Last updated: 1 January 2026 | Effective date: 1 January 2026 | Version 2.0
stak88 treats the protection of your personal data as a fundamental responsibility. Here is a plain-English summary of our core privacy commitments before you read the full policy.
Every piece of data transmitted between your device and stak88 servers is protected by industry-standard 256-bit SSL/TLS encryption, making it unreadable to any third party in transit.
stak88 does not sell, rent, or trade your personal information to any third party for commercial purposes. Your data exists solely to deliver and improve your experience on the platform.
We collect only the personal data that is strictly necessary to operate your account, process transactions, and comply with applicable regulations. We do not collect data speculatively.
Your data is retained only for as long as it is needed to fulfil the purpose for which it was collected, or as required by law. When retention is no longer justified, data is securely deleted.
You have the right to access, correct, or request deletion of your personal data at any time by contacting our support team. We process all data subject requests within 30 days.
Where data is shared with third-party service providers — such as payment processors, KYC verification vendors, and game studios — those partners are contractually bound to handle your data securely.
Important Notice: This Privacy Policy describes how stak88 ("we", "us", "our") collects, uses, stores, shares, and protects personal data provided by users ("you", "User", "Member") of the stak88 platform accessible at stak88.app. By registering an account or using any stak88 service, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy forms part of the stak88 Terms & Conditions.
In this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. This includes name, date of birth, email address, phone number, Indonesian KTP number, bank account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | stak88, the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of stak88 under a contractual data processing agreement. |
| "Platform" | The stak88 website (stak88.app), mobile-optimised site, and all associated services including sports betting, live casino, slots, togel (Indonesia's traditional numbers lottery), keno, and esports betting. |
| "KYC" | Know Your Customer — the mandatory identity verification process stak88 conducts before processing withdrawal requests. |
| "Cookie" | A small text file placed on your device by the Platform to store session information, preferences, and analytics data. |
This Privacy Policy applies to all Personal Data collected by stak88 in connection with the Platform, regardless of whether you have registered a Member account. It covers data collected through the website, customer support channels (email and live chat), marketing communications, and any other interaction you have with stak88.
This Policy applies to all users who access the Platform from Indonesia, including residents of Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, Palembang, and all other Indonesian regions. Users outside Indonesia who access the Platform do so at their own risk and may be subject to additional local data-protection obligations.
This Policy does not apply to third-party websites or services that may be referenced in stak88 marketing materials. stak88 is not responsible for the privacy practices of those third parties.
stak88 collects the following categories of Personal Data:
stak88 collects Personal Data through the following means:
stak88 processes your Personal Data only for the purposes specified below. We do not process data for purposes incompatible with those listed here without first obtaining your explicit consent.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity & Contact Data; Account & Usage Data |
| Processing deposits and withdrawals in IDR | Identity & Contact Data; Financial Data |
| KYC identity verification | Identity & Contact Data; Verification & Compliance Data |
| Fraud prevention and security monitoring | Technical & Device Data; Verification & Compliance Data; Financial Data |
| Anti-money laundering (AML) compliance | Identity & Contact Data; Financial Data; Verification & Compliance Data |
| Responsible gaming monitoring and intervention | Account & Usage Data; Identity & Contact Data |
| Customer support and dispute resolution | All categories relevant to the support request |
| Personalised promotions and bonus offers | Account & Usage Data; Identity & Contact Data (with consent) |
| Platform analytics and product improvement | Technical & Device Data; Account & Usage Data (aggregated/pseudonymised) |
| Legal and regulatory compliance | All categories as required by applicable law |
stak88 processes your Personal Data on the following legal bases:
stak88 does not sell, rent, or trade your Personal Data. We share your data only in the circumstances described below, and only to the extent necessary for the specified purpose.
To process deposits and withdrawals in Indonesian Rupiah, we share your name, account number, and transaction amount with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, or BSI) or e-wallet operator (OVO, DANA, GoPay, ShopeePay, or LinkAja) as required to execute the transaction.
We engage third-party KYC service providers to verify the identity documents you submit. These vendors receive your identity and contact data solely for the purpose of document authentication and are contractually prohibited from using it for any other purpose.
When you play a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, or Spribe), a pseudonymous player identifier and game session data are shared with that studio's game servers to facilitate gameplay and calculate payouts. No directly identifying information (name, email, bank details) is passed to game studios.
We use specialist fraud-detection and analytics tools that process Technical & Device Data and pseudonymised Account & Usage Data to identify suspicious patterns, duplicate accounts, and bonus abuse. These tools operate under strict data processing agreements.
stak88 may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of stak88, its members, or the public. We will notify you of such disclosures where permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or part of stak88's business, your Personal Data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy commitments of the successor entity in advance.
stak88 operates servers and engages service providers in multiple jurisdictions. As a result, your Personal Data may be transferred to, stored in, and processed in countries outside Indonesia. Where such transfers occur, stak88 takes the following steps to ensure your data remains protected:
For questions about specific international transfers or to request a copy of the safeguards in place, please contact [email protected].
stak88 retains your Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of active membership plus 5 years after account closure. |
| Financial Transaction Records | 7 years from the date of the transaction, in line with financial record-keeping obligations. |
| KYC Verification Documents | Duration of active membership plus 5 years after account closure, or longer if required by applicable AML regulations. |
| Betting & Game History | Duration of active membership plus 2 years after account closure. |
| Customer Support Correspondence | 3 years from the date of the final communication in each support thread. |
| Technical & Device Logs | 13 months from the date of collection, after which logs are anonymised or deleted. |
| Marketing Consent Records | Duration of consent plus 3 years, to demonstrate compliance. |
| Self-Exclusion Records | Indefinitely, to prevent re-registration by self-excluded individuals. |
Upon expiry of the applicable retention period, your Personal Data is securely deleted or irreversibly anonymised. Anonymised data that can no longer be associated with any individual may be retained for statistical and analytical purposes indefinitely.
stak88 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance your experience, and gather analytics data. The following types of cookies are used:
These cookies are essential to the operation of the Platform and cannot be disabled. They enable core functions such as maintaining your login session, remembering your language preference, and securing your account. No consent is required for strictly necessary cookies.
These cookies remember choices you have made on the Platform — such as your preferred currency display (IDR / Rp), game interface settings, and notification preferences — so that you do not have to reconfigure them on each visit.
These cookies collect anonymised or pseudonymised information about how users interact with the Platform — which pages are visited most, how long sessions last, and where users navigate from and to. This data helps stak88 improve the platform experience. We use a self-hosted analytics solution; raw session data is not shared with external analytics providers.
Where you have arrived at stak88.app via a marketing channel (for example, an advertisement or affiliate link), an attribution cookie may be set to record which channel referred you. This enables stak88 to measure the effectiveness of its marketing and to credit referral partners appropriately. No identifiable personal data is included in attribution cookies.
You can control non-essential cookies via your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling functional or analytics cookies may affect the quality of your experience on the Platform. Disabling strictly necessary cookies will prevent the Platform from functioning correctly.
As a Member of stak88, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request — [Your Username]". stak88 will respond within 30 days of receiving a valid request.
Identity Verification for Rights Requests: To protect your data, stak88 will require you to verify your identity before processing any data rights request. You may be asked to confirm your registered email address, provide your account username, and answer a security question. This verification step prevents unauthorised access to your data.
The stak88 Platform is strictly intended for adults aged 21 and over. stak88 does not knowingly collect Personal Data from any individual under the age of 21. Our registration system requires date of birth to be entered, and accounts where the stated age is below 21 are declined at registration. In addition, stak88 employs KYC age verification controls to detect and prevent underage access.
If stak88 discovers that Personal Data has been collected from an individual under the age of 21 — whether through misrepresentation during registration or any other means — that account will be immediately suspended, all related Personal Data will be permanently deleted, any deposited funds will be returned to the originating payment method, and all associated winnings will be voided.
If you have reason to believe that a person under 21 has registered an account on stak88.app, please notify us immediately at [email protected] with the subject line "Underage Account Report." We will investigate and act promptly.
stak88 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure:
Data Breach Response: In the event of a personal data breach that poses a risk to your rights or freedoms, stak88 will notify affected Members without undue delay and in any case within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures taken or proposed to address it.
The stak88 Platform may contain references to third-party services, including game studios, payment providers, and sports data feeds. Where a third-party interface is embedded within the Platform (for example, a live casino stream from Evolution Gaming or a slots game from Pragmatic Play), that content is governed by the third party's own privacy policy in respect of any data that passes through their systems.
stak88 is not responsible for the privacy practices, content, or security of any third-party services. We encourage you to review the privacy policies of any third-party service you interact with directly. Links or references in stak88 marketing materials to external sites do not constitute endorsement of those sites' privacy practices.
stak88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When amendments are made, the revised Policy will be published on this page with an updated "Last updated" date at the top.
For material changes — such as new categories of data being collected, new sharing arrangements with third parties, or significant changes to retention periods — stak88 will provide at least 14 days' advance notice to registered Members via the email address on file or via an in-platform notification. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the revised Policy.
We recommend that you review this Privacy Policy periodically to stay informed of how stak88 protects your data. The version history is maintained internally; contact [email protected] to request details of previous versions.
If you have any questions, concerns, or formal complaints regarding this Privacy Policy or the way stak88 handles your Personal Data, please contact our Data Protection team:
Email: [email protected]
Subject line for data rights requests: "Data Rights Request — [Your Username]"
Subject line for privacy complaints: "Privacy Complaint — [Your Username]"
Response time: Within 30 days of receipt of a valid request.
Support hours: Indonesian-speaking agents available 24/7 across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.
stak88 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to your complaint, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
This Privacy Policy was last reviewed and approved by the stak88 compliance team on 1 January 2026. Version 2.0 supersedes all previously published versions of the stak88 Privacy Policy.
stak88 protects your privacy so you can focus on what matters: enjoying world-class sports betting, live casino, slots, and more — all in Indonesian Rupiah.
21+ only. Please gamble responsibly. Responsible Gaming Policy