afc88 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "afc88" / "we" / "us" / "our" — The operator of the online betting and casino platform accessible at https://afc88.lat, including its affiliates, licensors, payment partners, and service providers.
• "You" / "Member" / "Player" — Any individual who visits, registers on, or uses the afc88 platform in any capacity, whether as a registered member or an anonymous visitor.
• "Personal Data" — Any information that identifies or can be used to identify a living individual, including but not limited to: name, date of birth, national identity number, residential address, email address, phone number, IP address, device identifier, and payment account details.
• "Processing" — Any operation performed on personal data, including collection, storage, retrieval, use, transmission, structuring, alteration, restriction, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this policy, afc88 is the data controller in respect of Member data.
• "KYC" — Know Your Customer; the identity and document-verification process applied to afc88 accounts.
• "Sensitive Data" — A subset of personal data warranting heightened protection, including government-issued identity document numbers, financial account details, and information about responsible-gaming interventions.
• "Cookie" — A small data file stored on your device by your browser when you visit a website, used to retain session information, user preferences, and analytics data.

This Privacy Policy applies to all personal data collected and processed by afc88 in connection with your use of the platform at https://afc88.lat, including the sportsbook, live casino, slot games, capsa susun (a Chinese poker variant widely enjoyed across Indonesia), in-play betting markets, promotional activities, and all related customer support interactions.

afc88 acts as the data controller in respect of all personal data collected directly from Members. Where afc88 engages third-party service providers (for example, payment processors or game-content providers), those parties act as data processors under instructions from afc88 and are bound by data-processing agreements that prohibit the use of Member data for their own independent purposes.

This policy is directed at players based in Indonesia and reflects afc88's commitment to responsible data stewardship consistent with internationally recognised privacy standards. By registering an account on afc88, you acknowledge that you have read this policy and consent to the processing of your personal data as described herein.

afc88 collects the following categories of personal data from Members and platform visitors:

afc88 does not intentionally collect special categories of particularly sensitive data (such as health data, racial origin, or political opinions) unless expressly required by a responsible-gaming intervention process or a legal obligation.

afc88 collects personal data through the following mechanisms:

• Direct Submission: Data you provide when registering an account, completing the KYC process, making a deposit or withdrawal, contacting customer support, or participating in a survey or promotion.
• Automated Collection: Technical and behavioural data collected automatically via server logs, session analytics, and first-party cookies when you visit or use the afc88 platform.
• Payment Processors: Confirmation data returned by payment partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) to verify the status and originator of financial transactions.
• Identity Verification Partners: Identity verification data returned by KYC service providers used to confirm the authenticity of documents submitted during account verification.
• Fraud Prevention Services: Risk signals and device fingerprint data shared by fraud-detection partners to identify and prevent account abuse, multi-accounting, and money-laundering activity.
• Publicly Available Sources: In limited circumstances, afc88 may cross-reference publicly available information (such as sanctions lists or adverse media) for the purpose of enhanced due diligence.

afc88 processes your personal data only where a lawful basis exists. The following table summarises the primary purposes for which your data is used and the legal basis applied in each case:

Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. See Section 10 for details of how to exercise your rights.

afc88 does not sell your personal data. We share personal data with third parties only in the following circumstances, and only to the minimum extent necessary for the relevant purpose:

• Payment Processors & Banking Partners: Your name, bank account details, and transaction amounts are shared with the relevant payment provider (e.g., BCA, BRI, GoPay) solely to facilitate the processing of deposits and withdrawals.
• KYC & Identity Verification Providers: Document images and identity data are shared with our KYC partner(s) for verification purposes. These partners are contractually prohibited from using your data for any other purpose.
• Fraud Prevention & Security Services: Technical identifiers (IP address, device fingerprint, session metadata) may be shared with anti-fraud platforms to detect and prevent policy violations across the platform.
• Game Content Providers: Where you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Pocket Games Soft, limited session data (game rounds, bet amounts, RNG seeds) is processed by that studio's platform to generate and settle game outcomes. These providers do not receive your identity or financial data.
• Legal & Regulatory Disclosure: afc88 will disclose personal data to law enforcement agencies, courts, regulators, or government bodies where required to do so by applicable law, a valid court order, or where disclosure is necessary to protect the safety of individuals or the integrity of the platform.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of afc88's assets, Member data may be transferred to the acquiring entity subject to equivalent privacy protections. Members will be notified of any such transfer.

afc88 uses first-party cookies and similar tracking technologies on the platform. We do not use third-party advertising cookies or cross-site tracking networks.

The categories of cookies used on afc88 are as follows:

• Strictly Necessary Cookies: Required for core platform functionality, including session management, login state, and security tokens. These cannot be disabled without breaking the platform.
• Performance & Analytics Cookies: Used to measure platform usage, identify popular game categories, monitor page-load performance, and detect errors. Data collected is aggregated and does not personally identify individual users.
• Functional Cookies: Used to remember your preferences such as language settings, preferred deposit method, and responsible-gaming tool configurations.
• Marketing Cookies (Optional): Used to track whether you arrived at afc88 via an affiliate link, enabling correct attribution of promotional credits. These are only set where you have provided consent.

You may control cookie preferences through your browser settings. Blocking strictly necessary cookies will impair or prevent platform access. Blocking performance or marketing cookies will not affect your ability to play or transact on afc88.

afc88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account Data & Identity Records: Retained for the lifetime of the account plus a minimum of 5 years after permanent account closure, to satisfy anti-money-laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in line with financial regulatory best practice.
• KYC Documents: Retained for the lifetime of the account plus 5 years after closure. Originals are deleted once verification is completed; only the verification outcome and document metadata are retained for the regulatory period.
• Customer Support Records: Retained for 2 years from the date of the final interaction on a support ticket or chat session.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier. Preference records are retained for 1 year after consent withdrawal to evidence compliance.
• Platform Analytics Data: Aggregated and anonymised after 13 months. Individually identifiable behavioural data is retained for no more than 13 months from the date of collection.

At the end of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with any individual.

afc88 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Encryption in Transit: All data exchanged between your browser or mobile device and the afc88 platform is encrypted using TLS 1.2 or higher, enforced via 256-bit SSL certificates.
• Encryption at Rest: Sensitive data stored in afc88 databases — including identity documents, financial account identifiers, and KYC records — is encrypted at rest using AES-256.
• Password Hashing: Account passwords are never stored in plain text. afc88 uses a strong one-way cryptographic hashing algorithm with a unique per-account salt.
• Access Controls: Access to Member data within afc88's internal systems is governed by role-based access controls. Staff access to personal data is restricted to those with a documented operational need and is logged for audit purposes.
• Intrusion Detection & Monitoring: The afc88 platform is monitored continuously for anomalous activity, unauthorized access attempts, and potential data breaches. Automated alerts are configured to escalate security incidents to the responsible team in real time.
• Penetration Testing: afc88 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a personal data breach that poses a risk to Members, afc88 will take immediate containment steps and notify affected individuals without undue delay.

As a Member of afc88, you have the following rights in relation to your personal data. To exercise any of these rights, contact the afc88 support team via live chat or by email at [email protected]:

afc88 will acknowledge data rights requests within 72 hours and provide a substantive response within 30 days of receipt. For complex requests, this period may be extended by a further 30 days with prior notice. Requests are free of charge unless they are manifestly unfounded, excessive, or repetitive.

The afc88 platform is strictly restricted to individuals aged 21 years and over. afc88 does not knowingly collect personal data from individuals under the age of 21. Age verification is applied at the point of registration and is reinforced by the KYC document-checking process.

If afc88 becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately, all associated data will be deleted from our systems, and any deposits will be returned at afc88's discretion in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered on afc88, please contact support immediately at [email protected] so that the account can be closed and the data removed without delay.

afc88 primarily serves players based in Indonesia. However, some of the third-party service providers we engage — including game-content studios, fraud-prevention platforms, and cloud infrastructure providers — may process data in jurisdictions outside Indonesia.

Where personal data is transferred internationally, afc88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this policy. These safeguards may include contractual clauses, data-processing agreements, or transfers to jurisdictions with recognised adequacy determinations by relevant regulatory bodies.

If you have questions about the specific safeguards applied to an international transfer of your data, contact support at [email protected] and reference your data rights request.

afc88 may update this Privacy Policy periodically to reflect changes in our data-processing practices, legal obligations, or platform functionality. When material changes are made, afc88 will notify registered Members via their registered email address or through a prominent notice on the afc88 platform, at least 7 days before the updated policy takes effect.

The "Last updated" date at the top of this document indicates when the most recent revision was published. Continued use of the afc88 platform after an updated policy takes effect constitutes your acknowledgement of and consent to the revised terms. If you object to any amendment, you should stop using the platform and request account closure before the effective date.

For all privacy-related enquiries, data access requests, correction requests, deletion requests, or complaints regarding afc88's processing of your personal data, please contact the afc88 Data Privacy team through the following channels:

• Email: [email protected] — subject line: "Privacy Request — [Your Username]"
• Live Chat: Available 24 hours a day, 7 days a week via the chat interface on the afc88 platform
• Response Time: Acknowledgement within 72 hours; full response within 30 calendar days
• Support Hours: 24/7, including Indonesian public holidays (WIB, UTC+7)

When submitting a data rights request, please provide your registered username and, where applicable, the specific data or processing activity your request relates to. This helps afc88 locate your records promptly and respond accurately within the applicable timeframe.