This Privacy Policy describes how tos88 collects, processes, stores, and protects the personal data of players who use our platform. We are committed to handling your information responsibly and transparently, in accordance with internationally recognized data protection standards.
Effective Date: 1 January 2026Six core principles that govern how tos88 handles your personal data
All personal data held by tos88 is stored on secure, encrypted servers with restricted access controls. Data at rest is encrypted using industry-standard algorithms. Physical access to data infrastructure is restricted to authorized personnel only.
tos88 does not sell, rent, or trade your personal data to third parties for advertising or marketing purposes. Data sharing with third parties is limited strictly to the service providers and regulatory bodies outlined in this Privacy Policy, and only to the extent necessary.
You have the right to access, correct, and request deletion of your personal data held by tos88, subject to our legal obligations and the terms of this policy. Data rights requests are processed within 30 calendar days of receipt.
Every connection between your browser or device and the tos88 platform is protected by 256-bit SSL/TLS encryption, the same standard used by major global banks. This prevents interception of your login credentials, payment details, and personal information in transit.
tos88 collects only the personal data that is strictly necessary to provide the platform's services, comply with licensing and anti-money-laundering obligations, and fulfill our contractual commitments to you. We do not collect data beyond what each specific purpose requires.
Personal data is not held indefinitely. tos88 maintains documented data retention schedules. Transactional data required for regulatory compliance is retained for the legally mandated period. Data no longer required is securely deleted or anonymized in accordance with our retention schedule.
tos88 ("we", "us", "our") operates the online gaming and sports betting platform accessible at tos88.app (the "Platform"). This Privacy Policy applies to all personal data we collect from individuals who visit, register on, or interact with the Platform, including players who deposit funds, place wagers, claim bonuses, or contact our customer support team.
We are committed to protecting the privacy and personal data of our players. This policy sets out in clear terms exactly what data we collect, how we use it, who we share it with, how long we retain it, and what rights you have in relation to it.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you are a registered player, your continued use of the Platform constitutes your acceptance of this policy and any updates to it. If you have questions or concerns about how your data is handled, please contact us as described in Section 15.
The personal data tos88 collects falls into the following categories:
| Data Type | Details |
|---|---|
| Full legal name | As it appears on your government-issued identity document. |
| Date of birth | Used to verify that you meet the 21+ age eligibility requirement. |
| Email address | Used as your account identifier and for all account communications. |
| Mobile phone number | Used for account verification codes and security alerts. |
| Residential address | Collected during KYC verification as required by our licensing obligations. |
| Identity document | A copy of your KTP (Indonesian national identity card) or passport, submitted during the KYC process. |
| Data Type | Details |
|---|---|
| Bank account details | Account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or other supported banks) linked to your tos88 account for deposits and withdrawals. |
| E-wallet identifiers | Phone numbers or account IDs associated with OVO, DANA, GoPay, ShopeePay, or LinkAja accounts used for transactions. |
| Transaction history | A full record of all deposits, withdrawals, bonus credits, and wagers placed on your account, including timestamps and amounts in IDR. |
| Data Type | Details |
|---|---|
| IP address | Logged at login and during active sessions for security monitoring and geographic eligibility checks. |
| Device information | Browser type and version, operating system, device model, and screen resolution collected automatically when you access the Platform. |
| Session data | Login timestamps, session duration, pages visited, games played, and in-session betting activity. |
| Cookie data | First-party cookie identifiers used to maintain your session and remember preferences. See Section 9 for full details. |
When you contact tos88 customer support via live chat or email, we retain a record of that communication, including the content of your messages, the date and time of contact, and any resolution notes added by our support team. This data is used to resolve disputes, improve service quality, and maintain an accurate history of your account interactions.
tos88 collects personal data through the following channels:
tos88 processes your personal data only for clearly defined, legitimate purposes. The table below maps each processing activity to its purpose:
| Processing Activity | Purpose |
|---|---|
| Account creation and management | To establish and maintain your player account, enable login, and provide access to all Platform products. |
| Age and identity verification | To confirm that you meet the 21+ eligibility requirement and to satisfy our KYC obligations under applicable licensing regulations. |
| Payment processing | To facilitate deposits and withdrawals via your linked bank account or e-wallet, and to maintain an accurate transaction record in IDR. |
| Fraud and security monitoring | To detect and prevent unauthorized access, duplicate accounts, bonus abuse, money laundering, and other prohibited activity. |
| Customer support | To respond to your enquiries, resolve disputes, and maintain a record of your support history. |
| Responsible gaming | To monitor betting patterns that may indicate problematic gambling behavior, and to apply any deposit limits, cooling-off periods, or self-exclusion measures you have requested. |
| Legal and regulatory compliance | To meet our obligations under applicable international gaming licensing requirements, including record-keeping and reporting duties. |
| Platform improvement | To analyze usage patterns, identify technical issues, and improve the overall performance and user experience of the Platform. |
| Promotional communications | To notify you of bonuses, promotions, and new features, only where you have opted in to receive such communications and have not subsequently opted out. |
Every processing activity carried out by tos88 rests on one of the following recognized legal bases:
tos88 does not sell your personal data to any third party. We share personal data with third parties only in the following circumstances and only to the extent strictly necessary:
As an internationally operated platform, tos88 may transfer your personal data to servers or service providers located outside of Indonesia. Where such transfers occur, we take appropriate steps to ensure that your data receives a level of protection consistent with the standards described in this Privacy Policy.
Safeguards we employ for international transfers include contractual data processing agreements with receiving parties, the use of encrypted transmission channels for all data in transit, and a policy of transferring only the minimum data necessary for each specific purpose.
tos88 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention schedule is as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | For the lifetime of your account, plus 5 years following account closure. |
| KYC identity documents | For the lifetime of your account, plus 5 years following account closure, in line with standard AML record-keeping obligations. |
| Transaction and financial records | 5 years from the date of each transaction, or longer if required by applicable regulatory guidance. |
| Customer support communications | 3 years from the date of the last interaction, or until the relevant dispute or claim is resolved, whichever is later. |
| Technical and usage logs | Up to 12 months, after which logs are anonymized or deleted. |
| Marketing preferences and consent records | Until you withdraw consent, plus 1 year thereafter as a record of the consent history. |
At the end of each applicable retention period, personal data is either securely deleted or anonymized such that it can no longer be associated with any identifiable individual.
tos88 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session security, and understand how players use our services. We use the following categories of cookies:
tos88 does not use third-party advertising or behavioral tracking cookies. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the Platform.
You have the following rights in relation to the personal data tos88 holds about you. To exercise any of these rights, please contact us as described in Section 15. We will respond to all verified requests within 30 calendar days.
You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Some corrections may require re-submission of identity documentation.
You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Data required for AML compliance cannot be deleted until the legally mandated retention period has elapsed.
You may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
You may request that we provide your personal data in a machine-readable format so that you can transfer it to another service provider, where technically feasible.
You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring, where you believe your individual rights and freedoms override tos88's legitimate interests in that specific processing activity.
Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
tos88 implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:
The tos88 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by or on behalf of a person under 21, we will immediately close that account, delete the associated personal data to the extent not required for legal or compliance purposes, and void any pending balances or withdrawals.
If you are a parent or guardian and believe that a minor in your care has accessed or registered on the tos88 Platform, please contact us immediately at [email protected] so that we can take the appropriate action.
The tos88 Platform does not contain links to external third-party websites for browsing or marketing purposes. If any reference to a third-party service is made in the context of a payment method (such as BCA internet banking or GoPay) or a game provider (such as Pragmatic Play or Evolution Gaming), those services are operated independently and are governed by their own privacy policies.
tos88 has no control over and accepts no responsibility for the data practices of any third-party payment providers or game studios. We encourage you to review the privacy policies of those services directly.
tos88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. When a material change is made, we will notify registered players via their account email address and display a prominent notice on the Platform for a minimum of seven (7) calendar days before the revised policy takes effect.
The effective date at the top of this page will be updated with each new version. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must cease using the Platform and may request voluntary account closure as described in the Terms & Conditions.
For any questions about this Privacy Policy, or to exercise your data rights as described in Section 10, please contact the tos88 data team through the following channel:
All data rights requests will be acknowledged within 5 business days and resolved within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it.
Your privacy and security are built into every layer of our platform. Sign in to your account and explore our full range of games — live casino, sportsbook, slots, video poker, and more — all in IDR. 21+ only. Gamble responsibly.