Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by stek88 through our website (https://stek88.cam), mobile applications, customer support channels, and any other platforms or services we operate. The policy governs data collection from Indonesian residents who are at least 21 years of age and who register accounts, make deposits, place bets, or otherwise interact with our gaming platform.

stek88 operates as an international online gaming platform serving Indonesian players with localized payment methods, Indonesian-speaking customer support, and content tailored to Indonesian gaming preferences. While we comply with international data protection standards, we also recognize the specific context of Indonesian data privacy expectations and local regulatory requirements. Our data handling practices are designed to balance operational necessity, legal compliance, fraud prevention, and respect for your privacy rights.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your relationship with stek88. If you have questions about how we handle your data or wish to exercise your privacy rights, please contact our Data Protection Officer through the channels listed at the end of this document.

2. Information We Collect

stek88 collects several categories of personal information necessary to provide gaming services, comply with regulatory obligations, prevent fraud, and enhance your user experience. The information we collect includes:

2.1 Registration and Account Information

When you create an account with stek88, we collect the following personal details:

• Full Legal Name: Your complete name as it appears on government-issued identification, required for identity verification and payment processing.
• Date of Birth: To verify you are at least 21 years of age, the minimum legal gambling age in Indonesia.
• Residential Address: Your complete address in Indonesia including street, city, province, and postal code for verification and regulatory compliance.
• Email Address: Used for account communications, password resets, promotional offers (if you opt in), and important service notifications.
• Mobile Phone Number: For two-factor authentication, account recovery, and customer support contact.
• Username and Password: Your chosen login credentials, with passwords stored in encrypted format.
• Preferred Language and Currency: To customize your platform experience (Indonesian Rupiah is our default currency; English is our content language).

2.2 Identity Verification (KYC) Documents

To comply with Know Your Customer (KYC) regulations, prevent fraud, and verify your identity before processing withdrawals, we collect copies of official identification documents:

• Government-Issued ID: Indonesian ID card (Kartu Tanda Penduduk / KTP), passport, or driver's license showing your photograph, name, date of birth, and ID number.
• Proof of Address: Recent utility bill, bank statement, or government correspondence dated within the last three months showing your residential address.
• Selfie Photograph: In some cases, we may request a selfie holding your ID card for enhanced identity verification.
• Source of Funds Documentation: For large deposits or withdrawals, we may request documentation such as employment letters, bank statements, or business ownership documents to verify the source of funds in accordance with anti-money laundering regulations.

2.3 Financial and Transaction Information

To process deposits and withdrawals, we collect payment-related information:

• Bank Account Details: Indonesian bank account numbers and names for banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon. Bank account names must match your registered stek88 account name.
• E-Wallet Information: Account details for OVO, DANA, GoPay, or other e-wallet services linked to your name.
• Transaction History: Complete records of all deposits, withdrawals, bets placed, game sessions, winnings, losses, bonus claims, and account balance changes.
• Payment Method Verification: In some cases, we may request screenshots or documentation confirming ownership of payment accounts to prevent fraud and third-party deposits.

2.4 Gameplay and Betting Data

To provide gaming services, detect fraud, ensure fair play, and improve our platform, we collect information about your gaming activity:

• Betting History: All sports bets placed including match selections, stake amounts, odds, bet types (1X2, Asian Handicap, Over/Under, mix parlay accumulators), timestamps, and outcomes.
• Casino Game Activity: Slots played, table games sessions, live dealer interactions, bet sizes, win/loss records, and session durations.
• Responsible Gaming Tool Usage: Records of deposit limits set, loss limits configured, self-exclusion periods requested, session time limits, and reality check frequency.
• Bonus and Promotion Participation: Which bonuses you claimed, wagering progress toward fulfilling requirements, bonus forfeiture decisions, and promotional code usage.

2.5 Technical and Device Information

When you access stek88, we automatically collect certain technical information through cookies and similar technologies:

• IP Address: Your device's Internet Protocol address, used for geolocation verification (confirming you are in Indonesia) and security monitoring.
• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, Android, iOS), browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages viewed, features used, time spent on different sections, click patterns, navigation paths, and interaction with platform elements.
• Location Data: Approximate geographic location derived from IP address to ensure compliance with geographic restrictions.
• Cookies and Tracking Technologies: Small data files stored on your device to remember login sessions, preferences, and to enable functionality. Details on our cookie usage are provided in Section 9.

2.6 Communications and Support Interactions

When you contact customer support or communicate with stek88, we retain records of those interactions:

• Live Chat Transcripts: Complete records of live chat conversations with customer support agents including timestamps and resolved issues.
• Email Correspondence: All emails sent to and from [email protected] including attachments and response threads.
• WhatsApp Messages: Text and media messages exchanged through our WhatsApp support channel.
• Phone Call Records: If we introduce phone support, we may record calls for quality assurance, training, and dispute resolution (you will be informed before recording begins).
• Feedback and Surveys: Voluntary responses to satisfaction surveys, product feedback requests, or platform improvement suggestions.

3. How We Use Your Information

stek88 uses the personal information we collect for the following purposes, all of which are necessary to provide our gaming services, comply with legal obligations, or are based on our legitimate business interests:

3.1 Account Management and Service Provision

• Creating and maintaining your gaming account
• Verifying your identity and age (21+ requirement)
• Processing deposits and withdrawals through Indonesian banks and e-wallets
• Enabling access to sports betting, casino games, slots, and other gaming products
• Recording and settling bets, calculating winnings, and updating account balances
• Managing bonuses, promotions, and loyalty programs
• Providing customer support and responding to inquiries
• Implementing responsible gaming tools you configure (deposit limits, self-exclusion, etc.)

3.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Customer Due Diligence (CDD) requirements
• Preventing money laundering, terrorist financing, and other financial crimes
• Detecting and preventing fraud, cheating, collusion, and bonus abuse
• Responding to legal requests from law enforcement or regulatory authorities
• Enforcing our Terms & Conditions and investigating violations
• Maintaining records for the legally required retention period
• Verifying that players are Indonesian residents and at least 21 years old

3.3 Platform Security and Fraud Prevention

• Monitoring for suspicious betting patterns that may indicate match-fixing or insider knowledge
• Detecting multiple accounts (duplicate accounts) created by the same individual
• Identifying use of VPNs, proxies, or location-spoofing tools
• Preventing unauthorized account access and protecting against hacking attempts
• Analyzing gameplay for evidence of bot usage or automated betting software
• Investigating disputes between players and stek88 regarding bet outcomes or payments

3.4 Service Improvement and Analytics

• Analyzing user behavior to improve platform design, navigation, and user experience
• Understanding which games, sports, and features are most popular among Indonesian players
• Optimizing mobile responsiveness and load times
• Testing new features and A/B testing different interface designs
• Conducting market research to understand Indonesian player preferences
• Monitoring platform performance, uptime, and technical issues

3.5 Marketing and Communication (With Your Consent)

• Sending promotional emails about new bonuses, tournaments, and special offers (only if you opt in)
• Notifying you of new game releases from providers like Pragmatic Play, Evolution Gaming, and NetEaker
• Sharing information about BRI Liga 1 betting markets, EPL odds, Champions League coverage, and other sports offerings
• Delivering personalized bonus offers based on your gaming preferences (sports vs. casino, favorite games)
• Inviting VIP players to exclusive events or enhanced loyalty program tiers

Important: Marketing communications are always opt-in. You can unsubscribe at any time by clicking the unsubscribe link in emails or adjusting your communication preferences in your account settings.

4. Information Sharing and Disclosure

stek88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we do share your data with certain trusted partners and service providers under strict confidentiality agreements, and we may disclose information when legally required or necessary to protect our business:

4.1 Service Providers and Business Partners

• Payment Processors: To process deposits and withdrawals, we share necessary payment information with Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) as well as international payment gateway providers.
• Game Providers: When you play games from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Asia Gaming, and other providers, certain information (username, bet amounts, game results) is shared with those providers to enable gameplay.
• Identity Verification Services: Third-party KYC verification providers help us authenticate identity documents and detect fraudulent submissions.
• Cloud Hosting and IT Infrastructure: Our platform is hosted on secure cloud servers operated by reputable technology companies. These providers have access to data stored on their systems but are contractually prohibited from using it for any purpose other than providing hosting services.
• Customer Support Tools: Live chat software, email management systems, and CRM platforms used by our support team may store communication records.
• Analytics and Marketing Platforms: If you consent to marketing, we may use analytics tools to measure campaign effectiveness. These tools operate under strict data processing agreements.

4.2 Legal and Regulatory Disclosures

• Law Enforcement Requests: We will disclose personal information when required by valid legal process such as court orders, subpoenas, or search warrants issued by Indonesian or international authorities.
• Regulatory Investigations: Gaming regulators and licensing authorities may request player data as part of audits or investigations. We cooperate fully with such requests.
• Anti-Money Laundering (AML) Compliance: If we detect suspicious financial activity, we are legally obligated to file reports with financial intelligence units and may freeze accounts pending investigation.
• Tax Authorities: If required by Indonesian tax law, we may report player winnings or account activity to tax authorities.

4.3 Business Transfers

In the event that stek88 undergoes a merger, acquisition, sale of assets, bankruptcy, or other corporate restructuring, your personal information may be transferred to the acquiring entity. You will be notified of any such change via email and/or prominent notice on our website, and the new entity will be required to honor this Privacy Policy or obtain your consent to new terms.

4.4 Protection of Rights and Safety

We reserve the right to disclose personal information if we believe in good faith that such disclosure is necessary to: protect the safety of stek88 users or the public; protect and defend our legal rights and property; prevent or investigate fraud, security breaches, or illegal activity; or enforce our Terms & Conditions.

5. Data Security Measures

stek88 implements industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

5.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols. This ensures that payment information, login credentials, and personal details cannot be intercepted by third parties.
• Secure Data Centers: Our servers are hosted in secure, access-controlled data centers with 24/7 monitoring, redundant power supplies, fire suppression systems, and multiple layers of physical security.
• Firewall Protection: Multiple firewall layers protect our network infrastructure from external attacks, unauthorized access attempts, and distributed denial-of-service (DDoS) attacks.
• Intrusion Detection: Automated systems continuously monitor for suspicious activity, unauthorized access attempts, and potential security breaches, with alerts sent to our security team for immediate response.
• Password Encryption: User passwords are hashed using strong one-way encryption algorithms (such as bcrypt) and are never stored in plain text. Even stek88 staff cannot access your actual password.
• Database Security: Player data stored in databases is encrypted at rest, with access restricted to authorized personnel only through secure authentication mechanisms.

5.2 Organizational Security

• Access Controls: Only employees whose job functions require access to personal data are granted permission, and access is logged for audit purposes.
• Employee Training: All staff members receive regular training on data protection, privacy regulations, and security best practices.
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements prohibiting unauthorized disclosure of customer information.
• Regular Security Audits: Independent security firms conduct periodic penetration testing and vulnerability assessments to identify and remediate potential weaknesses.
• Incident Response Plan: We maintain a comprehensive data breach response plan to quickly contain, investigate, and notify affected parties in the event of a security incident.

5.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if offered
• Log out after each session, especially on shared or public devices
• Do not click suspicious links in emails claiming to be from stek88 (verify sender addresses)
• Keep your device's operating system, browser, and security software updated
• Report suspected unauthorized account access immediately to our support team

6. Data Retention and Deletion

stek88 retains personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements:

6.1 Active Account Data

While your account is active, we retain all associated personal information including registration details, transaction history, betting records, and communications. This data is necessary to provide ongoing services, process transactions, and support your account.

6.2 Closed Account Data

After you close your account, we retain your data for a minimum of six years to comply with anti-money laundering regulations, tax requirements, and licensing obligations. This retention period allows us to respond to legal requests, defend against claims, and maintain transaction records as required by law. After the retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you.

6.3 Regulatory and Legal Requirements

Certain data must be retained longer than six years if required by specific regulations or if involved in ongoing legal proceedings, investigations, or disputes. In such cases, data is deleted once the legal basis for retention no longer applies.

6.4 Marketing Data

If you opt out of marketing communications, we will suppress your contact information from promotional lists immediately. However, we retain a record of your opt-out preference indefinitely to ensure you are not contacted again.

7. Your Privacy Rights

Under data protection principles, you have certain rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. Most account information is accessible directly through your account dashboard. For additional information, contact our Data Protection Officer.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information (email, phone number, address) directly in your account settings. For changes to your legal name or date of birth, contact customer support with supporting documentation.

7.3 Right to Erasure

You may request deletion of your personal information, subject to our legal retention obligations. If we are legally required to retain data (e.g., for six years under anti-money laundering regulations), we cannot delete it until the retention period expires. Once legal obligations no longer apply, we will delete your data upon request.

7.4 Right to Restrict Processing

In certain circumstances, you may request that we limit how we use your data. For example, if you contest the accuracy of data, we will restrict processing while we verify accuracy.

7.5 Right to Data Portability

You may request a machine-readable copy of your personal data to transfer to another service provider. We will provide data in CSV or JSON format upon request.

7.6 Right to Object

You may object to processing of your data for direct marketing purposes at any time by clicking unsubscribe in emails or adjusting your account settings. You may also object to processing based on legitimate interests by contacting us with your reasons.

7.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Exercising Your Rights: To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond within 30 days.

8. International Data Transfers

stek88 operates internationally and your personal information may be transferred to and processed in countries outside Indonesia, including countries that may have different data protection standards. When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses, ensure adequate data protection laws apply in the receiving country, or obtain your explicit consent. Our service providers are contractually bound to protect your data in accordance with this Privacy Policy regardless of their location.

9. Cookies and Tracking Technologies

stek88 uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyze platform usage:

Types of Cookies We Use

• Essential Cookies: Required for platform functionality including login sessions, security features, and payment processing. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language choice, display settings, and previously viewed games.
• Analytics Cookies: Help us understand how visitors use our platform, which pages are most popular, and where users encounter difficulties. Data is aggregated and anonymized.
• Marketing Cookies: Used to deliver personalized advertisements and track campaign effectiveness (only if you consent to marketing).

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain platform features.

10. Children's Privacy

stek88 services are strictly for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that a minor has provided personal information, we will immediately delete that data and close the associated account. Parents or guardians who believe their child has accessed stek88 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

stek88 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes via email and/or prominent notice on our website at least 30 days before changes take effect. Your continued use of stek88 services after the effective date constitutes acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.

12. Contact Information

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:

Data Protection Officer
stek88 Privacy Team
Email: [email protected]
Subject Line: Privacy Inquiry

We aim to respond to all privacy inquiries within 7 business days. For urgent security concerns, contact our 24/7 customer support via live chat on the website.