Privacy Policy

Introduction

icon88 is committed to maintaining the trust of our Members through transparent, responsible, and secure handling of personal data. This Policy applies to all personal data we collect in connection with your use of the icon88 platform, whether you access it via a desktop browser, mobile browser, or any other supported interface.

We recognize that personal data — particularly financial data and identity documentation submitted by Indonesian residents — requires the highest standard of care. This Policy is designed to give you a complete and honest account of our data practices so that you can make informed decisions about your use of icon88.

This Policy was last reviewed and updated in January 2026. We will notify registered Members of any material changes via email prior to those changes taking effect.

Definitions

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, email address, phone number, date of birth, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Controller" means icon88, as the entity that determines the purposes and means of processing your Personal Data.
• "Third Party" means any individual or organization other than you or icon88, including payment processors, game studios, identity verification providers, and analytics services engaged by icon88.
• "KYC Data" means identity and address verification documentation submitted by you during the Know Your Customer process, including copies of your KTP, passport, SIM, utility bills, and bank account details.
• "Cookies" means small text files placed on your device by the icon88 platform to facilitate session management, preferences, and performance analytics.
• "Sensitive Data" means Personal Data that warrants heightened protection, including financial account details, identity document numbers, and information relating to responsible gaming status.

Data We Collect

The categories of personal data we collect from or about you include, but are not limited to, the following:

3.1 Registration Data

When you create an Account on the icon88 platform, we collect:

• Full legal name;
• Date of birth;
• Indonesian residential address;
• Email address;
• Indonesian mobile phone number;
• Username and encrypted password.

3.2 KYC & Verification Data

To verify your identity and satisfy our compliance obligations, we may collect:

• Copies of government-issued identification (KTP, passport, SIM);
• Proof of address documentation (bank statements, utility bills);
• Selfie or liveness-check images for identity matching;
• Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet credentials (OVO, DANA, GoPay, ShopeePay, LinkAja) used for transactions.

3.3 Transactional Data

We record all financial activity on your Account, including:

• Deposit amounts, dates, payment methods, and transaction reference numbers;
• Withdrawal requests, amounts, and processing status;
• Bonus credits, wagering activity, and bonus completion history.

3.4 Gaming & Betting Activity

We collect data about your gaming behavior on the icon88 platform, including game titles played, bet amounts, session durations, win/loss records, and resp onsible gaming tool usage (deposit limits, self-exclusion periods, reality check activation).

3.5 Technical & Device Data

When you access the icon88 platform, we automatically collect:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Referral source (how you found icon88);
• Clickstream data and navigation paths through the platform;
• Error logs and diagnostic data.

3.6 Communications Data

We retain records of your communications with icon88 Customer Support, including live chat transcripts, email correspondence, and WhatsApp message logs, to ensure service quality and resolve disputes.

How We Collect Data

icon88 collects personal data through the following methods:

• Directly from you: When you complete registration forms, upload KYC documents, contact support, or update your Account settings;
• Automatically: Via cookies, session logs, and analytics tools embedded in the platform that capture technical and usage data;
• From third parties: Via payment processors that confirm transaction details, or from identity verification services that validate your KYC documents;
• From game providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft share gaming session data with icon88 for account reconciliation and platform analytics.

Purpose of Processing

icon88 processes your personal data for the following purposes:

We do not process your personal data for purposes other than those listed above without obtaining your explicit consent or unless required by applicable law.

Legal Basis for Processing

icon88 processes your personal data on the following legal grounds:

• Contract Performance: Processing is necessary to provide the services you requested when you registered your Account and accepted our Terms & Conditions;
• Consent: You have provided explicit consent for specific processing activities, such as receiving promotional emails or participating in optional surveys;
• Legitimate Interests: Processing is necessary for our legitimate business interests — such as fraud prevention, platform security, and improving user experience — provided these interests do not override your fundamental rights;
• Legal Obligation: Processing is required to comply with applicable laws and regulations governing online gaming, anti-money laundering (AML), and identity verification.

You have the right to object to processing based on legitimate interests. To exercise this right, contact our Data Protection team via the details in Section 15.

Data Sharing & Disclosure

icon88 does not sell your personal data to third parties. However, we may share your data with the following categories of recipients for the purposes described in this Policy:

7.1 Service Providers

We engage trusted third-party service providers to assist with platform operations, including:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja;
• Identity Verification Services: To validate KYC documents and detect fraudulent submissions;
• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session data necessary to deliver game outcomes and reconcile player accounts;
• Cloud Hosting & Infrastructure Providers: To securely store data and maintain platform uptime;
• Customer Support Tools: Including live chat platforms and ticketing systems that enable our support team to assist you effectively.

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

7.2 Legal & Regulatory Authorities

We may disclose your personal data to law enforcement, regulatory bodies, or courts if required by applicable law, court order, or to protect the rights, property, or safety of icon88, our Members, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. You will be notified via email of any such change in ownership.

Cookies & Tracking Technologies

icon88 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that allow us to recognize you across sessions and remember your preferences.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, including login session management and security features. These cookies cannot be disabled without impairing your ability to use icon88.
• Performance Cookies: Collect anonymous usage statistics to help us understand how Members interact with the platform and identify areas for improvement.
• Functional Cookies: Remember your preferences, such as language settings, display options, and previously accessed pages.

8.2 Third-Party Cookies

Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) may place cookies on your device to deliver game content and record session outcomes. These cookies are governed by the respective provider's privacy policy.

8.3 Managing Cookies

You can manage or disable cookies through your browser settings. Note that disabling essential cookies will prevent you from accessing key platform features, including account login and game loading. Most modern browsers allow you to:

• View and delete cookies stored on your device;
• Block third-party cookies;
• Receive notifications when a new cookie is set.

For detailed guidance, consult your browser's help documentation.

Data Retention

icon88 retains your personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with our legal obligations.

9.1 Active Accounts

While your Account remains active, we retain all personal data necessary to provide platform services, process transactions, and maintain security.

9.2 Closed Accounts

If you close your Account, we will retain the following data for the specified periods:

• Transaction Records: Retained for 7 years to satisfy financial regulatory requirements;
• KYC Documents: Retained for 7 years for anti-money laundering (AML) and compliance purposes;
• Communications Logs: Retained for 2 years to resolve any outstanding disputes or claims;
• Fraud & Security Data: Retained indefinitely where necessary to protect icon88 and other Members from ongoing threats.

9.3 Deletion Requests

You may request deletion of your personal data at any time (see Section 11). However, we may be legally required to retain certain data categories beyond your deletion request, particularly where retention is mandated by financial or gaming regulations.

Data Security

icon88 employs industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction.

10.1 Technical Safeguards

• 256-bit SSL Encryption: All data transmitted between your device and icon88 servers is encrypted using Secure Socket Layer (SSL) technology;
• Encrypted Data Storage: Sensitive data, including passwords and payment details, is encrypted at rest using AES-256 encryption;
• Access Controls: Personal data is accessible only to authorized icon88 personnel who require it to perform their duties. Access is logged and monitored;
• Regular Security Audits: icon88 undergoes periodic third-party security assessments to identify and remediate vulnerabilities;
• DDoS Protection & Firewall: Our infrastructure is protected by enterprise-grade DDoS mitigation and web application firewalls.

10.2 Organizational Safeguards

• All icon88 employees and contractors are bound by confidentiality agreements;
• Staff receive regular training on data protection and privacy best practices;
• We maintain an incident response plan to address any data breach promptly and transparently.

10.3 Your Responsibility

You are responsible for maintaining the confidentiality of your Account credentials. Use a strong, unique password and enable two-factor authentication if available. Never share your password with anyone, and report any suspected unauthorized access to our support team immediately.

Your Data Rights

As an icon88 Member, you hold the following rights over your personal data:

• Right of Access: You may request a copy of all personal data we hold about you, including Account details, transaction history, KYC documents, and communications logs;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most Account details directly via your Account settings;
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data, subject to our legal retention obligations described in Section 9;
• Right to Restrict Processing: You may request that we temporarily suspend processing of your personal data in certain circumstances, such as while we verify the accuracy of disputed data;
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service provider;
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing communications;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.1 How to Exercise Your Rights

To exercise any of the above rights, submit a written request to icon88 Customer Support via email at [email protected] (plain text — not a clickable link) or via live chat. Include your full name, registered email address, and a clear description of your request.

We will respond to all valid requests within 30 days. In complex cases, we may extend this period by an additional 30 days and will notify you of the extension.

11.2 Verification

To protect your privacy, we may require you to verify your identity before fulfilling any data rights request. This may involve answering security questions or providing a copy of your government-issued ID.

Children's Privacy

icon88 is designed exclusively for adults aged 21 and over. We do not knowingly collect or process personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected data from a person under 21, we will take immediate steps to delete that data and close the associated Account. All balances will be returned to the payment source where legally permissible.

If you believe that a minor has registered an Account on icon88, please contact us immediately at [email protected] so we can investigate and take appropriate action.

Third-Party Links

The icon88 platform may contain links to external websites operated by game studios, payment providers, or other third parties. This Privacy Policy applies only to data collected by icon88. We are not responsible for the privacy practices of external sites.

When you follow a link to a third-party site, we encourage you to review that site's privacy policy before providing any personal data. Third-party sites may have different data collection and usage practices that are outside our control.

Policy Changes & Updates

icon88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material — particularly those that expand the scope of data collection or alter your rights — we will provide at least 30 days' advance notice via email to registered Members and via a prominent notice on the platform homepage.

Minor updates, such as clarifications, typographical corrections, or changes required by regulatory updates, may take effect immediately upon publication. The "Last Updated" date at the top of this Policy indicates when the current version was published.

Your continued use of the icon88 platform following notification of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you must cease use of the platform and contact Customer Support to close your Account.

Contact & Data Protection Requests

If you have any questions, concerns, or complaints about this Privacy Policy or icon88's data practices, or if you wish to exercise any of your data rights described in Section 11, please contact us via the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the icon88 platform (log in to your Account to access live chat)
• WhatsApp: Contact details available upon Account login
• Operating Hours: 24 hours a day, 7 days a week, in Indonesian (WIB — Western Indonesia Time, UTC+7)

We aim to respond to all privacy inquiries within 24 hours and to resolve formal data protection requests within 30 days. For complex requests, we may extend this period by an additional 30 days and will notify you of the extension.