stk88 Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "stk88", "we", "us", "our" — the stk88 platform and its internationally licensed operating entity, accessible at https://stk88.cam.
• "User", "you", "your" — any individual who visits, registers on, or uses the stk88 website or Services.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, email address, phone number, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, deletion, or destruction.
• "Services" — all features, tools, games, betting markets, and support channels made available through the stk88 platform.
• "KYC" — Know Your Customer; the identity and document verification process required to confirm a User's identity before withdrawals are approved.
• "Cookies" — small text files placed on your device by the stk88 website to support functionality, analytics, and session management.
• "Third-Party Processor" — any external company or service provider that processes Personal Data on behalf of stk88 under a binding data processing agreement.

2 Scope & Applicability

This Privacy Policy applies to all Personal Data collected by stk88 through:

• The stk88 website at https://stk88.cam and any subdomains;
• Account registration, login, and profile management processes;
• Deposit and withdrawal transactions processed via local Indonesian payment channels;
• Customer support interactions conducted via live chat or email;
• Any promotional campaigns, surveys, or competitions operated by stk88.

This policy is intended for Users who are residents of Indonesia and who are at least 21 years of age. If you do not meet these eligibility criteria, you should not use the stk88 platform and should not submit any Personal Data through this website.

3 Personal Data We Collect

stk88 collects the following categories of Personal Data, depending on the nature of your interaction with the platform:

3.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued ID);
• Date of birth;
• Email address;
• Mobile phone number (Indonesian format, e.g., +62xxxxxxxxxx);
• City and province of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Medan).

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., KTP — Indonesian National Identity Card, or valid passport);
• Selfie photographs taken for liveness verification;
• Proof of payment method ownership (e.g., bank account screenshots confirming your name matches the registered account).

3.3 Financial & Transaction Data

• Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI);
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja);
• Deposit amounts, withdrawal amounts, and transaction timestamps;
• Wagering history, game session data, and account balance records.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session duration, pages visited, features used, and clickstream data;
• Login timestamps and authentication logs.

3.5 Communications Data

• Records of live chat conversations with our support team;
• Email correspondence sent to or received from [email protected];
• Responses to surveys, promotions, or feedback requests (where you choose to participate).

4 How We Collect Personal Data

Personal Data is collected through the following channels:

4.1 Directly From You

The majority of Personal Data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or participate in a promotion.

4.2 Automatically Through Platform Use

When you visit and interact with the stk88 website, we automatically collect certain technical data via cookies, log files, and analytics tools. This includes IP addresses, browser fingerprints, session activity, and device identifiers. See Section 7 for full details of our cookie practices.

4.3 From Third-Party Processors

We may receive limited Personal Data from third-party service providers — for example, confirmation of a successful payment from a bank or e-wallet processor, or identity verification results from a KYC partner. In all cases, such providers are contractually bound to handle data in compliance with applicable privacy standards.

4.4 From Fraud & Security Systems

Our automated fraud detection systems may cross-reference data points (such as IP address, device fingerprint, and payment method) to identify suspicious account activity. This processing is carried out in the legitimate interests of protecting the platform and its users from fraud and money laundering.

5 Purpose & Legal Basis for Processing

The table below sets out the specific purposes for which stk88 processes Personal Data and the legal basis that justifies each processing activity:

6 Third-Party Disclosure

6.1 Service Providers

stk88 shares Personal Data with carefully selected third-party processors who assist in delivering our Services. These include:

• Payment processors: local Indonesian bank transfer intermediaries and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) for the purpose of completing deposit and withdrawal transactions;
• KYC verification providers: identity document verification and liveness check services used to fulfil our anti-fraud and compliance obligations;
• Cloud infrastructure providers: hosting and data storage partners operating under binding data processing agreements with equivalent data security standards;
• Analytics providers: platform usage analytics tools used to understand how Users interact with the stk88 website (data shared in aggregated or pseudonymised form where possible).

All third-party processors are required to process Personal Data only in accordance with stk88's documented instructions and applicable privacy obligations. They are prohibited from using stk88 User data for their own independent commercial purposes.

6.2 Legal Disclosures

stk88 may disclose Personal Data to competent authorities, courts, or regulators where required to do so by applicable law, court order, or regulatory direction. We will, where legally permissible, notify you of any such disclosure request before complying.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of stk88's business operations, Personal Data held by stk88 may form part of the transferred assets. Affected Users will be notified before their data becomes subject to a materially different privacy policy.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files that our website places on your browser or device when you visit. They enable the site to remember your session, preferences, and certain usage patterns across visits.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: required for the website to function — these enable session management, login persistence, and security token validation. They cannot be disabled without impairing site functionality.
• Performance & Analytics Cookies: collect anonymised data about how visitors use the stk88 platform (page views, session length, error events). This data is used solely to improve the platform experience.
• Functional Cookies: remember your language preference, display settings, and last-visited sections of the platform to personalise your experience.
• Security Cookies: support our fraud detection and bot-mitigation systems by maintaining a short-lived device fingerprint for the duration of your session.

7.3 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging in or using transactional features of the platform. Most modern browsers offer granular cookie controls in their privacy or security settings menu.

8 Data Security

stk88 implements a layered security architecture to protect Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our measures include:

• Transport Encryption: all data in transit between your device and stk88 servers is encrypted using TLS 1.2 or higher with 256-bit AES cipher suites;
• Encryption at Rest: sensitive Personal Data stored in our databases — including KYC documents, identity records, and financial transaction logs — is encrypted at rest;
• Access Controls: access to Personal Data within stk88 is governed by role-based access controls. Only staff members with a documented operational need may access specific data categories;
• Two-Factor Authentication (2FA): administrative access to systems that process Personal Data requires 2FA authentication;
• Penetration Testing: our platform undergoes regular independent security assessments and penetration tests;
• Incident Response: stk88 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you and relevant authorities within the timeframes required by applicable law.

9 Data Retention

stk88 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by law. The following retention schedule applies:

On expiry of the applicable retention period, Personal Data is either securely deleted or anonymised such that it can no longer be attributed to any individual.

10 Your Rights

As a User of the stk88 platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact our data team at [email protected] with the subject line "Data Rights Request":

10.1 Right of Access

You may request a copy of the Personal Data stk88 holds about you, along with information about how it is processed. We will respond to verified access requests within 30 days.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Where the relevant data affects your Account status or KYC verification, we may ask you to resubmit supporting documents.

10.3 Right to Erasure

You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing has been found to be unlawful. This right is subject to our legal retention obligations — data we are required by law to retain cannot be deleted before the mandatory retention period expires.

10.4 Right to Restrict Processing

You may request that stk88 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.

10.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.

10.6 Right to Object

You may object to processing based on stk88's legitimate interests at any time. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

10.7 Right to Withdraw Consent

Where processing is based on consent — for example, receiving marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

11 Children's Privacy

The stk88 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or store Personal Data belonging to individuals under 21 years of age.

If we become aware that Personal Data has been submitted by or on behalf of a person under the age of 21, we will immediately close the associated Account, void any balance held therein, and delete the relevant Personal Data from our systems as soon as operationally practicable.

If you are a parent or guardian and believe that your child has registered an account or submitted Personal Data on the stk88 platform, please contact us immediately at [email protected].

12 International Data Transfers

stk88 is operated by an internationally licensed entity and may process or store Personal Data on servers located outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, stk88 ensures that appropriate safeguards are in place, including:

• Binding contractual clauses (standard contractual clauses or equivalent) with the receiving entity;
• Compliance audits and security assessments of recipient processors;
• Data minimisation — only the minimum necessary data is transferred internationally.

By using the stk88 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data to our servers and processors as described in this section.

13 Third-Party Links

The stk88 website does not contain links to third-party external websites, social media platforms, or affiliate partner sites. All navigation on stk88.cam is internal to this domain. Consequently, this section serves as a standing confirmation that stk88 is not responsible for the privacy practices of any external website that may independently reference or link to stk88.cam.

If you arrive at the stk88 platform via a third-party source, please review the privacy policy of that source independently, as it is entirely separate from this document.

14 Policy Amendments

stk88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will:

• Post the updated policy on this page with a revised "Last Updated" date;
• Where operationally practicable, notify active account holders via the email address registered to their Account at least 7 days before the amended policy takes effect.

Your continued use of the stk88 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed of any changes.

15 Contact & Complaints

15.1 Data Enquiries

For any questions, requests, or concerns relating to this Privacy Policy or the processing of your Personal Data, please contact the stk88 data team through the following channel:

• Email: [email protected] — include "Privacy Enquiry" or "Data Rights Request" in the subject line for fastest routing.
• Live Chat: available 24/7 from within your stk88 Account dashboard. For data rights requests, our support team will escalate your query to the appropriate internal team within one business day.

15.2 Response Timeframes

General privacy enquiries are acknowledged within 24 hours and substantively responded to within 5 business days. Formal data rights requests (access, rectification, erasure, portability) are responded to within 30 calendar days of identity verification.

15.3 Complaints

If you are dissatisfied with stk88's handling of your Personal Data or with our response to a data rights request, you have the right to escalate your complaint to the data protection authority or regulatory body with jurisdiction over stk88's operating licence territory. Please contact us first to allow us the opportunity to address your concern before escalating externally.

This Privacy Policy was last reviewed and updated in January 2026. stk88 thanks you for taking the time to read it in full.