At ri888, your personal data is handled with the same level of care we apply to every aspect of the platform. This Privacy Policy explains exactly what information we collect from Indonesian members, why we collect it, how we protect it, and the rights you hold over your own data. We believe in full transparency — because trust is the foundation of everything we do.
ri888 collects only the data that is strictly necessary to provide our services, comply with regulatory requirements, and verify your identity. We do not collect data speculatively.
All data transmitted between your device and the ri888 platform is protected by 256-bit SSL encryption and TLS 1.3. Sensitive stored data is encrypted at rest using industry-standard protocols.
Data collected for a specific purpose — such as KYC verification or fraud prevention — is used only for that stated purpose. We do not repurpose your data without prior notice and, where required, your consent.
You retain the right to access, correct, restrict, and in certain circumstances delete the personal data ri888 holds about you. We provide clear processes for exercising each of these rights.
Personal data is retained only for as long as it is required to fulfil the purpose for which it was collected or to comply with applicable legal and regulatory obligations. Expired data is securely deleted.
If this Privacy Policy changes in a material way, ri888 will notify registered members by email and display a prominent notice on the platform at least 7 days before the changes take effect.
The following defined terms are used throughout this Privacy Policy. Capitalised terms not defined here carry the meaning assigned to them in the ri888 Terms & Conditions.
2.1 ri888 is the Data Controller responsible for the Personal Data of all Members and visitors to the ri888 platform. As Data Controller, ri888 determines the purposes for which your Personal Data is collected and the means by which it is processed, stored, and protected.
2.2 ri888 operates primarily for the benefit of Indonesian players and handles all member data in the context of providing online gaming and sportsbook services to residents of Indonesia. All transactions on the platform are denominated in Indonesian Rupiah (IDR) and all customer-facing communications are delivered in English.
2.3 For any data-related enquiry — including requests to exercise your rights under Section 9 of this Policy — you may contact ri888's data team via the contact details set out in Section 13.
3.1 ri888 processes your Personal Data only where a valid lawful basis exists. The primary lawful bases on which ri888 relies are as follows:
4.1 Account Administration. Your identity and contact data is used to create and maintain your Member account, authenticate your login sessions, reset credentials, and respond to account-related enquiries. This processing is foundational to the delivery of the Services and cannot be limited without restricting your access to the platform.
4.2 Payment Processing. Your financial data — including bank account details for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and BSI, as well as e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja — is used exclusively to process deposits and withdrawals in IDR, reconcile transactions, investigate failed payments, and verify that payment accounts are held in your own name as required by Section 4.6 of the Terms & Conditions.
4.3 Identity Verification (KYC). The identity documents and address evidence you submit during KYC verification are used to confirm that you are who you say you are, that you meet the 21+ age requirement, and that you are accessing the platform for your own personal use. KYC data is stored securely and retained for the period specified in Section 7.
4.4 Fraud Prevention & AML Monitoring. ri888 applies automated and manual transaction monitoring to detect suspicious activity patterns that may indicate fraud, money laundering, or terrorist financing. Where suspicious activity is identified, ri888 may be legally obliged to file a report with competent authorities without notifying the Member concerned.
4.5 Platform Improvement. Aggregated, anonymised usage data — including which games are most popular, where Members encounter errors, and how navigation flows are used — is analysed to improve the platform's performance, stability, and user experience. This analysis does not involve processing personally identifiable data beyond the session-level technical logs described in Section 2 of this Policy.
4.6 Responsible Gaming. ri888 uses gameplay frequency, session duration, and staking pattern data to power its responsible gaming monitoring systems. Where these systems identify patterns that may indicate problem gambling behaviour, ri888's trained support team may reach out proactively. This processing is carried out in your interest and in accordance with ri888's obligations as a platform committed to responsible gaming.
4.7 Marketing Communications. With your consent, ri888 may use your contact details and gameplay preferences to send you personalised promotional offers, bonus alerts, tournament invitations, and seasonal promotions relevant to the Indonesian market — including offers timed around Idul Fitri, Ramadhan, and major football seasons such as BRI Liga 1 and the Champions League. You can opt out at any time.
5.1 ri888 does not share your Personal Data with third parties except in the circumstances described in this Section. All third-party recipients of your data are bound by contractual obligations to process that data only for the specified purpose and to apply security standards consistent with those applied by ri888.
5.2 Payment Processors. In order to process your deposits and withdrawals, ri888 shares the minimum necessary financial data with the relevant payment gateway or banking partner. This includes transaction amounts, account reference numbers, and confirmation of your identity where required by the payment provider. Data shared with payment processors is used solely to execute the transaction.
5.3 Identity Verification Providers. ri888 works with specialist third-party KYC and document verification providers to authenticate the identity documents you submit. These providers process your submitted documents under strict data processing agreements and do not retain your data beyond the verification exercise.
5.4 Game Software Providers. The games available on the ri888 platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. In the course of delivering live dealer and RNG game sessions, limited session-level technical data may be shared with these providers for the purpose of operating the game and resolving disputes. No personally identifiable financial data is shared with game studios.
5.5 Legal and Regulatory Authorities. ri888 will disclose Personal Data to competent authorities — including law enforcement agencies and financial intelligence units — where required to do so by applicable law, by a court order, or in connection with an AML or fraud investigation. ri888 will not notify the Member concerned where such notification is legally prohibited.
5.6 Business Transfers. In the event of a merger, acquisition, or sale of all or part of ri888's business, your Personal Data may be transferred to the acquiring entity as part of the transaction. ri888 will notify Members of any such transfer and the identity of the new data controller before the transfer takes effect, and will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.
6.1 ri888 uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform, maintain your logged-in session, and improve your experience. The categories of cookies used by ri888 are as follows:
6.2 You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain categories of cookies — particularly functional cookies — may impair the performance of the ri888 platform on your device.
7.1 ri888 retains your Personal Data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML compliance and regulatory audit requirements |
| KYC Documents | 5 years from submission date | Legal obligation under AML frameworks |
| Financial Transaction Records | 5 years from transaction date | Financial record-keeping and dispute resolution |
| Gameplay & Betting History | 3 years from last activity | Dispute resolution and responsible gaming monitoring |
| Marketing Consent Records | 3 years from consent withdrawal | Evidence of lawful basis for past communications |
| Technical Logs (IP, session) | 12 months from session end | Security monitoring and fraud investigation |
| Support Communications | 2 years from ticket closure | Quality assurance and dispute reference |
7.2 Upon expiry of the applicable retention period, ri888 will securely delete or anonymise your Personal Data. Anonymised data — which can no longer be used to identify you — may be retained indefinitely for aggregate analytical purposes.
8.1 ri888 implements a comprehensive, layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our primary technical and organisational security measures include:
9.1 As a Member whose Personal Data is processed by ri888, you hold the following rights in respect of your data. ri888 will respond to all valid rights requests within 30 days of receipt, at no charge to you for standard requests.
| Right | What It Means | How to Exercise |
|---|---|---|
| Right of Access | You may request a copy of all Personal Data ri888 holds about you, along with information about how it is processed. | Email request to [email protected] with subject line "Data Access Request" |
| Right to Rectification | You may request correction of any Personal Data that is inaccurate or incomplete. | Update directly in account settings, or contact support for KYC-related corrections |
| Right to Erasure | You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations. | Submit a written erasure request to [email protected] |
| Right to Restriction | You may request that ri888 restricts processing of your Personal Data in certain circumstances, such as while a dispute is being resolved. | Contact support via live chat or email |
| Right to Data Portability | You may request a machine-readable copy of the Personal Data you provided to ri888, for the purpose of transferring it to another service provider. | Email request to [email protected] specifying the data scope |
| Right to Object | You may object to processing based on legitimate interests, including profiling for marketing. You have an absolute right to object to direct marketing at any time. | Update marketing preferences in account settings, or contact support |
| Right to Withdraw Consent | Where processing is based on consent (e.g., marketing), you may withdraw that consent at any time without affecting the lawfulness of prior processing. | Opt-out link in any marketing email, or update preferences in account settings |
9.2 ri888 may ask you to verify your identity before processing a rights request. This is to protect you against fraudulent requests made in your name by third parties. Identity verification for rights requests is conducted using the same KYC standards applied to account withdrawals.
9.3 Please note that certain rights — particularly the right to erasure — are subject to overriding legal obligations. For example, ri888 cannot delete KYC documents or transaction records that it is legally required to retain under AML regulations, even if you submit a valid erasure request. In such cases, ri888 will inform you of the specific legal ground that prevents full erasure and will restrict processing of that data to the minimum necessary for legal compliance purposes.
10.1 The ri888 platform is intended exclusively for adults aged 21 and over. ri888 does not knowingly collect Personal Data from any person under the age of 21. The registration process includes an age declaration, and KYC verification is designed to identify and reject underage applicants.
10.2 If ri888 becomes aware that Personal Data has been collected from a person under 21 — whether through a fraudulent age declaration or any other means — that data will be deleted immediately, the associated account will be permanently closed, and any balance within that account will be forfeited in accordance with the Terms & Conditions.
10.3 If you are a parent or guardian and believe that a minor in your care has registered an account with ri888, please contact our support team immediately via live chat or at the email address listed in Section 13. ri888 will investigate and act promptly upon receipt of a verified report.
11.1 ri888's primary member base is in Indonesia and the platform is configured to serve Indonesian players. However, some of ri888's operational systems — including cloud infrastructure, security services, and game studio integrations — may involve the transfer of certain technical or operational data to servers or service providers located outside Indonesia.
11.2 Where such transfers occur, ri888 ensures that an appropriate legal mechanism is in place to protect the data in transit and at the destination. These mechanisms include contractual data processing agreements incorporating standard data protection clauses, and — where relevant — transfers to jurisdictions that maintain equivalent data protection standards.
11.3 Personally identifiable financial data and KYC documents are processed and stored within systems subject to the same security standards described in Section 8, regardless of the physical location of the hosting infrastructure.
12.1 ri888 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. The "Last updated" date at the top of this document indicates when the current version came into effect.
12.2 Where a change is material — meaning it significantly affects how your Personal Data is collected, used, or shared, or significantly alters your rights — ri888 will notify you by email to the address registered on your account and will display a prominent notice on the platform at least 7 days before the updated Policy takes effect.
12.3 Your continued use of the ri888 platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated Policy, you should cease using the Services and may request account closure by contacting support.
12.4 For minor, non-material changes — such as correcting typographical errors, clarifying existing descriptions, or updating contact information — ri888 may update this Policy without advance notice, and the updated version will be effective immediately upon publication.
If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 9, or wish to raise a concern about how ri888 handles your Personal Data, please contact us through one of the following channels:
Please note: the email address above is for written correspondence only and is displayed as plain text. ri888 will never ask for your password or full KYC document details by email. Do not respond to any unsolicited email purporting to be from ri888 that requests sensitive account information.
You've read our commitment to protecting your data. Now explore everything ri888 has to offer — from live casino tables to the sportsbook, all secured by the privacy standards described above.