Legal Document

Your Privacy Matters to 888sl

This Privacy Policy explains exactly what personal data 888sl collects from Indonesian members, how we use and protect it, who we share it with, and what rights you have over your own information. We are committed to complete transparency.

Last updated: January 2026  ·  English (en-ID)

How 888sl Keeps Your Data Safe

Six core commitments that define our approach to data privacy for every 888sl member in Indonesia.

End-to-End Encryption

All data transmitted between your device and 888sl servers is protected by industry-standard TLS 1.3 SSL encryption. Your account credentials, payment details, and personal information are never transmitted in plain text over any channel.

No Third-Party Data Sales

888sl does not sell, rent, or trade your personal data to third-party marketers or advertisers. The only data sharing we conduct is with regulated service partners — payment processors, KYC verification providers, and fraud-prevention systems — strictly as needed to operate your account.

Full Member Data Control

You have the right to access, correct, export, and request deletion of your personal data at any time. Requests are processed within 30 days. You can also manage marketing preferences and cookie settings directly through your 888sl account dashboard.

Secure Data Storage

All member data is stored on encrypted servers with strict access controls. Only authorised 888sl personnel with a legitimate operational need may access your data. Our infrastructure undergoes regular independent security audits to maintain the highest standards of protection.

Minimal Data Collection

888sl applies a data minimisation principle — we collect only the information that is strictly necessary to operate your account, process payments, and comply with anti-money-laundering obligations. We do not collect data speculatively or for purposes beyond those stated in this policy.

Opt-Out Marketing Controls

Promotional communications — including bonus offers tied to Idul Fitri, Imlek, and Indonesian Independence Day — are sent only to members who have explicitly opted in. You may withdraw marketing consent at any time by updating your notification preferences or contacting our support team.

Important: This Privacy Policy applies to all members who register or use the 888sl platform, including all residents of Indonesia accessing the platform via desktop, mobile browser, or any other interface. By creating an account or continuing to use 888sl, you confirm that you have read and accept this Privacy Policy in full.
1

Definitions

  • "888sl" / "We" / "Us" / "Our" — the 888sl online casino and sportsbook platform operated at https://888sl.pro and all associated interfaces and services.
  • "Member" / "You" / "Your" — any individual who has registered a verified account on the 888sl platform, or who accesses any part of the platform in any capacity.
  • "Personal Data" — any information that identifies or can reasonably be used to identify you as a natural person, including your name, date of birth, national identity number, email address, phone number, IP address, device identifiers, and financial account details.
  • "Processing" — any operation performed on Personal Data, including collection, storage, use, transfer, disclosure, and deletion.
  • "KYC" (Know Your Customer) — the identity and address verification process that 888sl conducts in accordance with anti-money-laundering (AML) obligations, which may involve collecting copies of government-issued identity documents such as a KTP (Indonesian national identity card) or passport.
  • "Controller" — the entity that determines the purposes and means of processing Personal Data. 888sl acts as the data controller for all Personal Data collected from members.
  • "Processor" — a third party that processes Personal Data on behalf of 888sl under a contractual obligation, such as a payment gateway (e.g., DANA, OVO, GoPay) or a KYC verification service provider.
  • "Cookies" — small text files placed on your device by the 888sl platform to store session information, preferences, and analytics data.
2

Data We Collect

  • Registration Data: Full legal name, date of birth, residential address (including city — e.g., Jakarta, Surabaya, Bandung, Bali), email address, mobile phone number, and your chosen username and password.
  • Identity Verification (KYC) Data: Scanned or photographed copies of government-issued identity documents (KTP, passport, or driver's licence), proof-of-address documents, and, where required, selfie photographs for facial verification purposes.
  • Financial Data: Bank account details (including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP account numbers), e-wallet identifiers (DANA, OVO, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, and account balance history. All amounts are denominated in IDR (Indonesian Rupiah).
  • Transactional Data: Records of all wagers placed on the sportsbook (including BRI Liga 1, EPL, and other football markets) and all casino games played, including bet amounts, outcomes, bonus claims, and wagering history.
  • Technical Data: IP address, browser type and version, device type and operating system, screen resolution, session duration, pages visited, referring URL, and geolocation data derived from your IP address.
  • Communication Data: Records of all interactions with our customer support team, including live chat transcripts and email correspondence, which are retained for quality assurance and dispute resolution purposes.
  • Marketing Preference Data: Your opt-in or opt-out status for promotional communications, including seasonal campaigns tied to events such as Idul Fitri, Imlek, and Indonesian Independence Day.
3

How We Use Your Data

  • Account Operation: To create and maintain your member account, verify your identity at registration and during subsequent KYC reviews, process login sessions, and provide access to all platform features including the sportsbook, casino, and game library.
  • Payment Processing: To process deposit and withdrawal transactions via your nominated Indonesian bank account or e-wallet, verify that payments originate from accounts in your legal name, and maintain accurate financial records for each transaction in IDR.
  • Legal & Regulatory Compliance: To fulfil anti-money-laundering (AML) and Know Your Customer (KYC) obligations, respond to lawful requests from regulatory authorities, and maintain transaction records for the legally required retention period.
  • Fraud Prevention & Security: To detect and prevent fraudulent account activity, identify and block multi-accounting or bonus abuse, monitor for signs of problem gambling, and protect the integrity of the platform and its other members.
  • Personalisation: To tailor your experience on the 888sl platform — including surfacing relevant game recommendations, targeted bonus offers, and sport-specific promotions aligned with your betting activity and stated preferences.
  • Customer Support: To respond to your queries, resolve disputes, and maintain a record of support interactions to ensure consistent service quality and enable accurate resolution of any escalated complaints.
  • Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign information — but only where you have explicitly opted in. You may withdraw consent at any time via your account settings or by contacting support.
  • Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the 888sl user interface, game library curation, and sportsbook market coverage. No individually identifiable data is used for this purpose.
5

Data Sharing & Third Parties

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP) and e-wallet providers (DANA, OVO, GoPay, ShopeePay, LinkAja) receive your financial account identifiers solely to process deposit and withdrawal transactions.
  • KYC & Identity Verification Providers: Authorised third-party KYC platforms may receive copies of your identity documents and facial verification data to carry out the required identity checks on 888sl's behalf.
  • Fraud Prevention & AML Services: Specialist risk-management and anti-money-laundering service providers may receive transaction and behavioural data to run automated fraud detection checks. No raw identity documents are shared with these providers.
  • Game Software Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session identifiers to operate their games within the 888sl platform. They do not receive your personal registration data.
  • Regulatory Authorities: 888sl will disclose Personal Data to law enforcement agencies or regulatory bodies where required to do so by a valid legal order or where disclosure is necessary to prevent serious harm or illegal activity.
All third-party processors engaged by 888sl are required to sign data processing agreements that prohibit them from using your data for any purpose beyond the specified service they provide. 888sl conducts due diligence on all service providers before engagement.
6

Data Retention

  • Active Account Data: Personal data associated with a live, active member account is retained for the lifetime of the account plus a minimum post-closure period of 5 years, in compliance with AML record-keeping obligations.
  • KYC Documents: Identity documents and verification records are retained for a minimum of 5 years following account closure, or longer if required by applicable regulation at the time.
  • Transaction Records: Full deposit, withdrawal, and wagering records are retained for a minimum of 5 years from the date of each transaction.
  • Support Communications: Live chat transcripts and email correspondence are retained for 2 years from the date of each interaction, after which they are permanently deleted.
  • Marketing Data: Opt-in records and marketing preferences are retained while your account is active. If you withdraw consent, your marketing data is deleted within 30 days, though your core account and transaction records are retained as specified above.
  • Technical & Analytics Data: IP logs, session data, and device identifiers are retained in anonymised, aggregated form for platform analytics. Raw IP logs are deleted after 90 days.
7

Your Data Rights

Right of Access Request a copy of all Personal Data 888sl holds about you, including how it is used and with whom it has been shared.
Right to Rectification Request that inaccurate or incomplete Personal Data be corrected without undue delay.
Right to Erasure Request deletion of your Personal Data where processing is no longer necessary, subject to our legal retention obligations.
Right to Restriction Request that we restrict processing of your data while a rectification or objection request is being assessed.
Right to Portability Receive a machine-readable export of the Personal Data you have provided to 888sl, in a structured, commonly used format.
Right to Object Object to processing based on legitimate interests, including profiling for personalisation or marketing, at any time.
8

Cookies & Tracking Technologies

9

Data Security

  • Transport Layer Security (TLS 1.3): All data in transit between your device and 888sl's servers is encrypted using TLS 1.3, the current industry standard for secure data transmission.
  • At-Rest Encryption: All Personal Data stored on 888sl's servers — including financial records, KYC documents, and account credentials — is encrypted at rest using AES-256 encryption.
  • Access Controls: Internal access to member data is restricted on a strict need-to-know basis. All 888sl staff with data access undergo background checks and receive mandatory data protection training. Access privileges are reviewed quarterly.
  • Two-Factor Authentication (2FA): 888sl offers optional 2FA for member accounts. We strongly recommend enabling 2FA via your account security settings to add a second layer of protection to your 888sl Login.
  • Penetration Testing: The 888sl platform undergoes regular independent penetration testing and vulnerability assessments to identify and remediate potential security weaknesses before they can be exploited.
  • Incident Response: In the event of a data breach that is likely to result in a risk to your rights, 888sl will notify affected members by email within 72 hours of becoming aware of the breach, including a description of the data affected and the steps taken to address it.
10

Minors & Age Verification

21+ Only: If you are under 21 years of age, you must not attempt to register or use the 888sl platform in any capacity. Misrepresenting your age during registration is a breach of our Terms & Conditions and may have legal consequences.
11

International Data Transfers

  • Data is transferred only to jurisdictions that maintain an adequate level of data protection, as assessed by 888sl's data protection review process.
  • Where transfers are made to jurisdictions without a formal adequacy determination, 888sl relies on standard contractual clauses or equivalent contractual safeguards that impose data protection obligations on the receiving party.
  • All international data processors are contractually prohibited from sub-processing your data to further third parties without 888sl's prior written approval.
  • Payment data processed by Indonesian payment providers — including BCA, BRI, BNI, Mandiri, DANA, OVO, GoPay, ShopeePay, and LinkAja — remains within Indonesia's domestic payment infrastructure and is not subject to international transfer.
12

Policy Amendments

13

Contact Us

  • Live Chat: Available 24/7 within the platform after completing your 888sl Login. Indonesian-speaking agents are available on every shift. Average response time under 2 minutes during peak Jakarta hours (19:00–23:00 WIB).
  • Email: [email protected] — for formal data rights requests and privacy-related complaints. Please include your registered username and the specific right or concern you are raising. We commit to responding within 30 days.
  • Data Rights Requests: To submit a formal Subject Access Request (SAR) or erasure request, email [email protected] with the subject line "Data Rights Request" and your full name as registered on your account. Identity verification will be required before we can process the request.
For the fastest response to general privacy questions, we recommend using our 24/7 live chat. For formal data rights requests requiring a written record, email is the appropriate channel. We take all data protection queries seriously and treat every request with the same level of care regardless of the channel used.

Confident in Your Privacy? Start Playing at 888sl

Now that you know exactly how 888sl protects your data, explore our full platform — from BRI Liga 1 sportsbook markets to 1,200+ certified casino games. Secure, transparent, and built for Indonesian players. Adults 21+ only.

21+ only · Trusted and Secure Platform · SSL Encryption · Provably Fair Games