Privacy Policy

lato88 ("we", "us", "the Platform") operates the online gaming platform accessible at lato88.cam, offering sports betting services — including football markets for BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, and UEFA Champions League — as well as live casino games, slot titles, and togel (Indonesia's traditional numbers lottery) products to eligible players located in Indonesia.

As a data controller, lato88 is responsible for determining the purposes and means by which personal data is processed. This Privacy Policy sets out in full and transparent terms: the categories of personal data we collect; the lawful basis on which we process that data; the purposes for which it is used; the parties with whom it may be shared; how long it is retained; the security measures we apply; and the rights available to you as a data subject.

This policy applies to all individuals who visit lato88.cam, register a Player account, interact with our customer support team, or otherwise engage with any service provided by lato88. It applies regardless of whether you access the platform from Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, or any other location in Indonesia.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — a data subject who can be identified, directly or indirectly, by reference to an identifier such as a name, ID number, location data, or online identifier.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organization, storage, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" refers to lato88, the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" refers to any third-party organization that processes personal data on behalf of lato88 under a contractual arrangement.
• "Player" or "You" refers to any individual who accesses lato88, whether as a registered account holder or as a visitor.
• "KYC" stands for Know Your Customer — the identity verification process required before withdrawals are processed.
• "Cookie" refers to a small text file placed on your browser or device when you visit lato88.cam that stores session or preference data.

lato88 collects the following categories of personal data:

lato88 collects personal data through the following methods:

• Direct Provision: You provide data directly when you complete the registration form, submit KYC documents, initiate deposits or withdrawals, update your account profile, or communicate with our support team.
• Automatic Collection: Technical data (IP address, browser type, device information) and behavioral data (pages visited, games played) are collected automatically via cookies, web server logs, and platform analytics tools when you access lato88.
• Third-Party Sources: Payment processors (banks and e-wallet providers) may share transaction confirmation data to verify deposits and withdrawals. Game providers may share gameplay session logs for audit and fairness verification purposes.
• Public Records: In limited cases, lato88 may verify identity or address information against publicly available databases or government registries to satisfy anti-fraud and anti-money laundering obligations.

lato88 processes personal data for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, and securing your Player account.
• Identity Verification (KYC): Verifying that you are over 21 years of age, a resident of Indonesia, and the legitimate owner of the payment methods registered to your account.
• Transaction Processing: Processing deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja; processing withdrawal requests to verified accounts.
• Service Delivery: Providing access to sports betting markets (BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, UEFA Champions League), live casino games (Evolution Gaming, Pragmatic Play), slot titles, and togel draws.
• Bonus Administration: Managing promotional offers, tracking wagering requirements, and crediting winnings.
• Customer Support: Responding to inquiries, resolving disputes, assisting with responsible gaming tool setup, and providing 24/7 Indonesian-speaking support.
• Fraud Prevention: Detecting and preventing duplicate accounts, payment fraud, identity theft, bonus abuse, and other prohibited conduct.
• Regulatory Compliance: Meeting anti-money laundering (AML) obligations, reporting suspicious activity, and cooperating with lawful requests from authorities.
• Platform Improvement: Analyzing aggregate, anonymized usage data to improve user experience, optimize performance, and develop new features.
• Responsible Gaming: Implementing deposit limits, self-exclusion requests, session time-outs, and other player protection mechanisms.

lato88 processes personal data only where a lawful basis exists under applicable data protection law. The primary legal bases are:

• Contractual Necessity: Processing is necessary to perform the contract between you and lato88 (the Terms & Conditions), including account setup, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with laws applicable to lato88, including KYC and AML regulations, tax reporting requirements, and lawful authority requests.
• Legitimate Interest: Processing serves lato88's legitimate interests in fraud prevention, security, platform improvement, and communication with Players, provided those interests do not override your fundamental rights and freedoms.
• Consent: In certain cases — such as subscribing to optional marketing communications or enabling non-essential cookies — processing is based on your explicit, freely given consent, which may be withdrawn at any time.

lato88 does not sell, rent, or trade personal data to third parties for marketing purposes. Personal data may be shared with the following categories of recipients only where strictly necessary:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals.
• Game Providers: Licensed third-party game studios (Evolution Gaming, Pragmatic Play, NetExt, Microgaming, Pocket Games Soft, Spribe) receive Player ID and session data to enable gameplay and record outcomes.
• KYC Service Providers: Specialized identity verification and document authentication providers may process KYC documents on lato88's behalf under strict confidentiality agreements.
• Hosting & Infrastructure Providers: Secure cloud hosting and server providers store encrypted data necessary to maintain platform operations.
• Customer Support Tools: Live chat, email, and ticketing systems used by lato88 support staff to respond to inquiries.
• Regulatory Authorities: Personal data may be disclosed to government agencies, law enforcement, or regulatory bodies where required by law, court order, or where lato88 reasonably believes disclosure is necessary to prevent fraud, money laundering, or harm to individuals.
• Legal Advisors & Auditors: Legal counsel and independent auditors may access personal data for compliance review, dispute resolution, or regulatory audit purposes under confidentiality obligations.

All third-party data processors are bound by written agreements requiring them to process data only as instructed by lato88, to implement appropriate technical and organizational security measures, and to comply with applicable data protection law.

lato88 retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law. Retention periods vary by data type:

• Active Account Data: Personal and transaction data for active accounts is retained for the duration of the account's lifetime and for six (6) months following voluntary account closure or final transaction, whichever is later.
• KYC Documents: Identity verification documents are retained for a minimum of seven (7) years from the date of verification or account closure to satisfy AML and regulatory record-keeping obligations.
• Transaction Records: Financial transaction logs (deposits, withdrawals, bet history) are retained for a minimum of seven (7) years for audit, dispute resolution, and tax compliance purposes.
• Communication Logs: Customer support chat logs and email correspondence are retained for three (3) years to maintain service quality and resolve disputes.
• Technical & Behavioral Data: Aggregated, anonymized analytics data may be retained indefinitely. Non-anonymized logs (IP addresses, session data) are retained for twelve (12) months unless required longer for fraud investigation or legal proceedings.
• Self-Excluded Accounts: Personal data for self-excluded Players is retained for the duration of the self-exclusion period plus seven (7) years to prevent account reopening and ensure compliance with responsible gaming commitments.

Following the expiration of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents re-identification.

lato88 implements technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. Key security measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and lato88 servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Storage: Sensitive personal data (including KYC documents and financial account details) is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized lato88 personnel and data processors on a need-to-know basis. All personnel undergo background checks and data protection training.
• Multi-Factor Authentication (MFA): lato88 staff access systems are protected by multi-factor authentication to prevent unauthorized internal access.
• Firewall & Intrusion Detection: Platform infrastructure is protected by advanced firewall systems and real-time intrusion detection tools that monitor for malicious activity.
• Regular Security Audits: lato88 conducts quarterly security audits and penetration testing by independent third-party security firms to identify and remediate vulnerabilities.
• Incident Response Plan: lato88 maintains a documented data breach response plan. In the event of a breach affecting personal data, affected Players will be notified within 72 hours and appropriate remedial actions will be taken.

lato88 uses cookies and similar tracking technologies to enhance user experience, maintain session continuity, and analyze platform performance. A cookie is a small text file stored on your device by your browser when you visit lato88.cam.

Types of Cookies Used:

• Essential Cookies: Necessary for platform functionality, including session management, login authentication, and secure transaction processing. These cookies cannot be disabled without impairing platform usability.
• Preference Cookies: Remember your language selection, currency display format (IDR / Rp), and other settings to personalize your experience.
• Analytics Cookies: Collect aggregated, anonymized data on page views, session duration, bounce rate, and user flow to help us improve platform design and identify technical issues.

What We Do NOT Use:

• Cross-site tracking cookies
• Third-party advertising cookies
• Social media tracking pixels (Facebook, Instagram, Twitter)
• Behavioral profiling for targeted advertising

You may configure your browser to refuse all cookies or to alert you when a cookie is being set. However, disabling essential cookies will prevent you from logging in and using lato88's services. Most browsers provide cookie management options in their settings menu.

As a Player whose personal data is processed by lato88, you have the following rights under applicable data protection law:

• Right of Access: You may request a copy of all personal data lato88 holds about you. lato88 will provide this information in a structured, commonly used, machine-readable format within 30 calendar days of a verified request.
• Right to Rectification: If personal data held by lato88 is inaccurate or incomplete, you have the right to request correction. You can update most account information directly via your account settings or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to lato88's legal obligation to retain certain data for regulatory compliance and dispute resolution purposes.
• Right to Restrict Processing: You may request that lato88 temporarily suspend processing of your personal data in certain circumstances, such as while lato88 investigates a complaint or verifies data accuracy.
• Right to Data Portability: You may request that lato88 transfer personal data you have provided to another service provider in a structured, machine-readable format, where technically feasible.
• Right to Object: You may object to processing of your personal data where the legal basis is legitimate interest. lato88 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time by contacting support or using the unsubscribe mechanism provided in communications.
• Right to Lodge a Complaint: If you believe lato88 has violated your data protection rights, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

To exercise any of these rights, contact lato88 customer support at [email protected] with your full name, registered email address, and a description of your request. lato88 may require additional information to verify your identity before processing the request.

lato88's services are restricted to individuals who are at least 21 years of age. We do not knowingly collect personal data from individuals under the age of 21.

If lato88 becomes aware — through KYC verification, third-party report, or other means — that an account has been registered by or on behalf of an individual under 21, the account will be immediately and permanently closed. All personal data associated with the account will be deleted in accordance with this Privacy Policy, and any remaining balance will be forfeited.

Parents and guardians are encouraged to monitor their children's internet use and to employ parental control software where appropriate. If you have reason to believe that a minor has accessed lato88, please contact support immediately at [email protected].

lato88.cam may contain links to external websites or services operated by third parties, including payment processors, game providers, and responsible gaming support organizations. This Privacy Policy applies only to lato88.cam and does not govern the privacy practices of any third-party website or service.

When you navigate to an external website via a link on lato88, you leave the lato88 platform and become subject to the privacy policy and terms of service of that third-party operator. lato88 is not responsible for the content, privacy practices, or security of external websites.

We recommend that you review the privacy policy of any third-party website before providing personal information or engaging with their services.

lato88 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or service offerings. The "Last Updated" date at the top of this page indicates the date of the most recent revision.

Where material changes are made to this Privacy Policy — particularly changes that expand the purposes for which data is processed or the categories of recipients with whom it is shared — lato88 will provide reasonable notice to existing Players via email or an on-platform notification.

Your continued use of lato88 following the publication of an amended Privacy Policy constitutes acceptance of the revised terms. If you do not agree to the revised policy, you must discontinue use of the platform and may request account closure and data deletion by contacting support.

lato88 recommends that Players review this Privacy Policy periodically to remain informed of how their personal data is being used and protected. The most current version will always be accessible at lato88.cam/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact lato88's Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within the lato88 platform interface.
• WhatsApp & Telegram: Contact details available via the platform's live support section.

Our Indonesian-speaking support team is available around the clock to assist with privacy-related inquiries, data subject access requests, account security concerns, and responsible gaming support.

For information about our service terms, account eligibility, and platform rules, please review our Terms & Conditions. For information about responsible gaming tools and player protection measures, please visit our Responsible Gaming page.