Privacy Policy — gol88

1 Definitions

The following definitions apply throughout this Privacy Policy:

• "gol88", "we", "us", or "our" refers to the operator of the gol88 online betting and casino platform at gol88.lat.
• "Member", "you", or "your" refers to any registered account holder or visitor who interacts with the gol88 platform.
• "Personal Data" means any information relating to an identified or identifiable natural person — for example, your full name, date of birth, email address, or payment details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, gol88.
• "Third Party" means any individual or organisation that is not gol88 or the Member.
• "KYC" refers to Know Your Customer verification — the identity and age-confirmation process applied to gol88 Members before certain account actions are permitted.

2 Data Controller

gol88 acts as the Data Controller for all Personal Data collected through the gol88 platform at gol88.lat. As Data Controller, gol88 is responsible for ensuring that Personal Data is collected lawfully, used only for legitimate and disclosed purposes, stored securely, and deleted when no longer required.

If you have any questions about how gol88 handles your data, or if you wish to exercise any of your privacy rights described in Clause 11, please contact our Data Privacy team at [email protected]. Please include "Privacy Request" in the subject line of your email to ensure prompt routing.

3 Information We Collect

gol88 collects Personal Data in the following categories depending on your level of interaction with the platform:

gol88 does not intentionally collect sensitive special-category data such as religious beliefs, political opinions, or health information. If any such data is incidentally disclosed during a support interaction, it will not be stored beyond the duration necessary to resolve the matter.

4 How We Collect Your Data

gol88 collects Personal Data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions.
• Automated technologies: When you visit gol88.lat, our servers automatically record Technical Data and Usage Data through cookies, web beacons, pixel tags, and server log files. See Clause 8 for full details on our cookie practices.
• Third-party payment processors: When you initiate a deposit or withdrawal via a local bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment provider may share transaction confirmation data with gol88 to facilitate the transaction.
• Identity verification partners: If gol88 engages a third-party KYC service to assist with identity verification, that partner may share verification results (pass/fail and identity confirmation) with gol88. The underlying documentation is processed by the KYC partner subject to their own privacy policy.
• Game studios: Licensed third-party game providers (such as Pragmatic Play, Evolution Gaming, and Spribe) may share aggregated technical session data with gol88 for platform performance and fairness monitoring purposes. This data does not include personal identifiers beyond the gol88 Member account ID.

5 Legal Basis for Processing

gol88 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the gol88 Terms and Conditions — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, financial record-keeping requirements, and fraud prevention obligations. This includes the retention of KYC documentation and transaction records.
• Legitimate interests: Processing carried out to advance the legitimate business interests of gol88, including platform security monitoring, fraud detection, responsible gaming enforcement, and product improvement analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit, freely given consent — primarily for the delivery of marketing communications. You may withdraw consent for marketing at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email.

6 How We Use Your Information

gol88 uses the Personal Data it collects for the following specific purposes:

• Account administration: Creating and maintaining your gol88 account, verifying your identity and age (21+ requirement), and managing account security.
• Transaction processing: Facilitating deposits via local Indonesian banks and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) and processing withdrawal requests to your registered payment method.
• Platform delivery: Providing access to gol88 Services including the Sportsbook, live casino, slot games, and Bandar Q, and ensuring the stable and secure operation of those products.
• Customer support: Responding to enquiries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour, enforcing deposit limits and self-exclusion settings requested by Members, and complying with responsible gaming obligations.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as described in the gol88 Terms and Conditions.
• Legal compliance: Meeting record-keeping, reporting, and audit obligations under applicable laws and regulatory requirements.
• Marketing communications: Sending you information about gol88 promotions, bonuses, and new product features — only where you have provided consent or where gol88 has a legitimate interest in doing so. You may opt out at any time.
• Platform analytics and improvement: Analysing aggregated and anonymised usage data to improve platform design, game selection, payment flows, and customer experience.

7 Data Sharing and Disclosure

gol88 does not sell, rent, or trade your Personal Data to any third party for their independent commercial purposes. We may share your data with third parties only in the following limited circumstances:

• Payment processors and banking partners: To process deposits and withdrawals, gol88 shares necessary transaction data with the relevant payment provider (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA). These parties act as independent data controllers for their own regulated financial services and are subject to strict banking and financial privacy obligations.
• KYC and identity verification partners: gol88 may engage regulated third-party KYC services to assist with Member identity and age verification. These partners process only the minimum data necessary to perform verification and are bound by confidentiality and data protection obligations.
• Game studio partners: Licensed content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) receive the gol88 Member account identifier and session parameters required to deliver their games. These providers do not receive your full personal profile.
• Technology and infrastructure providers: gol88 uses third-party cloud hosting, content delivery, and cybersecurity services to operate the platform. These providers process data only on gol88's instructions and under contractual data processing agreements.
• Legal and regulatory authorities: gol88 may disclose Personal Data to law enforcement agencies, courts, regulatory bodies, or other public authorities where required by law, in response to a valid legal request, or where gol88 reasonably believes disclosure is necessary to protect the rights, property, or safety of gol88, its Members, or the public.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of gol88's assets, Member data may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such change in data controller via the registered email address.

In all cases where Personal Data is shared with third parties, gol88 requires appropriate contractual safeguards to be in place and limits data sharing to the minimum necessary for the stated purpose.

8 Cookies and Tracking Technologies

gol88 uses cookies and similar tracking technologies on the gol88.lat domain to ensure the platform functions correctly and to improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to operate. They manage your login session, maintain your Wallet state, and enable core navigation. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how Members interact with gol88.lat — such as which pages are visited most frequently, how long sessions last, and where errors occur. This data is used to improve platform performance and user experience.
• Functional cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience across sessions.
• Targeting and marketing cookies: With your consent, these cookies are used to deliver relevant promotional content and to track the effectiveness of gol88 marketing campaigns. You may withdraw consent for targeting cookies at any time.

Most web browsers allow you to manage cookie preferences through the browser settings menu. Note that disabling strictly necessary cookies will affect your ability to log in to and use the gol88 platform normally. Disabling performance or targeting cookies will not affect your access to core platform features.

9 Data Retention

gol88 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. The following retention guidelines apply:

• Account and identity data: Retained for the duration of your gol88 membership and for a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping obligations.
• KYC documentation: Retained for the duration of membership and for five (5) years post-closure, in line with AML obligations. Physical copies of documents are not held; only secure digital records are maintained.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality monitoring.
• Marketing consent records: Retained for the duration of your active consent and for one (1) year following withdrawal of consent, as evidence of the consent history.
• Technical and usage data: Aggregated and anonymised after thirteen (13) months, after which the data no longer constitutes Personal Data and may be retained indefinitely for platform analytics purposes.

When Personal Data is no longer required and no legal retention obligation applies, gol88 securely deletes or irreversibly anonymises the data.

10 Data Security

gol88 employs a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and gol88.lat.
• Encrypted storage of sensitive data fields, including financial identifiers and KYC documentation, using industry-standard encryption at rest.
• Access controls: Personal Data is accessible only to gol88 staff and authorised third-party processors who require it to perform their specific role. Access is governed by the principle of least privilege.
• Multi-factor authentication on all internal administrative systems that have access to Member data.
• Regular security audits and penetration testing conducted by independent third-party security professionals.
• Intrusion detection and monitoring systems that flag anomalous access patterns in real time.

11 Your Rights

As a gol88 Member, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request". We will respond within 30 days of receiving a valid request.

Please note that some rights are subject to exceptions. For example, gol88 may be unable to delete certain data where retention is required by law (such as AML record-keeping obligations) or where deletion would impair the resolution of an active dispute. gol88 will clearly explain any applicable exception when responding to your request.

12 Children and Minors

gol88 operates a strict minimum age policy. The platform is intended exclusively for individuals who are 21 years of age or older. gol88 does not knowingly collect Personal Data from any person under the age of 21.

If gol88 becomes aware that a Member account has been registered by or is being used by a person under 21, the account will be immediately suspended, any balance will be reviewed in accordance with the gol88 Terms and Conditions, and all associated Personal Data will be securely deleted to the extent permitted by applicable law.

If you have reason to believe that a person under 21 has registered a gol88 account, please notify us immediately at [email protected].

13 International Data Transfers

gol88 operates as an international platform. In the course of providing the Services, your Personal Data may be transferred to and processed in countries other than Indonesia, including countries where data protection laws may differ from those in Indonesia.

When gol88 transfers Personal Data internationally, we ensure that appropriate safeguards are in place, which may include:

• Contractual clauses that impose data protection obligations on the receiving party equivalent to those applied by gol88.
• Transfers to recipients in countries that have been determined to provide an adequate level of data protection.
• Processing by third-party game studios (such as Pragmatic Play and Evolution Gaming) under contractual data processing agreements that restrict the use of transferred data to the provision of contracted services.

By using the gol88 platform, you acknowledge that your Personal Data may be transferred and processed internationally as described in this clause.

14 Amendments to This Policy

gol88 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify you by posting a prominent notice on gol88.lat and, where practicable, by sending a notification to your registered email address.

The version of this Privacy Policy bearing the most recent "Last updated" date at the top of this page is the version currently in force. Your continued use of the gol88 platform following the effective date of any revision constitutes your acknowledgement of the updated policy. If you do not agree with any amendment, you must cease using the platform and may request account closure by contacting customer support.

15 Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way gol88 handles your Personal Data, please contact our Data Privacy team using the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" or "Privacy Complaint" to ensure prompt routing to the appropriate team.
• Live Chat: Available 24 hours a day, 7 days a week, directly within your gol88 account dashboard. For routine privacy queries, live chat is the fastest resolution channel.

gol88 will acknowledge all privacy-related communications within 24 hours and will provide a substantive response within 30 calendar days. If your complaint relates to a potential data breach or security incident, please mark your communication as urgent and gol88 will escalate accordingly.

If you are not satisfied with gol88's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.