Privacy Policy

1. Introduction

ran288 ("we," "us," or "our") operates an online gaming platform serving Indonesian players and users from other jurisdictions where our services are legally accessible. We recognize that privacy is important to our users, and we are committed to being transparent about how we collect, use, and protect your personal information.

This Privacy Policy applies to all information collected through the ran288 website, mobile applications, and any related services (collectively, the "Platform"). By registering an account, accessing our Platform, or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the ran288 Platform. If you do not agree with this Privacy Policy, you should not use our services.

2. Data Controller Information

For the purposes of applicable data protection laws, ran288 is the data controller responsible for your personal information. This means we determine the purposes and means of processing your personal data.

ran288 is operated by an international gaming corporation registered and licensed in a jurisdiction that permits online gambling operations. Full corporate registration details and data protection officer contact information are available upon request through our customer support channels.

While ran288 primarily serves Indonesian players, we operate internationally under licenses issued by recognized gaming regulatory authorities outside Indonesia. Our data processing practices comply with international data protection standards and the requirements of our licensing jurisdictions.

3. Information We Collect

ran288 collects several categories of personal information necessary to provide our gaming services, comply with legal obligations, and improve user experience.

Personal Identification Information

When you register an account with ran288, we collect:

• Name: Your full legal name as it appears on your Indonesian KTP (national identity card) or other government-issued identification
• Date of Birth: To verify you are at least 21 years of age, the legal gambling age in Indonesia
• Email Address: For account communications, security notifications, and customer support
• Phone Number: For account security, two-factor authentication, and customer support contact
• Residential Address: Your physical address in Indonesia for identity verification and regulatory compliance
• Gender: Optional demographic information for personalized service

Identity Verification Documents (KYC)

To comply with anti-money laundering regulations and age verification requirements, we collect:

• KTP (Indonesian National Identity Card): Photograph or scan showing your photo, name, date of birth, ID number, and address
• Proof of Address: Recent utility bill, bank statement, or government document confirming your residential address (requested in some cases)
• Proof of Payment Method: Photograph of bank card (with middle digits masked), bank statement, or e-wallet account verification (requested for enhanced security)
• Selfie Verification: Photograph of you holding your KTP next to your face for enhanced identity confirmation (requested in some cases)

Financial Information

For processing deposits and withdrawals, we collect:

• Bank Account Details: Bank name, account number, account holder name for IDR withdrawals
• E-Wallet Information: OVO, DANA, GoPay, or other e-wallet account identifiers
• Transaction History: Records of all deposits, withdrawals, bets placed, winnings, and account balance changes
• Payment Method Verification: Documentation proving ownership of the payment method used for deposits/withdrawals

Gaming Activity Data

To operate our gaming platform and ensure fair play, we collect:

• Betting History: Details of all bets placed including game type, stake amount, odds, outcome, and timestamp
• Game Play Data: Your interactions with sports betting markets, casino games, slots, and other gaming products
• Session Information: Login times, session duration, games played, and account activity patterns
• Bonus Usage: Bonuses claimed, rollover progress, bonus bet activity, and promotion participation

Technical and Device Information

For platform security, fraud prevention, and service optimization, we automatically collect:

• IP Address: Your internet protocol address for security, fraud detection, and geographic verification
• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers
• Location Data: Approximate geographic location derived from IP address (not precise GPS location)
• Usage Data: Pages visited, features used, clicks, navigation paths, and interaction with Platform elements
• Cookies and Tracking Technologies: Data collected via cookies, web beacons, and similar technologies (see Section 11)

Communications

When you contact ran288, we collect:

• Support Correspondence: Live chat transcripts, email exchanges, WhatsApp messages, and phone call records with customer support
• Feedback and Surveys: Your responses to satisfaction surveys, feedback forms, and user experience questionnaires
• Marketing Preferences: Your consent status and preferences for receiving promotional communications

4. How We Collect Information

ran288 collects personal information through several methods:

Direct Collection

Information You Provide: Most personal information is collected directly from you when you register an account, upload verification documents, make deposits or withdrawals, place bets, contact customer support, or participate in promotions.

Automatic Collection

Technical Data: Technical and device information is collected automatically when you access and use the ran288 Platform through cookies, server logs, and similar tracking technologies. This collection is passive and does not require your active input.

Third-Party Sources

Payment Providers: We receive transaction confirmation data from banks and e-wallet providers when you make deposits or withdrawals.

Verification Services: We may use third-party identity verification services to validate your KTP and other documents against government databases (with your consent).

Fraud Prevention Services: We use third-party fraud detection and risk assessment services that provide information about account security threats, device fingerprinting, and behavioral analysis.

Public Sources

In limited circumstances, we may collect publicly available information about you from social media profiles or public records to verify identity, prevent fraud, or comply with legal obligations.

5. How We Use Your Information

ran288 uses your personal information for the following purposes:

Service Delivery

• Create and manage your gaming account
• Process deposits, withdrawals, and financial transactions
• Enable you to place bets and play games on our Platform
• Track your bets, calculate winnings, and update account balances
• Administer bonuses, promotions, and VIP loyalty programs
• Provide customer support and respond to your inquiries

Legal and Regulatory Compliance

• Verify your identity and age (21+ requirement)
• Comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Maintain records for regulatory reporting and audit requirements
• Respond to lawful requests from government authorities, regulators, or law enforcement
• Enforce our Terms & Conditions and investigate violations

Security and Fraud Prevention

• Detect, prevent, and investigate fraudulent activity, bonus abuse, and multi-accounting
• Monitor for suspicious betting patterns, collusion, and cheating
• Protect against unauthorized access, hacking, and security threats
• Verify payment method ownership and prevent payment fraud
• Maintain platform integrity and ensure fair play for all users

Platform Improvement and Personalization

• Analyze usage patterns to improve Platform functionality and user experience
• Personalize game recommendations, promotions, and content based on your preferences
• Conduct research, analytics, and statistical analysis to optimize our services
• Test new features, products, and services before general release
• Develop and train fraud detection algorithms and security systems

Marketing and Communications

• Send you promotional offers, bonuses, and updates about ran288 services (with your consent)
• Notify you about changes to our Terms & Conditions, Privacy Policy, or Platform features
• Send important account notifications, security alerts, and transactional messages
• Conduct satisfaction surveys and collect feedback on your experience

Responsible Gaming

• Monitor gambling behavior for signs of problem gambling
• Enforce deposit limits, self-exclusion periods, and responsible gaming tools
• Provide resources and support for users experiencing gambling-related issues
• Comply with responsible gaming obligations under our licensing requirements

6. Legal Basis for Processing

ran288 processes your personal information on the following legal bases:

Contractual Necessity

Processing is necessary to perform our contract with you (the Terms & Conditions). This includes account creation, processing transactions, enabling gameplay, administering bonuses, and providing customer support. Without this processing, we cannot provide our gaming services.

Legal Obligation

Processing is required to comply with legal obligations under gaming regulations, anti-money laundering laws, tax reporting requirements, and age verification mandates. This includes KYC verification, transaction record-keeping, and regulatory reporting.

Legitimate Interests

Processing is necessary for our legitimate business interests, which include:

• Fraud prevention, security, and risk management
• Platform improvement and service optimization
• Business analytics and performance measurement
• Enforcing Terms & Conditions and detecting violations
• Protecting the integrity of our games and betting markets

We balance these interests against your privacy rights and only process data where our legitimate interests are not overridden by your fundamental rights and freedoms.

Consent

For certain processing activities, we rely on your explicit consent, such as:

• Sending marketing communications (promotional emails, SMS, push notifications)
• Using non-essential cookies for analytics and personalization
• Collecting optional information beyond what is required for service delivery

You may withdraw consent at any time through your account settings or by contacting customer support. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

7. Data Sharing and Disclosure

ran288 does not sell your personal information to third parties. However, we may share your information in the following circumstances:

Service Providers and Processors

We share data with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Banks, payment gateways, and e-wallet providers to process deposits and withdrawals
• Identity Verification Services: KYC and document verification providers to validate your identity and age
• Game Providers: Third-party game studios (slots, live casino, etc.) to deliver gaming content
• Cloud Hosting: Infrastructure providers that host our Platform and databases
• Customer Support Tools: Live chat, email, and ticketing system providers
• Fraud Prevention: Security and fraud detection services to protect against threats
• Analytics Providers: Tools that help us analyze Platform usage and performance

All service providers are bound by confidentiality obligations and are only permitted to process your data for specified purposes on our behalf.

Regulatory and Legal Authorities

We may disclose your information to:

• Gaming Regulators: Licensing authorities that oversee our operations and require compliance reporting
• Law Enforcement: Police, prosecutors, or courts in response to lawful requests or subpoenas
• Tax Authorities: Government agencies requiring transaction or income reporting
• Financial Intelligence Units: AML authorities investigating money laundering or terrorist financing

We will only disclose information when legally required or when we have a good-faith belief that disclosure is necessary to comply with law, protect our rights, or prevent harm.

Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you via email and Platform notice before your information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share your information with third parties when you provide explicit consent for a specific purpose, such as participating in a third-party promotion or survey.

Aggregated or Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. This may include statistics about Platform usage, betting trends, or demographic information for business analytics, research, or marketing purposes.

8. Data Security and Protection

ran288 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction.

Technical Security Measures

• Encryption: All data transmission between your device and our servers is protected by 256-bit SSL/TLS encryption, the same technology used by banks
• Data Encryption at Rest: Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms
• Firewalls: Network-level firewalls protect our servers from unauthorized access and cyber attacks
• Intrusion Detection: Automated systems monitor for and alert us to suspicious activity or security breaches
• Secure Authentication: Password requirements, two-factor authentication, and session management controls
• Regular Security Audits: Independent security assessments and penetration testing to identify vulnerabilities

Organizational Security Measures

• Access Controls: Strict limits on which employees can access personal data, based on job function and need-to-know basis
• Staff Training: Regular data protection and security training for all employees with data access
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements protecting user data
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data breaches
• Third-Party Audits: Regular compliance audits by our licensing authorities and independent auditors

Your Security Responsibilities

While we implement strong security measures, you also play a role in protecting your account:

• Choose a strong, unique password and do not share it with anyone
• Enable two-factor authentication for enhanced account protection
• Do not share your login credentials or account access with third parties
• Log out after each session, especially on shared or public devices
• Keep your email and phone number secure, as these are used for account recovery
• Report any suspicious activity or unauthorized access immediately to customer support

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant regulatory authorities within 72 hours as required by applicable data protection laws. Our notification will include the nature of the breach, likely consequences, and measures taken to address the breach and prevent future incidents.

9. Data Retention

ran288 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.

Active Accounts

While your account is active, we retain all account information, transaction history, and gaming data to provide ongoing services and maintain accurate records.

Closed Accounts

After you close your account (voluntarily or due to Terms & Conditions violations), we retain certain information for legal and regulatory compliance:

• Identity and KYC Data: Retained for 5 years after account closure per AML regulations
• Transaction Records: Retained for 7 years for tax reporting and audit requirements
• Gaming History: Retained for 5 years for regulatory reporting and dispute resolution
• Communications: Support correspondence retained for 3 years for quality assurance and legal purposes

Dormant Accounts

Accounts with no login activity for 12 consecutive months are considered dormant. After 24 months of inactivity, accounts with balances below Rp 50,000 may be closed and data archived according to our retention schedule.

Marketing Data

If you opt out of marketing communications, we will suppress your contact information from marketing lists immediately but retain a record of your opt-out preference indefinitely to ensure we do not inadvertently contact you again.

Deletion and Anonymization

After the retention period expires, personal information is securely deleted or anonymized so it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

10. Your Privacy Rights

Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal information:

Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most of your information through your account dashboard. For a complete data export, contact our customer support team, and we will provide your data within 30 days.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings. For changes to verified information (name, date of birth, address), contact support with supporting documentation.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or you withdraw consent. However, this right is not absolute—we may need to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

Right to Restriction of Processing

You may request that we limit how we use your personal information in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store the data but not actively process it except with your consent or for legal claims.

Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another controller. This applies to information you provided to us with your consent or for contract performance, and where processing is carried out by automated means.

Right to Object

You may object to processing of your personal information based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.

Right to Withdraw Consent

Where we process your information based on consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. You can manage consent preferences through your account settings or unsubscribe links in our communications.

Right to Lodge a Complaint

If you believe we have violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with the data protection authority in your jurisdiction or the supervisory authority in the jurisdiction where ran288 operates.

How to Exercise Your Rights

To exercise any of these rights, contact our customer support team via live chat, email ([email protected]), or WhatsApp. We will respond to your request within 30 days. We may request additional information to verify your identity before fulfilling your request to prevent unauthorized access to your data.

11. Cookies and Tracking Technologies

ran288 uses cookies and similar tracking technologies to enhance your experience, provide Platform functionality, and analyze usage patterns.

What Are Cookies?

Cookies are small text files stored on your device when you visit our Platform. They contain information that the website can read when you return, allowing the site to remember your preferences and provide personalized experiences.

Types of Cookies We Use

Cookie Type	Purpose	Consent Required
Strictly Necessary	Essential for Platform operation, authentication, security, and navigation. Cannot be disabled.	No
Functional	Remember your preferences, language settings, and customizations to enhance user experience.	No
Performance/Analytics	Collect data about Platform usage, page views, and user behavior to improve our services.	Yes
Marketing/Targeting	Track your activity across websites to deliver relevant advertisements and promotional content.	Yes

Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse all cookies, accept only certain cookies, or delete cookies after your session ends. Note that disabling necessary cookies may impair Platform functionality, and some features may not work properly.

To opt out of third-party advertising cookies and interest-based advertising, visit the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page.

Other Tracking Technologies

We may also use web beacons (pixel tags), device fingerprinting, and session replay tools to collect information about Platform usage and user interactions. These technologies help us understand how users navigate our Platform, identify technical issues, and improve user experience.

12. International Data Transfers

ran288 operates internationally and may transfer your personal information to countries outside Indonesia, including to jurisdictions where our servers, service providers, or corporate entities are located.

These countries may have different data protection laws than Indonesia. When we transfer data internationally, we implement appropriate safeguards to protect your information, such as:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing that the destination country provides adequate data protection
• Binding corporate rules governing intra-group transfers
• Your explicit consent for specific transfers

By using ran288, you acknowledge and consent to the international transfer of your personal information as described in this Privacy Policy.

13. Children's Privacy

ran288 services are strictly intended for individuals 21 years of age or older. We do not knowingly collect personal information from anyone under 21, and we do not target our Platform or marketing to minors.

If you are under 21 years of age, do not register an account, use our services, or provide any personal information to ran288. If we become aware that we have inadvertently collected information from someone under 21, we will immediately delete that information and permanently ban the associated account.

Parents or guardians who believe their child under 21 has provided information to ran288 should contact us immediately at [email protected] so we can take appropriate action.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how ran288 handles your personal information, please contact us through the following channels:

• 24/7 Live Chat: Click the chat icon in the bottom-right corner of any page after logging in
• Email: [email protected] (Data protection inquiries will be forwarded to our Data Protection Officer)
• WhatsApp Support: +62 812 3456 7890 (08:00-02:00 WIB daily)

For formal data protection requests (access, rectification, erasure, etc.), please include "Privacy Request" in the subject line and provide your full name, username, and registered email address to help us verify your identity.

We will acknowledge receipt of your inquiry within 48 hours and provide a substantive response within 30 days. If we need additional time to address a complex request, we will notify you and provide an estimated completion date.