At ini88, protecting your personal data is not a compliance checkbox — it is a foundational commitment. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you have over your own data.
Effective Date: 1 January 2026 | Version 2.4These highlights summarise our core privacy principles. The full, binding policy is set out in the clauses below and governs in all cases.
All data transmitted between your device and ini88's servers is protected by 256-bit TLS/SSL encryption. Your login credentials, payment details, and personal information are never sent in plain text.
ini88 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your information is used solely to operate and improve the Platform and to meet our legal obligations.
You have the right to access, correct, and request deletion of your personal data. You may also object to certain forms of processing and withdraw consent where consent is the legal basis for processing.
ini88 does not store full bank account numbers or complete e-wallet credentials on its own servers. Payment processing is handled by PCI-DSS-compliant partner gateways. Only the minimum reference data required for reconciliation is retained.
We retain your data only for as long as is necessary for the purpose it was collected, or as required by our international gaming licence obligations. Account data is retained for a minimum of 5 years after account closure in line with AML regulations.
Promotional emails and SMS notifications from ini88 are strictly opt-in. You may update your communication preferences at any time through your Account Settings or by contacting our support team directly.
ini88 ("we", "us", "our", or "the Company") is committed to protecting the privacy and security of all personal data entrusted to us by individuals who visit, register on, or otherwise interact with the ini88 Platform at ini88.pro. This Privacy Policy constitutes the full and binding statement of how ini88 collects, processes, uses, shares, and protects personal data in connection with the Platform and all related services.
This Policy applies to all registered Members, prospective Members who browse the Platform without registering, and any other individuals whose personal data we process in connection with our services. By accessing or using the ini88 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
If you do not agree with this Privacy Policy, you must immediately discontinue your use of the Platform and contact the support team to request closure of any Account you may hold. This Policy should be read in conjunction with the ini88 Terms & Conditions, available at ini88.pro/terms-conditions.
The following terms have the meanings set out below wherever they appear in this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, date of birth, email address, device identifiers, and payment details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure, and destruction. |
| "Controller" | ini88, which determines the purposes and means of processing your Personal Data. |
| "Processor" | A third party engaged by ini88 to process Personal Data on ini88's behalf (e.g., payment gateway providers, KYC verification services). |
| "Platform" | The ini88 website at ini88.pro, including all sub-domains, APIs, mobile web interfaces, and associated digital services. |
| "Member" | Any individual who has registered an Account on the Platform and whose Account is in good standing. |
| "KYC" | Know Your Customer — the identity and age verification process required under ini88's international gaming licence obligations. |
| "Cookie" | A small text file placed on your device by the Platform to store session or preference information. |
ini88 collects several categories of personal data depending on your relationship with the Platform. The categories, specific data types, and the primary purpose for which each is collected are set out in the table below.
| Category | Data Types | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, Indonesian national identity number (NIK), gender, scanned copies of KTP / passport | Account registration, KYC compliance, age verification (21+ only) |
| Contact Data | Email address, Indonesian mobile phone number, residential address | Account communication, security alerts, withdrawal confirmations |
| Financial Data | Bank account name and account number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifier (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Deposit processing, withdrawal disbursement, AML monitoring, fraud prevention |
| Technical Data | IP address, device type, operating system, browser type and version, session tokens, time-zone (default WIB, UTC+7) | Platform security, fraud detection, geolocation compliance, session management |
| Usage Data | Pages visited, games played, bet amounts, wagering history, session duration, click-stream data, login timestamps | Platform improvement, personalisation, responsible gaming monitoring, bonus eligibility assessment |
| Communications Data | Live chat transcripts, email correspondence with support, dispute records | Customer service, dispute resolution, quality assurance, training |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS, and in-platform notifications | Sending targeted promotions (only where opt-in consent has been given) |
ini88 collects personal data through the following means:
ini88 processes personal data only where a valid legal basis exists under applicable data protection law. The primary legal bases we rely on are as follows:
ini88 uses the personal data it collects for the following specific purposes. We will not use your data for any purpose that is incompatible with the purpose for which it was originally collected without providing you with prior notice and, where required, obtaining your consent.
We use your Identity Data and Contact Data to create and maintain your Account, authenticate you at login, deliver Platform services, notify you of account activity (deposits confirmed, withdrawals processed, bonuses credited), and respond to your customer service requests.
We use your Financial Data to process deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja, and to disburse withdrawal funds to your nominated account. All amounts are in Indonesian Rupiah (IDR).
We use Identity Data and Financial Data to fulfill our KYC obligations, verify your age (you must be 21 or older to hold an Account), prevent money laundering and fraud, and comply with reporting obligations to our licensing authority.
We use Usage Data and Financial Data to monitor for indicators of problem gambling behaviour — such as unusually rapid increases in bet frequency, deposit patterns inconsistent with historical norms, or voluntary activation of self-exclusion tools. Where such indicators are detected, our responsible gaming team may intervene with educational resources, deposit limit recommendations, or account restrictions in line with our obligations under ini88.pro/responsible-gaming.
We use Technical Data and Usage Data to detect and prevent unauthorised account access, multi-accounting, bonus abuse, bot activity, and financial crime. This processing involves automated decision-making in some cases (e.g., automatic account flagging where login IP addresses change abruptly across jurisdictions). Where automated decisions have a significant effect on your Account, you have the right to request human review.
Where you have given opt-in consent, we use your Contact Data and Usage Data to send you personalised promotions — including welcome bonuses, reload offers, seasonal promotions tied to events such as Idul Fitri, Ramadhan, Imlek (Chinese New Year), and Indonesian Independence Day (17 August) — via email, SMS, or in-platform notification. We also use aggregated (non-identifiable) Usage Data to improve game recommendations and the overall Platform experience.
We use aggregated and pseudonymised Usage Data and Technical Data for internal analytics — including measuring page performance, identifying navigation friction points, and assessing the popularity of game categories such as sportsbook, live casino, togel (Indonesia's traditional numbers lottery), and slots. This data is processed in aggregate and does not identify individual Members.
ini88 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
ini88 engages vetted third-party service providers who process personal data on our behalf under binding data processing agreements. These include:
ini88 may disclose personal data to competent legal, regulatory, tax, or law enforcement authorities where required to do so by applicable law, court order, or in response to a valid formal request. In such cases, ini88 will disclose only the minimum data required and will notify the affected Member where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ini88's assets, personal data held by ini88 may be transferred to the successor entity, provided that the successor commits in writing to honour the terms of this Privacy Policy or an equivalent standard of protection.
The ini88 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised user experience. This section explains what cookies we use, why, and how you can control them.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, process transactions, prevent cross-site request forgery (CSRF). Required for the Platform to function. | No — disabling these cookies will prevent you from using the Platform. |
| Functional | Remember your display preferences (language setting, notification opt-outs), pre-fill forms where permitted, and maintain responsible gaming limit settings. | Yes — disabling these may reduce your experience quality. |
| Analytics | Collect aggregated, anonymised data on page visits, session duration, and navigation paths to help ini88 improve the Platform. | Yes — opt out via Account Settings or browser cookie controls. |
| Security | Support device fingerprinting and fraud detection. Help identify unusual login patterns or suspicious session activity. | No — these are required for account security and cannot be disabled without compromising account protection. |
Session cookies are deleted when you close your browser. Persistent cookies have defined expiry periods: functional cookies typically expire after 90 days; analytics cookies after 12 months; security cookies are refreshed on each login and expire 30 days after your last session.
You can control cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that blocking strictly necessary or security cookies will prevent you from logging in to your ini88 Account. Instructions for managing cookies in common browsers are available through the browser's own help documentation.
ini88 implements a comprehensive, layered security programme to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:
ini88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC Data | 5 years after account closure | AML regulatory obligation under international gaming licence |
| Financial Transaction Data | 5 years after account closure | AML / financial record-keeping obligations |
| Account & Wagering History | 5 years after account closure | Dispute resolution, licence audit requirements |
| Support Communications | 3 years after resolution of the relevant support ticket | Dispute resolution, quality assurance |
| Technical & Log Data | 12 months from collection | Fraud detection, security monitoring |
| Marketing Preference Records | Until you withdraw consent, plus 1 year | Demonstrating consent for regulatory compliance |
| Analytics / Usage Data | 24 months from collection (aggregated; anonymised after 6 months) | Legitimate interest — platform improvement |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, the anonymised dataset no longer constitutes personal data and may be retained indefinitely for statistical purposes.
Subject to applicable law and ini88's legal obligations, you have the following rights with respect to your personal data:
To exercise any of the above rights, please contact the ini88 Data Protection team at [email protected] with the subject line "Data Subject Request". We may request proof of your identity before fulfilling a request, to ensure that your data is not disclosed to an unauthorised party. We will respond within 30 calendar days of receiving a complete and verified request.
If ini88 becomes aware that personal data has been submitted by or on behalf of an individual under the age of 21, we will immediately:
Parents and guardians who believe that a minor may have created an Account on the Platform are encouraged to contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate all such reports as a matter of priority.
ini88 operates under an international gaming licence and may engage service providers whose data processing infrastructure is located outside of Indonesia. Where personal data is transferred to a country that does not provide a standard of data protection equivalent to that required by ini88's licensing jurisdiction, ini88 takes the following safeguarding measures:
If you would like further information about the specific safeguards in place for any international transfer that affects your personal data, please contact [email protected].
The ini 88 Platform integrates with third-party game studios and payment providers whose services are embedded directly within the Platform interface. While ini88 takes care to partner only with reputable, licensed providers, ini88 is not responsible for the privacy practices of those third parties in respect of data they collect independently through their own platforms or websites outside of the ini88 integration.
Where you navigate away from the ini88 Platform to a third-party website — for example, by clicking a link in an email — that third party's own privacy policy will govern the collection and use of your personal data on their site. ini88 encourages you to review the privacy policies of any third-party services you use in connection with your online gaming activity.
ini88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our licensing obligations, our business practices, or the services we offer. When we make a material change to this Policy, we will:
Where a proposed change materially reduces your rights or significantly expands how ini88 uses your personal data, we will seek your fresh consent before the change takes effect in respect of your Account. Your continued use of the Platform after the effective date of any non-material update constitutes acceptance of the revised Privacy Policy.
We recommend bookmarking this page and reviewing it periodically. The version history of this Policy is available upon request by contacting [email protected].
If you have any questions, concerns, or complaints regarding this Privacy Policy or ini88's handling of your personal data, please contact us through the following channel:
ini88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection obligations. The DPO may be reached via the email address above with the subject line "Attention: DPO".
If you are not satisfied with ini88's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the licensing authority under which ini88 operates. Details of the applicable supervisory authority will be provided upon request.
Your data is secure. Your experience is our priority. Join thousands of Indonesian players who bet on sports, spin slots, and enjoy live casino games on ini88 — with full confidence in how their information is handled.