Reference

How we handle your privacy and account information

When you open an account with us, your personal data and payment details stay secure and private.

Account & identity verificationPayment and withdrawal protectionYour data rights under local law
bandit88 How we handle your privacy and account information
PRIVACY QUESTIONS & REQUESTS

How to exercise your data rights

Email Support Contact our privacy team at [email protected] with your request — data access, correction, deletion…
Live Chat Open the chat widget in the lobby during support hours (10:00–23:00 Jakarta time, daily)…
Account Settings Visit Settings > Privacy & Data in your account dashboard to download your personal…
DATA SECURITY & RETENTION

How we protect and store your information

Encryption & Secure Transfer

All payments — DANA, OVO, GoPay, QRIS deposits and withdrawals — are encrypted with 256-bit SSL. Your password is hashed; we never store it in plain text. Login sessions expire after 30 minutes of inactivity.

Data Retention

We keep account and transaction records for 7 years to comply with local financial rules and detect fraud. After account closure, personal data is anonymized or deleted within 90 days, except where local law requires longer retention.

Cookie Transparency

Cookies on bandit88 are functional (session ID, language, login state) or analytics (page views, game choices). No cookies collect payment details. You can manage all cookies in your browser; disabling them may affect lobby experience.

Device & Login Monitoring

We log device ID, IP address, and login timestamp to spot unauthorized access. If we detect suspicious activity — a new device, unusual withdrawal timing, or region mismatch — we'll send you an alert and may ask for additional verification.

Third-Party Access

We share data with payment processors (DANA, OVO, GoPay, QRIS), KYC providers for identity checks, and fraud-detection partners. These partners are bound by the same privacy standards and do not resell your data.

Privacy Change Notices

If we update this policy, we'll email you 30 days in advance and post the change date on this page. Continued use of your account after the update means you accept the new terms.

Answers to what you ask about your data

Your account data is anonymized within 90 days of closure. Transaction records are kept for 7 years for regulatory compliance. You can request permanent deletion of personal information before closure by emailing [email protected]. Depends on local law in your region.

Yes. Go to Settings > Privacy & Data in your account dashboard and click Export My Data. You'll receive a CSV file containing your name, email, phone, address, account history, and all transactions within 5 business days.

Payment card or bank details you provide are not stored after a successful withdrawal. DANA, OVO, GoPay and QRIS transactions are logged for 7 years for audit purposes, but the account numbers themselves are deleted within 30 days.

No. We do not sell, trade, or rent your personal information. Data is shared only with payment processors, identity-verification partners, and fraud-detection services. These partners use it solely to process your transactions and prevent abuse.

Verification is required to prevent fraud, money laundering, and account takeover. We check your ID against a trusted KYC database and match your address to prevent duplicate accounts. This protects your account and ensures safe withdrawals via DANA, OVO, GoPay or QRIS.

Contact [email protected] with the details you want to correct. Alternatively, go to Settings > Personal Info and update your email, phone, or address yourself. Changes are processed within 24 hours.

You can disable non-essential cookies in your browser settings. Functional cookies (login, language, session) cannot be disabled without breaking the lobby. Analytics cookies can be turned off; this will not affect your gameplay or withdrawals.