Privacy Policy

Throughout this Privacy Policy the following terms carry the meanings assigned below:

• "desa88" / "We" / "Us" / "Our" — the operator of the desa88 online betting platform accessible at https://desa88.cam and its internationally licensed parent entity.
• "User" / "You" / "Your" — any natural person who visits, registers on, or interacts with desa88 in any capacity.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, mobile number, date of birth, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Controller" — the entity that determines the purposes and means of Processing Personal Data — in this context, desa88.
• "Processor" — a third party that processes Personal Data on behalf of desa88 under a binding data-processing agreement (e.g., payment processors, cloud hosting providers).
• "KYC" — Know Your Customer identity and age verification procedures.
• "Cookies" — small text files stored on your device by your browser when you visit desa88, used to remember preferences, maintain sessions, and analyze Platform usage.
• "Services" — all betting, gaming, and ancillary services offered via desa88, including sports betting, live casino, slots, and togel (Indonesia's traditional numbers lottery).

This Privacy Policy applies to all Personal Data collected by desa88 through: (a) the desa88 website at https://desa88.cam; (b) any mobile-optimized version of the Platform; (c) communications between Users and desa88 support staff via live chat, email, or messaging applications; and (d) any other channel through which a User provides Personal Data to desa88.

desa88 acts as the Data Controller in respect of all Personal Data collected directly from Users. Where desa88 engages third-party Processors (payment gateways, identity verification services, game providers), those parties act strictly as Processors bound by data-processing agreements that prohibit them from using your Personal Data for any purpose other than performing the contracted service.

This Policy is written to comply with internationally recognized data protection standards. Indonesian Users should be aware that Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) establishes rights for Indonesian citizens over their personal data. desa88 respects and endeavors to honor these rights to the fullest extent compatible with its international licensing obligations.

desa88 collects Personal Data through three primary channels: information you provide directly, information generated by your use of the Platform, and information received from third parties.

3.1 Data You Provide Directly

3.2 Data Generated by Platform Use

• Device & Technical Data: IP address, browser type and version, operating system, device model, screen resolution, time zone (WIB/WITA/WIT as applicable).
• Usage Data: Pages visited, game sessions initiated, bets placed (stake amounts, markets, outcomes), login timestamps, session durations, navigation paths within the Platform.
• Transaction Logs: Full record of deposits, withdrawals, bet placements, bonus activations, and account adjustments.
• Cookie & Tracker Data: Session identifiers, preference cookies, analytics event data — see Section 7 for full details.

3.3 Data Received from Third Parties

• Identity Verification Providers: Results of document authenticity checks and facial-recognition liveness scores.
• Payment Processors: Transaction confirmation references and fraud-score signals from payment networks.
• Fraud Prevention Services: Risk scores and device fingerprint data from third-party fraud-detection vendors.
• Publicly Available Sources: Sanctions lists, politically exposed persons (PEP) databases, and adverse media databases checked for AML compliance.

desa88 processes Personal Data only where a valid legal basis exists. The primary bases relied upon are:

• Contractual Necessity: Processing required to fulfill the contract between desa88 and you — account registration, payment processing, game operation, withdrawal execution, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and our international gaming license — KYC/AML identity verification, age verification, record-keeping obligations, and regulatory reporting.
• Legitimate Interests: Processing for purposes that serve desa88's legitimate business interests while not unduly infringing on your privacy rights — fraud detection, security monitoring, Platform improvement, and internal analytics.
• Consent: Processing for purposes where you have given specific, informed, and freely revocable consent — marketing communications (email newsletters, promotional SMS). You may withdraw consent at any time by contacting support or using the unsubscribe function in any marketing email.

desa88 uses your Personal Data for the following specific purposes:

1. Account Management: Creating, maintaining, and securing your player account; authenticating login sessions; communicating account-related notifications.
2. Payment Processing: Facilitating deposits and withdrawals via your registered Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja); reconciling transaction records; handling payment disputes.
3. KYC & Compliance: Verifying your identity and age (21+) in accordance with our licensing requirements; conducting AML screening; maintaining audit-ready transaction records.
4. Fraud & Security: Detecting and preventing unauthorized access, multi-account abuse, bonus fraud, money laundering, and other prohibited conduct; monitoring unusual betting patterns; conducting IP geolocation checks.
5. Service Delivery: Providing access to all betting markets including BRI Liga 1, EPL, La Liga, togel draws, live casino, and slot games; recording bet history; settling bets based on official results.
6. Customer Support: Responding to your inquiries and complaints via live chat, email, or WhatsApp; escalating issues to relevant internal teams; maintaining support ticket records.
7. Responsible Gaming: Implementing deposit limits, session alerts, and self-exclusion restrictions you request; monitoring accounts flagged for problem gambling indicators; providing relevant support resources.
8. Platform Improvement: Analyzing aggregated usage data to improve navigation, game selection, performance, and the overall user experience.
9. Marketing (with consent only): Sending promotional offers, seasonal bonuses (e.g., Idul Fitri, Ramadhan, Nyepi special promotions), and service updates to Users who have opted in. You can opt out at any time.

desa88 does not sell, rent, or trade your Personal Data to any third party for their independent commercial use. We share data only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum payment data necessary to execute deposits and withdrawals with our partner payment gateways and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These parties are contractually prohibited from using your data for any purpose beyond completing the transaction.
• Identity Verification Services: KYC document data is shared with our licensed third-party identity verification provider solely for the purpose of authenticating your identity and age. Verification results are returned to desa88; your raw documents are not retained by the verification provider beyond their stated processing window.
• Game Providers: Game session data (player ID, stake amounts, game outcomes) is shared with our licensed game providers — including Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, and others — solely to operate and settle game rounds. These providers do not receive your full identity or payment data.
• Fraud Prevention Vendors: Device fingerprint and behavioral data may be shared with specialized fraud-detection services operating under strict data-processing agreements.
• Legal & Regulatory Authorities: We will disclose Personal Data to law enforcement, regulatory bodies, or courts when required by applicable law, a valid court order, or our licensing obligations — without prior notice to you where the law prohibits such notice.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets of desa88's operating entity, Personal Data may be transferred to the successor entity, which will be required to honor this Privacy Policy or notify you of material changes before any new processing begins.

desa88 uses cookies and similar tracking technologies to maintain secure sessions, remember your preferences, and understand how the Platform is used. The following categories of cookies are deployed:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or functional cookies will not prevent you from accessing the Services but may reduce personalization quality.

desa88 does not currently deploy third-party advertising cookies or retargeting pixels. Should this change, this Policy will be updated and affected Users notified in advance.

desa88 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, and resolve any disputes. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymized so that it can no longer be attributed to any identified individual.

desa88 implements a layered set of technical and organizational security controls to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• Transport Encryption: All data in transit between your browser or device and desa88's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon and "https://" prefix in your browser confirm this encryption is active.
• Data-at-Rest Encryption: Sensitive data fields — including identity document scans, bank account identifiers, and hashed passwords — are encrypted at the database level using AES-256.
• Access Controls: Access to Personal Data within desa88's internal systems is restricted on a strict need-to-know basis. Staff access is logged, audited, and subject to regular review. Multi-factor authentication is mandatory for all personnel with administrative access.
• Password Security: User passwords are never stored in plain text. We apply a strong one-way cryptographic hash with a unique per-user salt. In the event of a suspected credential compromise, we will force a password reset and notify affected Users promptly.
• Fraud Detection Systems: Automated real-time monitoring detects anomalous login patterns, unusual transaction behavior, and multi-account signals, triggering account reviews or temporary locks when risk thresholds are exceeded.
• Third-Party Security Audits: desa88's Platform and data infrastructure undergo periodic security assessments by independent qualified auditors to identify and remediate vulnerabilities.
• Incident Response: In the event of a confirmed data breach that presents a material risk to Users, desa88 will notify affected individuals and relevant supervisory authorities within the timeframes required by applicable law.

As an internationally licensed operator, desa88 may store and process your Personal Data on servers located outside Indonesia. In particular, data may be processed in the jurisdiction where desa88's licensing authority is based, and in data centers used by our cloud infrastructure provider.

Where Personal Data is transferred outside Indonesia or outside the jurisdiction of origin, desa88 ensures that appropriate safeguards are in place, including:

• Binding contractual clauses in agreements with all third-party Processors that impose data protection standards equivalent to those under which the data was originally collected.
• Selection of cloud and infrastructure providers that maintain internationally recognized security certifications (ISO 27001, SOC 2 Type II).
• Restriction of cross-border transfers to the minimum data necessary for the specific processing purpose.

By registering an Account and using the Services, you acknowledge and consent to the transfer of your Personal Data to the locations described in this section, subject to the safeguards outlined above.

Subject to applicable law and certain limited exceptions (such as where processing is required by law or necessary to prevent fraud), you hold the following rights over your Personal Data held by desa88:

• Right of Access: You may request a copy of the Personal Data desa88 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For basic account details (email address, mobile number), you may update these directly in Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis exists. Note that we may be required by law to retain certain data (e.g., KYC and transaction records) for defined periods even after account closure.
• Right to Restriction: You may request that desa88 restrict processing of your Personal Data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You may request a copy of Personal Data you have provided to desa88 in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests — including profiling for fraud detection — where your particular circumstances justify such an objection. You may also object to direct marketing communications at any time without giving a reason.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and endeavor to fulfill it within 30 calendar days. We may request proof of identity before processing your request to protect against unauthorized access.

Age verification is a mandatory step in our KYC process. Any account where the account holder is found to be under 21 years of age will be permanently closed, all funds returned to the originating payment method, and the matter reported to relevant authorities where required by our licensing obligations.

The desa88 Platform may contain references to third-party services such as game providers, payment processors, and sports data feeds. While desa88 selects its partners carefully, we do not control the privacy practices of third-party websites or services. This Privacy Policy applies solely to Personal Data processed by desa88.

We encourage you to review the privacy policies of any third-party service you interact with independently. desa88 accepts no responsibility or liability for the privacy practices, data collection, or content of any third-party platform.

desa88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or licensing requirements. When material changes are made, we will post the revised Policy on this page and update the "Last Updated" date shown at the top. Where changes are significant, we will provide additional notice via email to your registered address or via a prominent notice on the Platform.

Your continued use of the Services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you should cease using the Services and request account closure by contacting our support team.

We recommend reviewing this page periodically. Archived versions of previous Privacy Policies are available upon written request to [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or desa88's handling of your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" for prioritized routing.
• Live Chat: Available 24/7 via the in-Platform chat widget. Our Indonesian-speaking support agents can assist with initial privacy inquiries in both English and Bahasa Indonesia.

We aim to acknowledge all privacy-related inquiries within 48 hours and resolve them within 30 calendar days. For complex requests, we will keep you informed of progress and any anticipated delays.

If you are not satisfied with how desa88 has handled your Personal Data or responded to your rights request, you have the right to escalate your complaint to the supervisory authority responsible for data protection in the jurisdiction under which desa88 is licensed. Details of the relevant supervisory authority are available upon request.