Privacy Policy – 868a Data Protection

At 868a, your personal data is handled with the highest degree of care and professionalism. This Privacy Policy explains what information we collect, why we collect it, and how we keep it safe.

Last Updated: 1 January 2026

1 Introduction

868a ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who visits, registers with, or interacts with the 868a website at https://868a.cam. This Privacy Policy ("Policy") sets out in clear terms the types of personal information we collect, the purposes for which that information is used, the parties with whom it may be shared, and the rights you hold over your own data.

This Policy applies to all Members, prospective Members, and visitors of the 868a Platform, with particular reference to players located in Indonesia — our primary market. By accessing the Platform or registering an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and 868a. In the event of any conflict between this Policy and the Terms & Conditions on matters of data, this Policy shall prevail.

Data Controller: 868a operates as the data controller for all personal information collected through the Platform. Our designated Data Protection contact can be reached at [email protected] for any privacy-related inquiries.

2 Data We Collect

868a collects personal data that is necessary to operate our Platform, comply with legal obligations, and deliver a secure and personalized experience. The categories of personal data we collect include:

Category Examples
Identity Data Full legal name, date of birth, nationality, Indonesian national ID (KTP) number, passport number (where applicable).
Contact Data Email address, mobile phone number, residential address (including city — e.g., Jakarta, Surabaya, Bandung, Bali).
Financial Data Bank account details for BCA, BRI, BNI, Mandiri, or CIMB Niaga; e-wallet identifiers for OVO, DANA, GoPay, or ShopeePay; deposit and withdrawal transaction history.
Account Data Username, encrypted password, account registration date, account status, session logs, and preference settings.
Betting & Gaming Data Wager history, bet amounts, game selections, win/loss records, bonus uptake, and playing session durations.
Technical Data IP address, browser type and version, operating system, device identifiers, time zone (WIB/WITA/WIT), and access timestamps.
Usage Data Pages visited, features accessed, click-path data, search queries within the Platform, and referral source.
Communications Data Records of support chat conversations, emails, and any written correspondence sent to 868a.
KYC Documents Copies of identity documents, proof of address, and any additional verification materials submitted during account verification.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by regulatory obligation and disclosed to you at the time of collection.

3 How We Collect Data

868a collects personal data through the following channels:

  • Direct Submission: Information you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
  • Automated Technologies: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you browse the Platform.
  • Payment Processors: Transactional data received from our integrated payment partners, including Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay), necessary to confirm deposit and withdrawal transactions.
  • Third-Party Verification Services: Identity and fraud-check data received from KYC and anti-money-laundering (AML) verification partners used to validate account registrations.
  • Analytics Providers: Aggregated and anonymized usage statistics received from third-party analytics tools that help us understand how Members interact with the Platform.

5 How We Use Your Data

Your personal data is used by 868a for the following specific purposes:

  • Account Management: Creating, maintaining, and securing your 868a account; verifying your identity and age (21+ requirement); processing login sessions.
  • Transaction Processing: Executing deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay; processing withdrawal requests to verified bank accoun ts; maintaining accurate financial records.
  • Regulatory Compliance: Fulfilling KYC and AML obligations; reporting to relevant regulatory or law enforcement authorities where legally required; retaining records for the minimum statutory periods.
  • Fraud Prevention & Security: Detecting and investigating suspicious account activity, unauthorized access attempts, bonus abuse, and financial crime; maintaining the integrity of the Platform and protecting all Members.
  • Customer Support: Responding to account queries, resolving disputes, processing complaints, and providing technical assistance through our 24/7 Indonesian-speaking support team.
  • Responsible Gaming: Monitoring betting patterns to identify Members who may be exhibiting signs of problem gambling; administering self-exclusion requests, deposit limits, and time-out features in accordance with our Responsible Gaming policy.
  • Platform Improvement: Analyzing usage data to improve the Platform's features, interface, game selection, and overall Member experience.
  • Marketing Communications: Sending promotional offers, seasonal campaign notifications (such as Idul Fitri or BRI Liga 1 promotions), and personalized recommendations — only where you have provided explicit consent or where permitted under legitimate interest rules.

Our Commitment: 868a will never use your personal data for any purpose that is incompatible with the purposes disclosed in this Policy. If we intend to use your data for a new purpose, we will notify you and obtain consent where required before doing so.

6 Data Sharing

868a does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited and controlled circumstances:

  • Payment Service Providers: We share necessary financial data with Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your transactions.
  • KYC & Compliance Partners: We share identity and document data with third-party KYC verification and AML screening providers to fulfill our regulatory obligations.
  • Game Content Providers: Certain anonymized session data may be shared with our licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to ensure game integrity and resolve disputes.
  • Analytics Providers: We share aggregated, anonymized usage data with analytics platforms to help us understand platform performance. This data cannot be used to identify individual Members.
  • Legal & Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts when required by applicable law, a valid legal order, or to protect the rights and safety of 868a and its Members.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or part of 868a's business, personal data held by the Platform may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are required to handle that data in a manner consistent with this Policy and applicable data protection law, through contractual data-processing agreements.

7 Cookies & Tracking Technologies

868a uses cookies and similar tracking technologies to enhance your browsing experience, maintain your login session, and collect usage analytics. The following types of cookies are used on the Platform:

Cookie Type Purpose
Strictly Necessary Essential for the Platform to function. These include session cookies that keep you logged in and security tokens that prevent cross-site request forgery. Cannot be disabled.
Functional Remember your language preference, display settings, and recently viewed games to provide a more personalized experience.
Analytics Collect anonymized data on how Members navigate the Platform, which pages are most visited, and where technical errors occur, helping us improve our services.
Marketing Used to deliver relevant promotional content based on your betting interests and browsing behavior, subject to your consent.

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. Strictly necessary cookies cannot be disabled as they are integral to the operation of the Platform.

8 Data Security

868a implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

  • SSL/TLS Encryption: All data transmitted between your device and the 868a Platform is protected by 256-bit SSL encryption, ensuring that your login credentials, personal information, and financial data cannot be intercepted in transit.
  • Encrypted Data Storage: Sensitive data — including passwords and financial identifiers — is stored using industry-standard hashing and encryption algorithms. Plaintext passwords are never stored.
  • Access Controls: Access to personal data within 868a is strictly limited to employees and contractors who require it to perform their job functions, governed by role-based access control policies.
  • Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion-detection systems that flag and respond to anomalous activity in real time.
  • Regular Security Audits: The Platform undergoes periodic independent security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.

Security Reminder: While 868a takes all reasonable steps to protect your data, no internet transmission is 100% secure. You are responsible for keeping your account password confidential. 868a will never ask for your password via email or chat.

9 Data Retention

868a retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention periods are as follows:

  • Active Account Data: Retained for the duration of your membership plus a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements.
  • KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
  • Transaction Records: Deposit and withdrawal records are retained for a minimum of seven (7) years to satisfy financial compliance and audit requirements.
  • Support Communications: Records of customer support interactions are retained for three (3) years from the date of the interaction.
  • Marketing Consent Records: Consent records and associated marketing preference data are retained for the duration of the consent plus two (2) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual Member.

10 Your Rights

As a Member of the 868a Platform, you hold the following rights in relation to your personal data. You may exercise any of these rights by contacting us at [email protected]:

Right of Access

Request a copy of the personal data we hold about you, including the purposes for which it is processed.

Right to Rectification

Request correction of any inaccurate or incomplete personal data held on your account.

Right to Erasure

Request deletion of your personal data where it is no longer necessary, subject to our legal retention obligations.

Right to Restrict Processing

Request that we limit how we use your data while a dispute or accuracy query is being resolved.

Right to Portability

Request a machine-readable export of the personal data you have provided to us directly.

Right to Object

Object to processing based on legitimate interests, including direct marketing and profiling activities.

Right to Withdraw Consent

Withdraw consent for any processing activity based on consent at any time, without affecting prior lawful processing.

Right Against Automated Decisions

Request human review of any decision made about your account through solely automated processing.

We will respond to all valid rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. Exercising your rights is free of charge; however, we may charge a reasonable fee for manifestly unfounded or excessive requests.

11 Minors

The 868a Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will immediately suspend the relevant account, delete the data concerned, and take appropriate remedial steps.

If you are a parent or guardian and believe that a minor has registered with 868a using your details or their own, please contact us immediately at [email protected] so that we can investigate and act promptly.

12 Third-Party Links

The 868a Platform may, from time to time, contain references or links to game studios, sporting event pages, or other content providers. This Policy applies solely to data collected by the 868a Platform and does not cover any third-party websites, applications, or services. 868a accepts no responsibility for the privacy practices of any third party. We recommend that you review the privacy policy of any third-party service you access independently of the 868a Platform.

13 International Data Transfers

868a operates as an internationally licensed platform. This means your personal data may be transferred to, stored, or processed in countries outside Indonesia where our servers, service providers, or group entities are located. In all such cases, 868a ensures that appropriate safeguards are in place to protect your data to a standard equivalent to — or higher than — the protections required under applicable Indonesian data protection frameworks.

Safeguards used for international transfers include contractual data-processing agreements that incorporate internationally recognized data protection clauses, ensuring that all recipients of your data are contractually bound to handle it responsibly and securely.

14 Policy Amendments

868a reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify you by posting a prominent notice on the Platform and, where we hold your email address, by sending a notification to your registered email at least 7 days before the changes come into effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. We encourage you to review this page periodically to remain informed about how 868a protects your data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 868a, please contact our Data Protection team using the details below:

Data Protection Contact — 868a

Email: [email protected]

Our support team is available 24 hours a day, 7 days a week, including Indonesian public holidays (Idul Fitri, Nyepi, and others). We aim to acknowledge all privacy-related inquiries within 48 hours and to provide a full substantive response within 30 days in line with standard data subject request timelines (WIB).

For concerns about responsible gaming or self-exclusion, please visit our dedicated Responsible Gaming page. For general platform questions, our FAQ section covers the most common topics.

Our Privacy Principles

Six core principles guide how 868a collects, uses, and protects every piece of personal data entrusted to us by our Members.

Data Minimization

We collect only the personal data that is strictly necessary for the specific purpose at hand. If a piece of information is not needed to serve you or meet a legal obligation, we do not ask for it.

End-to-End Encryption

All data transmitted between your device and the 868a Platform is protected by 256-bit SSL/TLS encryption. Your financial data — including BCA, BRI, OVO, and DANA account details — is never stored in plain text.

No Data Sales

868a does not sell, rent, or trade your personal information to any third party for commercial gain. Your data belongs to you and is used only to deliver and improve your experience on the Platform.

Full Member Control

You hold meaningful rights over your data — access, correction, deletion, portability, and objection. Submit a request to [email protected] and we will respond within 30 days, free of charge.

Regulatory Compliance

Our data practices are designed to align with internationally recognized data protection standards, including KYC and AML obligations relevant to the Indonesian market context in which we operate.

Strict 21+ Enforcement

We apply rigorous age verification at registration and proactively monitor for underage access. Any account identified as belonging to a person under 21 is immediately suspended and its data deleted.

Still Have Questions About 868a Privacy?

Our support team is on hand around the clock to clarify any aspect of this Privacy Policy. You can also explore our FAQ for quick answers, review our Terms & Conditions, or visit our Responsible Gaming page.

Visit Our FAQ Terms & Conditions Responsible Gaming