Privacy Policy

1. Introduction

ran88 ("we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "your") who access or use our online betting and casino platform at https://ran88.cam (the "Platform"). This Privacy Policy explains in detail what personal information we collect, how we use it, who we share it with, how we protect it, and what rights you have regarding your data.

By creating an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you must not use the Platform.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together form the complete legal agreement between you and ran88.

2. Data Controller

For the purposes of applicable data protection laws, the data controller responsible for your personal information is the legal entity operating ran88 under its international gaming licence. If you have questions about how your data is processed or wish to exercise your privacy rights, please contact us using the details provided in Section 14 of this Privacy Policy.

3. Information We Collect

ran88 collects personal information in several ways. The types of information we collect include:

3.1 Information You Provide Directly

When you register for an account, deposit funds, place bets, contact customer support, or otherwise interact with the Platform, you provide us with personal information, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (e.g., KTP number).
• Contact Information: Email address, mobile phone number, residential address, city, province, postal code.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account details (OVO, GoPay, DANA, ShopeePay, LinkAja), transaction history, deposit and withdrawal records.
• Verification Documents: Copies of government-issued photo identification (KTP, passport, driver's licence), proof of address (utility bill, bank statement), proof of payment method ownership.
• Communications: Content of emails, live chat messages, WhatsApp messages, and any other correspondence with our customer support team.

3.2 Information We Collect Automatically

When you access the Platform, we automatically collect certain technical and behavioural information, including:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, advertising ID).
• Connection Information: IP address, internet service provider (ISP), geolocation data (country, region, city derived from IP address), time zone.
• Usage Information: Pages visited, features used, games played, bets placed, session duration, click patterns, referring URLs, search queries within the Platform.
• Performance Data: Error logs, crash reports, load times, bandwidth usage.

3.3 Information from Third Parties

In certain circumstances, we may receive information about you from third parties, including:

• Payment Processors: Transaction status, payment method verification, fraud risk scoring.
• Identity Verification Services: Age verification, identity authentication, sanctions screening, politically exposed persons (PEP) checks.
• Game Providers: Gameplay statistics, session data, game outcomes (for games hosted by third-party studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt).
• Affiliate Partners: Referral source, affiliate ID (if you were referred to ran88 by a marketing partner).

4. How We Use Your Information

ran88 uses your personal information for the following purposes:

4.1 Account Management and Service Delivery

• To create, maintain, and manage your user account.
• To verify your identity, age, and eligibility to use the Platform (KYC compliance).
• To process deposits, withdrawals, and other financial transactions.
• To enable you to place bets, play games, and use all features of the Platform.
• To credit winnings, bonuses, and promotional offers to your account.
• To provide customer support and respond to your enquiries.

4.2 Legal and Regulatory Compliance

• To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• To comply with know-your-customer (KYC) regulations imposed by our licensing jurisdiction.
• To prevent, detect, and investigate fraud, collusion, money laundering, and other prohibited activities.
• To enforce our Terms and Conditions and resolve disputes.
• To respond to legal requests, court orders, or regulatory enquiries from government authorities.

4.3 Platform Security and Integrity

• To monitor the Platform for security threats, abuse, and technical issues.
• To detect and prevent cheating, bonus abuse, multi-accounting, and other violations of our Terms.
• To conduct risk assessments and fraud scoring on transactions and user behaviour.
• To maintain the integrity of our games and betting markets (e.g., identifying betting syndicates, arbitrage abuse).

4.4 Marketing and Communications

• To send promotional emails, SMS messages, or push notifications about new games, bonuses, tournaments, and special offers (only if you have opted in to receive marketing communications).
• To personalise your experience on the Platform by recommending games or betting markets based on your preferences and activity.
• To conduct customer satisfaction surveys and gather feedback to improve our services.

4.5 Responsible Gaming

• To monitor your gambling behaviour for signs of problem gambling (e.g., rapid increase in deposits, session duration, loss patterns).
• To enforce deposit limits, loss limits, session time limits, and self-exclusion requests.
• To proactively contact you if we detect concerning gambling behaviour and offer support resources.

4.6 Analytics and Platform Improvement

• To analyse user behaviour, preferences, and trends to improve the Platform's performance, design, and features.
• To conduct A/B testing and optimise user experience.
• To generate aggregated, anonymised statistics for business intelligence and strategic planning.

5. Legal Basis for Processing

ran88 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide the betting and gaming services you have signed up for).
• Legal Obligation: Processing is necessary to comply with legal obligations, such as AML/KYC regulations, age verification, and regulatory reporting.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, customer support, and analytics, provided those interests are not overridden by your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing certain data (e.g., marketing communications, optional cookies).

6. Sharing Your Information

ran88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of third parties:

6.1 Service Providers

We share your information with trusted third-party service providers who perform functions on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways that facilitate deposits and withdrawals (e.g., BCA, BRI, BNI, Mandiri, OVO, GoPay, DANA).
• Identity Verification Services: Third-party KYC providers that verify your identity, age, and address.
• Game Providers: Studios that supply casino games and live dealer tables (e.g., Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe).
• Cloud Hosting Providers: Infrastructure providers that host our servers, databases, and backups.
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms.
• Analytics Providers: Tools that help us analyse Platform usage and performance.

All service providers are contractually bound to protect your data and use it only for the specific purposes we authorise. They are not permitted to use your data for their own purposes.

6.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, regulators, or courts if required by law, court order, or regulatory request, or if we believe in good faith that disclosure is necessary to:

• Comply with legal obligations or respond to lawful requests.
• Protect the rights, property, or safety of ran88, our users, or the public.
• Detect, prevent, or investigate fraud, money laundering, or other illegal activity.
• Enforce our Terms and Conditions or other agreements.

6.3 Business Transfers

In the event that ran88 is involved in a merger, acquisition, sale of assets, or other corporate restructuring, your personal information may be transferred to the acquiring entity or successor as part of the transaction. You will be notified via email or prominent notice on the Platform if such a transfer occurs.

7. Data Retention

ran88 retains your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Data: Retained for the duration of your account's active status, plus a minimum of five (5) years after account closure to comply with AML/KYC record-keeping obligations.
• Transaction Records: Retained for a minimum of seven (7) years to comply with financial regulatory requirements.
• Customer Support Communications: Retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.
• Technical Logs: Typically retained for 90 days, unless needed for fraud investigation or legal proceedings.

After the applicable retention period expires, we will securely delete or anonymise your personal information. Anonymised data (which cannot be linked back to you) may be retained indefinitely for statistical and analytical purposes.

8. Data Security

ran88 takes the security of your personal information seriously and employs industry-standard technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols.
• Secure Password Storage: Passwords are hashed and salted using strong cryptographic algorithms (bcrypt or equivalent).
• Two-Factor Authentication (2FA): Optional 2FA is available to add an extra layer of security to your account login.
• Firewall Protection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems.
• Access Controls: Personal data is accessible only to authorised employees and contractors who require it to perform their duties, and all access is logged and monitored.
• Regular Security Audits: We conduct periodic security audits and vulnerability assessments to identify and address potential risks.
• Data Backup: Regular encrypted backups are stored in geographically separate locations to ensure business continuity and disaster recovery.

While we implement robust security measures, no system is completely immune to cyberattacks or data breaches. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authorities in accordance with applicable data protection laws.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.
• Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal information, subject to legal retention obligations (e.g., AML/KYC record-keeping).
• Right to Restriction of Processing: You have the right to request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another service provider.
• Right to Object: You have the right to object to processing of your data for direct marketing purposes or processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time (e.g., unsubscribe from marketing emails).
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory data protection authority in your jurisdiction if you believe we have violated your privacy rights.

To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to your request within thirty (30) calendar days. In some cases, we may need to verify your identity before processing your request to ensure we are disclosing information only to the authorised account holder.

10. Cookies and Tracking Technologies

ran88 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and deliver personalised content. A cookie is a small text file stored on your device that allows us to recognise you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly (e.g., session management, login authentication). These cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use the Platform (e.g., which pages you visit most often) to help us improve performance.
• Functional Cookies: Remember your preferences (e.g., language, currency, game favourites) to provide a more personalised experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure the effectiveness of marketing campaigns (only if you have consented).

10.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to block cookies or alert you when cookies are being sent. However, blocking essential cookies may prevent certain features of the Platform from functioning correctly. For more information on managing cookies, consult your browser's help documentation.

11. Protection of Minors

ran88 is strictly for adults aged 21 and over. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that a user is under 21, we will immediately suspend the account, prevent further access, and delete all associated personal data in accordance with applicable laws.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected] so we can take appropriate action.

12. International Data Transfers

ran88 operates internationally, and your personal information may be transferred to, stored in, and processed in countries other than Indonesia, including countries within the European Economic Area (EEA) or other jurisdictions where our servers, service providers, or business partners are located. These countries may have data protection laws that differ from those in Indonesia.

When we transfer your data internationally, we take appropriate safeguards to ensure it receives an adequate level of protection, such as:

• Using Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.
• Ensuring service providers are certified under recognised data protection frameworks.
• Implementing technical and organisational measures equivalent to those required under Indonesian or international data protection standards.

13. Changes to This Privacy Policy

ran88 reserves the right to amend, modify, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Changes will be effective immediately upon posting on the Platform, and the "Last Updated" date at the top of this document will be revised accordingly.

We will notify you of material changes via email or a prominent notice on the Platform. However, it is your responsibility to review this Privacy Policy periodically. Continued use of the Platform following any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact ran88's Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Customer Support Email: [email protected]
• Live Chat: Available 24/7 via the Platform's in-browser widget
• WhatsApp: +62 819-XXXX-XXXX (plain text — not a clickable link; available WIB business hours)

For data protection enquiries specifically, please use the dedicated privacy email address above to ensure your request is routed to the appropriate team. We aim to respond to all privacy-related enquiries within thirty (30) calendar days.