ambo88 Privacy Policy

1. Overview & Scope

This Privacy Policy applies to all personal information collected by ambo88 through our website at ambo88.cam, mobile applications, and related digital services (collectively, the "Platform"). This policy governs data collection from users in Indonesia and internationally, regardless of geographic location.

ambo88 operates as an online gaming platform offering casino games, sports betting, live dealer experiences, togel (Indonesia's traditional numbers lottery), and other entertainment services to adult users aged 21 and above. In providing these services, we collect and process personal information necessary to create accounts, verify identities, process payments, prevent fraud, comply with legal obligations, and deliver personalized gaming experiences.

By registering an account or using any ambo88 services, you consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you should not use our Platform or services. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.

2. Data Controller Information

For the purposes of applicable data protection laws, ambo88 acts as the "data controller" of your personal information. This means we determine the purposes and means of processing your personal data.

Data Controller: ambo88 (operating entity legally registered in our licensing jurisdiction)

Contact for Privacy Matters: [email protected] (please include "Privacy Request" or "Data Protection" in the subject line)

We are committed to handling your personal information in accordance with international data protection standards, including principles derived from the General Data Protection Regulation (GDPR) and other applicable privacy frameworks.

3. Information We Collect

ambo88 collects various categories of personal information necessary to provide our gaming services, ensure platform security, comply with legal requirements, and enhance user experience. The types of data we collect include:

Personal Identification Information

• Account Registration Data: Full legal name, date of birth, gender, email address, phone number, username, password (encrypted), security questions and answers.
• Identity Verification Documents (KYC): Government-issued identification (Indonesian KTP Nasional, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity confirmation.
• Residential Information: Home address, city, postal code, country of residence.

Financial Information

• Payment Data: Bank account numbers for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction histories, deposit and withdrawal records.
• Transaction Details: Payment amounts, dates and times of transactions, payment method used, transaction status, currency (IDR).

Gaming Activity Data

• Gameplay Information: Games played, bets placed, wager amounts, game outcomes (wins/losses), gaming sessions duration, favorite games, betting patterns.
• Account Balance Data: Current account balance, bonus balances, pending withdrawals, wagering progress on promotions.
• Promotional Engagement: Bonuses claimed, promotional codes used, loyalty program tier, VIP status, reward points accumulated.

Technical & Device Information

• Device Data: Device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address).
• Connection Data: IP address, internet service provider, geographic location (city/region level), connection timestamps, session duration.
• Website Interaction Data: Pages visited, clickstream data, navigation paths, time spent on pages, referring/exit pages, search queries on our platform.

Communication Records

• Customer Support Interactions: Live chat transcripts, email correspondence, support tickets, phone call recordings (with your consent and notice), feedback surveys.
• Marketing Communications: Email open rates, link clicks, promotional preferences, opt-in/opt-out status.

Behavioral & Analytical Data

• Usage Patterns: Login frequency, peak usage times, platform preferences (desktop vs. mobile), feature usage statistics.
• Responsible Gaming Data: Self-exclusion settings, deposit limits configured, time-out periods requested, reality check alerts.

4. How We Collect Your Data

ambo88 collects personal information through multiple channels and methods:

Direct Collection

We collect most personal information directly from you when you:

• Register for an ambo88 account and fill out registration forms
• Submit identity verification (KYC) documents
• Make deposits or request withdrawals
• Contact customer support via live chat, email, or phone
• Participate in promotions, tournaments, or surveys
• Update your account settings or preferences
• Provide feedback or submit reviews

Automatic Collection

We automatically collect certain information when you access and use our Platform through:

• Cookies and Similar Technologies: Small text files stored on your device that track preferences, session information, and browsing behavior (see Section 9 for detailed cookie policy)
• Server Logs: Automatically recorded technical data including IP addresses, browser types, access times, and pages viewed
• Analytics Tools: Third-party analytics services (Google Analytics, similar tools) that provide aggregated usage statistics
• Gaming Platform Software: Game providers and sportsbook platforms that record gameplay data, betting activity, and game outcomes

Third-Party Sources

In limited circumstances, we may receive information about you from third parties:

• Payment Processors: Transaction confirmation data from Indonesian banks and e-wallet providers
• Identity Verification Services: Document authentication and fraud prevention databases
• Affiliate Partners: Referral source information if you were referred by an affiliate
• Public Databases: Information from public records for compliance and fraud prevention purposes

5. How We Use Your Information

ambo88 processes your personal information for legitimate business purposes and to fulfill our contractual obligations. We use your data for the following purposes:

Account Management & Service Delivery

• Creating and maintaining your gaming account
• Authenticating your identity and verifying account access
• Processing deposits, withdrawals, and financial transactions
• Managing your account balance and transaction history
• Providing customer support and responding to inquiries
• Enabling participation in games, bets, and gaming activities

Legal Compliance & Regulatory Obligations

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Verifying age requirements (21+ enforcement)
• Preventing fraud, collusion, and other prohibited activities
• Maintaining records required by gaming license conditions
• Reporting to regulatory authorities when legally required
• Responding to legal processes, court orders, and law enforcement requests

Security & Fraud Prevention

• Monitoring for suspicious activity and unusual betting patterns
• Detecting and preventing account takeovers and unauthorized access
• Identifying multiple accounts or bonus abuse
• Protecting against payment fraud and chargebacks
• Maintaining platform security and preventing cyberattacks

Responsible Gaming

• Implementing deposit limits, loss limits, and session time restrictions
• Processing self-exclusion requests and enforcing cooling-off periods
• Monitoring for problem gambling indicators
• Providing responsible gaming tools and resources
• Restricting access to vulnerable or excluded individuals

Marketing & Communications

• Sending promotional offers, bonus announcements, and special deals (with your consent)
• Distributing newsletters and platform updates
• Personalizing marketing content based on gaming preferences
• Administering loyalty programs and VIP benefits
• Conducting market research and customer satisfaction surveys

Platform Improvement & Analytics

• Analyzing usage patterns to improve user experience
• Testing new features and optimizing platform performance
• Understanding customer preferences and gaming behavior
• Developing new products and services
• Creating aggregated, anonymized statistics for business intelligence

6. Information Sharing & Disclosure

ambo88 does not sell or rent your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under specific circumstances:

Service Providers & Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals
• Gaming Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and other game studios to deliver gaming content
• Identity Verification Services: Third-party KYC/AML compliance providers for document verification and fraud screening
• Cloud Hosting Providers: Secure data storage and server infrastructure providers
• Customer Support Tools: Live chat software, ticketing systems, and communication platforms
• Analytics Providers: Website analytics and business intelligence services (Google Analytics, similar tools)

Legal & Regulatory Authorities

• Gaming regulators and licensing authorities overseeing our operations
• Law enforcement agencies investigating suspected criminal activity
• Courts, tribunals, or dispute resolution bodies when legally compelled
• Government agencies requiring data for tax, AML, or regulatory compliance

Business Transfers

If ambo88 is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership and provide options regarding your data.

With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when participating in co-branded promotions or third-party tournaments.

7. Data Security Measures

ambo88 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

Technical Security Controls

• Encryption: 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, identical to banking-grade security
• Data Encryption at Rest: All stored personal and financial data is encrypted using industry-standard algorithms
• Firewall Protection: Multi-layered firewall architecture preventing unauthorized network access
• Intrusion Detection Systems: Real-time monitoring for suspicious activity and potential security breaches
• Regular Security Audits: Quarterly penetration testing and vulnerability assessments by independent security firms
• Secure Authentication: Password hashing with bcrypt/scrypt algorithms, optional two-factor authentication (2FA)

Organizational Security Measures

• Access Controls: Strict role-based access permissions limiting employee access to personal data on a need-to-know basis
• Employee Training: Mandatory data protection and security awareness training for all staff
• Confidentiality Agreements: All employees and contractors sign confidentiality and data protection agreements
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data breaches
• Data Breach Notification: Commitment to notifying affected users within 72 hours of discovering any data breach

Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose strong, unique passwords and change them regularly
• Enable two-factor authentication (2FA) for additional security
• Never share your username, password, or account credentials with anyone
• Log out of your account when using shared or public devices
• Report suspicious activity or unauthorized access immediately
• Keep your contact information current so we can reach you regarding security matters

8. Data Retention & Deletion

ambo88 retains personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

Active Account Data

While your account remains active, we retain all account-related data including personal details, transaction history, gaming activity, and communications. This enables us to provide continuous service and maintain comprehensive account records.

Closed Account Data

When you voluntarily close your account or we terminate your account, we retain certain data for legal compliance purposes:

• Financial Records: Retained for 7 years to comply with financial regulations, tax requirements, and AML obligations
• Identity Verification Documents: Retained for 5 years as required by gaming license conditions
• Gaming Activity Logs: Retained for 5 years for regulatory audits and dispute resolution
• Marketing Data: Deleted within 30 days of account closure unless you explicitly consent to remain on marketing lists

Inactive Account Policy

Accounts with no login activity for 12 consecutive months are considered dormant. After 24 months of complete inactivity, we may permanently delete non-essential data while retaining records required for regulatory compliance.

Right to Deletion

You may request deletion of your personal data at any time (see Section 10 for details on exercising this right). We will comply with deletion requests within 30 days, except where we must retain data for legal obligations, fraud prevention, or ongoing disputes.

9. Cookies & Tracking Technologies

ambo88 uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content.

What Are Cookies?

Cookies are small text files stored on your device when you visit our Platform. They contain information that allows websites to recognize your device on subsequent visits, remember preferences, and track browsing behavior.

Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality, including account login, session management, and security. These cannot be disabled without impairing core features.
• Performance Cookies: Collect anonymous data on how users interact with our Platform, helping us identify technical issues and optimize performance.
• Functionality Cookies: Remember your preferences such as language settings, preferred currency display, and gaming favorites.
• Marketing Cookies: Track your browsing activity to deliver personalized promotions and measure advertising effectiveness (only set with your consent).

Managing Cookie Preferences

You can control cookie settings through your browser options. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may impair your ability to use certain platform features. Visit your browser's help section for instructions on managing cookies.

10. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

Right to Access

You have the right to request a copy of all personal information we hold about you. We will provide this data in a structured, commonly used format within 30 days of your request.

Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to legal retention requirements. We will comply with deletion requests within 30 days unless we have legitimate reasons to retain the data.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format and transmit it to another service provider.

Right to Object

You may object to processing of your personal data for marketing purposes at any time. Click "unsubscribe" in any marketing email or contact support to opt out.

Right to Restrict Processing

In certain circumstances, you may request that we limit how we use your personal information while disputes or concerns are resolved.

Exercising Your Rights

To exercise any privacy rights, contact our Data Protection team at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days and may require identity verification to process your request.

11. International Data Transfers

ambo88 operates internationally and may transfer your personal information to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Requiring third-party processors to maintain GDPR-equivalent protections
• Encrypting data in transit and at rest
• Conducting due diligence on international partners' security practices

By using ambo88 services, you consent to international data transfers as described in this policy.

12. Children's Privacy

ambo88 services are strictly intended for adults aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete such information and permanently close the associated account. Parents or guardians who believe their child has provided information to ambo88 should contact us immediately.

13. Policy Changes & Updates

ambo88 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated via email to your registered address and through prominent notices on our Platform. The "Last Updated" date at the top of this document indicates when the policy was most recently revised. Continued use of ambo88 services following any modifications constitutes acceptance of the updated Privacy Policy.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

• Email: [email protected] (include "Privacy" or "Data Protection" in subject line)
• Live Chat: Available 24/7 through the Platform
• Response Time: Privacy inquiries receive priority handling and typically receive responses within 48 hours

For formal data protection complaints or concerns that we have not adequately addressed, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.