At to288, your personal data belongs to you. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and protect it, and what rights you hold over your data at all times. We are committed to full transparency in every aspect of our data practices.
Your Privacy Matters: to288 is committed to handling your personal data responsibly and transparently. This Privacy Policy applies to all personal data collected through the to288 website at to288.ws, our mobile-optimised platform, and all associated services. By creating a to288 account or using our services, you acknowledge that you have read and understood this policy.
to288 operates an online sports betting and gaming platform accessible at to288.ws, serving members primarily located across Indonesia, including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and beyond. As a platform that processes financial transactions and identity documents, we recognise that the responsible handling of personal data is fundamental to the trust our members place in us.
This Privacy Policy sets out the full scope of our data processing activities: what personal information we collect, the legitimate purposes for which we process it, who we share it with, how long we retain it, and the rights available to you as a data subject. We have written this policy in plain, accessible language so that every member can understand exactly how their information is used.
to288 acts as the data controller in respect of all personal data collected through this platform. If you have any questions about this policy or our data practices that are not answered here, please contact us using the details provided in Clause 15.
The following terms carry the meanings set out below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, email address, bank account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any other form of handling. |
| "Data Controller" | to288 — the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party that processes personal data on behalf of to288, such as KYC verification providers, payment processors, and fraud detection services. |
| "Member" / "You" | Any registered user of the to288 platform, or any visitor who interacts with the to288 website without having completed registration. |
| "Platform" | The to288 website at to288.ws, its mobile-optimised interface, and all associated services and features. |
| "Sensitive Data" | A subset of personal data requiring heightened protection, including government-issued identity documents, financial account details, and health-related information disclosed in the context of responsible gaming. |
to288 collects personal data that is necessary to provide a safe, legal, and high-quality betting and gaming service. The categories of personal data we collect are described below:
3.1 Registration & Identity Data
3.2 Identity Verification (KYC) Data
3.3 Financial & Transaction Data
3.4 Betting & Gaming Activity Data
3.5 Technical & Device Data
3.6 Communications Data
Minimum Data Principle: to288 collects only the personal data that is strictly necessary for the purposes described in this policy. We do not collect data speculatively, and we do not request sensitive information — such as religion, ethnicity, or political views — at any stage of the registration or verification process.
to288 collects personal data through the following channels:
to288 processes your personal data for the following specific, legitimate purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and authentication | Registration data, device data, session logs |
| Age and identity verification (KYC) | Identity documents, date of birth, selfie/liveness data |
| Processing deposits and withdrawals | Financial data, transaction history, bank/e-wallet identifiers |
| Providing and improving platform services | Gaming activity data, technical data, communications data |
| Fraud prevention and security monitoring | All categories, processed via automated risk tools |
| Responsible gaming monitoring and intervention | Gaming activity data, responsible gaming settings |
| Regulatory and legal compliance | Identity data, KYC documents, transaction history |
| Marketing and promotional communications (opt-in only) | Email address, phone number, communications data |
| Customer support and dispute resolution | Communications data, account data, transaction history |
to288 does not use your personal data for purposes beyond those listed above without first obtaining your explicit consent. If we intend to process your data for a new purpose that is incompatible with the original purpose of collection, we will notify you and, where required, seek your consent before proceeding.
to288 relies on one or more of the following legal bases when processing your personal data:
to288 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We share personal data only in the following limited, controlled scenarios:
No Third-Party Marketing: to288 will never share your contact details — including your email address, phone number, or bank account information — with third-party advertisers, data brokers, or affiliate marketers without your explicit prior consent.
to288 retains your personal data only for as long as is necessary to fulfil the purposes set out in this policy, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years following account closure |
| KYC identity documents | Duration of account plus 5 years following account closure |
| Financial transaction records | Minimum 5 years from the date of each transaction |
| Betting and gaming activity logs | Duration of account plus 3 years following account closure |
| Support communications | 3 years from the date of the last interaction |
| Technical and device logs | 13 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn plus 3 years for audit purposes |
Where retention beyond these periods is required by a specific legal obligation — such as an ongoing fraud investigation or a court order — to288 will retain the relevant data until that obligation is discharged, and will securely delete or anonymise it promptly thereafter.
to288 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security controls include:
Your Role in Security: While to288 implements robust technical controls, your account security also depends on you safeguarding your login credentials. Never share your to288 password with anyone — including anyone claiming to be a to288 support agent. to288 staff will never ask for your password.
to288 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session while you are logged in, and to improve the overall member experience. The categories of cookies used are as follows:
You can manage your cookie preferences at any time through your browser settings. Withdrawing consent for non-essential cookies will not prevent you from accessing the core betting and gaming features of the to288 platform, but some personalisation features may be reduced.
As a data subject, you hold the following rights in respect of the personal data that to288 holds about you. to288 is committed to honouring these rights promptly and without charge in the vast majority of cases:
To exercise any of the above rights, please contact to288 support at [email protected]. We will acknowledge your request within 72 hours and aim to fulfil it within 30 days. In complex cases, we may require up to 90 days and will notify you of the extension and the reason for it.
The to288 platform is strictly for adults aged 21 and above. to288 does not knowingly collect personal data from any person under the age of 21. Registration by minors is strictly prohibited, and any account found to be held by a person under the age of 21 will be immediately suspended pending investigation.
If you are a parent or guardian and have reason to believe that a minor has registered on to288 using falsified information, please contact us immediately at [email protected]. We will investigate the matter promptly, close the account, and permanently delete any personal data associated with it to the extent permitted by our legal obligations.
21+ Only: By registering on to288 and confirming your date of birth during the registration process, you represent and warrant that you are at least 21 years of age. Providing a false date of birth to circumvent the age restriction constitutes a serious breach of to288's Terms & Conditions and may constitute a criminal offence under applicable law.
to288 operates globally, and some of our trusted third-party service providers — including KYC verification partners, fraud detection services, and game content providers — may process personal data in jurisdictions outside Indonesia. Where personal data is transferred internationally, to288 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that afforded to members within Indonesia.
Safeguards applied to international transfers include:
You may request further information about the specific safeguards applied to any particular international data transfer by contacting to288 support.
to288 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will:
Your continued use of the to288 platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. We recommend reviewing this page periodically to stay informed of how to288 protects your data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which to288 processes your personal data, please reach out to our support team through any of the following channels:
to288's Indonesian-speaking support agents are on hand at all hours to assist with privacy-related enquiries, data access requests, rectification requests, and erasure requests. All privacy requests are handled confidentially and will be acknowledged within 72 hours of receipt.
Data Rights Requests: When submitting a data subject rights request, please include your full name, the email address registered to your to288 account, and a clear description of the right you wish to exercise. This will allow us to locate your data and process your request as efficiently as possible. We may need to verify your identity before fulfilling certain requests.
Beyond the legal language, these are the practical data protection commitments every to288 member can rely on.
Every session on to288 — login, deposit, withdrawal, or game play — is protected by TLS 1.3 encryption, the current industry standard for secure web communications.
to288 verifies the identity of every member before processing withdrawals. This protects both you and the integrity of the platform against fraud and underage access.
to288 will never sell, rent, or trade your personal data — including your email, phone number, or financial details — to third-party advertisers or data brokers under any circumstances.
Access, correct, delete, or port your data at any time. to288 honours all data subject rights requests within 30 days — no bureaucratic barriers, no unexplained refusals.
to288 does not hoard data indefinitely. Every category of personal data has a defined maximum retention period, after which it is securely deleted or irreversibly anonymised.
Our support team is available around the clock, with native Indonesian-speaking agents ready to assist with any privacy enquiry, data access request, or account concern — any time, any day.
Your data is safe with us. Explore our full range of games and sports betting markets — backed by industry-leading security and a transparent privacy commitment.