one89 Privacy Policy

one89 is committed to protecting the privacy and security of our players' personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have regarding your personal data. This policy applies to all users of the one89 platform, including visitors to our website, registered players, and anyone who interacts with our services.

By creating an account or using the one89 platform, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. If you do not agree with our data handling practices, please do not use our services.

1. Information We Collect

one89 collects various types of personal information to provide, maintain, and improve our gaming services, comply with legal obligations, and ensure platform security.

1.1 Information You Provide Directly

When you register an account, you provide the following information:

• Personal Identification: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address in Indonesia
• Account Credentials: Username, password (encrypted and never stored in plain text)
• Financial Information: Bank account details, e-wallet account information, payment card details (if applicable), transaction history
• Identity Verification Documents: Indonesian national ID (KTP), selfie photograph with ID, proof of address documents

1.2 Information Collected Automatically

When you use the one89 platform, we automatically collect technical and usage data:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution
• Gameplay Data: Games played, bets placed, wagering amounts, wins and losses, session duration, game preferences
• Platform Usage: Pages visited, clickstream data, features used, time spent on site, referral source
• Location Data: IP-based geolocation to verify you are accessing from a permitted jurisdiction
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons (see Section 8 for details)

1.3 Information from Third Parties

We may receive information about you from third-party service providers including:

• Payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) providing transaction confirmation
• Identity verification services confirming your KYC documents
• Fraud prevention and anti-money laundering screening services
• Marketing partners (only if you have consented to third-party promotions)

2. How We Use Your Information

one89 uses your personal information for the following purposes, all of which are necessary to provide our gaming services or comply with legal obligations:

2.1 Account Management and Service Delivery

• Create and maintain your player account
• Process deposits, withdrawals, and internal fund transfers
• Provide access to games, sports betting markets, and other platform features
• Calculate and credit winnings, bonuses, and promotional rewards
• Respond to customer support inquiries and technical issues

2.2 Identity Verification and Security

• Verify your age (21+ requirement) and identity (KYC compliance)
• Prevent underage gambling, fraud, money laundering, and identity theft
• Detect and investigate suspicious account activity or rule violations
• Maintain platform security and protect against cyber attacks
• Enforce our Terms and Conditions and prevent abuse of bonuses or gameplay rules

2.3 Legal and Regulatory Compliance

• Comply with international gaming license requirements and audits
• Meet anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
• Respond to lawful requests from regulatory authorities, law enforcement, or courts
• Maintain records as required by applicable gaming regulations

2.4 Marketing and Communications (With Your Consent)

• Send promotional emails about bonuses, special offers, and new games (opt-out available)
• Deliver personalized game recommendations based on your play history
• Notify you about platform updates, maintenance schedules, and policy changes
• Conduct player satisfaction surveys and feedback requests

2.5 Platform Improvement and Analytics

• Analyze usage patterns to improve user experience and platform performance
• Test new features and optimize game selections
• Generate aggregated, anonymized statistics for business analysis (no individual identification)

3. Legal Basis for Processing Your Data

Under international data protection principles, one89 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is essential to perform our contract with you (i.e., providing gaming services you requested)
• Legal Obligation: Processing is required to comply with gaming regulations, AML/CTF laws, tax obligations, and legal requests
• Legitimate Interests: Processing is necessary for fraud prevention, platform security, business analytics, and customer support
• Consent: You have explicitly consented to marketing communications or optional data uses (you may withdraw consent at any time)

4. How We Share Your Information

one89 does not sell or rent your personal information to third parties. We share your data only with trusted service providers and in specific circumstances outlined below:

4.1 Service Providers and Business Partners

We share necessary data with third-party service providers who perform functions on our behalf:

Service Provider Type	Purpose	Data Shared
Payment Processors	Process deposits and withdrawals	Name, bank account details, transaction amounts
KYC Verification Services	Verify identity documents	ID documents, selfie photos, personal details
Game Providers	Deliver casino games and live dealer tables	Username, gameplay data, account balance
Cloud Hosting Services	Store data securely and ensure platform availability	All account and usage data (encrypted)
Customer Support Tools	Manage support tickets and live chat	Contact details, support conversation history
Analytics Providers	Analyze usage patterns and improve services	Anonymized behavioral data, device information

All service providers are contractually bound to protect your data and use it only for the specific purposes we authorize. They must comply with data protection standards equivalent to those outlined in this Privacy Policy.

4.2 Legal and Regulatory Authorities

We may disclose your information to regulatory bodies, law enforcement, courts, or government agencies when:

• Required by law, legal process, or court order
• Necessary to comply with gaming license obligations or audits
• Requested by AML/CTF authorities investigating financial crimes
• Needed to protect one89's legal rights or defend against legal claims
• Essential to prevent fraud, illegal activity, or protect user safety

4.3 Business Transfers

If one89 undergoes a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. You will be notified of any such change via email or prominent platform notice.

4.4 With Your Consent

We may share your information with third parties for purposes not described in this policy if we obtain your explicit consent to do so.

5. Data Security Measures

one89 employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmission uses 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, financial details) is encrypted using AES-256.
• Access Controls: Personal data is accessible only to authorized employees and service providers who need it to perform their duties. Multi-factor authentication is required for administrative access.
• Secure Infrastructure: Data is stored on secure servers in professionally managed data centers with physical security, redundancy, and disaster recovery systems.
• Regular Audits: We conduct periodic security assessments, vulnerability testing, and compliance audits.
• Employee Training: Staff receive regular training on data protection, confidentiality, and security best practices.
• Incident Response: We maintain a documented plan for detecting, responding to, and recovering from data breaches.

6. Data Retention

one89 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

• Active Accounts: While your account is active, we retain all account data, transaction history, and gameplay records.
• Closed Accounts: After voluntary account closure, we retain your data for 7 years to comply with gaming license record-keeping requirements, tax laws, and potential legal claims.
• KYC Documents: Identity verification documents are retained for 7 years after account closure per AML/CTF regulations.
• Marketing Data: If you unsubscribe from marketing communications, we retain only the minimum data needed to honor your opt-out request.
• Anonymized Data: We may retain anonymized, aggregated data indefinitely for statistical and analytical purposes (this data cannot identify you individually).

7. Your Privacy Rights

You have the following rights regarding your personal information. To exercise any of these rights, contact our Data Protection Officer at [email protected].

7.1 Right to Access

You may request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.

7.2 Right to Correction

If any of your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly in your account settings or by contacting customer support.

7.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal data in certain circumstances (e.g., if it is no longer necessary for the purposes it was collected). However, we may be legally required to retain certain data (KYC documents, transaction records) for regulatory compliance even after account closure.

7.4 Right to Restrict Processing

You may request that we limit how we use your data in specific situations (e.g., if you contest data accuracy or object to processing).

7.5 Right to Data Portability

You may request that we transfer your personal data to another service provider in a machine-readable format, where technically feasible.

7.6 Right to Object

You may object to processing based on legitimate interests (e.g., analytics) or direct marketing. We will cease processing unless we have compelling legal grounds to continue.

7.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time. Unsubscribe links are provided in all marketing emails.

7.8 Right to Lodge a Complaint

If you believe one89 has mishandled your personal data, you have the right to lodge a complaint with the data protection authority in the jurisdiction where our gaming license is held.

8. Cookies and Tracking Technologies

one89 uses cookies and similar technologies to enhance your experience, analyze platform usage, and deliver personalized content:

• Essential Cookies: Required for account login, session management, and core platform functionality. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use the platform to help us improve performance and fix bugs.
• Functional Cookies: Remember your preferences (language, display settings) for a personalized experience.
• Marketing Cookies: Track your interactions with promotional content to deliver relevant offers (only with your consent).

You can manage cookie preferences through your browser settings, but disabling essential cookies may impair platform functionality. Most modern browsers allow you to block third-party cookies while permitting first-party cookies.

9. International Data Transfers

one89 operates internationally, and your personal information may be transferred to and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have data protection laws different from Indonesian law.

When we transfer your data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by international data protection authorities
• Service provider certifications demonstrating compliance with international data protection standards
• Encryption during transmission and storage

10. Children's Privacy

one89 is strictly for adults aged 21 and older. We do not knowingly collect personal information from anyone under 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and permanently ban the account. If you believe a minor has created an account, please contact us immediately at [email protected].

11. Third-Party Links and Services

The one89 platform may contain links to third-party websites, game providers, or payment processors. This Privacy Policy applies only to one89. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any external sites you visit.

12. Changes to This Privacy Policy

one89 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes via:

• Email to your registered address
• Prominent notice on the platform homepage
• In-account notification upon login

Your continued use of the platform after changes are posted constitutes acceptance of the revised policy. We recommend reviewing this page periodically to stay informed about how we protect your privacy.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a data security concern, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 on the one89 platform
• Response Time: We aim to respond to all privacy inquiries within 72 hours

For urgent data security issues (suspected data breach, unauthorized account access), use the subject line "URGENT: Security Issue" for priority handling.