ls888 Privacy Policy

ls888 ("we", "us", "our") operates the online gambling platform accessible at https://ls888.bio, serving Indonesian players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, Palembang, and throughout the Indonesian archipelago. As a platform that handles financial transactions, identity documents, and sensitive personal information, ls888 takes data protection with the utmost seriousness.

This Privacy Policy sets out, in plain and transparent language, the complete scope of personal data processing carried out by ls888 in connection with your use of our sportsbook, live casino, slot games, esports betting, togel (Indonesia's traditional numbers lottery), and all other products available on the Platform. It also explains your rights in relation to your personal data and how to exercise those rights.

This Privacy Policy is incorporated by reference into the ls888 Terms & Conditions and should be read alongside them. In the event of any conflict between this Policy and the Terms & Conditions on privacy-related matters, this Policy shall prevail.

In this Privacy Policy, the following terms carry the meanings set out below:

ls888 collects only the Personal Data that is necessary to deliver, secure, and continuously improve the Platform experience. The categories of data we collect are as follows:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification
• Date of birth (collected to verify the 21+ age requirement)
• Gender (optional, used for personalisation purposes only)
• Nationality and country of residence
• Your chosen ls888 username and encrypted password hash

3.2 Contact Data

• Email address (used for Account communications, transaction confirmations, and optional promotional messages)
• Mobile phone number (used for two-factor authentication and critical Account security alerts)
• Residential address in Indonesia (used for KYC verification and fraud prevention)

3.3 Identity Verification (KYC) Documents

• Scanned or photographed copy of your KTP (Indonesian National Identity Card), passport, or driving licence
• Proof of residential address (e.g., a recent utility bill, bank statement, or government correspondence dated within three months)
• Proof of payment method ownership (e.g., a screenshot of your BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja account details displaying your registered name)

3.4 Financial & Transaction Data

• Bank account numbers and e-wallet identifiers used for deposits and withdrawals
• Transaction history, including deposit amounts, withdrawal requests, Wager amounts, and net win/loss figures, all denominated in Indonesian Rupiah (IDR)
• Bonus credit and wagering-requirement progress records

3.5 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps, login history, and Platform navigation data
• Game session logs (games played, stakes placed, outcomes, session duration)
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

3.6 Communications Data

• Records of live-chat, email, and any other correspondence between you and ls888 customer support
• Survey and feedback responses submitted voluntarily by Members

ls888 collects Personal Data through the following channels:

1. Directly from you — when you complete the registration form, submit KYC documents, make deposits or withdrawal requests, contact our support team, or respond to surveys and promotions.
2. Automatically through the Platform — via server logs, session cookies, and analytics technologies that record your technical interaction with the Platform each time you visit or play.
3. From third-party payment processors — when you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja, those providers share transaction confirmation data with ls888.
4. From KYC and fraud-prevention providers — third-party identity verification services may return enriched data records to ls888 as part of the KYC process, including document authenticity scores and watchlist screening results.
5. From publicly available sources — ls888 may, where permitted by applicable law, cross-reference information you have provided with publicly available records for fraud-prevention and AML compliance purposes.

ls888 uses Personal Data for the following purposes:

ls888 does not use Personal Data for automated decision-making that produces legal or similarly significant effects on Members, except where required for fraud prevention or AML compliance and where you have been informed and provided with an opportunity to challenge the decision.

ls888 processes your Personal Data on the following legal bases, each of which applies to the specific processing activities described:

• Performance of a contract: Processing your registration information, identity verification documents, and financial transaction data is necessary to fulfill ls888's obligations to you under the Terms & Conditions — the contract you enter into when you register an Account.
• Compliance with legal obligations: KYC verification, AML transaction monitoring, and the retention of certain records for defined periods are required by applicable anti-money laundering, counter-terrorism financing, and gaming regulatory frameworks.
• Legitimate interests: Fraud prevention, Platform security monitoring, responsible gaming analytics, and internal business reporting are carried out on the basis of ls888's legitimate interest in operating a secure, fair, and sustainable platform, balanced against your rights and interests.
• Consent: Sending promotional emails, SMS notifications, and personalised bonus offers requires your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting [email protected] or adjusting your Account notification settings, without affecting the lawfulness of processing prior to withdrawal.

ls888 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following limited and controlled circumstances:

7.1 Service Providers (Data Processors)

ls888 engages carefully selected third-party service providers who process Personal Data strictly on our instructions and for no other purpose. These include payment processors (BCA, BRI, BNI, Mandiri, and e-wallet operators), KYC and identity verification providers, fraud-detection and AML screening services, cloud infrastructure and hosting providers, and customer support platform operators. All such providers are bound by data processing agreements that require them to maintain confidentiality and implement appropriate security measures.

7.2 Game Content Providers

To deliver games from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe, limited technical data (such as session tokens and Account tier identifiers) may be shared with those studios' game servers. No identity or financial data is shared with game content providers beyond what is technically required to authenticate your game session.

7.3 Legal and Regulatory Disclosures

ls888 may disclose Personal Data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, by a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of ls888, its Members, or the public. ls888 will, where legally permissible, notify you of any such disclosure request before complying.

7.4 Business Transfers

In the event that ls888 undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, Personal Data held by ls888 may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, prior to the transfer taking effect.

ls888 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, detect fraud, and analyse usage patterns. The categories of cookies used are as follows:

ls888 does not use third-party advertising cookies or behavioural retargeting trackers. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform.

ls888 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The key retention periods applied by ls888 are:

• Active Account data: Retained for the full duration of your Account's active status.
• KYC documents and identity records: Retained for a minimum of five (5) years following Account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with financial record-keeping obligations.
• Customer support correspondence: Retained for three (3) years following the closure of each support interaction, or for the duration of any related dispute, whichever is longer.
• Game session logs: Retained for two (2) years following the session date, or for the duration of any related dispute.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of the consent having been given.
• Self-exclusion records: Retained permanently to prevent re-registration in breach of a self-exclusion arrangement.

Following the expiry of the applicable retention period, Personal Data is either securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

ls888 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ls888 Platform, including login, cashier, and game sessions.
• Encrypted password storage using industry-standard bcrypt hashing — ls888 never stores your password in plain text and no ls888 employee can retrieve your password.
• Role-based access controls restricting employee access to Personal Data strictly to those roles for which access is operationally necessary.
• Two-factor authentication (2FA) available for all Member Accounts and mandatory for administrative systems.
• Regular penetration testing and security audits conducted by independent third-party cybersecurity specialists.
• Encrypted storage for KYC documents, with access logs maintained and reviewed periodically.
• Real-time intrusion detection and anomaly monitoring across the Platform infrastructure.

Despite these measures, no internet-based system is completely immune to security risks. In the event of a Personal Data breach that is likely to result in a high risk to your rights and freedoms, ls888 will notify affected Members without undue delay and will take all reasonable steps to mitigate the impact of the breach.

As a Member of the ls888 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to [email protected] from the email address registered on your Account. ls888 will acknowledge your request within 48 hours and respond substantively within 30 calendar days.

ls888 will not charge a fee for handling data rights requests submitted in good faith. Where a request is manifestly unfounded or excessive, ls888 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for doing so.

The ls888 Platform is strictly for adults aged 21 and over. ls888 does not knowingly collect Personal Data from individuals under the age of 21. The registration process requires each applicant to confirm their date of birth, and KYC verification is used to validate age claims before any deposits or withdrawals are processed.

If ls888 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, it will immediately suspend the relevant Account, void all associated Wagers and balances, permanently delete the Personal Data of the minor, and — where required by applicable law — report the incident to relevant authorities. If you have reason to believe that a minor has registered an Account on the ls888 Platform, please notify us immediately at [email protected].

ls888 operates as an international platform and may store or process your Personal Data on servers located outside of Indonesia. Where Personal Data is transferred to countries that may not provide an equivalent level of data protection to that available in Indonesia, ls888 implements appropriate safeguards to ensure your data remains protected, including:

• Standard contractual data protection clauses incorporated into agreements with all international Data Processors
• Transfers made only to jurisdictions recognised as providing adequate protection, or to providers who have implemented binding corporate rules or equivalent mechanisms
• Encryption of Personal Data in transit and at rest, regardless of the geographic location of the processing infrastructure

By registering an Account with ls888, you acknowledge and consent to the transfer of your Personal Data to international servers as described in this section, subject always to the security and contractual safeguards described above.

ls888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal obligations, or improvements to our platform. When we make a material change to this Policy — one that substantively affects how we collect, use, or share your Personal Data — we will provide at least 14 calendar days' advance notice by posting the revised Policy on the Platform and, where practicable, by notifying registered Members via their registered email address.

The "Last Reviewed" date at the top of this Policy will be updated each time a revision is published. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept a material change, you have the right to close your Account before the change takes effect by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how ls888 protects your Personal Data.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the ls888 Data Protection team through the following channel:

ls888 treats all privacy-related correspondence with the highest level of confidentiality. Our support team includes Indonesian-speaking agents who are available around the clock to assist with data rights requests and privacy questions in your preferred language.