Privacy Policy

fb888 operates the online betting and gaming platform accessible at fb888.asia, providing sports betting, live casino, slot games, lottery products, and related services to players across Indonesia and other authorized markets. In the course of providing these services, fb888 necessarily collects and processes certain personal data relating to you.

This Privacy Policy describes the categories of personal data we collect, the purposes for which we process that data, the third parties with whom we may share it, the retention periods that apply, and the rights you hold as a data subject. We are committed to handling your personal information responsibly, transparently, and securely.

fb888 acts as the data controller in respect of personal data collected directly through the fb888.asia platform. Where we engage third-party service providers — such as payment processors, game studios, and identity verification partners — those parties may act as independent data controllers or as data processors acting on our behalf, depending on the nature of their processing activities.

If you have any questions about this Privacy Policy or about how your personal data is handled, please contact us using the details provided in Section 13 of this document.

fb888 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through technical systems as you browse and play, and from third-party sources where permitted. The categories of data we collect include:

fb888 processes your personal data only for specific, explicit, and legitimate purposes. We do not use your data in ways that are incompatible with the purposes described below:

• Account Management: Creating, maintaining, and securing your registered fb888 account; processing password resets and account updates; verifying your identity during the login process.
• Service Delivery: Processing your bets and game sessions; displaying your account balance in IDR; recording transaction history; crediting winnings and bonuses to your account.
• Payment Processing: Executing deposit and withdrawal requests via your nominated Indonesian bank account or e-wallet; verifying payment method ownership; preventing duplicate or fraudulent transactions.
• KYC & Compliance: Verifying your age (21+), identity, and eligibility to use the platform; conducting anti-money laundering (AML) and counter-terrorist financing (CTF) checks; satisfying our regulatory and licensing obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, bonus abuse, collusion, and match-fixing; monitoring for suspicious transaction patterns.
• Customer Support: Responding to your account, payment, game, and responsible gaming queries via live chat, email, and WhatsApp; maintaining records of support interactions for quality assurance.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in; personalizing offers based on your game preferences and betting history. You may opt out at any time.
• Platform Improvement: Analyzing aggregated usage data to improve site performance, game recommendations, payment flow efficiency, and user experience across devices and screen sizes.
• Responsible Gaming: Monitoring play patterns that may indicate problem gambling behavior; proactively offering responsible gaming tools where warranted; enforcing self-exclusion restrictions you have set on your account.
• Legal Obligations: Complying with applicable legal requirements including data retention mandates, regulatory reporting, and responding to lawful requests from competent authorities.

Every instance of personal data processing by fb888 is grounded in one or more of the following legal bases:

fb888 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processors & Banking Partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum necessary financial data to process your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC service providers process your identity documents and biometric photograph to confirm your eligibility and age. These providers are contractually bound to use your data solely for verification purposes.
• Game Content Providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session identifiers and stake data necessary to run game sessions and resolve game disputes. These providers do not receive your full identity profile.
• Fraud Prevention & AML Services: Specialist fraud detection and AML screening providers may process your transaction data and identity data to flag suspicious activity in accordance with our compliance program.
• Customer Support Platforms: Live chat, email helpdesk, and WhatsApp Business API providers may process communication content to facilitate your support interactions. These providers are data processors acting under our instruction.
• Analytics Providers: Aggregated, anonymized platform usage data may be shared with analytics partners for the purpose of improving site performance and user experience. This data does not identify individual users.
• Legal & Regulatory Authorities: fb888 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory directive.

fb888 uses cookies and similar tracking technologies (web beacons, local storage, session tokens) to operate the platform, maintain your session, and improve your experience. The cookies we use fall into the following categories:

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair or prevent your ability to log into and use the fb888 platform.

fb888 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original data subject's identity. Anonymized aggregated data may be retained indefinitely for statistical and analytical purposes.

As a data subject, you hold the following rights in relation to your personal data held by fb888. You may exercise any of these rights by contacting our support team via the channels listed in Section 13. We will respond to all verifiable requests within 30 calendar days.

fb888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption in Transit: All data exchanged between your browser and the fb888 platform is encrypted using 256-bit TLS/SSL protocols. Connection security is enforced via HTTP Strict Transport Security (HSTS).
• Encryption at Rest: Sensitive data fields — including identity document data, financial account details, and password hashes — are encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within fb888's systems is restricted on a strict need-to-know basis using role-based access controls. All administrative access is logged and subject to regular audit.
• Vulnerability Management: fb888's infrastructure is subject to regular penetration testing, vulnerability assessments, and security patch management to maintain a hardened operating environment.
• Incident Response: fb888 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and in accordance with our notification obligations under applicable law.
• Two-Factor Authentication (2FA): fb888 offers 2FA for all registered accounts. We strongly encourage all players to enable 2FA to provide an additional layer of protection against unauthorized account access.
• Third-Party Security Standards: All third-party service providers who process personal data on our behalf are contractually required to maintain security standards equivalent to or exceeding those described in this section.

fb888 operates globally and engages service providers — including game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Spribe, as well as cloud infrastructure and analytics providers — whose processing operations may be located outside of Indonesia. As a result, your personal data may be transferred to and processed in countries other than Indonesia.

Where such international transfers occur, fb888 ensures that an appropriate level of data protection is maintained by implementing one or more of the following safeguards:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized under applicable standards.
• Using contractual data transfer agreements that impose equivalent data protection obligations on the recipient as those that apply within the jurisdiction where the data was originally collected.
• Ensuring that recipient organizations maintain binding corporate rules or equivalent internal policies governing international personal data transfers.

You may request further information about the specific safeguards in place for any particular international transfer by contacting our support team using the details in Section 13.

fb888 is an adults-only platform. Registration and use of the platform is strictly prohibited for any person under the age of 21. fb888 does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

fb888 performs age verification as part of its KYC process for all registered accounts. Where we become aware that personal data has been collected from a minor — whether through a false declaration of age during registration or any other means — we will immediately:

• Suspend and permanently close the account in question.
• Delete all personal data associated with that account to the extent permitted by our legal retention obligations.
• Reverse any deposits made to the account to the originating payment method where technically and legally feasible.
• Forfeit all winnings generated from wagering activity conducted while under the age of 21.

If you are a parent or guardian and believe that a minor in your care has registered an account on fb888, please contact our support team immediately at support @ fb888.asia so that we can investigate and take appropriate action.

fb888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services we offer. When material changes are made, we will notify registered players by email (to the address registered on your account) and by posting a prominent notice on the fb888.asia homepage for a period of not less than 14 days prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how fb888 handles your personal data.

Your continued use of the fb888 platform following notification of any changes to this Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree to the revised Privacy Policy, you must stop using the platform and may request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the fb888 Data Privacy team through any of the following channels:

• Live Chat: Available 24/7 directly from any page on fb888.asia — Indonesian-speaking privacy specialists available at all hours.
• Email: support @ fb888.asia — responses within 4 hours during peak hours, within 24 hours at all other times. For data rights requests, please include "Privacy Request" in the subject line along with your registered account username.
• WhatsApp: Available 08:00–24:00 WIB for account and privacy queries.

fb888 will acknowledge all data rights requests within 5 business days and will aim to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.