Privacy Policy — slo88

In this Privacy Policy, the following terms have the meanings set out below:

2.1 This Privacy Policy applies to all Personal Data collected by slo88 through or in connection with the slo88 platform, including the website at https://slo88.app, any associated mobile browser interfaces, the account registration and KYC process, deposit and withdrawal transactions, customer support interactions, and any promotional or marketing communications sent by slo88.

2.2 This Policy is primarily directed at players located in Indonesia, which represents the core market served by the slo88 platform. Indonesian players may access slo88 using local payment channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. The data processing practices described in this Policy apply equally regardless of which Indonesian city or region you access the platform from, including Jakarta, Surabaya, Medan, Bandung, Bali, and Yogyakarta.

2.3 This Policy does not apply to third-party websites, services, or game studios whose content may be accessible through the slo88 platform. Those third parties operate their own independent privacy policies, and slo88 accepts no responsibility for their data practices.

3.1 Registration Data. When you create a slo88 account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify you are 21 years of age or older);
• Indonesian National Identity Card number (NIK from KTP) or passport number;
• Email address;
• Mobile phone number;
• Chosen username and encrypted password.

3.2 KYC Verification Data. As part of mandatory identity verification prior to withdrawal, we collect:

• Photographs or scans of government-issued identity documents (KTP or passport);
• Selfie photographs taken for liveness verification purposes;
• Bank account details or e-wallet account details (account number and registered name) to confirm payment method ownership.

3.3 Transaction Data. For every deposit and withdrawal processed through your slo88 account, we record:

• Transaction amount in IDR;
• Payment method used (e.g., BCA transfer, OVO, GoPay);
• Transaction timestamp in WIB;
• Transaction reference number and status;
• Running account balance before and after each transaction.

3.4 Gaming Activity Data. slo88 logs all wagering activity on your account, including:

• Games played, bet amounts, and outcomes;
• Session start and end times;
• Bonus claims, wagering progress, and bonus expiry events;
• Responsible gaming tool settings you have applied (deposit limits, session limits, cooling-off periods).

3.5 Technical & Device Data. When you access the slo88 platform, our servers automatically collect:

• IP address;
• Device type, operating system, and browser version;
• Screen resolution and language settings;
• Referring URL and pages visited within the slo88 site;
• Cookie identifiers and session tokens.

3.6 Support & Communications Data. When you contact slo88 customer support, we retain records of the interaction, including chat transcripts, email correspondence, and any documents or screenshots you share with our support team.

3.7 Data You Choose to Provide. You may voluntarily provide additional information, such as preferred communication language or promotional preferences, during your account lifecycle. This data is stored and used in accordance with this Policy.

slo88 uses your Personal Data for the following purposes:

4.1 Marketing Communications. slo88 may send you promotional emails or in-platform notifications about bonuses, new game releases, and seasonal offers relevant to the Indonesian market (such as Idul Fitri promotions or Ramadhan campaigns). You may opt out of marketing communications at any time by contacting customer support or updating your account notification preferences. Opting out of marketing does not affect transactional or account-essential communications.

slo88 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between slo88 and you as a registered player — including account creation, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and record-keeping obligations under our international gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, where we have obtained your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6.1 Service Providers. slo88 shares Personal Data with carefully selected third-party service providers who process data on our behalf and under our instructions. These include:

• Payment processing partners facilitating IDR transactions via Indonesian banks and e-wallets;
• KYC and identity verification technology providers;
• Cloud hosting and infrastructure providers;
• Customer support software providers;
• Fraud detection and cybersecurity vendors;
• Game studios (Evolution Gaming, Pragmatic Play, PG Soft, Spribe, NetEnt, Microgaming) — limited to the session and gameplay data required to deliver their games.

All service providers are contractually obligated to process Personal Data solely as directed by slo88, to maintain appropriate security standards, and not to use the data for their own commercial purposes.

6.2 Regulatory & Law Enforcement Disclosure. slo88 may disclose Personal Data to regulatory authorities, law enforcement agencies, or financial intelligence units where required to do so by law, court order, or as part of our AML and fraud-reporting obligations. Such disclosures are made only to the extent required and in compliance with applicable legal requirements.

6.3 Business Transfers. In the event that slo88 is involved in a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

6.4 No Sale of Data. slo88 does not sell, rent, lease, or otherwise commercialise your Personal Data to any third party for their own marketing or commercial use.

7.1 As an internationally operated platform, slo88 may transfer Personal Data to servers and service providers located outside of Indonesia. Where such transfers occur, slo88 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that described in this Policy.

7.2 Safeguards used for international transfers include contractual clauses that impose data protection obligations on recipients, and restricting transfers to jurisdictions that maintain internationally recognised data protection standards.

7.3 If you would like further information about the specific safeguards applied to any international transfer of your data, please contact slo88 at the email address provided in Section 15.

8.1 slo88 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

8.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Anonymised data may be retained for aggregate statistical or platform improvement purposes without time limit.

8.3 In certain circumstances — such as where data is subject to a legal hold, ongoing dispute, or regulatory investigation — slo88 may retain data beyond the standard retention periods set out above until the matter is resolved.

Subject to applicable law and slo88's legal obligations, you have the following rights in relation to your Personal Data held by slo88. To exercise any of these rights, contact slo88 via live chat or at the email address in Section 15. slo88 will respond to all valid rights requests within 30 calendar days.

• Right of Access: You may request a copy of the Personal Data slo88 holds about you, together with information about how it is being used.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected. You may also update certain registration details directly through your account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to slo88's legal retention obligations. Note that AML-required transaction records cannot be deleted before the mandatory 7-year retention period has elapsed.
• Right to Restrict Processing: You may request that slo88 limits the processing of your data in certain circumstances, such as while you contest the accuracy of the data or object to its use.
• Right to Data Portability: You may request a structured, machine-readable copy of Personal Data that you provided to slo88 and that is processed on the basis of your consent or for contractual performance.
• Right to Object: You may object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on slo88's legitimate interests, subject to those interests not overriding your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10.1 What We Use. The slo88 platform uses cookies and similar tracking technologies to operate core platform functionality, maintain your authenticated session, and collect analytics data that helps us improve the user experience.

10.2 Types of Cookies. The cookies used on the slo88 platform fall into the following categories:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your preferences such as display language, responsible gaming tool settings, and notification preferences across sessions.
• Analytics Cookies: Collect anonymised or pseudonymised data about how players navigate the platform — pages visited, session duration, and feature usage — to help us identify areas for improvement.
• Security Cookies: Used for fraud detection and bot prevention, tracking unusual access patterns or multiple account detection attempts.

10.3 Managing Cookies. You may configure your browser to block or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in to your slo88 account. Disabling functional cookies may affect your ability to save preferences. slo88 does not use cookies for cross-site advertising or third-party ad targeting.

11.1 The slo88 platform is strictly for adults aged 21 years and over. slo88 does not knowingly collect Personal Data from individuals under the age of 21. If slo88 becomes aware that Personal Data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all associated data will be deleted in accordance with our data deletion procedures, and any deposited funds will be returned to the originating payment method.

11.2 If you are a parent or guardian and believe that a minor has registered an account on slo88 or provided Personal Data to us, please contact our support team immediately via live chat or at the email address in Section 15. We will act promptly to investigate and remediate the situation.

12.1 slo88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the slo88 platform;
• AES-256 encryption for Personal Data and financial records stored on slo88 servers;
• Multi-factor authentication (MFA) options available for player accounts;
• Role-based access controls limiting internal access to Personal Data to authorised personnel only;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third parties;
• Automated intrusion detection and real-time monitoring of platform infrastructure;
• Secure, geographically redundant data storage to protect against data loss.

12.2 While slo88 takes every reasonable precaution to protect your data, no digital system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your own account credentials and for notifying slo88 immediately if you suspect any unauthorised access to your account.

12.3 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, slo88 will notify affected players without undue delay and in accordance with applicable notification requirements, providing details of the nature of the breach, the data affected, and the steps slo88 is taking to address it.

13.1 The slo88 platform may contain links to or integrations with third-party game studios and payment providers. Once you leave the slo88 platform or interact with a third-party service, this Privacy Policy no longer applies. slo88 is not responsible for the privacy practices, content, or data security of any third-party service. We encourage you to read the privacy policies of any third-party service before providing them with your Personal Data.

14.1 slo88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes to this Policy will be communicated to registered players via email and/or a prominent notice on the platform at least 7 calendar days before the changes take effect, except where immediate changes are required by law.

14.2 The "Last updated" date at the top of this page will be revised each time the Policy is amended. We recommend that you review this Policy periodically. Your continued use of the slo88 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

14.3 If you do not accept an updated version of this Privacy Policy, you may close your account and request withdrawal of any available balance by contacting customer support.

15.1 Data-Related Enquiries. For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a concern about how slo88 handles your Personal Data, please contact our Data Protection team via:

• Live Chat: Available 24/7 directly on the slo88 platform — the fastest route for most enquiries.
• Email: support at slo88 dot app (displayed as plain text — not a clickable link).

15.2 Response Times. slo88 acknowledges all data-related enquiries within 3 WIB business days and aims to resolve them fully within 30 calendar days. Complex requests may require additional time, in which case we will inform you of the extended timeline and provide a progress update.

15.3 Complaints. If you are dissatisfied with how slo88 has handled your Personal Data or responded to a rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. slo88 will cooperate fully with any such regulatory inquiry.