to2888 Privacy Policy

to2888 is Indonesia's premier online sportsbook and casino platform, serving players across Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Yogyakarta, and beyond. Our platform offers BRI Liga 1 football betting, live baccarat, slot gacor (high-payout slot) games, and togel (Indonesia's traditional numbers lottery) markets, all denominated in Indonesian Rupiah (IDR) with seamless local payment integrations.

Because our services inherently require the collection and processing of certain personal information — including identity documents for KYC verification, financial details for payment processing, and behavioral data for platform security — we take our data protection obligations with the utmost seriousness. This Policy has been drafted to give every Player a transparent, plain-language account of exactly how their information is handled from the moment they land on to2888.pro.

to2888 operates under international licensing standards and adheres to globally recognized principles of data minimization, purpose limitation, storage limitation, and data subject rights. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes under any circumstances.

to2888 collects the following categories of personal data from Players, prospective Players, and visitors to the Platform:

to2888 does not intentionally collect sensitive special-category data (such as racial or ethnic origin, religious beliefs, health data, or political opinions) from Players. If such data is incidentally disclosed in a support communication, it will not be stored beyond the resolution of the relevant matter.

to2888 collects personal data through the following channels:

• Direct Registration: When you create a Player Account on to2888.pro, you voluntarily provide Identity Data and Contact Data via the registration form.
• KYC Submission: When completing identity verification, you upload copies of your government-issued ID (KTP or passport) and, where required, proof of address and bank account ownership.
• Payment Transactions: Financial Data is collected when you initiate a deposit or withdrawal via your selected Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Platform Interaction: Betting & Gaming Data is generated automatically as you use our sportsbook, casino, and togel products. Behavioral Data is captured as you navigate the Platform.
• Technical Collection: Technical Data (IP address, device fingerprint, browser metadata) is captured automatically by our servers and security systems whenever you access to2888.pro.
• Support Channels: Communications Data is collected when you contact our support team via live chat or email at [email protected].
• Cookies and Tracking Technologies: See Clause 9 for a detailed explanation of how we use cookies and similar technologies on the Platform.

to2888 uses the personal data we collect for the following defined purposes only:

• Account Operation: To create and maintain your Player Account, authenticate your identity at login, process deposits and withdrawals in IDR, and deliver the gaming and betting services you request.
• Identity & Age Verification: To confirm that you are at least 21 years of age and to verify your identity in accordance with our KYC obligations under our international gaming license. This is a mandatory prerequisite for full account functionality and withdrawal processing.
• Payment Processing: To execute deposits and withdrawals via your chosen local Indonesian bank or e-wallet, to reconcile transaction records, and to detect and prevent fraudulent payment activity.
• Fraud Prevention & Platform Security: To detect multi-accounting, bonus abuse, match-fixing, unauthorized access, money laundering, and other forms of prohibited conduct as defined in our Terms & Conditions. Technical Data and Behavioral Data are central to this function.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, to enforce deposit limits and self-exclusion requests, and to proactively reach out to Players who show behavioral markers of gambling harm.
• Customer Support: To respond to your queries, resolve disputes, and provide assistance with your Account. Communications Data is retained to enable accurate follow-up and quality assurance.
• Legal & Regulatory Compliance: To fulfill our obligations under our international gaming license, including record-keeping, anti-money-laundering (AML) reporting, and responding to lawful requests from regulatory authorities.
• Platform Improvement: To analyze aggregated Behavioral Data and Technical Data in order to improve the user experience, optimize platform performance, and develop new features that serve Indonesian players better.
• Marketing Communications: With your explicit consent, to send you promotional offers, bonus notifications, and platform updates by email or SMS. You may withdraw consent at any time by contacting [email protected] or updating your Account preferences.

Every data processing activity carried out by to2888 is grounded in one or more of the following recognized legal bases:

• Contractual Necessity: Processing required to perform the contract between you and to2888 — including account creation, payment processing, and service delivery — is necessary to fulfill our obligations to you as a Player.
• Legal Obligation: Processing required to comply with our international gaming license conditions, anti-money-laundering obligations, and any lawful regulatory request.
• Legitimate Interests: Processing carried out for fraud detection, platform security, multi-account prevention, and platform improvement, where our legitimate interests in operating a safe, fair platform are not overridden by your fundamental privacy rights.
• Consent: Processing for optional marketing communications (email promotions, bonus notifications) is conducted only on the basis of your freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

to2888 shares personal data with third parties only in the following strictly defined circumstances:

• Payment Processors: Financial Data is shared with your designated Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your requested deposit or withdrawal transaction.
• Game Content Providers: Certain Account Data and gaming session metadata is shared with our licensed game studio partners — including Pragmatic Play, Evolution Gaming, PG Soft, Spribe, Microgaming, and NetEnt — to the extent necessary to deliver and authenticate gameplay and live casino sessions. These partners operate under contractual data processing agreements that restrict their use of your data to service delivery only.
• KYC & AML Compliance Partners: Identity Data may be shared with our licensed KYC verification and anti-money-laundering compliance service providers for the purpose of identity authentication and financial crime screening. All such partners are bound by confidentiality obligations and data processing agreements.
• Regulatory Authorities: to2888 may disclose personal data to its licensing authority or to other competent regulatory bodies where required to do so by law, by a court order, or in connection with an investigation into suspected illegal activity on the Platform.
• Professional Advisors: to2888 may share limited personal data with its legal, accounting, and auditing advisors under professional privilege and strict confidentiality obligations, where necessary for the operation and governance of the business.
• Business Transfers: In the event that to2888 undergoes a merger, acquisition, or sale of all or substantially all of its assets, Player data may be transferred to the successor entity, subject to the same privacy protections as set out in this Policy. Affected Players will be notified in advance.

No disclosure of personal data to third parties occurs outside of the categories above without your prior explicit consent.

to2888 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by our international licensing obligations and applicable law. The following retention guidelines apply:

Upon expiry of the applicable retention period, to2888 will securely delete or anonymize the relevant personal data so that it can no longer be associated with an identifiable individual.

to2888 implements a multi-layered technical and organizational security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and to2888.pro is protected by industry-standard Transport Layer Security (TLS 1.3), the same encryption protocol used by major Indonesian banks including BCA and BRI. This ensures that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data fields — including identity document numbers, bank account details, and password hashes — are encrypted at rest using AES-256 encryption. Passwords are never stored in plaintext; they are one-way hashed using a modern cryptographic algorithm.
• Access Controls: Access to Player personal data within to2888's internal systems is restricted on a strict need-to-know basis. Only personnel whose roles require access to specific data categories are granted the corresponding permissions. All internal data access is logged and regularly audited.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication on their to2888 accounts. Our internal administrative systems mandate 2FA for all staff with access to Player data.
• Intrusion Detection & Monitoring: to2888 operates continuous network monitoring and intrusion detection systems that flag anomalous access patterns in real time. Automated alerts are reviewed by our security team around the clock.
• Penetration Testing: The Platform undergoes regular penetration testing and security audits conducted by qualified independent security professionals to identify and remediate vulnerabilities before they can be exploited.

to2888 uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain session state, enhance security, and analyze platform usage. The following categories of cookies are deployed:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your authenticated session after login, remember your language and currency preferences (IDR), and enable core security functions including CSRF protection. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember your optional preferences such as your preferred sports league view (e.g., BRI Liga 1 vs. EPL), game lobby layout, and live chat settings. They improve your experience by reducing the need to re-configure preferences on each visit.
• Analytics Cookies: to2888 uses privacy-preserving first-party analytics to understand how Players navigate the Platform — which pages are visited most frequently, where users encounter difficulties, and how platform features are adopted over time. This data is aggregated and anonymized; it is never shared with external advertising networks.
• Security Cookies: Short-lived cookies used by our fraud detection and device-fingerprinting systems to identify unusual access patterns, detect automated bots, and prevent credential-stuffing attacks.

to2888 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioral profiling technologies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

As a Player on to2888, you hold the following rights with respect to your personal data. These rights can be exercised by contacting us at [email protected] with the subject line "Privacy Rights Request":

to2888 will respond to all verified privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with notification to you of the extension and its reasons. We will not charge a fee for reasonable, good-faith requests.

to2888 strictly prohibits use of the Platform by any person under the age of 21. The Platform is not directed at, and does not knowingly collect personal data from, individuals under 21 years of age. Age verification is a mandatory step in our KYC process, and accounts belonging to underage individuals will be closed immediately upon discovery, with all associated data deleted in accordance with Clause 7 (except where retention is required by law for fraud investigation purposes).

If you are a parent or guardian and you believe your child has accessed to2888.pro and provided personal information, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay. Parents and guardians are encouraged to deploy commercially available parental control software to restrict access to online gambling platforms.

The to2888 Platform integrates game content delivered by licensed third-party studios including Pragmatic Play, Evolution Gaming, PG Soft, Spribe, Microgaming, and NetEnt. When you interact with a game delivered by one of these studios, limited gameplay session data may be processed by the studio's own servers in accordance with their respective privacy policies. to2888 maintains contractual data processing agreements with all game studio partners to ensure your data is handled consistently with the standards set out in this Policy.

The to2888 Platform does not contain links to external third-party websites outside of the integrated payment and gaming infrastructure described above. to2888 is not responsible for the privacy practices of any third-party service whose product you access through a separate browser session outside of our Platform.

to2888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, applicable law, or licensing requirements. When material changes are made, we will notify registered Players by email to the address on their Account and by displaying a prominent notice on the Platform homepage for at least 14 days prior to the change taking effect.

The effective date at the top of this document will always reflect the date of the most recent revision. Minor, non-material changes (such as typographic corrections or clarifications that do not affect your rights or our data practices) may be published without individual notice but will always be reflected in an updated effective date.

We encourage you to review this Policy periodically. Your continued use of to2888 after the effective date of any update constitutes your acceptance of the revised Policy. The current version is always available at to2888.pro/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to2888's handling of your personal data, please contact our Privacy team through the following channel:

For general platform support, account queries, payment assistance, or responsible gaming concerns, our 24/7 support team is also reachable at [email protected] with the relevant subject line. Native Indonesian-speaking agents are available around the clock.