottery), and crash game products.

By registering an account on alb88 or by continuing to use our platform after this policy has been published or updated, you acknowledge that you have read and understood the practices described herein. If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the alb88 platform and request account closure.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are published separately on alb88.net and are incorporated here by reference.

alb88 acts as the data controller for all personal information collected through the alb88 platform. As data controller, alb88 is responsible for determining the purposes and means by which your personal data is processed.

alb88 operates as an internationally licensed online gaming and betting platform. While our primary target audience consists of players based in Indonesia, our platform infrastructure and data processing operations are managed under internationally recognised data protection standards. All data processing activities described in this Privacy Policy are conducted in accordance with those standards.

alb88 collects personal data in the following categories. We collect only the data that is necessary for the stated purpose, in accordance with the principle of data minimisation.

alb88 collects personal data through the following mechanisms:

• Direct Submission: Information you provide voluntarily when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automated Collection: Technical and usage data collected automatically as you interact with the alb88 platform, via server logs, cookies, pixel tags, and similar tracking technologies. See Section 8 (Cookies & Tracking) for full details.
• Third-Party Sources: Identity and fraud-risk information received from third-party identity verification providers, payment processors, and AML screening services. We may also receive limited data from marketing affiliates that referred you to alb88, solely for the purpose of attributing the referral correctly.
• KYC Providers: Where you consent to electronic identity verification, data may be cross-referenced against third-party identity databases to confirm the accuracy of the information you have submitted.

alb88 uses the personal data we collect for the following purposes:

• Account Management: To create, verify, maintain, and — where necessary — close your alb88 Member account. This includes sending account-related communications such as deposit confirmations, withdrawal notifications, and security alerts.
• Service Delivery: To provide you with access to all alb88 betting and gaming products, including the sportsbook, live casino, slots, togel, crash games, and any future products added to the platform.
• Payment Processing: To process deposits from and withdrawals to your registered Indonesian bank accounts and e-wallets, and to maintain an accurate record of all financial transactions on your account.
• Identity & Age Verification (KYC): To verify that you are who you say you are and that you meet the 21+ age requirement before we process your first withdrawal or when triggered by our risk-monitoring systems.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financially illegal behaviour. This may involve automated screening of transactions against internal risk models and external AML databases.
• Responsible Gaming: To monitor account activity for signs of harmful gambling behaviour and to enforce deposit limits, loss limits, session time-outs, and self-exclusion decisions that you or our responsible gaming team have applied to your account.
• Customer Support: To respond to your enquiries, process your complaints, and deliver a high standard of after-sales support via live chat and email.
• Marketing & Promotions: With your consent, to send you information about alb88 promotions, bonus offers, new game launches, and seasonal campaigns relevant to the Indonesian market (for example, Idul Fitri bonus offers, BRI Liga 1 betting specials). You may opt out of marketing communications at any time.
• Platform Improvement & Analytics: To analyse aggregated usage data and improve the performance, design, and content of the alb88 platform. Individual-level data used for analytics is pseudonymised wherever possible.
• Legal & Regulatory Compliance: To comply with applicable international gaming regulations, AML obligations, and any court order, regulatory request, or legal process that requires us to disclose or retain certain data.

alb88 processes your personal data on the following legal bases:

• Performance of a Contract: The majority of data processing on alb88 — account creation, payment processing, KYC, game access — is necessary for the performance of the contract between you and alb88 (as established by your acceptance of the Terms & Conditions).
• Legal Obligation: Some processing activities — particularly AML screening, KYC verification, and data retention for audit purposes — are required by applicable international law and gaming regulations.
• Legitimate Interests: alb88 processes certain technical and usage data on the basis of its legitimate interest in operating a secure, fraud-free, and commercially viable online gaming platform. We have assessed that this processing does not override your individual rights and freedoms.
• Consent: Where alb88 processes data for optional purposes — such as sending marketing emails or processing non-essential cookies — we rely on your freely given, informed consent. You may withdraw consent for these activities at any time without affecting the lawfulness of prior processing.

alb88 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: We share financial data with the payment service providers that process your deposits and withdrawals — including Indonesian bank transfer intermediaries and e-wallet operators such as OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers are contractually bound to process your data only for the purpose of executing your transactions.
• Identity Verification Providers: We share identity data with third-party KYC and AML screening services to verify your identity and check your name against international sanctions and politically exposed persons (PEP) lists.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a session token and anonymised player identifier when you launch a game. They do not receive your full name, contact details, or financial data unless required for a specific game-related dispute.
• Analytics Providers: We may share pseudonymised usage data with web analytics platforms to help us understand how the alb88 platform is used. Pseudonymised data does not directly identify you.
• Legal Authorities: If required by a court order, regulatory directive, or applicable law, alb88 may disclose your personal data to law enforcement or regulatory authorities. We will notify you of such a disclosure where we are legally permitted to do so.
• Business Transfers: In the event that alb88's business or a material portion of its assets is acquired, merged, or transferred to a third party, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer that materially affects how your data is processed.

alb88 uses cookies and similar tracking technologies to operate the platform, improve your experience, and measure the effectiveness of our content. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the alb88 platform to function. They enable core features such as session management, login authentication, and security token validation. These cookies cannot be disabled without breaking the platform's core functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, last-played game category, and display settings — so that you do not need to reconfigure them on each visit.
• Analytical Cookies: These cookies collect anonymised information about how visitors use alb88 (pages visited, time on page, error events) to help us improve the platform. We use this data in aggregate form and do not attribute it to individual accounts for analytical purposes.
• Marketing Cookies: These cookies track whether you arrived at alb88 via a marketing affiliate or advertising campaign. This data is used solely to attribute the referral correctly and to measure campaign performance. Marketing cookies are set only where you have provided consent.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using core alb88 features such as logging in and placing bets.

alb88 retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where data cannot be immediately deleted due to backup scheduling, it will be isolated and protected until deletion is technically feasible.

alb88 applies rigorous technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and alb88 servers is encrypted using TLS 1.2 or higher. This applies to all platform pages, including the login screen, deposit flow, and account settings.
• Bcrypt Password Hashing: Your account password is stored as a salted bcrypt hash. alb88 never stores passwords in plain text, and our support agents cannot read your password — only reset it through a verified process.
• Two-Factor Authentication (2FA): alb88 strongly recommends enabling 2FA on your account for an additional layer of login protection. 2FA can be configured through your account security settings.
• Internal Access Controls: Access to personal data within alb88 is restricted on a strict need-to-know basis. Only authorised personnel with a documented operational reason may access Member personal data, and all access is logged and auditable.
• Regular Security Audits: alb88's platform undergoes regular internal and third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to Members, alb88 will notify affected Members and the relevant regulatory authority within 72 hours of becoming aware of the breach, where technically and legally feasible.

As an alb88 Member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected] (plain text — not a link).

• Right of Access: You have the right to request a copy of the personal data that alb88 holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Some corrections may require re-submission of supporting documents.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Note that this right is subject to overriding legal obligations — for example, we cannot delete KYC and transaction records before their mandatory AML retention period expires.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being disputed or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Marketing opt-outs take effect immediately upon request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

alb88 is strictly an adults-only platform. No person under the age of 21 is permitted to register an account, make a deposit, or use any alb88 service. alb88 does not knowingly collect or process personal data from individuals under the age of 21.

If alb88 becomes aware that it has inadvertently collected personal data from a person under 21, the relevant account will be immediately suspended, any funds will be returned to the deposit source where practicable, and all associated personal data will be securely deleted.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on alb88, please contact our support team immediately at [email protected] (plain text — not a link) or via 24/7 live chat.

alb88 operates as an internationally licensed platform, and some of the personal data we collect may be processed by our technology and service providers in countries outside of Indonesia. When such international transfers occur, alb88 ensures that appropriate safeguards are in place to protect your data to a standard that is equivalent to the protections described in this Privacy Policy.

These safeguards may include contractual clauses that require the receiving party to protect your data in accordance with applicable international data protection standards, and technical measures such as encryption of data in transit and at rest. alb88 conducts due diligence on all third-party processors that handle personal data on our behalf to ensure their security standards are adequate.

alb88 reserves the right to update this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, new third-party processors, or changes to your rights — alb88 will notify registered Members via the email address on file and via a prominent notice on the alb88 platform prior to the changes taking effect.

The "Last Updated" date at the top of this document reflects the date on which the most recent revision took effect. We encourage all Members to review this Privacy Policy periodically to stay informed of how alb88 protects and uses their personal data. Continued use of the platform following the effective date of any amendment constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how alb88 has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat widget on the alb88 platform. Indonesian-speaking and English-speaking agents are available at all times for all privacy-related enquiries.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line and provide your registered account username so we can locate your record promptly. Responses are typically delivered within 24 business hours (WIB).

alb88 operates a formal privacy complaints procedure. If your complaint is not resolved to your satisfaction at the first point of contact, you may request escalation to a senior member of the alb88 data protection team. We aim to resolve all privacy complaints within 10 business days of receipt.