cipta88 Casino & Sportsbook Data Care

This page describes what we collect when you use cipta88 and how we keep that data protected. Our privacy practices centre on transparency: we collect only information necessary to verify your identity, process deposits and withdrawals, and comply with anti-money-laundering regulations. We do not sell your personal data to third parties, and we do not use your betting history for marketing purposes without your consent.

We understand that account holders on cipta88 value discretion. Whether you're a Liga 1 football bettor in Jakarta, a live-casino player in Surabaya, or an esports enthusiast in Bandung, your personal information remains confidential. We encrypt all sensitive data in transit and at rest, and we restrict access to your information to cipta88 staff members who have a genuine need to know (support teams, finance, compliance).

Our data retention practices follow legal requirements and operational necessity. After your account closes, we retain KYC documents and transaction records for a standard period (typically two years) to satisfy regulatory obligations, then delete them securely.

What Data We Collect on cipta88

When you open a cipta88 account, we collect personal identification information: your full legal name, date of birth, national ID number, email address, and phone number. During Know-Your-Customer (KYC) verification, we request a government-issued ID photo (national identity card, passport, or driver's licence) and proof of residential address (utility bill, bank statement, or similar). We also collect payment method details when you make deposits—for example, your DANA, e-wallet, mobile banking, local payment, or online payment wallet identifier, or your bank account number if you transfer via e-wallet, mobile banking, local payment, or online payment.

We collect transactional data: every deposit, withdrawal, and wager you place on cipta88 is logged with the amount, timestamp, and outcome. This record-keeping is necessary for settlement, account reconciliation, and dispute resolution. We also collect device and browsing information: your device type (iPhone, Android, desktop), IP address, browser type, and the pages you visit on cipta88. This data helps us detect fraud, optimize our platform performance, and understand which features users interact with most frequently.

Cookies and tracking: We use cookies to remember your login session, store your language preference, and track which games or betting markets you view. These cookies are non-essential and can be disabled in your browser settings without breaking core functionality.

How We Use Your Data on cipta88

We use your personal information primarily for account verification and regulatory compliance. During KYC verification, we compare your ID photo against your signup name and cross-reference your address against public records to prevent fraud and money laundering. Your name and account history are reviewed if we detect suspicious activity—such as rapid-fire deposits and withdrawals, unusual betting patterns, or attempts to open multiple accounts.

We use your contact information (email and phone) to send account notifications: confirmation of deposits, withdrawal status updates, and alerts if we detect unauthorized login attempts. We may also contact you to confirm your identity if we cannot verify your KYC documents. We do not send marketing emails or promotional messages unless you explicitly opt in; even then, you can unsubscribe at any time by clicking the unsubscribe link in any message.

We use your transactional data to process wagers, settle payouts, and generate account statements. Our finance team uses aggregated, anonymized betting data to understand market trends and ensure fair odds across Liga 1, Piala Indonesia, Piala AFF, Champions League, and other markets. We never share your individual betting preferences with third parties for commercial purposes.

KYC
Know-Your-Customer verification; required to prevent unauthorized access and comply with anti-money-laundering regulations before withdrawals are allowed.
IP address
Your internet protocol address; we log this to detect duplicate accounts, fraud patterns, and to ensure you're accessing cipta88 from a jurisdiction where our services are legal.
Session token
A cryptographic identifier stored on your device after login; we use it to keep you logged in and to prevent unauthorized access to your account.

Third-Party Processors and Data Sharing

We use third-party service providers to operate cipta88. Payment processors (such as your e-wallet provider, wallet operator, or bank) receive your payment method details when you deposit or withdraw; these processors are contractually bound to handle your data securely and to use it only for payment processing. Our cloud infrastructure provider stores our servers and backups in geographically distributed locations; server locations may sit outside your jurisdiction, but all data is encrypted in transit and at rest.

We share customer data with law enforcement, tax authorities, and regulatory bodies only when legally required to do so. We do not share your information with third-party marketers, data brokers, or advertisers. If a third-party acquisition or merger involves cipta88, we will notify you before transferring your data to the new entity and offer you the option to close your account if you object.

Your Rights and Our Commitments on cipta88

You have the right to access your personal data held by cipta88. Contact our support team via email with a specific request, and we will provide you with a copy of your information within 15 business days. You may also request correction of inaccurate data—for example, if your address has changed or your name was misspelled during registration. We will update your records and notify you once the change is complete.

You have the right to request deletion of your personal data, subject to legal retention requirements. If you close your cipta88 account, we retain your KYC documents and transaction history for two years to satisfy anti-money-laundering regulations; after that period expires, we delete your data securely. If you wish to exercise data deletion rights before the standard retention period ends, contact our support team and we will accommodate your request to the extent legally permitted.

Data Security and Encryption on cipta88

We protect your data through multiple overlapping security measures. All connections between your device and our servers use TLS 1.2 encryption, the same standard that secures online banking. Your password is hashed (not stored plaintext) using modern cryptographic algorithms; even our staff cannot recover your password by examining our database. Sensitive information such as your DANA PIN or bank credentials is never stored on our servers—instead, payment gateways maintained by your wallet provider or bank handle those details directly.

We conduct quarterly security audits by independent testing laboratories to identify vulnerabilities. Any detected issues are patched immediately. We maintain geographically redundant backups of your data; if one data centre experiences an outage, we can restore your account from secondary servers within hours. Our data centres are protected by physical security measures (access cards, surveillance) and network firewalls that restrict unauthorized access.

Cookies, Device Tracking, and Analytics

We use cookies to store non-sensitive information: your login session token, language preference, and theme setting (light or dark mode). These cookies are encrypted and expire after a period of inactivity (typically subject to verification for session cookies). Most cookies are functional—they enable core cipta88 features—but some are analytical. We use analytics cookies to track which pages users visit, which games are most popular, and where users encounter technical problems. This helps us improve our platform and identify bugs.

You can disable cookies in your browser settings; this will not prevent you from using cipta88, but some convenience features (such as remembering your language choice) will not work. We do not respond to "Do Not Track" browser signals, as these lack standardized implementation across browsers.

International Data Transfers and Jurisdiction

Our servers and data backups may be located in countries outside Indonesia. When your data crosses borders—for example, when a backup is stored on servers in another jurisdiction—it remains encrypted and is protected by the same security standards we apply domestically. You acknowledge that by using cipta88, you consent to international data transfers where necessary to operate our platform.

We at cipta88 operate only in jurisdictions where local law permits online gaming and wagering. By using our platform, you confirm that you are located in such a jurisdiction and that you have verified access eligibility under your local law. We do not collect data from users in prohibited jurisdictions; if we detect access from a restricted jurisdiction, we may restrict or close your account without notice.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Material changes will be communicated to you via email at least 30 days before taking effect. Your continued use of cipta88 after that notification period constitutes your acceptance of the updated policy. If you do not accept a change, you should close your account.

Contact Us About Your Privacy on cipta88

If you have questions about our privacy practices, wish to exercise your data access or deletion rights, or believe we have mishandled your personal information, contact our support team via email. We will respond within 15 business days. If you believe cipta88 has violated your privacy rights and our internal process does not resolve your concern, you may pursue remedies available under local law in your jurisdiction.

cipta88 data protection team
Privacy & compliance officer

This privacy policy reflects our current practices as of this publishing. For the most current policy, visit cipta88's legal centre. Our commitment remains unchanged: your data is encrypted, access-restricted, and used only for the purposes described here.