Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, residential address, email address, phone number, government-issued identification number, payment account details, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" — ls888, which determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" — A third-party service provider that processes personal data on behalf of ls888, subject to a binding data-processing agreement.
• "KYC Data" — Identity verification documentation submitted by a member in connection with the Know Your Customer process, including copies of government-issued photo ID and proof of address.
• "Cookies" — Small data files placed on your device by the ls888 platform for the purposes of session management, performance measurement, and user preference storage.
• "Third Party" — Any individual, entity, or organization other than you and ls888.

2 Scope and Application

This Policy applies to all personal data collected by ls888 through the following channels:

• The ls888 website at https://ls888.cam and any associated subdomains or mirror domains.
• The ls888 mobile web application and any native mobile applications distributed by ls888.
• Email, live chat, and any other direct communication channels through which you interact with ls888 support staff.
• Automated technical systems, including server logs, analytics platforms, and fraud-detection tools that process data generated by your use of the platform.

This Policy applies to members who are primarily located in Indonesia, including Jakarta, Surabaya, Bandung, Medan, Semarang, Palembang, Makassar, Yogyakarta, and Bali, as well as members accessing the platform from other locations. Indonesian Rupiah (IDR / Rp) is the primary transaction currency for all accounts covered by this Policy.

This Policy does not apply to third-party websites, payment gateways, or services that may be linked from or integrated with the ls888 platform but are operated independently. ls888 is not responsible for the privacy practices of those third parties.

3 Data We Collect

ls888 collects personal data in three primary ways: data you provide directly, data generated automatically by your use of the platform, and data obtained from third parties in connection with payment processing and identity verification. The categories of data collected are described below.

3.1 Data You Provide Directly. When you register an account, complete KYC verification, make a deposit or withdrawal, or contact support, you may provide the following:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for age verification — members must be 21 or older).
• Residential address, including city, province, and postal code within Indonesia.
• Email address and mobile phone number.
• Government-issued ID details (national identity card / KTP number, passport number, or driver's license number).
• Payment account information — bank account numbers held with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, or BSI; or e-wallet registration details for OVO, DANA, GoPay, ShopeePay, or LinkAja.
• Communications data: the content of support tickets, live chat transcripts, and emails exchanged with the ls888 support team.

3.2 Data Collected Automatically. When you access and use the ls888 platform, our systems automatically record the following technical data:

• IP address and approximate geographic location derived from it.
• Device type, operating system version, browser type and version.
• Session timestamps, pages visited, and navigation paths within the platform.
• Wagering activity records: game type, bet amount, outcome, and timestamp for every wager placed.
• Deposit and withdrawal transaction logs.
• Login and logout timestamps, including failed login attempts.

3.3 Data from Third Parties. In certain circumstances, ls888 may receive personal data about you from third-party sources, including:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, and affiliated e-wallet providers) who confirm the status and ownership of transactions.
• Identity verification service providers used to cross-check KYC documents against official databases.
• Fraud-prevention and anti-money-laundering (AML) screening services that flag accounts against sanctions or watchlists.

4 How We Use Your Data

ls888 processes personal data only for specific, defined purposes. The table below sets out the primary purposes for which we use your data and the legal basis that justifies each processing activity.

ls888 does not use personal data for automated decision-making that produces legal effects or similarly significant outcomes, except where required to perform AML screening or enforce our Terms & Conditions (for example, automatically flagging a newly registered account that matches a known fraudulent pattern). In such cases, you have the right to request human review of any decision that materially affects your account.

5 Data Sharing and Disclosure

ls888 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

5.1 Payment Processing Partners. To process deposits and withdrawals, ls888 shares the minimum necessary transaction and identity data with the relevant payment provider — which may include BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or LinkAja. These entities operate under their own regulatory frameworks and privacy obligations.

5.2 Identity Verification Providers. KYC documentation may be shared with independent identity verification service providers retained by ls888 to authenticate government-issued ID documents and cross-reference data against official records. These providers process data solely for the purposes of verification and are bound by confidentiality obligations.

5.3 Fraud Prevention and AML Services. ls888 may share data with third-party fraud-screening and anti-money-laundering services to detect suspicious activity and comply with applicable financial crime regulations. Where required by law, ls888 will disclose transaction data to designated financial intelligence or law enforcement authorities.

5.4 Game Content Providers. Game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive a pseudonymized session token to authenticate your game session. These providers do not receive your full identity data or payment details.

5.5 Legal and Regulatory Disclosure. ls888 may disclose personal data when required to do so by a valid legal process, court order, or regulatory authority request, to the extent required by applicable law and without prejudice to any applicable legal privilege.

5.6 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of ls888's business operations, personal data held by ls888 may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer and any resulting changes to this Privacy Policy via a platform-wide notice.

6 Data Retention

ls888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply as a general guide:

• Account registration data (name, email, date of birth, contact details): retained for the duration of your active membership and for up to five years following permanent account closure.
• KYC documentation (government ID, proof of address, payment method confirmation): retained for up to five years following account closure, in line with standard financial compliance requirements.
• Transaction records (deposit and withdrawal logs, wagering history): retained for up to five years, or longer where required by applicable anti-money-laundering or tax regulations.
• Support communications (chat transcripts, email correspondence): retained for up to two years following the resolution of the relevant query, unless the communication relates to a formal dispute, in which case it is retained until the dispute is fully resolved.
• Technical and analytical data (server logs, IP records, session data): retained for up to 12 months in identifiable form; thereafter retained only in anonymized, aggregated form with no retention limit.
• Self-exclusion records: retained indefinitely to prevent re-registration during an active self-exclusion period and to maintain a permanent record of exclusion history for responsible gaming audit purposes.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymized. You may request early deletion of specific data categories by contacting support, subject to our ability to fulfil that request in light of outstanding legal or compliance obligations.

7 Security Measures

ls888 applies a layered security architecture to protect personal data against unauthorized access, loss, alteration, and disclosure. Our key technical and organizational security measures include:

• Transport Encryption: All data in transit between your device and ls888 servers is protected by 256-bit TLS/SSL encryption. The presence of a valid SSL certificate can be verified by the padlock icon in your browser address bar.
• Data-at-Rest Encryption: Sensitive stored data, including KYC documents and payment account details, is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Internal access to personal data is granted on a strict need-to-know basis. ls888 staff and contractors can access only the specific data categories required to perform their designated roles, enforced through role-based access control (RBAC) systems.
• Multi-Factor Authentication: Internal administrative systems require multi-factor authentication for all staff logins. Members are strongly encouraged to enable any available two-factor authentication options on their accounts.
• Penetration Testing and Audits: ls888 conducts periodic security assessments — including external penetration testing and internal code reviews — to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is reasonably likely to result in a risk to your rights or interests, ls888 will notify affected members and relevant authorities within a timeframe consistent with applicable regulatory requirements.

While ls888 applies robust security measures, no system is entirely immune to risk. You play an important role in account security by maintaining a strong, unique password for your ls888 account, not sharing your login credentials with any third party, and notifying support immediately if you suspect unauthorized access.

8 Cookies and Tracking Technologies

ls888 uses cookies and similar technologies — including local storage and session tokens — to operate the platform effectively and to understand how members use it. The cookies we use fall into the following categories:

8.1 Strictly Necessary Cookies. These cookies are required for the platform to function. They maintain your login session, remember your account state, and ensure that security features operate correctly. Without these cookies, core platform services cannot be delivered. These cookies cannot be disabled.

8.2 Performance and Analytics Cookies. These cookies collect aggregated, anonymized data about how members navigate the platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This information is used solely to improve platform performance and the member experience. No personally identifiable data is included in these reports.

8.3 Functional Cookies. These cookies remember your preferences — such as display settings and notification choices — to provide a more personalized experience across sessions.

8.4 What We Do Not Use. ls888 does not deploy third-party advertising cookies, behavioral profiling trackers, social media pixel trackers, or any cookies that share your browsing behavior with advertisers or data brokers.

8.5 Managing Cookies. You can control cookie behavior through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in and using the ls888 platform. Disabling performance or functional cookies will not affect your access but may reduce the quality of your experience.

9 Your Privacy Rights

ls888 respects your rights as a data subject. Depending on your location and the applicable legal framework, you may have the following rights with respect to the personal data ls888 holds about you:

• Right of Access: You have the right to request a copy of the personal data ls888 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic profile information directly through the account settings; for corrections to KYC data, please contact support.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances — for example, where the data is no longer necessary for its original purpose — you may request the deletion of your personal data. This right is subject to our legal and regulatory retention obligations. We cannot erase data where retention is required by applicable compliance law.
• Right to Restrict Processing: You may request that ls888 restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: You may request that ls888 provide your personal data in a structured, commonly used, machine-readable format, enabling you to transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including any profiling conducted on that basis. You also have the right to withdraw consent to marketing communications at any time.
• Right Not to Be Subject to Automated Decisions: You have the right to request human review of any automated decision that significantly affects your account, as described in Section 4.

To exercise any of the rights above, please contact the ls888 support team. We will respond to all verifiable requests within 30 calendar days. We may ask you to verify your identity before fulfilling a data rights request to protect against unauthorized access to your information.

10 Minors and Age Restriction

The ls888 platform is strictly restricted to individuals who are 21 years of age or older. ls888 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and any account found to belong to a person under 21 will be immediately suspended.

If you are a parent or guardian and believe that a minor in your care has registered an ls888 account or submitted personal data to ls888, please contact our support team immediately. Upon verification of the report, ls888 will suspend the account and delete any associated personal data to the extent permitted by our compliance obligations.

ls888 does not direct any marketing content or promotional communications at individuals under the age of 21 and takes reasonable steps to ensure that its promotional materials are not accessible to or targeted at minors.

11 Policy Amendments

ls888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or the features and services offered on the platform. When material changes are made, ls888 will notify active members by posting a prominent notice on the platform and updating the "Last Updated" date at the top of this page.

Your continued use of the ls888 platform following the publication of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the amended Policy, you must discontinue use of the platform and contact support to close your account and request deletion of your data to the extent permitted by our retention obligations.

We encourage you to review this Privacy Policy periodically to stay informed about how ls888 protects your personal data.

12 Contact Information

If you have questions about this Privacy Policy, wish to exercise a data rights request, or want to report a potential data privacy concern, please reach out to the ls888 support team through any of the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week through the platform interface. For data rights requests, please state "Privacy Request" at the start of your message so our team can route it to the appropriate handler.
• Response Time: ls888 targets a response window of 2–6 hours for email inquiries received during WIB (UTC+7) peak hours and commits to a maximum of 30 calendar days for formal data subject access or erasure requests.
• Operating Hours: 24/7, including Indonesian national holidays. Support is available in both English and Indonesian.

For responsible gaming inquiries — including self-exclusion requests or deposit limit adjustments — please visit our dedicated Responsible Gaming page. These requests are handled as a priority by a dedicated team.