cm88bets Casino & Sportsbook Data Care

This page describes what we collect when you use cm88bets and how we keep that data protected. We handle your personal information with the same attention we give to account security and withdrawal processing — every piece of data serves a specific function (account verification, payment confirmation, regulatory compliance), and we disclose exactly where it goes and how long we keep it.

We collect data in two categories: what you tell us directly (email, password, identity card for KYC), and what our platform records automatically (login timestamps, device type, game session history). Both flow through identical encryption and access controls, regardless of whether you use the Android APK, iOS browser, or desktop login.

Our cm88bets servers may sit outside your jurisdiction, but your account data remains encrypted at rest and in transit. We rely on third-party payment processors (DANA, e-wallet, mobile banking, etc.) to handle deposit and withdrawal confirmation, and we describe that relationship below. Your rights — to access your data, request deletion, or lodge complaints — are outlined in this policy.

What Data We Collect and How We Use It

We collect your email address, username, and password during account creation. We store a hashed (encrypted) version of your password so we can verify you at login but can never recover your actual password. We also collect your full name, date of birth, and identity card number during KYC verification — this happens before your first withdrawal and is required by payment processors like BCA, e-wallet, and mobile banking to confirm your identity.

We log every action on cm88bets: game spins, bets placed, deposits via local payment or bank transfer, withdrawals, login timestamps, and device details (phone model, app version, IP address). These logs serve three purposes: to prevent fraud (duplicate accounts, stolen passwords), to settle disputes (you contact us about a missing payout, we review the exact timestamp and amount from our logs), and to provide you with a complete account history in your Result Table.

Data we do not collect or sell

We never sell your data to third parties, use it for advertising, or share your gaming history with marketers. We do not build profiles about you beyond what is necessary to operate your account, process your payments, and comply with law.

Third-Party Processors and Payment Gateways

We partner with payment processors to handle deposits and withdrawals. When you select online payment or e-wallet, we send your name, phone number, and deposit amount to that processor's gateway — they confirm the transaction and return a confirmation code to our system. We then credit your cm88bets balance. We do not store your mobile banking PIN, local payment password, or online payment Virtual Account credentials. The payment processor holds those, and we receive only a settlement confirmation.

Our cm88bets servers communicate with payment processors via encrypted channels (HTTPS, TLS 1.2 or higher). Processors may retain your transaction history for their own regulatory obligations — e-wallet, mobile banking, local payment, and other providers follow Indonesian banking regulations. We have no control over how long they keep data, but we retain our own records (transaction ID, amount, timestamp, status) for a minimum of seven years for audit and dispute purposes.

Cookies and Device Tracking

Our cm88bets app and browser platform use cookies to keep you logged in between sessions. When you close the app or browser and return later, a cookie allows us to recognize your account without re-entering your password every time. We also use cookies to track your in-app preferences (language choice, notification settings, game filters).

If you access cm88bets from Jakarta, Surabaya, Bandung, or Medan, our system logs your general region (city-level, not street address) to verify you remain in a supported jurisdiction during your session. We do not track your precise GPS location. Your IP address is logged for security purposes — if your account suddenly logs in from a different country, our fraud system flags it and may require re-verification.

How Long We Keep Your Data

We retain account data (name, email, identity card details) as long as your account remains active. If you request account deletion, we anonymize most data within 30 days but retain transaction records (deposits, withdrawals, bets) for seven years — this is required by financial regulators to prevent money-laundering and fraud.

Login logs and device tracking data are kept for 12 months. If you log in during December and request an old session history in February of the following year, we still have that data. After 12 months, we delete device logs but keep transactional records (payments, game settlements) indefinitely for audit trails.

Your Rights and Account Access

You have the right to access all data we hold about you. Log into your cm88bets account, go to Account Settings → Data Access, and request a download of your personal information. We provide it in plain text within five business days. You can also request deletion of non-essential data (cookies, device logs), though we must retain transaction records and KYC documents for regulatory compliance.

If you believe we misused your data or violated this policy, contact our support team at Help or via email. We respond to data-related complaints within seven business days. If you are unsatisfied with our response, you may lodge a complaint with the relevant Indonesian data-protection authority.

Data protection summary

  • Your passwords are hashed and never stored in plain text
  • Account data is encrypted at rest on our servers
  • Payment processor data (online payment, e-wallet, mobile banking) is sent via secure encrypted channels
  • Transaction records are retained for seven years for regulatory compliance
  • Device and login logs are kept for 12 months then deleted
  • You can request access or deletion of your non-transactional data anytime

Our Commitment to Your Privacy

We at cm88bets understand that trust depends on transparent data practices. This policy applies globally to all cm88bets users, but we recognize that Indonesian law (Law No. 27 of 2022 on Personal Data Protection) sets stricter standards than some jurisdictions. We comply with the strictest applicable law, so your data receives Indonesian-level protection regardless of where our servers sit.

We update this policy when our practices change — for example, if we add a new payment processor or shift server locations. We announce changes via email and in-app notification 30 days before they take effect. Your continued use of cm88bets after that date means you accept the updated policy. If you disagree, you may delete your account, and we will anonymize your non-transactional data immediately.

For questions about this policy, contact our multilingual support team via the Help section on cm88bets or by email. We respond to privacy questions within one business day during standard business hours. Services are available only where applicable law permits.