Privacy Policy

1. Introduction & Scope

big288 ("we", "us", "our", or "the Company") operates the online gaming platform accessible at https://big288.cam. We understand that privacy matters deeply to our players, and we are committed to handling personal information with transparency, care, and in accordance with internationally recognized data protection principles.

This Privacy Policy ("Policy") describes:

• The categories of personal data we collect from players and visitors to the big288 Platform.
• The purposes for which we process that data and our legal bases for doing so.
• How we share data with third parties, and the safeguards in place.
• How long we retain personal data and how we keep it secure.
• The rights available to you as a data subject and how to exercise them.

This Policy applies to all individuals who access or use the big288 Platform, including registered players, visitors browsing without an account, and individuals who contact our customer support team. This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between big288 and its players.

big288 primarily serves Indonesian players and processes a significant volume of personal data relating to Indonesian residents. While Indonesia's Personal Data Protection Law (UU PDP) continues to be implemented incrementally, big288 applies the substantive principles of that framework—including purpose limitation, data minimization, security, and individual rights—as baseline standards for all personal data we process, regardless of the player's specific location.

2. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, identification numbers, location data, IP addresses, and factors specific to an individual's physical, economic, or social identity.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, big288.
• "Data Processor" means a third party that processes personal data on behalf of big288 under contractual instruction.
• "Player" or "User" refers to any registered account holder or visitor accessing the big288 Platform.
• "KYC" (Know Your Customer) refers to the identity verification procedures conducted by big288 to confirm the identity, age, and payment method ownership of Players.
• "Platform" means the big288 website, mobile-optimized pages, and all gaming services accessible at https://big288.cam.
• "Cookies" means small text files placed on your device by the Platform to store preferences, session data, and analytics information.

3. Information We Collect

big288 collects the following categories of personal data in connection with operating the Platform:

3.1 Registration & Account Data

When you create an account, we collect: full legal name, date of birth, residential address (including city — Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, or elsewhere in Indonesia), email address, phone number, preferred language, and username. This data is essential for account creation and cannot be omitted.

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) requirements and to verify that all Players are at least 21 years of age, we collect: copies of government-issued photo identification (Indonesian KTP, passport, or driver's license), proof of residential address (utility bill or bank statement dated within 90 days), and proof of payment method ownership (bank statement, e-wallet screenshot, or card image). KYC documents are treated with the highest level of security and are not used for any purpose beyond verification.

3.3 Financial & Transaction Data

We collect details of all financial transactions conducted on the Platform, including: deposit amounts and dates, withdrawal requests and processing times, bank account names and masked account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction reference numbers, and bonus redemption history. Full payment credentials (complete account numbers, PINs, or passwords) are never stored on big288 servers.

3.4 Gaming & Wagering Data

We record all gaming activity associated with your Account, including: bet amounts and outcomes, games played and providers accessed, session duration and frequency, responsible gaming tool settings, and win/loss history. This data is used to operate the Platform, resolve disputes, and identify patterns that may indicate problem gambling.

3.5 Technical & Device Data

When you access the Platform, our systems automatically collect: IP address, device type and operating system, browser type and version, time zone setting (WIB, WITA, or WIT), referring URL, pages visited and time spent on each, and session identifiers. This data is used for security monitoring, fraud detection, and Platform optimization.

3.6 Communications Data

If you contact our customer support team by live chat, WhatsApp, or email, we retain the content of those communications, your contact details, and the date and nature of the inquiry. This data is retained to ensure quality assurance, resolve disputes, and maintain a record of any commitments or agreements reached during support interactions.

4. How We Collect Data

big288 collects personal data through the following channels:

• Directly from you: via the account registration form, KYC document upload portal, deposit and withdrawal interfaces, responsible gaming preference settings, and any communications you initiate with our support team.
• Automatically: through cookies, web beacons, server logs, and analytics tools embedded in the Platform that capture technical and behavioral data as you browse and play.
• From third-party payment processors: our banking and e-wallet partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) share transaction confirmation data with big288 to facilitate deposit and withdrawal processing.
• From identity verification providers: third-party KYC and AML screening services may return verification results and risk scores in connection with your account review.
• From fraud and security providers: device fingerprinting and fraud-detection partners may provide signals about suspicious activity associated with your device or IP address.

5. How We Use Your Data

big288 processes personal data only for specified, explicit, and legitimate purposes. The table below summarizes our primary processing activities and the legal basis for each:

6. Data Sharing & Disclosure

big288 does not sell, rent, or trade personal data to third parties for their own marketing purposes under any circumstances. We share personal data only in the following limited circumstances:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary financial data with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers process data under their own applicable privacy frameworks and regulatory obligations as licensed Indonesian financial institutions.

6.2 Game Software Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — may receive your player session identifier and anonymized account reference to deliver and log game rounds. These providers do not receive your full name, KYC documents, or financial details.

6.3 Identity Verification & AML Providers

We engage specialist third-party KYC and AML screening services to assist with identity verification. These providers process KYC documents and perform sanctions list screening under strict data processing agreements with big288. They may not use your data for any purpose beyond the contracted verification service.

6.4 Technology & Infrastructure Partners

big288 uses third-party cloud hosting, content delivery, and cybersecurity services to operate the Platform. These providers act as data processors under contractual obligation and have no independent right to access or use player data.

6.5 Legal & Regulatory Disclosure

big288 may disclose personal data to law enforcement, regulatory authorities, or courts where we are legally compelled to do so by valid legal process, court order, or mandatory regulatory reporting obligations. We will notify the affected Player of any such disclosure to the extent permitted by law.

6.6 Corporate Transactions

In the event of a merger, acquisition, or sale of substantially all assets of big288, player personal data may be transferred to the acquiring entity as part of the transaction. Affected Players will be notified in advance of any such transfer, and the acquiring entity will be required to honor the commitments made in this Policy.

7. Data Retention

big288 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual. Anonymized or aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and analytical purposes.

8. Data Security

big288 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard TLS protocols, ensuring that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive data fields — including KYC documents, financial records, and authentication credentials — are encrypted at the database level using AES-256 encryption.
• Access Controls: Access to player personal data is strictly limited to big288 personnel who require it to perform their job functions. All staff with data access undergo background checks and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): big288 strongly encourages all Players to enable two-factor authentication on their accounts. 2FA is available via authenticator app and provides a significant additional layer of account security.
• Intrusion Detection Systems: Our infrastructure is monitored around the clock by automated intrusion detection and prevention systems. Any anomalous access patterns trigger immediate review by our security team.
• Regular Security Audits: The Platform undergoes periodic penetration testing and security audits conducted by independent third-party cybersecurity specialists.
• Data Breach Response: In the event of a confirmed personal data breach affecting Players, big288 will notify affected individuals within 72 hours of becoming aware of the breach, together with details of the data involved, likely consequences, and remediation steps taken.

9. Cookies & Tracking Technologies

big288 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and detect fraudulent activity. The following types of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They manage your login session, maintain your language and currency preferences, protect against cross-site request forgery (CSRF), and ensure secure access to your Account. These cookies cannot be disabled without impairing the functionality of the Platform.

9.2 Performance & Analytics Cookies

We use analytics cookies to understand how Players interact with the Platform — which pages are most visited, how long sessions last, and where users encounter errors. This data is collected in aggregated form and used solely to improve Platform performance. Analytics data is not linked back to individual player identities.

9.3 Functional Cookies

Functional cookies remember your Platform preferences — such as game lobby display settings, notification preferences, and responsible gaming limit configurations — so that you do not need to re-enter them on each visit.

9.4 Security & Fraud Detection Cookies

These cookies and device fingerprinting scripts help big288 identify suspicious login attempts, detect account takeover activity, and flag transactions that deviate from your established behavioral patterns. They are a critical component of our security infrastructure.

9.5 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in to your big288 Account and will significantly impair Platform functionality. Guidance on managing cookies is available through your browser's help documentation.

10. Your Privacy Rights

big288 respects your rights as a data subject. Depending on your jurisdiction, you may be entitled to exercise some or all of the following rights in relation to the personal data we hold about you:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". Include your full name, registered email address, and a clear description of the right you wish to exercise. big288 will respond within 30 days of receiving a valid request. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. Exercising your privacy rights is free of charge; however, we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive repeat requests.

11. Protection of Minors

The big288 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our registration and KYC processes. If big288 discovers that personal data has been collected from an individual under 21 years of age, we will immediately suspend the associated Account, delete the minor's personal data from our systems (subject to any mandatory legal retention requirements), and void any associated wagers or balance. If you are a parent or guardian and believe your child may have registered an Account on big288, please contact us immediately at [email protected] so that we can take prompt remedial action.

12. International Data Transfers

big288 operates internationally and may transfer your personal data to countries outside Indonesia for storage, processing, or operational purposes. These transfers may include data hosted on cloud infrastructure located in Singapore, Hong Kong, or other jurisdictions with established data protection frameworks.

When transferring personal data internationally, big288 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Indonesian data protection principles. Such safeguards may include: standard contractual data processing clauses between big288 and the receiving party; transfers to jurisdictions recognized as providing an adequate level of data protection; or the consent of the relevant data subject where appropriate.

If you would like further information about the international transfer mechanisms we rely on for a specific transfer, please contact us at [email protected].

13. Changes to This Privacy Policy

big288 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered Players by email to the address on file at least 14 days before the changes take effect.

Minor or non-material changes (such as typographical corrections, clarifications, or organizational restructuring that does not affect the substance of our data practices) may be published without advance notice. The most current version of this Policy is always available at https://big288.cam/privacy-policy, with the effective date displayed at the top of the document.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

14. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how big288 handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject line: "Privacy Inquiry" or "Privacy Rights Request"
• Response time: Within 5 business days for general inquiries; within 30 days for formal rights requests
• Support hours: 24 hours a day, 7 days a week — in Indonesian and English

If you are not satisfied with our response to your privacy complaint, you may escalate the matter to the appropriate data protection authority in your jurisdiction. big288 is committed to working cooperatively with supervisory authorities to resolve any disputes regarding our data processing practices.

For matters specifically related to responsible gaming data — such as self-exclusion records or deposit limit configurations — please visit our dedicated Responsible Gaming page or reference the subject line "Responsible Gaming Data Request" in your email.