evo88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how evo88 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("Members", "you", "your") who access or use the evo88 platform at https://evo88.cam. It also describes the rights available to Members regarding their personal data and the mechanisms through which those rights can be exercised.

evo88 is committed to handling personal data responsibly, transparently, and in a manner consistent with internationally recognised data protection principles. By registering an account or continuing to use the evo88 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with the evo88 Terms & Conditions, which govern the overall contractual relationship between you and the platform.

2. Definitions

Term	Meaning
Personal Data	Any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, mobile number, identity document details, IP address, and financial account details.
Processing	Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
Data Controller	evo88, being the entity that determines the purposes and means of processing Personal Data collected through the platform.
Data Processor	A third party engaged by evo88 to process Personal Data on our behalf, under documented contractual instructions.
KYC Data	Identity verification documents and related information submitted by a Member in fulfilment of evo88's Know Your Customer process, including government-issued photo ID (Indonesian KTP or equivalent) and proof of payment method ownership.
Cookies	Small text files placed on a Member's device by the evo88 platform to store session information, preferences, and analytical data.
DPO	Data Protection Officer — the designated individual responsible for overseeing evo88's data protection compliance and serving as the point of contact for data-related enquiries from Members and authorities.

3. Data We Collect

evo88 collects the following categories of Personal Data in the course of operating the platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Email address
• Mobile telephone number
• Username and encrypted password
• Preferred language setting

3.2 KYC & Verification Data

• Copy or image of government-issued photo ID (Indonesian KTP preferred; passport accepted for non-Indonesian residents)
• Proof of address documentation where required
• Proof of ownership of the bank account or e-wallet registered for withdrawals
• Any additional documentation requested in the course of an enhanced due diligence review

3.3 Financial & Transaction Data

• Bank account details (account holder name, bank name, account number) for BCA, BRI, BNI, Mandiri, and CIMB Niaga
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit and withdrawal transaction records including amounts, timestamps, and transaction reference numbers
• Betting and gaming activity records including stakes, game selections, outcomes, and account balance history

3.4 Technical & Usage Data

• IP address and geolocation derived from IP
• Device type, operating system, browser version
• Session data including login timestamps, session duration, and pages visited
• Clickstream and interaction data within the platform
• Cookie identifiers and similar tracking technologies (see Section 11)

3.5 Communications Data

• Records of live chat conversations with evo88 customer support
• Email correspondence with evo88
• Complaint and dispute records

4. How We Collect Personal Data

evo88 collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit, request a withdrawal, contact customer support, or respond to a promotional offer.
• Automatically — through the evo88 platform's technical infrastructure, including server logs, session tracking, and cookies placed on your device when you access the site.
• From third-party service providers — including payment processors who confirm transaction status and identity verification services who assist with KYC checks. evo88 only receives data from third-party providers who are contractually bound to handle that data appropriately.
• From fraud prevention and compliance databases — evo88 may screen Member details against sanctions lists, PEP registries, and anti-fraud databases to comply with applicable regulatory obligations.

5. Purposes of Processing

evo88 processes Personal Data for the following specific purposes:

Purpose	Data Categories Used
Account creation and management	Identity & Registration Data
Age and eligibility verification (21+ requirement)	Identity Data, KYC Data
Processing deposits and withdrawals	Financial & Transaction Data, KYC Data
Fraud prevention, anti-money laundering, and compliance	All categories
Customer support and dispute resolution	Identity Data, Communications Data, Transaction Data
Platform security and technical integrity	Technical & Usage Data
Responsible gaming monitoring and intervention	Transaction Data, Usage Data
Personalisation of platform experience	Usage Data, Communications Data
Promotional communications (with consent)	Identity Data (email/mobile)
Analytics and platform improvement	Technical & Usage Data (anonymised where possible)

6. Legal Basis for Processing

evo88 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to fulfil the account agreement, including identity verification, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable anti-money laundering, fraud prevention, and regulatory reporting obligations.
• Legitimate interests: Processing necessary for platform security, fraud detection, responsible gaming monitoring, and analytics, provided such interests are not overridden by your rights and interests.
• Consent: Processing for non-essential marketing communications (email newsletters, promotional SMS). You may withdraw this consent at any time by contacting evo88 support or adjusting your account notification settings.

7. Data Sharing & Disclosure

7.1 evo88 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Data is shared only in the following circumstances:

• Service providers (Data Processors): Trusted third-party processors engaged under contractual data processing agreements — including payment processors handling BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions; identity verification service providers; fraud detection technology providers; and cloud infrastructure providers who host platform data. All processors are bound by strict confidentiality and data security obligations.
• Game providers: Licensed game studios including Evolution Gaming, Pragmatic Play, and others may receive limited session data necessary to deliver their games within the evo88 platform. These providers operate under their own applicable data protection frameworks as independent licensed operators.
• Legal and regulatory authorities: evo88 will disclose Personal Data to competent authorities when required to do so by applicable law, court order, or regulatory direction. evo88 will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material portion of evo88's business, Member data may be transferred as part of that transaction. Affected Members will be notified prior to any such transfer.

8. International Data Transfers

8.1 evo88 operates internationally and may transfer your Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, evo88 takes appropriate measures to ensure that your data receives a consistent level of protection, including:

• Entering into Standard Contractual Clauses or equivalent data transfer mechanisms with recipients in jurisdictions without an adequacy decision.
• Ensuring that all third-party processors in recipient countries are bound by contractual obligations equivalent to those described in this Policy.
• Applying technical security measures (encryption in transit and at rest) to all transferred data regardless of destination jurisdiction.

9. Data Retention

9.1 evo88 retains Personal Data for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligation. The following retention guidelines apply:

• Active account data: Retained for the duration of the account relationship plus a minimum of five (5) years after account closure, to meet anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship, or longer if required by applicable regulatory directive.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for a minimum of three (3) years from the date of the last communication, or until any related dispute is formally resolved.
• Technical logs: Retained for up to twelve (12) months for security and fraud investigation purposes.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance demonstration.

9.2 When Personal Data is no longer required and no legal basis for continued retention exists, evo88 will securely delete or anonymise that data.

10. Security Measures

evo88 implements a layered security architecture to protect Member data against unauthorised access, loss, disclosure, or destruction:

• Encryption in transit: All data transmitted between your device and the evo88 platform is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive data including identity documents, financial account details, and password hashes is stored in encrypted form on evo88's infrastructure.
• Access controls: Internal access to Personal Data is restricted on a need-to-know basis. Staff members with access to sensitive data are subject to contractual confidentiality obligations and regular security training.
• Two-factor authentication: Members are encouraged to enable two-factor authentication (2FA) on their accounts. evo88 offers SMS-based 2FA for login verification.
• Monitoring and incident response: evo88 operates continuous monitoring for unusual account activity and has documented incident response procedures in the event of a security breach. Affected Members will be notified of material breaches as required by applicable law.

11. Cookies & Tracking Technologies

11.1 evo88 uses cookies and similar technologies (including session tokens and local storage objects) to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — including session authentication cookies, security tokens, and load balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings and notification preferences to personalise your experience across sessions.
• Analytical cookies: Collect aggregated, anonymised data about how Members use the platform — pages visited, time spent, features used — to help evo88 improve the product. These do not identify you personally.
• Security cookies: Support fraud detection and account security monitoring by identifying unusual patterns of activity.

11.2 evo88 does not use third-party advertising cookies or cross-site tracking technologies. Analytical data is processed for internal platform improvement only and is not shared with advertising networks.

11.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

12. Your Data Rights

As a Member of evo88, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact evo88 at [email protected] with the subject line "Data Rights Request":

evo88 will respond to data rights requests within 30 days of receipt. Complex requests may require an extension, in which case evo88 will notify you of the extension and the reason within the initial 30-day period.

13. Minors

13.1 evo88 strictly prohibits use of the platform by individuals under the age of 21. We do not knowingly collect Personal Data from persons under 21 years of age. If evo88 becomes aware that a Member's account was registered by or on behalf of an individual under 21, the account will be immediately closed and all associated Personal Data will be deleted in accordance with applicable legal requirements.

13.2 If you believe that a minor may have registered on the evo88 platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

14. Amendments to This Policy

14.1 evo88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or platform features. Material changes will be notified to Members via a notice on the platform homepage and/or by email to the registered address associated with your account.

14.2 Continued use of the evo88 platform following notification of a material amendment constitutes your acknowledgement of the updated Policy. If you do not accept the amended Policy, you should cease using the platform and request account closure as described in the Terms & Conditions.

14.3 The "Last updated" date at the top of this page reflects the date of the most recent revision.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact evo88 through the following channels:

• Data Rights Requests & Privacy Enquiries: [email protected] — use the subject line "Privacy / Data Rights" to ensure prompt routing to the appropriate team.
• Live Chat: Available 24/7 via the chat widget on the evo88 platform. For general account questions, live chat is the fastest option.
• Data Protection Officer: evo88's DPO can be reached at the same email address. Data rights requests addressed to the DPO are processed with priority and within the 30-day statutory timeframe.
• Support Hours: 00:00–24:00 WIB, every day including all Indonesian national holidays.