cuki88 Privacy
Policy

The data controller responsible for your personal information collected through the cuki88 Platform is the legal entity operating cuki88, which holds an international gaming licence and operates the website at https://cuki88.app ("cuki88", "we", "us", "our").

For all data-related enquiries, including requests to exercise your rights under this Policy, you may contact our Data Protection team directly via live chat on the Platform or by email at the address provided in Clause 14 of this Policy.

cuki88 collects personal data in the following categories:

We do not collect or store full payment card numbers. Where card payments are processed, tokenisation is handled exclusively by our PCI-DSS-compliant payment partners, and cuki88 receives only a masked card reference.

We collect personal data through the following channels:

• Direct registration: Information you provide when creating your cuki88 account, including your name, date of birth, email address, and Indonesian residential address.
• KYC verification: Identity documents (e.g., KTP — Indonesia's national identity card, passport, or driver's licence) that you upload in connection with our age and identity verification process.
• Financial transactions: Bank account and e-wallet details you provide when making deposits or requesting withdrawals through supported Indonesian payment channels.
• Platform activity: Data collected automatically as you navigate the Platform, place bets, interact with games, and use account features.
• Cookies and similar technologies: Session and persistent cookies, pixel tags, and local storage objects as described in Clause 10 of this Policy.
• Customer support interactions: Information you share when contacting our support team via live chat, email, or any other communication channel we make available.
• Third-party providers: Identity verification bureaus and fraud-prevention services may supply supplementary verification data to confirm the accuracy of information you have provided.

cuki88 processes your personal data for the following purposes:

1. Account creation and management: To register your account, authenticate your identity at login, maintain your Wallet balance, and manage your account settings and preferences.
2. Age and identity verification (KYC): To confirm that you are at least 21 years of age and are who you claim to be, as required by our licensing obligations and responsible gaming commitments.
3. Transaction processing: To execute deposits and withdrawals in IDR via your chosen Indonesian bank or e-wallet, reconcile your Wallet balance, and maintain accurate financial records.
4. Service delivery: To provide access to sports betting markets (including BRI Liga 1, EPL, La Liga, and esports), live casino games, slot titles, and togel (Indonesia's traditional numbers lottery) draw results.
5. Bonus and promotion administration: To assess your eligibility for bonuses, credit promotional awards, track Wagering Requirement progress, and prevent bonus abuse.
6. Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, unauthorised access, and other prohibited conduct outlined in our Terms & Conditions.
7. Responsible gaming: To enforce self-imposed limits and exclusions, monitor for indicators of problem gambling, and fulfil our duty of care obligations as a licensed operator.
8. Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services through interaction analysis.
9. Legal and regulatory compliance: To comply with applicable international gaming regulations, anti-money-laundering obligations, and any lawful requests from competent authorities.
10. Platform improvement: To analyse aggregated, anonymised usage patterns and improve the design, performance, and content of the Platform.
11. Marketing communications: To send you promotional offers, bonus notifications, and event updates by email or in-app notification, where you have consented or where we have a legitimate interest in doing so. You may opt out at any time.

cuki88 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our obligations to you under the Terms & Conditions — including account management, transaction processing, and service delivery — is carried out because it is necessary for the performance of the contract between you and cuki88.
• Legal obligation: Certain processing activities — particularly KYC verification, anti-money-laundering record keeping, and responses to regulatory enquiries — are carried out because cuki88 is required to do so under applicable law or our licensing conditions.
• Legitimate interests: We process Technical Data and Usage Data for fraud prevention, Platform security, and service improvement on the basis that these are legitimate interests of cuki88 that are not overridden by your privacy interests.
• Consent: Where we send you direct marketing communications beyond the scope of transactional notifications, we rely on your consent. You may withdraw consent at any time by unsubscribing via the link in any marketing email or by contacting support.

cuki88 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: We share your financial data (bank account details, e-wallet identifiers, transaction amounts) with Indonesian payment service providers and our acquiring partners solely to execute your requested deposit or withdrawal transactions.
• KYC and identity verification providers: Your identity documents and personal details may be shared with third-party verification bureaus for the purpose of age and identity confirmation. These providers are contractually bound to process your data solely for verification purposes.
• Game content providers: Game studios such as Evolution Gaming, Pragmatic Play, Pocket Games Soft, Spribe, NetEnt, and Microgaming may receive your account identifier and gaming session data to facilitate gameplay, calculate results, and enforce bet limits. They do not receive your full identity or financial data.
• Fraud prevention and security services: We may share Technical Data and Account Data with specialist fraud-detection platforms to identify and prevent suspicious activity across our systems.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, court order, or binding regulatory direction, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of cuki88, our Members, or the public.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all assets of cuki88, your personal data may be transferred to the acquiring entity, provided that entity agrees to be bound by privacy obligations no less protective than those set out in this Policy. You will be notified of any such transfer by email.

As an internationally licensed operator, cuki88 may process and store your personal data on servers located outside Indonesia. When we transfer personal data internationally, we take appropriate safeguards to ensure that your data receives a level of protection consistent with this Policy, including:

• Entering into data processing agreements with recipient service providers that incorporate standard contractual clauses or equivalent data transfer mechanisms.
• Conducting due diligence on the data protection practices of all third-party providers to whom we transfer personal data.
• Restricting access to personal data transferred internationally on a strict need-to-know basis.

By using the cuki88 Platform, you acknowledge that your data may be transferred to and processed in countries outside Indonesia. We will always handle your data in accordance with this Privacy Policy regardless of where it is processed.

cuki88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required by applicable law or our licensing obligations. The following general retention periods apply:

When your personal data is no longer required for any of the above purposes, it will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

cuki88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and the cuki88 Platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data, including identity documents and financial account details, is encrypted at rest using industry-standard encryption algorithms.
• Password security: Account passwords are stored as salted cryptographic hashes. cuki88 staff cannot view your password in plain text under any circumstances.
• Access controls: Access to Member personal data within cuki88's internal systems is restricted on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations and regular security training.
• Two-factor authentication: cuki88 offers optional two-factor authentication (2FA) for Member accounts. We strongly recommend that all Members enable this feature to enhance account security.
• Penetration testing and audits: Our Platform and infrastructure undergo regular security assessments conducted by independent third-party specialists.
• Incident response: In the event of a data breach that poses a risk to your rights, cuki88 will notify affected Members without undue delay and will take immediate remediation steps.

cuki88 uses cookies and similar technologies to operate the Platform, remember your preferences, and understand how you use our services. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without affecting core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and game display options to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how Members navigate the Platform — which pages they visit most, how long they spend on each section, and where they exit. This data is used solely to improve Platform design and performance.
• Security and fraud-prevention cookies: Help us identify suspicious behaviour patterns and protect Member accounts from unauthorised access attempts.

cuki88 does not use third-party advertising or retargeting cookies that track your activity across other websites for the purpose of serving you targeted advertisements elsewhere on the internet.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and completing financial transactions.

The cuki88 Platform is strictly intended for adults aged 21 years and older. cuki88 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in our account registration and KYC processes.

If cuki88 becomes aware that personal data has been collected from a person under 21 without appropriate parental or guardian consent, we will promptly delete that data, close the associated account, and void any transactions conducted from that account.

If you are a parent or guardian and believe that your child under 21 has registered an account on the cuki88 Platform without your knowledge, please contact us immediately at the address provided in Clause 14 so that we can take appropriate action without delay.

As a Member whose personal data is processed by cuki88, you have the following rights. To exercise any of these rights, please contact our support team using the details in Clause 14. We will respond to all verifiable requests within 30 days.

Please note that certain rights may be limited where exercising them would conflict with our legal obligations — for example, KYC and anti-money-laundering record-keeping requirements may prevent us from deleting certain data even upon request. We will always explain any such limitation clearly when responding to your request.

cuki88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. When we make material changes, we will notify you by email to your registered address and by a prominent notice on the Platform at least 7 days before the revised Policy takes effect.

The "Last Revised" date at the top of this Policy will always reflect the date on which the most recent version was published. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly from the Platform. Average response time under 90 seconds. This is the fastest channel for urgent data requests.
• Email: [email protected] (plain text only — not a clickable link). Please use the subject line "Privacy Request — [Your Username]" for all data-related enquiries. We respond within 24 hours and resolve requests within 30 days.

Our support team includes Indonesian-speaking agents available across all Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) — so you can communicate your privacy concerns in your preferred language at any time of day.