Privacy Policy

1. Definitions

The following definitions apply throughout this Privacy Policy. Terms that are also defined in the roko88 Terms & Conditions carry the same meaning here unless the context requires otherwise.

2. Scope of This Policy

This Privacy Policy applies to all Personal Data collected by roko88 in connection with your use of the Platform at roko88.cam, including all associated sub-domains, mobile web interfaces, and any communication channels operated by roko88 (such as live chat and email support).

This Policy applies to all registered Players regardless of their location, with specific additional considerations for players based in Indonesia given the volume of our Indonesian user base. Where Indonesian data protection legislation (including applicable provisions of the Personal Data Protection Law, or Undang-Undang Perlindungan Data Pribadi) imposes obligations additional to those described herein, roko88 will comply with those requirements.

This Policy does not cover third-party websites, applications, or services that may be accessible via links within the Platform. roko88 is not responsible for the privacy practices of any external operator, and we encourage you to review the privacy policies of any third-party site you visit.

3. Data We Collect

roko88 collects Personal Data through several channels: the account registration form, KYC verification submissions, payment transactions, live support interactions, and automated technical systems (analytics, security monitoring). The categories of data we collect are described below.

4. How We Use Your Data

roko88 uses collected Personal Data strictly for the purposes described below. We do not use your data for any purpose that has not been disclosed in this Policy.

1. Account Management: To create, maintain, and administer your roko88 Account, including processing login authentication, managing account settings, and sending transactional notifications (e.g., deposit confirmations, withdrawal processing updates).
2. Identity & Age Verification (KYC): To verify that you are who you claim to be and that you are at least 21 years of age, as required under our Terms & Conditions and applicable regulatory obligations.
3. Payment Processing: To process your deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen payment method (BCA, BRI, BNI, Mandiri, GoPay, DANA, OVO, ShopeePay, LinkAja, or others), including fraud screening and transaction reconciliation.
4. Legal & Regulatory Compliance: To meet anti-money laundering (AML) obligations, respond to law enforcement requests where legally required, maintain transaction audit trails, and fulfill our responsibilities under international gaming regulations.
5. Fraud Prevention & Security: To detect and prevent unauthorized account access, bonus abuse, identity fraud, money laundering, and other pro hibited activities described in our Terms & Conditions.
6. Responsible Gaming: To monitor gaming patterns and proactively identify players who may be exhibiting signs of problem gambling, and to enforce deposit limits, cool-off periods, and self-exclusion requests submitted through your Account Settings.
7. Customer Support: To respond to your inquiries, resolve disputes, process complaints, and maintain a record of support interactions for quality assurance and training purposes.
8. Platform Improvement: To analyze aggregated, anonymized usage data in order to improve the performance, usability, and content of roko88 — including load times, game loading success rates, and payment flow completion rates.
9. Marketing Communications: To send you promotional offers, bonus notifications, and updates about new games or features — but only where you have provided explicit consent or where we have a legitimate interest and you have not opted out. You may withdraw marketing consent at any time via Account Settings or by contacting support.

5. Legal Basis for Processing

roko88 processes your Personal Data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract between you and roko88 — including account creation, deposit processing, withdrawal execution, and KYC verification — is carried out because it is necessary to deliver the services you have registered for.
• Legal Obligation: Certain processing activities (such as maintaining AML transaction records and cooperating with regulatory inquiries) are mandated by applicable laws and regulations, regardless of consent.
• Legitimate Interests: roko88 processes certain data — such as Technical Data for fraud detection and security monitoring — on the basis of our legitimate interest in protecting the integrity of the Platform and the safety of all players, provided that interest is not overridden by your fundamental data rights.
• Consent: Where processing is not covered by the grounds above — for example, sending you personalized promotional communications — roko88 relies on your freely given, explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

roko88 does not sell your Personal Data. We share data only with the categories of third parties described below, and only to the extent necessary for each stated purpose:

All third-party Data Processors engaged by roko88 are required to sign data processing agreements that prohibit them from using your Personal Data for any purpose beyond the scope specified, and that require them to maintain security standards commensurate with those of roko88.

7. Cookies & Tracking Technologies

roko88 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and collect anonymous usage analytics. The following categories of cookies may be set when you visit roko88.cam:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens and security cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language display setting and notification preferences. These enhance your experience but are not essential for Platform operation.
• Analytics Cookies: Used to collect anonymized data about how players navigate the Platform — which pages are visited most frequently, where sessions begin and end, and which game categories attract the most engagement. This data is aggregated and cannot be used to identify you individually.
• Security Cookies: Used to detect and mitigate fraudulent activity, including bot traffic, credential stuffing attacks, and session hijacking attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your roko88 Account. Analytics and functional cookies can be disabled without affecting your ability to use core Platform features.

8. Data Retention

roko88 retains Personal Data for as long as necessary to fulfill the purposes for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where data has been anonymized, it may be retained indefinitely for statistical and analytical purposes, as anonymized data no longer constitutes Personal Data.

9. International Data Transfers

roko88 is an internationally operated platform, and your Personal Data may be transferred to and processed in countries outside Indonesia. Specifically, data may be processed in the jurisdiction where roko88's international gaming license is held, and in the countries where our cloud infrastructure and third-party service providers are headquartered.

When transferring Personal Data internationally, roko88 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses that require recipient entities to apply data protection standards equivalent to those applied within Indonesia.
• Transfer only to jurisdictions that have been assessed as providing an adequate level of data protection, or to partners who have certified compliance with recognized international data protection frameworks.
• Encryption of data in transit using TLS 1.2 or higher for all cross-border data flows.

By registering an Account on roko88, you acknowledge that your Personal Data may be transferred internationally as described in this section, subject to the safeguards outlined above.

10. Your Data Rights

As a roko88 Player, you hold the following rights in relation to your Personal Data. These rights may be exercised at any time by contacting roko88 support as described in Section 14.

11. Children's Privacy

roko88 is strictly an adults-only platform. No person under the age of 21 is permitted to register an account or use any service on roko88. We do not knowingly collect Personal Data from individuals under 21 years of age.

If roko88 becomes aware that Personal Data has been collected from a person under 21 — whether through a misrepresentation during registration or any other means — the account will be immediately suspended, all balances will be forfeited in accordance with our Terms & Conditions, and all associated Personal Data will be permanently deleted from our systems within 30 days of discovery.

If you are a parent or guardian and believe that your child may have registered an account on roko88, please contact us immediately at the address in Section 14. We will investigate and take appropriate action without delay.

12. Security Measures

roko88 implements a layered security architecture to protect your Personal Data against unauthorized access, loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.2+): All data transmitted between your browser or app and our servers is encrypted in transit using current TLS standards.
• Encryption at Rest: Sensitive data fields — including identity document images and financial account references — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Access Controls: Internal access to Personal Data is governed by role-based access control (RBAC). Only personnel with a verified operational need are granted access to specific data categories, and all access events are logged and audited.
• Two-Factor Authentication (2FA): roko88 offers 2FA for all player accounts and requires it for all internal administrative accounts. Players are strongly encouraged to enable 2FA in their Account Settings.
• Penetration Testing: roko88 engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of the Platform's infrastructure.
• DDoS Mitigation: The Platform is protected by enterprise-grade distributed denial-of-service (DDoS) mitigation services to maintain availability and prevent service disruption.
• Incident Response Plan: roko88 maintains a documented incident response plan that is activated in the event of a suspected data security breach, including escalation procedures, containment steps, and player notification protocols as described in our commitment in Section 1 of this Policy.

While roko88 takes all reasonable and technically feasible measures to protect your data, no internet-based platform can guarantee absolute security. You share responsibility for your account's security by maintaining a strong, unique password and enabling 2FA.

13. Changes to This Privacy Policy

roko88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will:

• Post a notice on the roko88 homepage for a minimum of 7 days before the revised Policy takes effect.
• Send an email notification to the address registered to your Account, where email notifications are enabled in your Account Settings.
• Update the "Last Updated" date displayed at the top of this page.

Your continued use of roko88 following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change, you may close your Account by contacting support before the effective date — any real-money balance will be processed for withdrawal subject to standard KYC requirements.

We encourage you to review this Privacy Policy periodically to stay informed about how roko88 protects your data. The most current version of this Policy is always accessible at roko88.cam/privacy-policy.

14. Contact & Data Subject Requests

If you wish to exercise any of your data rights described in Section 10, have a question about this Privacy Policy, or need to report a suspected privacy incident, please contact the roko88 Data Privacy team through the following channel:

roko88 does not charge any fee for processing data subject requests submitted in good faith. If a request is manifestly unfounded or excessive in its scope or frequency, roko88 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided.