1 Introduction
evo888 operates an online betting and live casino platform accessible at https://evo888.cam,
serving Indonesian players with sports betting, live casino games, togel
(Indonesia's traditional numbers lottery), slot gacor (high-payout slot games), and
sabung ayam (online cockfighting) markets. We recognize that privacy is fundamental
to trust, and we are dedicated to handling your personal data responsibly, transparently,
and in compliance with internationally recognized data protection principles.
This Privacy Policy applies to all Members who have registered an account on the evo888
Platform and to visitors who access public areas of our website. It should be read in
conjunction with our Terms & Conditions, which govern
your use of the Platform as a whole.
2 Data Controller
For the purposes of applicable data protection law, the data controller responsible for
your personal information is evo888, the entity operating the Platform at https://evo888.cam.
All queries regarding the processing of your personal data should be directed to our Data
Protection Officer via the contact details provided in Section 15 of this Privacy Policy.
3 Information We Collect
evo888 collects several categories of personal information to provide, secure, and improve
the Services. The specific data we collect depends on how you interact with the Platform.
3.1 Information You Provide Directly
-
Registration Data: Full legal name (as it appears on your Kartu Tanda Penduduk
or equivalent identity document), date of birth, residential address, Indonesian mobile phone
number, email address, and username/password combination.
-
Payment Information: Bank account details (account holder name, bank name,
account number) or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers)
used for deposits and withdrawals. evo888 does not store full card numbers or CVV codes for
card transactions processed through third-party payment gateways.
-
Identity Verification Documents (KYC): Photographic copies of
government-issued identity documents (KTP, passport), selfie photographs with identity
documents, proof of address documents (utility bills, bank statements), and source-of-funds
declarations for enhanced due diligence where applicable.
-
Communication Records: Correspondence with evo888 customer support,
including live chat transcripts, email threads, and any attachments you provide when
submitting queries or complaints.
3.2 Information Collected Automatically
-
Transaction History: Complete records of all deposits, withdrawals,
wagers placed, bet outcomes, bonus credits, and account balance movements.
-
Device and Log Data: IP address, device type, operating system,
browser type and version, screen resolution, time zone setting (WIB / WITA / WIT),
referring URL, pages visited, timestamps of access, and session duration.
-
Geolocation Data: Approximate geographic location inferred from IP
address to verify residency in Indonesia and detect fraudulent access attempts from
restricted jurisdictions.
-
Cookie and Tracking Data: Information collected via cookies, web
beacons, and similar tracking technologies as detailed in Section 10.
4 How We Use Your Data
evo888 processes your personal information for the following purposes, each of which is
essential to delivering a secure, compliant, and high-quality gaming experience:
| Purpose |
Description |
| Account Management |
To create and maintain your evo888 Member account, authenticate your identity at login, and enable account recovery where you have forgotten credentials. |
| Service Delivery |
To process deposits and withdrawals, settle bets, credit winnings and bonuses, apply promotional offers, and maintain accurate account balance records. |
| Identity Verification (KYC) |
To verify your age (21+ enforcement), confirm your identity matches your registered payment methods, and satisfy anti-money-laundering (AML) and counter-terrorism financing (CTF) obligations under our international gaming licence. |
| Fraud Prevention & Security |
To detect and prevent fraudulent activity, multi-accounting, bonus abuse, match-fixing, collusion, and unauthorized account access. We analyze transaction patterns, device fingerprints, and IP addresses to identify suspicious behavior. |
| Customer Support |
To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance. Support interactions are logged for quality assurance and training purposes. |
| Responsible Gaming |
To monitor for problem gambling indicators, enforce self-exclusion orders, apply deposit and loss limits you have configured, and provide access to responsible gaming tools described in our Responsible Gaming Policy. |
| Marketing Communications |
To send promotional offers, bonus notifications, new game announcements, and newsletters where you have consented to receive marketing. You may opt out at any time via the unsubscribe link in emails or your account settings. |
| Platform Improvement |
To analyze aggregate usage patterns, optimize site performance, test new features, personalize your experience (e.g., recommending popular games), and conduct A/B testing on layout and functionality. |
| Legal Compliance |
To comply with legal obligations under our gaming licence, respond to lawful requests from regulatory authorities or law enforcement, and establish, exercise, or defend legal claims. |
5 Legal Basis for Processing
evo888 processes your personal data on the following legal bases, depending on the specific
processing activity:
-
Contractual Necessity: Processing is necessary to perform the contract
between you and evo888 under our Terms & Conditions.
This includes account management, payment processing, bet settlement, and service delivery.
-
Legal Obligation: Processing is required to comply with legal obligations
to which evo888 is subject, including KYC/AML/CTF verification, tax reporting, and
regulatory audit requirements under our international gaming licence.
-
Legitimate Interests: Processing is necessary for evo888's legitimate
business interests, including fraud prevention, security, platform improvement, and
internal analytics, provided these interests do not override your fundamental rights and freedoms.
-
Consent: Where processing is based on your consent (e.g., marketing
communications, optional analytics cookies), you have the right to withdraw consent at
any time without affecting the lawfulness of processing conducted prior to withdrawal.
6 Data Sharing & Disclosure
evo888 does not sell your personal data to third parties for marketing purposes. We share
your information only in the limited circumstances described below:
-
Payment Processors: Your payment information is shared with our
Indonesian banking and e-wallet partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP,
Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) to process
deposits and withdrawals. These partners are contractually obligated to process your
data securely and in accordance with applicable banking regulations.
-
Game Providers: Pseudonymized gameplay data (bet history, session
duration, game outcomes) may be shared with our licensed game studios (Pragmatic Play,
Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) for game integrity
monitoring, performance analytics, and technical support. Your name and contact details
are not shared with game providers.
-
Service Providers: We engage third-party vendors for cloud hosting,
email delivery, customer support ticketing systems, fraud detection, and data analytics.
These vendors are bound by data processing agreements that require them to process your
data only on evo888's instructions and to apply security measures equivalent to those
described in Section 8.
-
Regulatory Authorities: evo888 may disclose your information to gaming
regulators, law enforcement agencies, or tax authorities where required by law or where
reasonably necessary to comply with legal process, enforce our Terms & Conditions,
or protect the rights, property, or safety of evo888, our Members, or the public.
-
Business Transfers: In the event of a merger, acquisition, sale of
assets, or bankruptcy, your personal data may be transferred to the acquiring entity
as part of the transaction. You will be notified by email and/or prominent notice on
the Platform of any change in data controller and any new choices regarding your information.
7 Data Retention
evo888 retains your personal information for as long as necessary to fulfil the purposes
for which it was collected, or as required by applicable law. The specific retention periods
vary by data category:
-
Account Data: Retained for the duration of your active membership,
plus 6 years after account closure to comply with tax, audit, and
AML record-keeping obligations.
-
Transaction Records: Retained for 6 years from the
date of the transaction to satisfy financial auditing and regulatory reporting requirements.
-
KYC Documents: Retained for 6 years after account
closure, or longer if required by AML/CTF laws applicable in the jurisdiction of our
gaming licence.
-
Communications Records: Customer support transcripts are retained for
3 years for quality assurance, dispute resolution, and training purposes.
-
Marketing Data: Retained until you unsubscribe from marketing
communications, or for 2 years from your last interaction with a
marketing message if you remain subscribed but inactive.
Upon expiry of the applicable retention period, your personal data will be securely deleted
or anonymized such that it can no longer be attributed to you as an individual.
8 Security Measures
evo888 implements industry-standard technical and organizational security measures to
protect your personal data against unauthorized access, alteration, disclosure, or destruction:
-
Encryption in Transit: All data transmitted between your device and
evo888's servers is encrypted using 256-bit TLS (Transport Layer Security)
encryption. You can verify our TLS certificate by clicking the padlock icon in your browser's
address bar.
-
Encryption at Rest: Sensitive data stored in our databases, including
KYC documents and payment information, is encrypted at rest using AES-256 encryption.
-
Access Controls: Personal data is accessible only to authorized evo888
personnel on a strict need-to-know basis, enforced through role-based access control (RBAC)
and multi-factor authentication (MFA) for administrative systems.
-
Secure Infrastructure: evo888 operates on secure, access-controlled cloud
infrastructure with firewalls, intrusion detection systems, and regular security audits
conducted by independent third-party cybersecurity firms.
-
Password Security: Member passwords are hashed using bcrypt with individual
salts. evo888 never stores passwords in plain text and cannot retrieve your password if
you forget it — only password resets are available.
-
Regular Backups: Data is backed up daily to secure, geographically
distributed locations to ensure business continuity and disaster recovery capability.
Your Responsibility:
While evo888 implements robust security measures, you remain responsible for safeguarding
your account credentials. Never share your password, enable two-factor authentication where
available, and log out from shared devices. Report any suspected unauthorized access immediately
via
[email protected].
9 Your Privacy Rights
Depending on your jurisdiction, you may have the following rights with respect to your
personal data. evo888 will facilitate the exercise of these rights where they apply under
applicable law:
-
Right of Access: You may request a copy of the personal data evo888
holds about you, along with information about how it is being processed.
-
Right to Rectification: If your personal data is inaccurate or incomplete,
you may request that evo888 correct or update it. You can edit some information directly
in your account settings.
-
Right to Erasure ("Right to be Forgotten"): You may request deletion
of your personal data where it is no longer necessary for the purposes for which it was
collected, where you withdraw consent (if consent was the legal basis), or where you
object to processing. This right is subject to evo888's legal obligations to retain data
for regulatory compliance (see Section 7).
-
Right to Restrict Processing: You may request that evo888 restrict
processing of your personal data in certain circumstances, such as where you contest
the accuracy of the data or object to processing.
-
Right to Data Portability: Where processing is based on consent or
contract and carried out by automated means, you may request a copy of your personal
data in a structured, commonly used, machine-readable format (CSV or JSON).
-
Right to Object: You may object to processing of your personal data
where the legal basis is legitimate interests. You may also object to direct marketing
at any time by clicking "Unsubscribe" in marketing emails or updating your account preferences.
-
Right to Withdraw Consent: Where processing is based on your consent,
you may withdraw consent at any time. Withdrawal does not affect the lawfulness of
processing conducted prior to withdrawal.
-
Right to Lodge a Complaint: If you believe evo888 has processed your
personal data in violation of applicable data protection law, you have the right to
lodge a complaint with your local data protection authority.
To exercise any of these rights, please contact our Data Protection Officer at
[email protected] with the subject line
"Privacy Rights Request". We will respond to all requests within 30 days.
10 Cookies & Tracking Technologies
evo888 uses cookies and similar tracking technologies (web beacons, pixels, local storage)
to enhance your experience, analyze site usage, and deliver personalized content. A cookie
is a small text file stored on your device when you visit a website.
Types of Cookies We Use:
-
Essential Cookies: Required for the Platform to function. These cookies
enable core features such as secure login, session management, and transaction processing.
They cannot be disabled without severely impairing functionality.
-
Performance Cookies: Collect anonymous information about how visitors
use the Platform, including pages visited, error messages encountered, and time spent
on pages. We use this data to improve site performance and user experience.
-
Functionality Cookies: Remember your preferences (language, time zone,
display settings) to provide a more personalized experience on repeat visits.
-
Targeting/Advertising Cookies: Track your activity across websites to
deliver personalized advertisements and measure ad campaign effectiveness. These cookies
are set by third-party advertising networks with whom evo888 partners. You may opt out
of targeted advertising by adjusting your cookie preferences in account settings or
using browser-level opt-out mechanisms.
Most browsers allow you to control cookies through their settings. You can block or delete
cookies, but doing so may impair certain Platform features. For more information on managing
cookies, visit your browser's help documentation.
11 Third-Party Services
The evo888 Platform integrates third-party services (payment gateways, game studios,
analytics tools) that may collect information about you independently of evo888. These
third parties have their own privacy policies, and evo888 is not responsible for their
data practices. We recommend reviewing the privacy policies of:
- Your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank
Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja)
- Game studios whose titles you play (Pragmatic Play, Evolution Gaming, NetEnt,
Microgaming, Spribe, Pocket Games Soft)
- Analytics providers (Google Analytics, if applicable — evo888 uses IP anonymization
to minimize data exposure)
The evo888 Platform may contain links to external websites or social media pages. evo888
is not responsible for the privacy practices or content of external sites. We encourage
you to review their privacy policies before providing any personal information.
12 International Data Transfers
Your personal information may be transferred to, stored, and processed in countries outside
Indonesia where evo888's servers, service providers, or business partners are located.
These countries may have data protection laws that differ from Indonesian law.
Where evo888 transfers personal data outside Indonesia, we ensure an adequate level of
protection through:
- Contractual data processing agreements incorporating standard data protection clauses
approved by recognized data protection authorities
- Ensuring that third-party processors are certified under recognized international
frameworks such as ISO 27001 (Information Security Management)
- Conducting due diligence on the data protection and security practices of international
service providers before engagement
13 Children's Privacy
The evo888 Platform is intended for adults aged 21 years and older.
evo888 does not knowingly collect personal information from individuals under 21 years
of age. If we become aware that a Member is under 21, we will immediately suspend the
account, void all transactions, and return deposited funds (minus any bonus amounts credited)
to the source account. KYC documents are subsequently deleted.
If you are a parent or guardian and believe your child has provided personal information
to evo888, please contact us immediately at [email protected]
so we can take appropriate action.
14 Changes to This Privacy Policy
evo888 may update this Privacy Policy from time to time to reflect changes in our data
practices, legal requirements, or Platform features. We will notify you of material changes
by email to your registered address and/or by displaying a prominent notice on the Platform
at least 7 days prior to the changes taking effect.
Your continued use of the Platform after the effective date of a revised Privacy Policy
constitutes your acceptance of the changes. If you do not agree to the revised policy,
you must close your account before the effective date. The current version of this Privacy
Policy is always accessible at https://evo888.cam/privacy-policy and displays the "Last
Updated" date at the top of the page.
15 Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights,
or need to contact our Data Protection Officer, please reach out via:
Data Protection Officer
[email protected]
Subject Line: "Privacy Inquiry" or "Privacy Rights Request"
We aim to respond to all privacy-related inquiries within 30 calendar days
of receipt. For urgent account security matters, please mark your email "URGENT — Account
Security" and we will prioritize your request.