1
Introduction
cus888 ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.
This Privacy Policy applies to all users of the cus888 platform located at cus888.cam, including all associated mobile applications, software interfaces, and related services (collectively, the "Platform"). By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy in its entirety.
This policy should be read alongside our Terms & Conditions, which govern your use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter relating to personal data, this Privacy Policy shall prevail.
Note: This Privacy Policy is written in English. In the event of any discrepancy arising from translation into another language, the English-language version shall be the authoritative reference.
2
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
- "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, IP address, and financial account details.
- "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" — cus888, the entity that determines the purposes and means of processing your personal data.
- "Data Processor" — any third party that processes personal data on behalf of cus888, including payment processors, identity verification providers, and cloud infrastructure partners.
- "User" / "You" — any individual who accesses, registers on, or interacts with the Platform in any capacity.
- "Cookies" — small text files placed on your device by the Platform to enable certain functionality, remember your preferences, and support analytical and marketing operations.
- "KYC" — Know Your Customer procedures, including identity verification and age verification, required by cus888 as part of its regulatory compliance obligations.
- "AML" — Anti-Money Laundering compliance obligations that require cus888 to monitor, record, and in some cases report certain financial transactions.
3
Data We Collect
cus888 collects personal data across several categories depending on how you interact with our Platform. The table below summarizes the categories of data we collect and representative examples of each:
| Data Category |
Examples |
Purpose |
| Identity Data |
Full legal name, date of birth, KTP or passport number, selfie/photo ID |
KYC verification, age confirmation, fraud prevention |
| Contact Data |
Email address, Indonesian mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung) |
Account communication, support, security alerts |
| Financial Data |
Bank account number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet ID (OVO, DANA, GoPay, ShopeePay), transaction history |
Processing deposits and withdrawals, AML compliance |
| Technical Data |
IP address, device type, browser type and version, operating system, session timestamps |
Platform security, fraud detection, service optimization |
| Usage Data |
Pages visited, games played, bet history, bonus redemptions, time spent on Platform |
Personalization, responsible gaming monitoring, product improvement |
| Marketing Preferences |
Opted-in promotional categories, preferred communication channel |
Delivering relevant promotions and offers (with your consent) |
| Support Data |
Chat transcripts, email correspondence, complaint records |
Customer service, dispute resolution, quality assurance |
We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data beyond photo ID, or health information) unless explicitly required by law or with your express consent.
4
How We Collect Your Data
cus888 collects personal data through the following channels:
- Direct Submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal request, contacting support, or participating in a promotion.
- Automated Technologies: Technical and usage data collected automatically when you access the Platform, via cookies, web beacons, pixel tags, log files, and similar tracking technologies.
- Third-Party Verification Providers: Identity and age verification data returned by our KYC partners when you submit identification documents.
- Payment Processors: Transaction confirmation data returned by our banking and e-wallet partners, including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay.
- Fraud Detection Partners: Risk-scoring data generated by third-party fraud detection services that monitor for suspicious account activity patterns.
- Publicly Available Sources: In limited circumstances, data from publicly accessible records may be used to verify identity or investigate fraudulent activity.
5
Legal Basis for Processing
cus888 processes your personal data only where we have a valid legal basis to do so. The primary legal grounds on which we rely are as follows:
- Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you entered into when registering an account — including processing bets, handling deposits and withdrawals, and providing customer support.
- Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and the retention of financial records.
- Legitimate Interests: Processing carried out for the legitimate business interests of cus888, provided those interests are not overridden by your rights and freedoms — including fraud detection, platform security, and service improvement analytics.
- Consent: Where we rely on your consent to process personal data (for example, to send you marketing communications or optional platform personalization features), you may withdraw that consent at any time by contacting our support team or adjusting your account preferences.
6
How We Use Your Data
cus888 uses your personal data for the following purposes:
- To create, verify, and manage your cus888 account, including completing KYC and maintaining accurate account records.
- To process financial transactions — including deposits from and withdrawals to your registered BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, or ShopeePay account.
- To confirm your eligibility to use the Platform, including verifying that you are at least 21 years of age and a resident of Indonesia.
- To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account sharing, and other violations of our Terms & Conditions.
- To provide customer support, respond to inquiries, and resolve disputes or complaints submitted to our team.
- To monitor your usage patterns for responsible gaming purposes — including identifying signs of problem gambling behavior and applying safeguard tools where appropriate.
- To send you transactional communications — including deposit confirmations, withdrawal notifications, security alerts, and important account updates.
- To send you promotional communications, bonus offers, and seasonal campaigns (such as Idul Fitri promotions or Indonesian Independence Day specials) — only where you have opted in to receive such communications.
- To improve and optimize the Platform's performance, user interface, and product offerings based on aggregated usage analytics.
- To comply with all applicable legal, regulatory, and reporting obligations.
Marketing Opt-Out: You may unsubscribe from promotional communications at any time by clicking the "Unsubscribe" link in any marketing email or by contacting our support team at
[email protected]. Opting out of marketing does not affect transactional or security-related communications.
7
Data Sharing & Disclosure
cus888 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to confidentiality obligations:
- Payment Processors: Your financial data is shared with the relevant bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay) solely to process your deposit or withdrawal transaction.
- KYC & Identity Verification Providers: Identity documents and personal details are shared with our licensed verification partners to complete the KYC process.
- Fraud Detection & AML Partners: Transaction and behavioral data may be shared with fraud prevention and anti-money laundering service providers as required to protect platform integrity.
- Cloud Infrastructure & Hosting Providers: Personal data is stored on servers managed by our cloud infrastructure partners, who are contractually bound to process data only on our instructions and in accordance with this policy.
- Game Studio Partners: Limited technical identifiers (not personally identifiable information) may be shared with licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft for game session management purposes.
- Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, courts, regulators, or other governmental authorities where required or permitted by applicable law, or where necessary to protect the legal rights of cus888 or other users.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving cus888, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections remaining in place.
Important: cus888 will never share your personal data with third-party advertisers, data brokers, or marketing agencies without your explicit prior consent.
8
Cookies & Tracking Technologies
cus888 uses cookies and similar tracking technologies to enhance your experience on the Platform, ensure security, and gather analytical data that helps us improve our services. The categories of cookies we use are as follows:
- Strictly Necessary Cookies: Essential to the basic functioning of the Platform. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
- Functional Cookies: Enable the Platform to remember your preferences, such as your preferred language, display settings, and account login status between sessions.
- Analytical Cookies: Allow us to understand how users interact with the Platform — including which pages are visited most frequently and where users encounter difficulties — so we can improve the user experience.
- Marketing & Targeting Cookies: Used only with your consent to deliver relevant promotional content and measure the effectiveness of marketing campaigns.
You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may limit your ability to use some features of the Platform. Most web browsers automatically accept cookies; however, you can usually modify your browser settings to decline them if you prefer.
9
Data Retention
cus888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:
- Account Data: Retained for the duration of your active account relationship with cus888, plus a minimum of 5 years following account closure, in compliance with AML and financial record-keeping obligations.
- KYC Documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later, in accordance with applicable identity verification regulations.
- Transaction Records: Financial transaction records are retained for a minimum of 5 years from the date of each transaction.
- Support Correspondence: Customer support records are retained for up to 3 years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
- Marketing Preferences: Retained until you withdraw your consent or request erasure, subject to a minimum retention period of 1 year for opt-out records.
- Technical & Log Data: Server log files and technical diagnostic data are retained for up to 12 months and then deleted or anonymized.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.
10
Data Security
cus888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
- AES-256 encryption for sensitive data at rest, including financial credentials and identity document scans.
- Multi-factor authentication (MFA) for all privileged staff access to production systems containing personal data.
- Regular penetration testing and vulnerability assessments conducted by independent third-party security firms.
- Strict role-based access controls ensuring that only authorized personnel with a legitimate business need can access personal data.
- Continuous real-time monitoring of our systems for unauthorized access attempts, anomalous behavior, and security incidents.
- A documented data breach response plan, with procedures for notifying affected users and relevant authorities in the event of a confirmed breach within legally required timeframes.
While cus888 takes every reasonable precaution to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account credentials.
11
International Data Transfers
As an internationally operating platform, cus888 may transfer your personal data to countries outside of Indonesia for storage and processing purposes — for example, to our cloud hosting infrastructure or KYC verification partners located in other jurisdictions.
Where such transfers occur, cus888 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Privacy Policy. These safeguards may include contractual data processing agreements, standard contractual clauses, or reliance on the adequacy decisions of applicable data protection frameworks.
By using the cus888 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia as described in this clause, subject always to the protections outlined in this Privacy Policy.
12
Your Privacy Rights
As a user of the cus888 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request":
- Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is being processed.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
- Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis, unless we can demonstrate compelling legitimate grounds for the processing.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
cus888 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and its reasons.
Identity Verification: To protect your data, we may ask you to verify your identity before processing a data rights request. We will not act on a request that we cannot verify as originating from the account holder.
13
Children's Privacy
The cus888 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If you are under 21 years of age, you must not access or use this Platform.
If cus888 becomes aware that personal data has been collected from a user who is under the age of 21, we will take immediate steps to close the relevant account, delete the personal data in question, and, where appropriate, report the matter to relevant authorities. Parents and guardians who believe that their child may have registered on the Platform are encouraged to contact us immediately at [email protected].
21+ Only: cus888 enforces strict age verification as part of our KYC process. All users are required to confirm their age during registration, and documentary evidence of age will be requested before any withdrawal is processed.
14
Third-Party Links
The cus888 Platform may contain references to third-party services, payment providers, and game studios. While we take care to work only with reputable partners, please be aware that third-party websites and applications operate under their own privacy policies, which are entirely separate from this Privacy Policy.
cus888 accepts no responsibility or liability for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party service you interact with in connection with our Platform, including those of your bank (BCA, BRI, BNI, Mandiri) or e-wallet provider (OVO, DANA, GoPay, ShopeePay).
15
Policy Amendments
cus888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the scope of our services. When material changes are made, we will update the "Last Updated" date displayed at the top of this page and, where appropriate, notify registered users via email or an in-platform notification.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you should cease using the Platform and request account closure.
16
Contact & Data Requests
If you have any questions, concerns, or complaints about this Privacy Policy or the way in which cus888 handles your personal data, please contact our dedicated Privacy team. We are committed to resolving all data-related inquiries promptly and transparently.
You may also use this contact channel to submit a formal data rights request — including requests for access, rectification, erasure, restriction, portability, or objection — as described in Section 12 of this policy.
Privacy & Data Requests: [email protected]
Please include the following details in your message to enable us to handle your request efficiently:
- Your registered cus888 account username or registered email address.
- A clear description of your request or concern.
- The subject line "Privacy Rights Request" or "Privacy Inquiry" as appropriate.
Our team aims to acknowledge all privacy-related inquiries within 2 business days (WIB) and to provide a substantive response within 30 calendar days.
Indonesian-Speaking Support: Our customer support team includes native Indonesian-speaking agents available 24/7 to assist with any account or privacy inquiry, even though the Platform itself and this policy are published in English.