LEGAL REFERENCE

Your Data, Your Control

We built holiday88 around your account security and privacy. Every deposit through DANA, OVO, GoPay or QRIS, every table you join, and every bet you place stays protected...

EncryptedQRIS-ReadyGDPR-AlignedIndonesia-FocusedAccount-First

Enter Game Lobby Read FAQ

Privacy Policy Framework

holiday88 operates under Indonesian data protection standards and international compliance frameworks. We collect personal information — your name, email, phone number and payment details — only to verify your account, process withdrawals and prevent fraud. Your data is never sold to third parties. We use encryption for all transactions and store payment credentials separately from your profile. Access to your information is

restricted to authorised staff and trusted payment processors. You can request a data export or deletion at any time through your account settings or by contacting our support team.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Privacy Questions & Support

Email Support Send privacy concerns or data requests to our dedicated team. We respond within 48 hours and handle all requests in line with Indonesian data protection law.

Live Chat Chat with our support agents during lobby hours. They can walk you through privacy settings, data exports and account security features in real time.

Account Settings Manage your privacy preferences directly in your account dashboard. Update contact details, review login history and control marketing communications anytime.

EDITORIAL CLARITY

Privacy & Security Standards

SSL Encryption

All data transmitted between your device and our servers uses 256-bit SSL encryption. Payment details and personal information are protected from interception.

PCI DSS Compliance

We meet Payment Card Industry Data Security Standards. Your card and e-wallet details are tokenised and stored in secure vaults separate from your account profile.

Regular Audits

Our security infrastructure undergoes quarterly penetration testing and annual third-party audits. We log all access to sensitive data and monitor for anomalies.

Data Minimisation

We collect only the information needed to verify your identity, process payments and comply with local law. No unnecessary data is stored or retained beyond legal requirements.

Staff Training

Every team member handling customer data completes annual privacy and security training. Access is role-based and logged. Breaches trigger immediate investigation.

Incident Response

If a data breach occurs, we notify affected users within 72 hours and work with Indonesian authorities. Our incident response plan is tested twice yearly.

Consistency Across Our Platform

Unified Policy	Your privacy rights are the same whether you're on our desktop lobby, mobile app or live dealer tables. One policy, one standard across all access points.
Payment Consistency	DANA, OVO, GoPay and QRIS deposits follow the same encryption and fraud-detection rules. Your payment history is visible only to you and our compliance team.
Account Portability	You can export your account data, betting history and personal information in a machine-readable format. We support data portability requests within 30 days.
Withdrawal Privacy	When you withdraw to DANA, OVO, GoPay or QRIS, your destination wallet is encrypted. We never share your e-wallet details with third-party marketers.
Cookie Transparency	We use cookies only for session management, fraud prevention and analytics. You can disable non-essential cookies in your browser settings without losing account access.
Third-Party Limits	We share data with payment processors and fraud-detection vendors only. No data is sold to advertisers, brokers or data aggregators under any circumstance.
Retention Schedule	Account data is retained for seven years after closure to meet Indonesian tax and anti-money-laundering requirements. Older records are securely deleted.

What This Policy Covers

Account Verification

We collect your name, email, phone and ID to verify your identity and prevent fraud. This data is encrypted and stored separately from your betting activity.

Payment Processing

DANA, OVO, GoPay and QRIS transactions are processed through secure payment gateways. Your wallet credentials are tokenised and never stored in plain text.

Betting Records

Your lobby history, table sessions and slot spins are logged for your account statement and our compliance records. You can download your full betting history anytime.

Communication Preferences

We send account alerts, withdrawal confirmations and promotional updates. You control which communications you receive through your account settings.

Device & Location

We log your device type, IP address and login location to detect unauthorised access. This helps us protect your account from fraud and suspicious activity.

Legal Compliance

We retain data to comply with Indonesian tax law, anti-money-laundering regulations and gaming licensing requirements. Your data is never shared with unrelated third parties.

Privacy Policy Questions

We retain your account data for seven years to comply with Indonesian tax and anti-money-laundering regulations. After that period, your information is securely deleted. You can request early deletion for non-regulatory data anytime.

Yes. Go to your account settings and select 'Data Export'. We'll compile your personal information, betting history and payment records into a downloadable file within 30 days. The file is encrypted and sent to your registered email.

No. Your e-wallet credentials are tokenised by our payment processor and never stored in plain text on our servers. We store only a reference token to process future transactions securely.

Only authorised holiday88 staff with a legitimate business need can access your data. This includes account verification, fraud prevention and customer support. All access is logged and monitored. Third-party payment processors see only the data needed to process your transaction.

We notify all affected users within 72 hours and report the incident to Indonesian authorities as required by law. We provide free credit monitoring and identity-theft protection for 12 months. Our incident response plan is tested twice yearly.

Yes. Every marketing email includes an unsubscribe link. You can also manage your communication preferences in your account settings. Opting out does not affect your account access or withdrawal ability.

No. We never sell your personal information to advertisers, data brokers or unrelated companies. We share data only with payment processors and fraud-detection vendors necessary to operate your account securely.