toke88 Privacy Policy

At toke88, protecting the personal information of our Members is a core operational commitment — not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how it is used and stored, and what rights you hold over your information.

Last Updated: January 1, 2026

Your Privacy Matters. toke88 processes personal data in accordance with internationally recognized data protection principles. This Policy constitutes part of the binding agreement between you and toke88 and should be read alongside our Terms & Conditions. By creating an account or using our platform, you acknowledge that you have read and understood this Policy.

1 Overview

toke88 is an online sports betting and gaming platform serving English-preference players across Indonesia, including users in Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, Palembang, Makassar, and Yogyakarta. As part of delivering our services — which include sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot gacor (high-payout slot games), and other real-money gaming products — we necessarily collect and process certain categories of personal data about our Members.

This Privacy Policy applies to all personal data collected through the toke88 website at toke88.cam, any associated sub-domains, our customer support channels (including live chat and email), and any other touchpoints through which you interact with toke88 as a registered or prospective Member.

This Policy does not apply to third-party websites, applications, or services that may be accessible through links on the toke88 platform. We encourage you to review the privacy policies of any third-party services you choose to use independently.

2 Data Controller

For the purposes of this Privacy Policy, toke88 (operated under the domain toke88.cam) acts as the data controller — that is, the entity that determines the purposes and means of processing your personal data. As data controller, toke88 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently, and only for specified, explicit, and legitimate purposes.

All data protection queries, access requests, and complaints should be directed to our Data Protection contact at: [email protected] (plain text — not a clickable link). We commit to acknowledging all data-related requests within 3 business days and resolving them within 30 calendar days.

3 Data We Collect

toke88 collects personal data across several categories depending on your level of engagement with the platform. The specific data points collected within each category are set out below:

Category Data Points Collected
Identity Data Full legal name, date of birth, gender, national identity number (KTP Nasional), and a copy of your government-issued photo ID as submitted during KYC verification.
Contact Data Email address, Indonesian mobile phone number, and residential address (province and city level, at minimum).
Account Data Username, encrypted password hash, account registration date, account tier, and login history (timestamps and IP addresses).
Financial Data Deposit and withdrawal transaction records, payment method identifiers (bank account name and last four digits, or e-wallet registered phone number for OVO, DANA, GoPay, ShopeePay, and LinkAja), and account balance history. Full bank account or card numbers are never stored by toke88.
Transactional Data Betting and gaming history, including markets wagered on, stake amounts, odds accepted, outcomes, and bonus usage records.
Technical Data IP address, browser type and version, device type and operating system, screen resolution, time zone (WIB / WITA / WIT), session duration, and referring URL.
Marketing Data Communication preferences, promotional opt-in/opt-out status, and records of marketing communications sent and opened (where applicable).
Support Data Records of all interactions with our customer support team, including live chat transcripts and email correspondence.

Sensitive Data: toke88 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you voluntarily disclose such information in support communications, it will be used solely to resolve your query and will not be retained beyond the support interaction.

5 How We Use Your Data

toke88 uses collected personal data for the following purposes, each of which is tied to one of the legal bases described in Section 4:

  • Account Management: Creating, maintaining, verifying, and closing Member accounts, including processing KYC documentation and managing account security settings.
  • Payment Processing: Facilitating deposits and withdrawals through BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, and reconciling transaction records.
  • Bet and Game Settlement: Calculating and crediting winnings, settling sports bets, resolving disputes, and maintaining complete wagering history records.
  • Fraud and AML Compliance: Monitoring account activity for indicators of fraud, money laundering, identity theft, and multi-accounting, and taking action where such activity is detected.
  • Responsible Gaming: Monitoring betting patterns for signs of problem gambling and applying self-exclusion, deposit limits, or cooling-off periods as requested by Members or required by our responsible gaming obligations.
  • Customer Support: Responding to Member queries, complaints, and disputes submitted via live chat or email, and maintaining support interaction records for quality assurance.
  • Marketing and Promotions: Sending promotional offers, tournament announcements, and seasonal promotions — such as Idul Fitri cashback bonuses or Ramadhan special events — to Members who have opted in to receive marketing communications.
  • Platform Improvement: Analyzing aggregated, anonymized usage data to improve site performance, betting market offerings, payment options, and user experience.

6 Data Sharing & Disclosure

toke88 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. Personal data is shared only in the following limited and controlled circumstances:

  • Payment Processors: Transaction data (name, account identifiers, amount) is shared with the relevant Indonesian bank or e-wallet provider solely to process deposit and withdrawal requests. Each provider is bound by its own regulatory obligations and privacy commitments.
  • KYC and Identity Verification Partners: Where we use third-party identity verification services to assist with KYC, limited identity data is shared with those providers under strict data processing agreements.
  • Game Content Providers: Certain game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive session and wagering data necessary to deliver game functionality and calculate outcomes. No unnecessary personal data is shared beyond what is technically required.
  • Fraud Prevention Networks: Where fraud is suspected, relevant account and transaction data may be shared with fraud prevention agencies or, where legally required, with law enforcement authorities.
  • Legal and Regulatory Disclosure: toke88 will disclose personal data where required to do so by a valid court order, regulatory directive, or other lawful authority, regardless of the jurisdiction.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or part of toke88's business, Member data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third parties who process data on behalf of toke88 are required to enter into data processing agreements that restrict their use of your data to the specific purpose for which it was shared and obligate them to maintain appropriate technical and organizational security measures.

7 Cookies & Tracking Technologies

toke88 uses cookies and similar tracking technologies to deliver, maintain, and improve the platform experience. Cookies are small text files stored on your device by your browser when you visit toke88.cam. The categories of cookies we use are as follows:

  • Strictly Necessary Cookies: Essential for the platform to function. These cookies enable you to log in, maintain your session, and access secure areas of the site. They cannot be disabled without breaking core platform functionality.
  • Performance and Analytics Cookies: Collect anonymized data about how Members interact with the platform — such as pages visited, time on page, and error events — to help us identify and fix performance issues.
  • Functional Cookies: Remember your preferences — such as your preferred language, odds format, and display settings — to deliver a more personalized experience on return visits.
  • Targeting and Attribution Cookies: Used, with your consent, to understand how you arrived at toke88 (e.g., via a referring website or promotional link) so that we can measure the effectiveness of our marketing activity.

You can control cookie settings at any time through your browser preferences. Note that blocking strictly necessary cookies will impair your ability to use the toke88 platform. For more information on managing cookies, consult your browser's help documentation.

8 Data Retention

toke88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specific retention periods for each data category are as follows:

  • Active Account Data: Retained for the duration of account activity plus 7 years following account closure, in line with AML and financial record-keeping obligations.
  • Transactional and Financial Data: Retained for a minimum of 7 years from the date of the transaction to satisfy regulatory audit and dispute resolution requirements.
  • KYC Documentation: Retained for 7 years following the last verification or account closure, whichever is later, to meet AML compliance obligations.
  • Support Records: Retained for 3 years from the date of the last interaction for quality assurance and dispute resolution purposes.
  • Marketing Consent Records: Retained for the duration of your consent plus 2 years following withdrawal of consent to demonstrate compliance with consent-based marketing regulations.
  • Session and Technical Data: Typically retained for 90 days unless longer retention is required for fraud investigation or security incident response.

At the end of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be attributed to an identifiable individual.

9 Security Measures

toke88 employs industry-standard technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. Key security controls include:

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and toke88 servers is encrypted using HTTPS with 256-bit SSL certificates, ensuring that login credentials, financial data, and session information cannot be intercepted in transit.
  • Secure Data Storage: Personal data is stored on access-controlled, geographically redundant servers located in secure data centers with physical access restrictions, 24/7 monitoring, and intrusion detection systems.
  • Password Hashing: Member passwords are hashed using bcrypt with unique salts, meaning that toke88 staff cannot view or retrieve your plaintext password under any circumstances.
  • Access Controls: Personal data access is restricted to authorized toke88 personnel only, and only to the extent necessary for their role. All internal access is logged and audited.
  • Fraud Monitoring: Automated systems continuously monitor account activity for anomalous patterns indicative of unauthorized access, and trigger alerts and account restrictions where suspicious behavior is detected.
  • Regular Security Audits: toke88 undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Your Responsibility: While toke88 implements robust security controls on our side, account security is a shared responsibility. Use a strong, unique password, do not share your login credentials with anyone, and never access your account on public or shared devices. Report suspected unauthorized access immediately to [email protected].

10 Your Data Protection Rights

As a data subject whose personal data is processed by toke88, you hold the following rights under internationally recognized data protection principles. These rights can be exercised at any time by contacting our Data Protection team at [email protected]:

Right of Access Request a copy of all personal data toke88 holds about you, including data sources and processing purposes.
Right of Rectification Request correction of inaccurate or incomplete personal data held on your account.
Right of Erasure Request deletion of your personal data where no overriding legal or regulatory retention obligation applies.
Right to Restrict Processing Request that toke88 limits how your data is used while a dispute or correction is being resolved.
Right to Data Portability Request a machine-readable copy of your data to transfer to another service provider.
Right to Object Object to processing based on legitimate interests, including automated decision-making and profiling.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Protection Request". We will acknowledge your request within 3 business days and fulfill it within 30 calendar days, or explain why the request cannot be fulfilled (for example, if a legal retention obligation applies). No fee will be charged for rights requests unless the request is manifestly unfounded or excessive.

11 Third-Party Links

The toke88 platform may contain links to third-party websites, applications, or services — including payment provider interfaces, game provider sites, or social media platforms — that are not controlled or operated by toke88. This Privacy Policy applies only to data collected directly by toke88 and does not extend to any third-party service.

When you navigate away from toke88.cam to a third-party site, you are subject to that site's own privacy policy and data practices. We encourage you to review the privacy policies of any third-party services you choose to interact with. toke88 is not responsible for the privacy practices, content, or security of any third-party website or service.

12 Protection of Minors

toke88 is strictly an adults-only service. Persons under the age of 21 are expressly prohibited from registering an account, placing any bet, or otherwise using the toke88 platform. toke88 does not knowingly collect or process personal data from any individual under the age of 21.

During account registration and at the point of every withdrawal request, Members are required to complete KYC verification by submitting a valid government-issued photo ID (Indonesian National Identity Card / KTP Nasional) showing proof of age. Accounts found to belong to individuals under 21 will be immediately suspended, permanently closed, and all funds forfeited without appeal.

If you believe that toke88 has inadvertently collected personal data from a person under 21, please notify us immediately at [email protected] so that we can investigate and take corrective action.

13 Changes to This Privacy Policy

toke88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made — particularly changes that expand the categories of data collected or introduce new sharing practices — we will notify all registered Members via the email address on file and via a prominent banner on the toke88 homepage.

The "Last Updated" date at the top of this page will be revised with each update. Members are encouraged to review this Policy periodically to stay informed of how toke88 collects, uses, and protects personal data. Continued use of the toke88 platform following publication of an updated Privacy Policy constitutes acceptance of the updated terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or toke88's data practices, our Data Protection and customer support teams are available to assist:

  • Email: [email protected] (plain text — not a clickable link)
  • Live Chat: Available 24/7 after logging in to your toke88 account
  • Response Time: Data protection queries are acknowledged within 3 business days and resolved within 30 calendar days

For rights requests (access, rectification, erasure, portability), please include "Data Protection Request" in the subject line of your email to expedite processing. For general privacy questions or complaints, use the subject line "Privacy Inquiry".


How toke88 Protects Your Privacy

Privacy protection is built into every layer of the toke88 platform — from registration through KYC to payment processing and beyond.

256-bit SSL Encryption

Every page load, login, and transaction is protected by the same encryption standard used by global financial institutions. Your data is never transmitted in plain text.

No Data Selling

toke88 will never sell, rent, or trade your personal data to third parties for marketing purposes. Your information stays with us and our trusted service partners only.

Minimal Data Collection

We collect only what is necessary to deliver our services and comply with AML regulations. No unnecessary profiling, no invasive tracking beyond platform security needs.

Full Access Rights

Request a complete copy of your data at any time, or ask us to correct, delete, or restrict processing. Your data rights are enforceable, not just policy statements.

Clear Retention Policies

Every data category has a defined retention period. We delete or anonymize data as soon as legal and operational obligations expire — no indefinite storage.

Transparent Processing

This Policy explains exactly what data we collect, why we need it, who we share it with, and how long we keep it. No hidden data practices, no vague language.

Questions About Your Data?

Our Data Protection team is ready to answer any privacy questions or process your rights requests. You can also explore our Terms & Conditions or read about our responsible gaming commitments.