bonus288 Platform Privacy Notice

This page describes what we collect when you use bonus288 and how we keep that data protected. We collect information necessary to operate our platform—your email, identity documents for account verification, payment details, and transaction history. We process this data to comply with regulatory requirements, prevent fraud, settle sportsbook and casino outcomes, and provide customer support across all our services: Liga 1 betting, Piala AFF markets, live-dealer tables, and payment processing through DANA, e-wallet, mobile banking, and bank channels.

We do not sell your personal data to third parties. We share information only with payment processors, identity-verification providers, and regulatory authorities when required by law. Our servers operate with encryption; your passwords are hashed; and access to your account is restricted by login credentials and session management. This notice explains your rights, our obligations, and how to contact us if you have privacy concerns.

bonus288 operates under jurisdiction-restricted access rules. If you use our platform, you confirm that access and use comply with your own jurisdiction's laws. We may process your data across borders; our servers sit outside some users' home jurisdictions. By using bonus288, you consent to this international data handling.

What Data We Collect on bonus288

We collect data in several categories. First, account creation data: your email address, username, password (hashed), and chosen display name. Second, identity verification documents: a government-issued ID (national ID card, passport, or driving licence), proof of current address (utility bill or recent bank statement), and a self-photo for facial verification. Third, payment data: your payment method details (e.g., bank account number for BCA Transfer, wallet account for e-wallet or mobile banking), transaction amounts, and settlement confirmations.

Fourth, behavioral data: every bet you place on Liga 1 or Piala AFF markets, every spin on our Auto Roulette or slot games, every live-dealer table you join, and the outcomes of those activities. We log timestamps, amounts wagered, results, and payouts. Fifth, communication data: if you contact our support team via live chat or email, we record those interactions and your questions. Sixth, device and session data: your IP address, browser type, device identifiers, and login timestamps for security and fraud detection.

We do not collect or request payment card numbers directly. All card transactions flow through external PCI-compliant payment processors; we only receive confirmation that a transaction succeeded or failed. We do not collect your mother's maiden name, security questions, or other information unrelated to account operation, identity verification, and payment settlement.

How We Use Your Data

We use your email to send account notifications, password reset links, and compliance-related messages. Your identity documents are used solely to verify you are a real person eligible to hold a bonus288 account and to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations. We retain these documents securely for the duration of your account and for a period afterward as required by law.

Payment data is used to process deposits and withdrawals, reconcile transactions, and detect fraud. We analyze payment patterns to identify suspicious activity—for example, sudden large deposits followed by immediate withdrawals to unrelated accounts, which may signal money laundering. If we detect anomalies, we may freeze your account pending investigation.

Device and session data is used for security: we track login locations and times to detect unauthorized access, and we block suspicious login attempts automatically. We share your email address and account status with our customer support team so they can assist you when you contact bonus288 via live chat or email.

Third Parties and Data Sharing

We share your data with external service providers in specific circumstances. Payment processors (for local payment Transfer, online payment, e-wallet, mobile banking, local payment, and online payment) receive your payment information to process transactions. Identity-verification providers receive your identity documents to confirm you are who you claim. These providers are contractually bound to keep your data confidential and to use it only for the stated purpose.

We share data with regulatory authorities—including Indonesian tax authorities, financial-crime investigators, and gaming regulators—if required by law or legal process. We do not disclose this proactively; we comply only when presented with a valid court order or regulatory demand. We may also share aggregated, de-identified data (e.g., "users in Jakarta spent X amount on Liga 1 betting last month") for analytics, but this data cannot identify you personally.

We do not sell your data to marketing companies, data brokers, or third-party advertisers. We do not permit other bonus288 users to see your personal information. Your account is private; only you and bonus288 staff with a legitimate operational need can access your details.

Data Retention and Deletion

We retain your account data while your bonus288 account is active. Once you close your account, we retain identity documents and transaction history for a period required by law—typically 5-7 years for financial records—to comply with AML and tax regulations. After that period, we delete or anonymize your personal data unless we have a legal obligation to retain it longer.

You have the right to request access to your personal data held by bonus288. Contact our support team with your request, and we will provide a copy of the data we hold on you within a reasonable timeframe. You also have the right to request correction of inaccurate data or deletion of data we no longer have a lawful reason to retain, subject to legal hold periods.

Security and Encryption

We encrypt your data in transit using HTTPS (Transport Layer Security). Your password is hashed using industry-standard algorithms; we do not store passwords in plain text. Your account session is protected by timeout—after a period of inactivity, you are logged out automatically so unauthorized users cannot access your account if you leave your device unattended.

We do not guarantee absolute security. No system is immune to breach. If we become aware of unauthorized access to your account or compromise of your data, we will notify you promptly and provide guidance on account recovery. We recommend using a strong, unique password on bonus288 and not sharing your login credentials with others.

Cookies and Tracking

bonus288 uses cookies to manage your session—keeping you logged in and remembering your preferences—and to prevent fraud. We use first-party cookies only; we do not permit third-party tracking cookies or advertising pixels on our platform. We do not track your activity across other websites.

You can disable cookies in your browser settings, but doing so may impair your ability to use bonus288. We do not use analytics platforms like Google Analytics on bonus288; we do not track your movements for marketing purposes.

Session cookies

Temporary cookies that keep you logged in during your visit and are deleted when you close your browser.

Security cookies

Cookies that detect fraud and prevent unauthorized access; retained longer for security purposes.

Preference cookies

Optional cookies that store your language choice and other UI preferences so you don't have to reset them each visit.

International Data Transfer

Our servers and data processors may be located in jurisdictions other than your own. By using bonus288, you consent to transfer of your personal data to countries outside your home jurisdiction, which may have different data protection standards. We ensure all transfers are lawful and that adequate safeguards (such as contractual data-protection clauses) are in place to protect your data in transit and at rest.

Your Rights and Contact

You have the right to access, correct, and request deletion of your personal data held by bonus288, subject to legal retention requirements. You have the right to object to processing of your data where we do not have a mandatory legal basis. You have the right to data portability—to request a copy of your data in a portable, machine-readable format.

To exercise any of these rights, contact our support team via live chat or email. Provide your account email and a clear description of your request. We respond to requests within a reasonable timeframe, typically within 14 business days. If you believe we are processing your data unlawfully, you may lodge a complaint with your national data-protection authority.

Our support team is available in English and can assist you with privacy inquiries, account access requests, or data deletion. If we cannot resolve your concern, we provide information on escalation to a higher authority or data-protection regulator in your jurisdiction.

Policy Updates

We may update this privacy notice from time to time to reflect changes in our data practices or applicable law. We will notify you of material changes by email or by posting a notice on bonus288. Your continued use of the platform after such notification constitutes your acceptance of the updated privacy notice.

Related guides