sio88 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below unless the context clearly indicates otherwise:

• "Personal Data" means any information that identifies or could reasonably be used to identify you as a natural person, including but not limited to your name, date of birth, email address, IP address, device identifiers, financial account details, and identity documents.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure, or destruction, whether by automated or manual means.
• "Platform" means the sio88 website at https://sio88.bio and all associated sub-pages, mobile interfaces, and gaming services.
• "Player" / "You" / "Your" means any individual who accesses, registers on, or interacts with the Platform in any capacity.
• "Account" means the registered Player account through which you access sio88's gaming services and manage funds.
• "KYC" means Know Your Customer — the identity and age verification process required by sio88 before withdrawals may be processed.
• "Service Partner" means any third-party processor, supplier, or service provider engaged by sio88 to deliver a specific operational function (e.g., payment processing, identity verification, cloud hosting, customer support tooling).
• "We" / "Us" / "Our" means sio88 and its operating entity, including authorized representatives.
• "Cookie" means a small text file placed on your device by the Platform to enable functionality, session management, and analytics.
• "Retention Period" means the defined duration for which sio88 stores a specific category of Personal Data before securely deleting or anonymizing it.

sio88 acts as the data controller in respect of all Personal Data collected from Players through the Platform. As data controller, sio88 determines the purposes and means by which your Personal Data is processed, and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions about how your Personal Data is handled, or wish to exercise any of the rights described in this policy, you may contact our Data Protection team at any time using the contact details provided in Clause 15 of this document.

Where sio88 engages Service Partners to carry out specific processing activities on its behalf (for example, payment processors handling transaction data), those Service Partners act as data processors. sio88 maintains contractual agreements with all Service Partners that bind them to confidentiality obligations and restrict their use of your data solely to the purposes specified by sio88.

sio88 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The categories of data we collect, and specific examples within each, are set out in the table below:

sio88 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the liveness check required for KYC) unless explicitly required by law or regulation and with your prior informed consent.

sio88 collects your Personal Data through the following channels and mechanisms:

• Direct Interactions: Data you voluntarily provide when registering an account, completing KYC verification, making deposit or withdrawal requests, contacting our support team, or updating your account profile.
• Automated Technologies: Technical and usage data collected automatically when you visit or interact with the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Clause 10 for details on cookie use.
• Third-Party Verification Services: Identity and address verification data obtained through our KYC service partners when you submit documents for account verification. These partners verify the authenticity of documents and may cross-reference data against public records.
• Payment Processors: Transaction confirmation data received from local Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when processing your deposits and withdrawals.
• Fraud Detection Systems: Risk signals and device fingerprint data generated by automated fraud prevention tools that monitor Platform activity for signs of account compromise, multi-accounting, or financial crime.

sio88 processes your Personal Data only for defined, legitimate purposes. The table below sets out each processing purpose, the data categories involved, and the legal basis on which we rely:

sio88 does not use your Personal Data for automated decision-making or profiling that produces legal or similarly significant effects, except where such processing is necessary for fraud detection or responsible gaming interventions, in which case you will be notified and afforded the right to human review.

sio88 does not sell, rent, or otherwise commercialize your Personal Data. We share Personal Data only in the following limited and controlled circumstances:

• Service Partners: We share only the minimum necessary data with trusted Service Partners who assist us in operating the Platform — including KYC identity verification providers, payment processing partners (Indonesian banks and e-wallet operators), cloud infrastructure providers, and customer support tooling vendors. All Service Partners are contractually bound to process your data solely as instructed by sio88 and to maintain appropriate security standards.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, a binding court order, or a lawful request from a competent regulatory or law enforcement authority, sio88 will disclose Personal Data to the extent legally required. We will, wherever permitted, notify you of such a request before complying.
• Business Transfers: In the event that sio88 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.
• Fraud Prevention Networks: sio88 may share anonymized or pseudonymized risk signals with industry fraud prevention networks where doing so helps protect Players and the broader online gaming ecosystem from financial crime. No directly identifiable Personal Data is shared in this context without a lawful basis.

In all cases of data sharing, sio88 applies the principle of data minimization — only the information strictly necessary for the recipient to perform their specific function is disclosed.

sio88 operates digital infrastructure that may involve the transfer of your Personal Data to servers or Service Partners located outside Indonesia. Where such transfers occur, sio88 ensures that appropriate safeguards are in place to maintain the same level of data protection as applies within Indonesia, including:

• Contractual clauses with receiving parties that impose equivalent data protection obligations.
• Transfers exclusively to jurisdictions or entities that maintain internationally recognized data protection standards aligned with GDPR-equivalent frameworks.
• Regular review and audit of cross-border data transfer arrangements by our Data Protection team.

If you wish to obtain further details about the specific safeguards applied to any international transfer of your Personal Data, please contact us using the details in Clause 15.

sio88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account Data (Identity & Contact): Retained for the duration of your active account, plus a minimum of five (5) years following account closure, to comply with AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, consistent with international anti-money-laundering standards.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Technical & Usage Data: Retained for up to twenty-four (24) months in identifiable form, after which data is aggregated or anonymized for long-term platform analytics.
• Support Communications: Retained for up to three (3) years from the date of the last communication, to enable resolution of any subsequent dispute or complaint.
• Cookie Data: Session cookies expire when you close your browser. Persistent cookies expire within twelve (12) months of placement unless cleared earlier by you.

On expiry of the applicable Retention Period, sio88 will securely delete or irreversibly anonymize your Personal Data using industry-standard methods. You may request earlier deletion of certain data categories — subject to legal retention requirements — as described in Clause 11.

sio88 takes the security of your Personal Data seriously and implements a layered set of technical, organizational, and procedural safeguards to protect your data against unauthorized access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data exchanged between your device and the sio88 Platform is encrypted using 256-bit SSL/TLS protocols. Connection security certificates are maintained and renewed on a regular schedule.
• Encryption at Rest: Sensitive data stored on sio88 servers — including identity documents, financial records, and passwords — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within sio88's internal systems is restricted on a strict need-to-know basis. All internal access is logged, audited, and reviewed periodically by our security team.
• Two-Factor Authentication: sio88 supports and encourages Players to enable two-factor authentication (2FA) on their accounts for an additional layer of login security.
• Penetration Testing & Vulnerability Assessments: sio88 conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects your Personal Data, sio88 will notify affected Players within a reasonable timeframe and take all practicable steps to contain and remedy the incident.

While sio88 employs robust security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorized access to your account.

sio88 uses cookies and similar technologies to ensure the Platform functions correctly, to protect your session, and to understand how Players use the Platform so we can continually improve it. We do not use third-party advertising cookies or behavioral tracking technologies that share your data with external ad networks.

The categories of cookies deployed by sio88 are as follows:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These cookies enable core functions such as user authentication, session management, security token validation, and load balancing. They cannot be disabled without degrading Platform functionality. No consent is required for these cookies.
• Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferred language, currency display (IDR / Rp), time zone (WIB default), and last-visited game category. Disabling these cookies may reduce the personalization of your experience.
• Analytics Cookies: Used by sio88 to collect anonymized, aggregated data about how Players navigate the Platform — including pages visited, features used, and session duration. This data informs our product improvement decisions. We use only first-party analytics; data is not shared with external analytics providers.
• Fraud Detection Cookies: Used to identify and block suspicious access patterns, including automated bots, credential-stuffing attempts, and multi-account activity. These cookies are a necessary part of sio88's security infrastructure.

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary or fraud detection cookies may prevent you from accessing certain parts of the Platform or may affect the security of your account session.

As a Player on the sio88 Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team using the details in Clause 15. We will respond to all valid requests within thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the Personal Data sio88 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You can update certain information directly through your account settings.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent was the legal basis for processing). This right is subject to legal retention obligations — for example, KYC and transaction records must be retained for a minimum of five years under AML requirements and cannot be deleted on request during that period.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
• Right to Object: You may object to the processing of your Personal Data where sio88 relies on legitimate interests as the legal basis, unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

sio88 will not discriminate against you for exercising any of these rights. If you are dissatisfied with our response to a rights request, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.

sio88 is strictly intended for use by adults aged 21 years or older. We do not knowingly collect, process, or retain Personal Data from any individual under the age of 21. Age verification is a mandatory step in the account registration process, and KYC identity checks are used to confirm that all Players meet the minimum age requirement.

If sio88 discovers or is notified that an Account has been created by or on behalf of a person under 21 years of age, we will immediately:

• Suspend and permanently close the Account.
• Reverse any deposits made to the Account to the originating payment method where technically feasible.
• Delete all Personal Data associated with the underage Account, except where retention is required for legal or compliance purposes.
• Retain a record of the incident for AML and responsible gaming compliance purposes.

If you believe that a minor has accessed sio88 using your payment details or account credentials, please contact our support team immediately at [email protected]. We will investigate the matter promptly and take all appropriate remedial action.

The sio88 Platform does not contain links to third-party websites or applications. All navigation within sio88 remains within the https://sio88.bio domain. Accordingly, this clause serves as a confirmation that sio88 does not direct Players to external websites and therefore bears no responsibility for the privacy practices of any third-party platform that a Player may independently access outside of sio88.

If you access sio88 via a hyperlink from a third-party website or affiliate platform, please be aware that those external properties operate under their own privacy policies, for which sio88 accepts no liability. We encourage you to review the privacy policy of any website you visit before providing personal information.

sio88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, regulatory guidance, or Platform functionality. All updates will be published on this page at https://sio88.bio/privacy-policy, with the "Last Updated" date revised accordingly at the top of the document.

Where a change is material — meaning it significantly affects your rights or the way we process your Personal Data — sio88 will provide at least seven (7) days' advance notice via the email address registered to your Account, or via a prominent notice displayed on the Platform when you next log in.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised policy, you must discontinue use of the Platform and request account closure before the changes take effect. Historical versions of this Privacy Policy are available on request from our support team.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about the way sio88 handles your Personal Data, please reach out to our Data Protection and Support team through any of the following channels:

• Live Chat: Available in-app 24 hours a day, 7 days a week. Indonesian-speaking agents are available daily from 08:00 to 24:00 WIB; English support is available around the clock.
• WhatsApp: Available to registered Players after login, via the contact details displayed in your Account dashboard.
• Email: [email protected] — we aim to respond to all privacy-related inquiries within 48 hours of receipt, and to substantive data subject rights requests within 30 days.

When submitting a privacy-related request, please include your registered username, the email address on your Account, and a clear description of your request or concern to allow us to identify your Account and respond efficiently.