Privacy Policy

1. Introduction

home88 ("we", "us", "our", "the Platform", "the Company") is committed to protecting the privacy and personal data of every individual who accesses our website at https://home88.cam or uses any associated service, mobile-optimised interface, or communication channel (collectively, the "Service"). This Privacy Policy explains what personal data home88 collects, why we collect it, how we use and safeguard it, with whom we may share it, and what rights you hold as a data subject.

This Policy applies to all users of the Service, including registered account holders and visitors who browse the website without registering. It forms part of our broader legal framework alongside the Terms & Conditions and the Responsible Gaming Policy. By using the Service you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should stop using the Service immediately.

home88 primarily serves Indonesian players. While Indonesia does not yet have a dedicated, comprehensive data protection statute equivalent to the European GDPR, we voluntarily apply principles consistent with internationally recognised data-protection standards—including data minimisation, purpose limitation, storage limitation, accuracy, integrity and confidentiality—to ensure the highest level of care for our users' personal information.

2. Definitions

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" — home88, which determines the purposes and means of processing Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of home88 under a contractual obligation.
• "User" / "You" — any individual who registers an Account with home88 or accesses the Service.
• "Account" — the personal gaming account created upon successful registration, identified by a unique username and password.
• "KYC" — Know Your Customer: the identity-verification process home88 conducts to comply with anti-money laundering (AML) and responsible-gaming obligations.
• "Cookies" — small text files placed on your device by a web server to store session information, preferences, and analytics data.

3. Personal Data We Collect

3.1 Identity and Contact Data

When you register an Account or complete KYC verification, home88 collects: full legal name, date of birth, gender, nationality, Indonesian residential address, city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali, Semarang), email address, and mobile phone number. For KYC purposes we also collect copies of government-issued identification documents such as your Indonesian KTP (Kartu Tanda Penduduk), passport, or driver's licence.

3.2 Financial Data

To facilitate deposits and withdrawals in Indonesian Rupiah (IDR), we collect payment-method information including bank account names and account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction reference numbers, deposit and withdrawal amounts, and transaction timestamps. We do not store full bank account credentials or internet-banking passwords.

3.3 Gaming Activity Data

home88 records all gaming activity conducted through your Account, including: bets placed on sporting events (BRI Liga 1, EPL, La Liga, Champions League, and others), live casino sessions and wager histories, slot game sessions including game names, stake sizes, wins, losses, and session durations, bonus activations and wagering-requirement progress, and cash-out or live-bet activity.

3.4 Technical and Device Data

When you access the Service, we automatically collect: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited and time spent, session duration, and geolocation data (country and city level, derived from IP address).

3.5 Communications Data

When you contact our customer support team via live chat or email, we retain records of the conversation including the content of messages, the date and time, and the support agent involved. We may also record calls if you contact us by telephone, subject to prior notice.

3.6 Responsible Gaming Data

If you use our responsible gaming tools—such as deposit limits, loss limits, session time limits, cooling-off periods, or self-exclusion requests—we record these preferences and any changes made to them. This data is retained to ensure your chosen restrictions are enforced consistently and to meet our duty-of-care obligations.

4. How We Collect Personal Data

home88 collects Personal Data through the following means:

• Directly from you — during registration, KYC submission, deposit/withdrawal requests, promotional opt-ins, or when you contact customer support.
• Automatically via technology — through cookies, web beacons, pixel tags, server logs, and similar tracking technologies when you browse or interact with the Service.
• From third-party partners — payment processors and banking partners (e.g., BCA, BRI, BNI, Mandiri) confirm transaction status; identity-verification service providers confirm document authenticity; fraud-prevention vendors share risk signals.
• From publicly available sources — we may verify information against public records where permitted by applicable law and where necessary for AML compliance.

5. Purpose and Legal Basis for Processing

home88 processes your Personal Data only for specific, legitimate purposes. The table below summarises the primary purposes and the corresponding legal basis:

• Account creation and management — necessary to perform the contract between you and home88.
• Identity verification (KYC) and AML compliance — necessary to comply with legal obligations under international anti-money laundering standards.
• Processing deposits and withdrawals in IDR — necessary to perform the contract and to fulfil our payment obligations.
• Customer support communications — necessary to perform the contract and based on our legitimate interest in resolving disputes efficiently.
• Fraud detection and security monitoring — based on our legitimate interest in protecting the integrity of the platform and safeguarding user funds.
• Responsible gaming monitoring and intervention — necessary to comply with our duty-of-care obligations and licensing conditions.
• Marketing and promotional communications — based on your explicit consent, which you may withdraw at any time.
• Platform analytics and performance improvement — based on our legitimate interest in maintaining a high-quality, secure, and stable service.
• Legal compliance and regulatory reporting — necessary to comply with applicable law.

6. Data Sharing and Third-Party Disclosure

home88 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes under any circumstances. We may share Personal Data with the following categories of third parties, strictly to deliver the Service:

• Payment processors and banking partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay and other approved payment providers receive the minimum data necessary to process your deposits and withdrawals.
• KYC and identity verification providers — third-party verification services receive copies of your identification documents solely to confirm authenticity as part of mandatory compliance checks.
• Game software providers — Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other licensed providers may receive a pseudonymous player identifier (not your real name) to enable game-session tracking and jackpot calculations.
• Fraud prevention and security vendors — specialist firms may receive IP addresses, device fingerprints, and behavioural signals to identify and block fraudulent activity.
• Responsible gaming organisations — if you request self-exclusion or are referred to external support services, relevant data may be shared with the designated responsible gaming body.
• Legal and regulatory authorities — we will disclose Personal Data to law enforcement agencies, regulators, or courts if required by applicable law, valid legal process, or to protect the rights and safety of home88 or its users.
• Business successors — in the event of a merger, acquisition, or asset sale, user data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All Data Processors contracted by home88 are required to handle Personal Data in accordance with instructions from home88 and to implement appropriate technical and organisational security measures.

7. Cookies and Tracking Technologies

home88 uses cookies and similar technologies to operate the Service effectively and to enhance your experience. The main categories of cookies we use are:

• Strictly necessary cookies — required for core Service functionality such as maintaining your login session, processing bets, and securing transactions. These cannot be disabled.
• Performance and analytics cookies — collect anonymised or aggregated data about how users navigate the platform, which pages they visit most, and where they encounter errors, enabling us to improve the Service.
• Functionality cookies — remember your preferences such as preferred language (English), odds format (decimal / fractional / American), and display settings so you do not need to reset them on each visit.
• Targeting and session-tracking cookies — used to understand which promotions or game categories you engage with, enabling us to present contextually relevant offers within the platform. We do not use these for cross-site advertising networks.

You can control cookie preferences through your browser settings. Disabling non-essential cookies may affect certain features of the Service, such as automatic login or personalised game recommendations. For detailed instructions on managing cookies in your specific browser, please refer to your browser's official help documentation.

8. Data Retention

home88 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce agreements. Our standard retention schedule is as follows:

• Account and identity data — retained for the lifetime of your Account plus a minimum of 5 years after Account closure, in line with international AML record-keeping standards.
• Transaction and financial data — retained for a minimum of 5 years from the date of each transaction to satisfy financial reporting and AML compliance obligations.
• Gaming activity logs — retained for a minimum of 3 years to support dispute resolution, bonus abuse investigations, and responsible gaming assessments.
• Customer support communications — retained for 2 years from the date of the last interaction, unless the subject matter requires longer retention for legal or compliance purposes.
• Self-exclusion and responsible gaming records — retained for the full duration of any self-exclusion period plus 5 years thereafter to prevent inadvertent re-registration.
• Marketing consent records — retained for the duration of your consent plus 3 years after withdrawal of consent, as evidence of lawful marketing activity.

When Personal Data is no longer required, home88 will securely delete or anonymise it so that it can no longer be linked to any individual. Anonymised, aggregated data may be retained indefinitely for statistical and business-analysis purposes.

9. Security Measures

home88 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• SSL/TLS encryption — all data transmitted between your device and home88 servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Data-at-rest encryption — sensitive Personal Data and financial records stored on our servers are encrypted using AES-256 encryption.
• Access controls — access to Personal Data is restricted on a strict need-to-know basis. All staff with access to user data undergo background screening and are bound by confidentiality agreements.
• Two-factor authentication (2FA) — available on user Accounts and mandatory for all internal administrative access to data systems.
• Firewalls and intrusion detection — our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection and prevention systems.
• Regular security audits — home88 engages independent security specialists to conduct penetration testing and vulnerability assessments at least annually.
• Incident response plan — in the event of a confirmed data breach affecting your rights and freedoms, home88 will notify affected users and relevant authorities within 72 hours of becoming aware of the incident, in accordance with international best practice.

10. Your Rights as a Data Subject

Regardless of the jurisdiction in which you reside, home88 recognises the following data-subject rights and will honour valid requests made in good faith:

• Right of access — you may request a copy of all Personal Data home88 holds about you, along with information about how it is processed.
• Right to rectification — if any Personal Data we hold is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure ("right to be forgotten") — you may request deletion of your Personal Data where there is no legitimate legal or regulatory ground for continued retention. Note that AML and financial record-keeping obligations will take precedence where applicable.
• Right to restriction of processing — you may request that we temporarily suspend processing of your data while accuracy is disputed or while a legitimate-interest objection is assessed.
• Right to data portability — you may request that we provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object — you may object to processing based on legitimate interests, including direct marketing. We will cease marketing communications immediately upon receiving a valid objection.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our Data Protection contact at [email protected]. We will respond to all valid requests within 30 days. We may ask you to verify your identity before fulfilling a request to prevent unauthorised disclosure.

11. Children's Privacy

The Service is strictly for adults aged 21 years and above. home88 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a minor has registered an Account or submitted Personal Data, we will immediately suspend the Account, delete all associated data, and return any deposited funds through the original payment method. If you believe a minor has accessed the Service, please notify us immediately at [email protected].

We encourage parents and guardians to use parental control software to restrict access to online gambling platforms on devices shared with minors. home88 uses age-verification procedures during registration, but we cannot guarantee that all underage access attempts will be intercepted at the point of registration without the cooperation of responsible adults in the household.

12. Third-Party Links and Embedded Content

The home88 website does not contain links to external third-party websites other than those necessary to deliver payment services. Where embedded content or scripts from third-party game providers (Pragmatic Play, Evolution Gaming, Microgaming, etc.) are loaded within our platform, those providers operate under their own privacy policies and data-processing agreements. home88 vets all game providers for data-protection compliance as part of the onboarding process. We are not responsible for the privacy practices of third-party providers beyond the contractual obligations we place on them as Data Processors.

13. International Data Transfers

home88's primary user base is in Indonesia, but our infrastructure and some Data Processors may operate servers in other countries, including within Asia-Pacific, Europe, and North America. When Personal Data is transferred outside Indonesia to a country that does not provide an equivalent level of data protection, home88 implements appropriate safeguards such as standard contractual clauses, binding corporate rules, or equivalent transfer mechanisms to ensure your data receives a consistent level of protection.

By using the Service, you acknowledge that your Personal Data may be transferred to, stored, and processed in countries outside Indonesia. We take all reasonable steps to ensure that any international transfer is handled securely and in accordance with the principles described in this Privacy Policy.

14. Changes to This Privacy Policy

home88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data-processing practices, new legal obligations, or platform developments. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notification. Your continued use of the Service after any changes have been posted constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or home88's data-processing practices, please reach out to our support team using the contact details below:

• Email: [email protected]
• Live Chat: Available 24/7 through the website interface
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 calendar days.