she88 Privacy Policy

she88 ("we", "us", "our", or "the Platform") operates the online betting and gaming platform accessible at she88.bio. We are committed to protecting the personal data of all individuals who interact with our platform — whether as registered account holders, visitors to our website, or individuals who contact our customer support team.

This Privacy Policy sets out, in clear and plain terms, the personal data we collect, the purposes for which we use it, the circumstances under which we may share it with third parties, how long we retain it, and the rights available to you in relation to your data. It applies to all she88 services, including our web platform, mobile interface, live chat support, and any promotional communications you opt into.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By registering an account on she88 or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy.

Throughout this Privacy Policy, the following defined terms apply:

• "Personal Data" — any information relating to an identified or identifiable natural person. This includes your name, email address, phone number, bank account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — she88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of she88 under a written agreement, such as a payment processor or KYC verification provider.
• "Account Holder" / "Player" / "You" — any individual who has registered a she88 account or otherwise uses the she88 platform or Services.
• "KYC" — Know Your Customer identity verification procedures, including document collection and identity confirmation processes.
• "Services" — all products and features offered through the she88 platform, including sports betting, live casino, slot gacor (high-volatility slot games), togel (Indonesia's traditional numbers lottery), sabung ayam (cockfighting betting), scratch cards, and e-sports wagering.
• "Cookies" — small text files placed on your device by the she88 platform for session management, security, and analytical purposes.

she88 collects only the personal data that is necessary to provide our Services, maintain platform security, comply with our legal obligations, and improve the player experience. The categories of personal data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (beyond identity document photos for KYC), or health data, unless you voluntarily disclose such information during a responsible gaming self-assessment.

she88 collects personal data through several methods, all of which are transparent and purposeful:

• Direct Collection: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotional offer, you provide data directly to us.
• Automated Collection: When you access the she88 platform, our servers automatically record technical data including your IP address, device type, browser, and session behaviour. This is standard practice for all web-based platforms and is necessary for security and performance monitoring.
• Cookies and Similar Technologies: she88 uses session cookies, persistent cookies, and local storage tokens to maintain your login state, remember preferences, and collect anonymous usage analytics. Full details are provided in Clause 7 (Cookies & Tracking).
• Third-Party Sources: In limited circumstances, she88 may receive data about you from third-party KYC verification providers, fraud prevention databases, payment processors, or publicly available sources (such as sanctions lists) for the purpose of identity verification and AML compliance.
• Responsible Gaming Monitoring: Our platform's responsible gaming systems may automatically generate data points relating to your gambling patterns — such as rapid deposit sequences, extended session durations, or escalating bet sizes — which are used to trigger welfare checks and support outreach.

she88 processes your personal data only where we have a clear and lawful basis for doing so. The table below summarises our primary processing purposes and the legal basis for each:

Where we rely on legitimate interests as our legal basis, we have assessed those interests against your rights and freedoms and are satisfied that our interests do not override your fundamental privacy rights. You may request further detail on any such assessment by contacting our support team.

Where we rely on consent — particularly for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing, update your notification preferences within your account settings or contact support directly.

she88 does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share your data only in the following strictly defined circumstances:

• Payment Processors: To process deposits and withdrawals via local Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and digital wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), we share necessary transactional and identity data with our payment processing partners. These partners are contractually prohibited from using your data for any purpose other than completing the transaction.
• KYC & Identity Verification Providers: To fulfil our identity verification obligations, we share identity documents and personal details with third-party KYC verification service providers operating under strict data processing agreements.
• Game Studio Providers: When you play games hosted by third-party providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — your in-game behaviour data and session identifiers are shared with those providers as necessary to deliver and record the game outcomes. These providers operate under their own privacy policies in addition to contractual obligations with she88.
• Fraud Prevention and AML Screening: she88 may share identity and transaction data with fraud prevention bureaus, sanctions screening databases, and AML compliance tools to detect and prevent financial crime.
• Legal and Regulatory Disclosure: she88 may disclose your personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by applicable law, a valid court order, or a lawful regulatory request. she88 will, where legally permitted, notify you of any such disclosure request.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of she88's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections set out in this policy.

she88 uses cookies and similar tracking technologies to deliver a secure, personalised, and consistent experience across all platform sessions. We do not use third-party advertising cookies or sell cookie data to external networks.

Strictly necessary cookies cannot be disabled as they are essential to the secure operation of the platform. You may control functional and analytical cookies through your browser settings. Note that disabling certain cookies may impair platform functionality — for example, you may need to log in more frequently.

she88 does not use cross-site tracking technologies, fingerprinting tools, or behavioural advertising pixels. Our analytical tools use anonymised or pseudonymised data only and do not track you across third-party websites.

she88 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal obligations and legitimate operational requirements. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with international financial reporting and AML standards.
• KYC Verification Documents: Retained for five (5) years following completion of verification or account closure, whichever is later. After this period, documents are securely deleted or destroyed.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and Usage Data (Logs): Server access logs and session data are retained for thirteen (13) months, after which they are automatically purged or anonymised.
• Responsible Gaming Records: Self-exclusion status, deposit limit history, and welfare intervention records are retained for the full duration of the exclusion period plus five (5) years, to prevent reinstatement requests from circumventing active exclusions.
• Marketing Consent Records: Records of your consent to or withdrawal from marketing communications are retained for five (5) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is either securely deleted, rendered permanently anonymous (such that you can no longer be identified from the resulting data), or archived in encrypted cold storage accessible only for regulatory audit purposes.

she88 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security controls include:

• Encryption: All data in transit between your device and she88 servers is encrypted using TLS 1.3. All sensitive data at rest — including personal details, financial records, and KYC documents — is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to she88 staff and authorised third-party processors who have a demonstrable operational need. Role-based access controls and mandatory multi-factor authentication are enforced for all internal systems containing personal data.
• Intrusion Detection: she88's infrastructure is monitored 24/7 by automated intrusion detection and prevention systems. Anomalous access patterns trigger immediate security alerts and automated lockdown responses.
• Penetration Testing: she88 engages independent security firms to conduct regular penetration tests and vulnerability assessments of our platform and supporting infrastructure.
• Data Minimisation: she88 applies data minimisation principles at the point of collection — we collect only what is genuinely necessary. Internally, data is compartmentalised so that individual teams have access only to the data relevant to their function.
• Breach Response: In the unlikely event of a data breach that poses a risk to your rights and freedoms, she88 will notify affected account holders without undue delay and take immediate remediation steps. she88 will also notify the relevant regulatory authority where required by applicable law.

As a she88 account holder or platform visitor, you have the following rights in relation to your personal data. she88 is committed to honouring these rights promptly and without unreasonable barriers:

• Right of Access: You have the right to request a copy of the personal data she88 holds about you. We will provide a structured, commonly-used, machine-readable copy within 30 days of a verified request.
• Right to Rectification: If any personal data she88 holds about you is inaccurate or incomplete, you have the right to request its correction. You can update most contact details directly within your account settings; for identity data changes, contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing was unlawful. Note that this right is subject to exceptions — she88 may be required to retain certain data to fulfil legal obligations (e.g., AML record-keeping).
• Right to Restriction of Processing: You may request that she88 restrict how it processes your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a portable format and, where technically feasible, to have it transferred directly to another data controller.
• Right to Object: You have the right to object to processing based on legitimate interests, and to opt out of any direct marketing communications at any time without giving a reason.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, contact the she88 support team via 24/7 live chat or email at [email protected]. We will verify your identity before processing a data rights request to prevent unauthorised access to your information. We aim to respond to all data rights requests within 30 days; complex requests may take up to 60 days, in which case we will notify you of the extended timeline.

she88 strictly prohibits the use of its platform by any individual under 21 years of age. This is a firm requirement across all Services — sports betting, live casino, togel, sabung ayam, slots, scratch cards, and all other products.

she88 does not knowingly collect or process personal data belonging to individuals under 21. During the registration process, she88 requires date-of-birth confirmation and applies automated checks. KYC verification provides a secondary layer of age confirmation through government-issued identity documents.

If she88 discovers — at any point — that an account holder is under 21 years of age, the account will be immediately closed, all pending balances will be returned to the originating payment source, and all personal data associated with the underage account will be deleted from our systems within 30 days, except where retention is required for legal compliance purposes.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling sites. Resources and guidance are available on the she88 Responsible Gaming page.

The she88 platform may display or reference third-party content providers, game studios, and payment service brands. While she88 selects its partners carefully, we are not responsible for the privacy practices of third-party operators whose services you access independently.

Game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft operate their own privacy policies that govern data collected within their game interfaces. she88 recommends that you review those policies if you have specific concerns about in-game data handling.

Payment service providers — including local Indonesian banks (BCA, BRI, BNI, Mandiri) and digital wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) — handle transactional data according to their own published privacy policies and regulatory obligations. she88 has no control over data collected directly by those payment providers in the course of processing your transactions.

she88 operates on an internationally distributed infrastructure. This means that your personal data may be processed on servers located outside Indonesia. she88 ensures that all international data transfers are conducted under appropriate safeguards, including:

• Contractual data transfer agreements with data processors that require them to maintain data protection standards equivalent to those applied by she88.
• Transfer of data only to jurisdictions or entities that provide an adequate level of data protection as assessed by she88's internal compliance team.
• Application of encryption and access controls to all data in transit across international network boundaries.

Where data is transferred to third-party KYC providers, payment processors, or game studio providers operating outside Indonesia, those transfers are governed by contractual obligations that protect your rights regardless of the geographic location of the processing.

she88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The "Last updated" date at the top of this page will be revised each time a material change is made.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — she88 will provide advance notice via the email address registered to your account or via a prominent in-platform notification, at least seven (7) days before the change takes effect.

Your continued use of the she88 platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must stop using the platform and contact customer support to arrange account closure and exercise any applicable data rights.

We encourage you to revisit this page periodically to stay informed about how she88 protects your personal data. All previous versions of this Privacy Policy are archived and available upon written request to our support team.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to report a privacy concern, please contact she88 through any of the following channels. Our support team includes dedicated privacy handlers who can respond to data-related enquiries:

For questions specifically about responsible gaming data — such as self-exclusion records, deposit limit history, or welfare intervention records — please visit the Responsible Gaming page or raise the matter directly with our live chat support team.