yuk88 Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "yuk88" / "we" / "us" / "our" — the yuk88 online betting and casino platform, accessible at yuk88.bio, and its operating entity, including all subsidiaries, affiliates, and authorised data processors.
• "User" / "you" / "your" — any individual who registers for, accesses, browses, or otherwise interacts with the yuk88 platform, regardless of whether a wager is placed.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, including name, email address, phone number, date of birth, national ID number, financial account details, device identifiers, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, and destruction.
• "Data Controller" — yuk88, as the entity that determines the purposes and means of Processing Personal Data collected through the platform.
• "Data Processor" — any third party that Processes Personal Data on behalf of yuk88 under a written data-processing agreement, such as payment gateways, KYC verification providers, and cloud infrastructure suppliers.
• "KYC" — Know Your Customer: the identity and age-verification process required by yuk88 before a User's first withdrawal is processed.
• "Cookies" — small text files, pixel tags, web beacons, and similar tracking technologies stored on or accessed from a User's device when interacting with the yuk88 platform.
• "UU PDP" — Undang-Undang Perlindungan Data Pribadi (Indonesian Personal Data Protection Law), Law No. 27 of 2022, the primary data protection legislation applicable to Indonesian residents.

yuk88 collects Personal Data across the following categories, depending on how you interact with the platform:

Personal Data is collected through the following channels:

• Directly from you — when you complete the account registration form, submit KYC documents, initiate a deposit or withdrawal, contact our support team, or update your account preferences.
• Automatically — through Cookies, server logs, and similar technologies as you browse and interact with the yuk88 platform. This includes your IP address, device fingerprint, and session activity data.
• From third-party identity verification providers — when you submit a KYC request, our authorised verification partner may cross-reference your submitted documents against government databases to confirm authenticity.
• From payment processors and financial institutions — when a deposit or withdrawal is initiated, your bank or e-wallet provider may pass transaction confirmation data, including masked account identifiers, to yuk88 for reconciliation purposes.
• From fraud detection and security services — yuk88 employs third-party risk intelligence tools that may provide signals about known fraudulent device fingerprints, IP addresses associated with suspicious activity, or accounts flagged across other platforms.

yuk88 processes your Personal Data only where a valid legal basis exists. The applicable legal bases under the Indonesian Personal Data Protection Law (UU PDP) and internationally recognised data protection principles are as follows:

• Contractual Necessity: Processing your Registration Data, Financial Data, and Transaction Data is necessary to create and maintain your account, process your bets and payments in IDR, and deliver the Services you have requested under our Terms & Conditions.
• Legal Obligation: KYC verification, AML (Anti-Money Laundering) record-keeping, and certain data disclosures to regulators or law enforcement are required by applicable law. Compliance with these obligations is mandatory regardless of your consent.
• Legitimate Interests: We process Technical Data and Behavioural Data on the basis of our legitimate interest in maintaining platform security, preventing fraud, improving service quality, and conducting internal analytics. We balance this interest against your privacy rights and apply appropriate safeguards.
• Consent: Where we send you personalised promotional communications, deposit-bonus notifications, or non-essential marketing Cookies, we do so on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time via your Account Settings or by contacting support.

yuk88 uses your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and securing your yuk88 account; processing login authentication; managing self-exclusion and responsible gaming settings.
• Service Delivery: Enabling sports betting (including mix parlay accumulator bets and voor bola Asian handicap markets), casino games, slot titles, live casino streams, video poker, and esports wagering; tracking your bet history and account balance; applying bonus credits and calculating wagering requirements.
• Payment Processing: Executing deposits and withdrawals in Indonesian Rupiah (IDR) via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; reconciling transactions; investigating disputed transactions.
• Identity Verification: Conducting KYC checks to confirm your identity, age (21+), and payment method ownership as required by our regulatory obligations and internal compliance policies.
• Fraud Prevention & Security: Detecting and investigating suspicious betting patterns, account takeover attempts, multi-account abuse, bonus fraud, and money laundering activity; maintaining platform integrity.
• Customer Support: Responding to your queries, complaints, and responsible gaming requests via live chat, email, and WhatsApp; maintaining records of interactions for quality assurance and dispute resolution.
• Personalised Communications: Sending you relevant promotional offers, seasonal bonus campaigns (e.g., Idul Fitri promotions, Ramadhan bonuses, Independence Day offers), and product updates — only where you have opted in to receive such communications.
• Analytics & Improvement: Analysing aggregated usage patterns to improve platform performance, game selection, and user experience. Analytics data is pseudonymised wherever practicable.
• Legal Compliance: Meeting record-keeping, reporting, and data-disclosure obligations imposed by applicable law and our international gaming licence conditions.

yuk88 does not sell, rent, or trade your Personal Data. We share it only in the circumstances described below, and only to the minimum extent necessary:

• Payment Processors & Financial Institutions: Your bank account details and transaction data are shared with the relevant payment network (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your deposit or withdrawal instruction.
• KYC & Identity Verification Partners: Your submitted identity documents and liveness-check photographs are transmitted to our authorised KYC partner over an encrypted connection for verification against government-issued records. This partner is contractually prohibited from using your data for any purpose other than the verification service.
• Game Studio Providers: Where you play games hosted by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe), your session data (game ID, stake, outcome) is shared with the relevant studio to facilitate gameplay and record outcomes. These studios act as Data Processors under strict contractual data protection obligations.
• Fraud Detection & Security Vendors: Pseudonymised technical data (device fingerprint, hashed IP) may be shared with third-party risk intelligence services to identify and block fraudulent activity.
• Legal & Regulatory Authorities: We will disclose Personal Data to law enforcement agencies, courts, regulators, or other governmental bodies where required to do so by applicable law or a valid legal order. We will notify you of any such disclosure to the extent permitted by law.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of yuk88's business or assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections as described in this policy. You will be notified of any such transfer.

yuk88 uses Cookies and similar tracking technologies to operate the platform, maintain session security, and improve your experience. The following categories of Cookies are used:

You can manage your Cookie preferences at any time through your browser settings. Please note that disabling Strictly Necessary Cookies will prevent the platform from functioning correctly and you will be unable to log in or place bets. Disabling Analytics or Marketing Cookies will not affect your ability to use core platform features.

yuk88 applies a defence-in-depth security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All communications between your browser or mobile device and yuk88 servers are encrypted using 256-bit TLS 1.3. Certificate pinning is applied to our mobile clients to prevent man-in-the-middle attacks.
• Encryption at Rest: Personal Data and financial records stored in our databases are encrypted using AES-256 at the storage layer. Encryption keys are managed in a dedicated hardware security module (HSM) with strict access controls.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with data access are subject to background checks, confidentiality agreements, and mandatory data protection training. Multi-factor authentication (MFA) is enforced for all administrative accounts.
• Intrusion Detection: Our security operations centre (SOC) monitors platform infrastructure 24/7 for anomalous activity, brute-force attempts, and data-exfiltration indicators.
• Password Hashing: User passwords are stored exclusively as salted hashes using bcrypt. Plain-text passwords are never stored or transmitted by yuk88.
• Penetration Testing: Independent third-party security firms conduct penetration tests on the yuk88 platform at least twice per year. Identified vulnerabilities are remediated according to a risk-prioritised schedule.

yuk88 retains Personal Data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data may be retained indefinitely for aggregate statistical analysis without constituting Personal Data.

As a yuk88 user — and particularly as a user based in Indonesia — you have the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of all Personal Data we hold about you, along with information about how it is processed, in a structured, commonly used, machine-readable format.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected. Minor corrections (e.g., updating a phone number or email address) can be made directly in your Account Settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data. Note that we are legally required to retain certain data (e.g., KYC documents and transaction records) for the minimum periods set out in Clause 9. Data subject to mandatory retention will be suppressed from active processing and deleted upon expiry of the retention period.
• Right to Restrict Processing: You may request that we restrict Processing of your Personal Data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request export of your account data (registration details, transaction history, bet history) in a structured, machine-readable format (CSV or JSON).
• Right to Object: You may object at any time to Processing of your data on the basis of legitimate interests, including profiling for marketing purposes. Upon receipt of a valid objection, we will cease the relevant Processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of Processing prior to withdrawal. Withdrawal can be effected via Account Settings or by contacting support.

The yuk88 platform is strictly restricted to users who are 21 years of age or older. We do not knowingly collect or process Personal Data from persons under the age of 21. This age threshold exceeds the general definition of "child" under many data protection frameworks and reflects the minimum gambling age applicable to yuk88's primary user base in Indonesia.

If yuk88 becomes aware that an account has been registered by a person under the age of 21, the account will be immediately suspended, all funds forfeited in accordance with our Terms & Conditions, and all associated Personal Data will be permanently deleted within 30 days, except where retention is required to satisfy legal obligations (e.g., reporting a suspected underage gambling incident to relevant authorities).

If you believe a minor has registered on yuk88 using false date-of-birth information, please report it immediately to [email protected] so that we can take swift action.

yuk88 operates globally and may transfer your Personal Data to servers and service providers located outside Indonesia. Such transfers are carried out in strict compliance with applicable data protection law and are protected by one or more of the following safeguards:

• Adequacy Decisions: Where the destination country has been determined by the relevant authority to offer an adequate level of data protection, transfers proceed on that basis.
• Standard Contractual Clauses (SCCs): Where no adequacy decision exists, transfers to third-party processors outside Indonesia are governed by Standard Contractual Clauses or equivalent contractual protections that impose data protection obligations equivalent to those applicable in Indonesia.
• Binding Corporate Rules: Transfers within the yuk88 group of entities are governed by Binding Corporate Rules that reflect the standards of UU PDP.

You may request details of the specific safeguards applied to any cross-border transfer of your Personal Data by contacting our DPO at the address provided in Clause 14.

yuk88 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify you via a prominent notice in the platform interface and/or by email to your registered address, with a minimum of 14 calendar days' notice before the updated policy takes effect.

The "Last Updated" date at the top of this page will be revised with each amendment. The most current version of this Privacy Policy is always accessible at yuk88.bio/privacy-policy. Your continued use of the platform after the effective date of an updated policy constitutes your acceptance of the revised terms. If you do not accept the updated policy, you must cease using the platform and may request account closure under Clause 10.

For minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of our data practices), we reserve the right to update the policy without individual notification, though the "Last Updated" date will still be revised.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the yuk88 Data Protection Officer (DPO) through any of the following channels:

• Email: support@yuk88.bio — subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the yuk88 platform — select "Data & Privacy" from the support topic menu.
• WhatsApp: Available 08:00–24:00 WIB — response time under 2 minutes during operating hours.

We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within 30 calendar days. For complex requests that require additional time, we will notify you of the extended timeline and the reason for the delay before the 30-day period expires.

If you are dissatisfied with our response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in Indonesia or in the jurisdiction where you reside.