At top888, your privacy is treated as a fundamental right, not an afterthought. This Privacy Policy explains in plain terms exactly what personal data we collect, why we collect it, how we use and store it, who we share it with, and what rights you hold over your own information.
Effective Date: 1 January 2026The following definitions apply throughout this Privacy Policy and are intended to give you a clear understanding of the key terms used.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any combination thereof. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, top888 operating the platform at https://top888.cam. |
| "Data Processor" | A third party that processes personal data on behalf of top888, under documented instructions and bound by data-processing agreements. |
| "Player" / "You" | Any registered account holder who uses the top888 platform. |
| "Platform" | The top888 website at https://top888.cam, including all sub-pages, mobile-optimized interfaces, and associated service channels. |
| "KYC" | Know Your Customer — the identity and document verification process required before withdrawals are processed. |
| "Cookies" | Small text files placed on your device by the Platform to recognize your browser, remember preferences, and analyze usage patterns. |
The data controller responsible for your personal data collected through the top888 Platform is top888, operating the website accessible at https://top888.cam. top888 is an internationally licensed online gaming operator serving players across Indonesia, including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Palembang, and Makassar.
For all data-related inquiries, requests, and complaints, you may contact us through the channels listed in Section 16 of this Policy. We have designated a Data Protection Contact who is responsible for overseeing compliance with this Privacy Policy and responding to Player data requests within the timeframes set out herein.
top888 collects personal data in several categories depending on how you interact with the Platform. The following table sets out each category, the specific data points involved, and the primary reason for collection.
| Category | Data Points | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, Indonesian national identity number (NIK), gender, nationality | Account registration, KYC verification, age confirmation (21+ requirement) |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bali) | Account communications, OTP delivery, support interactions |
| Identity Document Data | KTP photograph, selfie with document, proof of address | KYC compliance, fraud prevention, withdrawal authorization |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, and others), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit/withdrawal amounts in IDR | Payment processing, withdrawal verification, AML monitoring |
| Technical Data | IP address, device type and operating system, browser type and version, time-zone setting (WIB/WITA/WIT), screen resolution, session duration | Platform security, fraud detection, service optimization |
| Usage Data | Pages visited, games played (slots, live casino, togel, sports betting), bet amounts, click paths, session duration, feature interactions | Platform improvement, personalized recommendations, responsible gaming monitoring |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, WhatsApp/Telegram message metadata | Customer service quality, dispute resolution, compliance record-keeping |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred communication channel, bonus claim history | Sending relevant offers, seasonal promotions (Idul Fitri, Imlek, Independence Day), and platform updates |
top888 collects personal data through the following channels and mechanisms:
top888 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent.
For each processing purpose, top888 relies on one or more of the following legal bases:
top888 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the following limited and controlled circumstances:
We share the minimum financial data necessary (account number, transaction amount in IDR, transaction reference) with our banking partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata — and e-wallet providers OVO, DANA, GoPay, ShopeePay, and LinkAja to execute your deposit and withdrawal instructions. These providers process data under their own privacy policies and are bound by Indonesian banking regulations.
Your KYC documents (KTP image, selfie) are transmitted to our contracted identity verification service provider via encrypted API. The provider returns a verification result and is contractually prohibited from using your documents for any purpose other than the verification task.
Certified game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Playtech, Habanero, Play'n GO, and Red Tiger — receive a pseudonymous Player ID and session token to serve game content. They do not receive your full name, bank details, or KTP number.
We share technical identifiers (IP address, device fingerprint, behavioral signals) with fraud intelligence partners to assess risk. No payment account numbers or identity document images are shared with these services.
top888 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by a valid legal obligation, court order, or to protect the rights, property, or safety of top888, its Players, or the public. We will, where legally permissible, notify you of any such disclosure.
As an internationally licensed gaming platform, top888 operates infrastructure across multiple jurisdictions. Your personal data may be stored on servers located outside Indonesia. Where such transfers occur, top888 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that applied within Indonesia, including:
By creating an Account with top888 and accepting our Terms & Conditions, you acknowledge and consent to the transfer of your personal data to our international infrastructure as described in this section.
top888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of Account plus 5 years after closure | Regulatory compliance, AML obligations, dispute resolution |
| Financial Transaction Records | 7 years from date of transaction | International AML standards, audit requirements |
| KYC Documents | Duration of Account plus 5 years after closure | Regulatory obligation, re-verification capability |
| Support Communications | 3 years from date of interaction | Quality assurance, dispute evidence, compliance record |
| Technical / Log Data | 90 days on live systems; 12 months in archive | Security investigation, fraud pattern analysis |
| Marketing Preferences | Until opt-out plus 30 days for propagation | Respecting your communication preferences |
| Cookie Data | Session cookies: until browser close; persistent cookies: up to 12 months | Platform functionality, analytics |
After the applicable retention period expires, personal data is securely deleted or irreversibly anonymized so that it can no longer be linked to any individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.
top888 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational measures include:
top888 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyze how the site is used so we can improve it continuously.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, or receive a notification before a new cookie is placed. Please be aware that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and making transactions. Instructions for managing cookies in common browsers are available through each browser's official help documentation.
As a Player and data subject, you hold the following rights in relation to the personal data that top888 holds about you. To exercise any of these rights, please contact us through the channels in Section 16. We will respond within 30 calendar days of receiving a valid, verified request.
Request a copy of all personal data top888 holds about you, along with information about how and why it is being processed.
Request correction of inaccurate or incomplete personal data. Some corrections (e.g., legal name) may require supporting documentation.
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to legal retention obligations.
Request that we temporarily suspend processing of your data — for example, while you contest the accuracy of information we hold.
Receive your personal data in a structured, machine-readable format (CSV or JSON) so you can transfer it to another service provider.
Object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
Withdraw consent for any processing that relies on consent as its legal basis — including direct marketing — at any time without penalty.
Lodge a complaint with the relevant data protection authority if you believe we have not handled your personal data in accordance with applicable law.
top888 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21 years. Registration requires confirmation that you are 21 or older, and our KYC process verifies date of birth against identity documents.
If we discover — at any point — that an Account has been created by or on behalf of a person under 21, we will immediately suspend the Account, delete all personal data associated with it, return any deposits made (after deducting any winnings derived from underage play), and, where required by law, report the matter to the relevant authorities.
If you are a parent or guardian and believe that a minor in your care has registered on top888, please contact our support team immediately via live chat so we can act without delay.
The top888 Platform may, on occasion, reference third-party content (such as sports league official results pages or payment provider status pages) in informational contexts. top888 does not embed third-party tracking pixels or advertising networks on its pages.
If you navigate to an external website from a link found on the Platform, that website operates under its own privacy policy, over which top888 has no control and for which we accept no responsibility. We encourage you to review the privacy policy of any third-party site you visit.
top888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or business operations. The "Effective Date" displayed at the top of this page will always reflect the date of the most recent revision.
Where changes are material — affecting the type of data collected, the purposes for which it is used, or your rights — we will notify you by email to your registered address and by a prominent notice on the Platform at least 14 days before the revised policy takes effect. For minor or clarificatory amendments, we may update the policy without prior notice.
Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should request account closure before the effective date of the changes.
For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data top888 holds about you, please reach out through any of the following channels:
Our support team includes both English-speaking and Indonesian-speaking agents, available 24 hours a day, 7 days a week — including during Indonesian public holidays such as Idul Fitri, Nyepi, and Waisak. All data subject requests received via email are logged and tracked to ensure timely resolution.
Six pillars that define our commitment to data protection across every aspect of the top888 platform.
Every byte of data transmitted between your browser and top888 servers is protected by TLS 1.3 encryption — the same standard used by global financial institutions. Your personal details and financial data never travel across the internet unprotected.
Access to Player personal data within the top888 organization is restricted on a need-to-know basis. Only authorized personnel with a legitimate operational reason may view your data, and all access is logged and audited regularly.
Your KYC documents, financial records, and account credentials are stored using AES-256 encryption at rest. Even in the unlikely event of unauthorized server access, your data remains unreadable without the corresponding decryption keys.
top888 has a strict and unconditional policy against selling, renting, or trading your personal data to third-party advertisers, data brokers, or marketing agencies. Your data is used exclusively to operate your Account and improve the Platform.
The top888 platform undergoes scheduled and unannounced third-party penetration tests and security audits. Identified vulnerabilities are prioritized and remediated swiftly, ensuring that our defenses remain current against evolving threats.
From access requests to erasure, data portability to consent withdrawal — top888 treats your data rights as real and enforceable. Every formal data subject request is acknowledged within 48 hours and resolved within 30 calendar days.