Privacy Policy

Introduction

luki88 ("we", "our", "us") operates the online gaming platform accessible at https://luki88.cam. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information provided by users ("you", "Member", "Player") when accessing or using our services.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the contractual relationship between luki88 and its Members. By creating an account or using any service on luki88, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy in its entirety.

luki88 processes personal data in accordance with applicable international data protection laws and industry best practices. We act as the data controller for all personal information collected through the Platform. Our legal basis for processing your data includes:

• Contractual necessity: Processing required to provide the services you have requested and to fulfill our obligations under the Terms & Conditions.
• Legal compliance: Processing required to comply with Know Your Customer (KYC), anti-money laundering (AML), and other regulatory obligations applicable to licensed gaming operators.
• Legitimate interests: Processing necessary for fraud prevention, platform security, marketing communications (where permitted), and business analytics.
• Consent: Where you have explicitly consented to specific data processing activities, such as receiving promotional communications.

Information We Collect

luki88 collects several categories of personal information to operate the platform, verify Member identities, process transactions, and provide customer support. The specific data collected depends on how you interact with our services.

2.1 Registration Information

When you create a luki88 account, we collect the following information:

• Personal identifiers: Full legal name (as it appears on government-issued ID), date of birth, gender, nationality
• Contact details: Email address, Indonesian mobile phone number, residential address (city, province, postal code)
• Account credentials: Username, password (stored in hashed format), security questions/answers
• Payment information: Bank account details (account holder name, bank name, account number), e-wallet identifiers (OVO/DANA/GoPay/ShopeePay/LinkAja registered phone number)

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and process withdrawals, we require Members to submit identity verification documents including:

• Government-issued photo ID: Kartu Tanda Penduduk (KTP), Indonesian passport, or Surat Izin Mengemudi (SIM)
• Proof of address: Utility bill, bank statement, or official correspondence dated within the last 90 days
• Payment method verification: Screenshot or photo showing ownership of registered bank account or e-wallet
• Selfie holding ID: In some cases, a photo of you holding your government ID next to your face for facial biometric comparison

2.3 Transaction and Gaming Data

We automatically record all financial transactions and gaming activity on your account, including:

• Deposit history: Amount, timestamp, payment method, transaction reference number, processing status
• Withdrawal requests: Amount, destination account, request timestamp, approval/rejection status, processing time
• Betting history: Wager amounts, game type, odds, stake time, settlement time, win/loss outcome
• Bonus activity: Bonuses claimed, wagering progress, bonus expiry dates, forfeited amounts
• Account balance changes: Real-time ledger of all credits and debits to your account

2.4 Technical and Usage Data

When you access luki88, our servers automatically collect technical information including:

• Device information: Device type (mobile/desktop/tablet), operating system, browser type and version, screen resolution
• Network data: IP address, internet service provider (ISP), approximate geographic location (city/region level based on IP)
• Session data: Login times, session duration, pages viewed, click patterns, search queries within the platform
• Cookies and tracking identifiers: See Section 5 for detailed information on our use of cookies

2.5 Communications and Support Interactions

When you contact luki88 support or communicate with us through any channel, we retain records of:

• Live chat transcripts with timestamps and assigned support agent identifiers
• Email correspondence and attachments
• Phone call recordings (where legally permitted and with prior notice)
• Feedback surveys and satisfaction ratings

How We Use Your Data

luki88 uses the personal information we collect for the following specific purposes, each supported by a lawful basis under applicable data protection regulations:

3.1 Fraud Prevention and Security

luki88 employs sophisticated fraud detection systems that analyze transaction patterns, device fingerprints, and behavioral biometrics to identify suspicious activity. This processing is essential to protect both individual Members and the integrity of the platform as a whole. Examples of security-related data processing include:

• Identifying multiple accounts operated by the same individual (prohibited under our Terms & Conditions)
• Detecting coordinated betting patterns that may indicate collusion or match-fixing
• Flagging transactions originating from jurisdictions associated with high fraud risk
• Monitoring for bonus abuse, account takeover attempts, and payment fraud

3.2 Marketing Communications (Opt-In Only)

With your explicit consent, luki88 may send you promotional communications including:

• Bonus offers and exclusive promotions tailored to your gaming preferences
• New game launches and feature announcements
• Seasonal campaigns and limited-time events
• VIP program invitations and tier upgrades

You can withdraw consent for marketing communications at any time by clicking the "unsubscribe" link in any promotional email, adjusting your communication preferences in Account Settings, or contacting support. Opting out of marketing does not affect transactional emails (deposit confirmations, withdrawal notifications, security alerts), which are necessary for account management.

Data Storage & Security

luki88 implements industry-leading technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our multi-layered security infrastructure includes:

4.1 Encryption Standards

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, meeting bank-grade security standards
• AES-256 encryption at rest for all personally identifiable information stored in our databases
• Hashed password storage using bcrypt with per-user salts — we never store passwords in plain text
• Encrypted database backups stored in geographically distributed data centers with restricted access

4.2 Access Controls

Access to personal data within luki88 is restricted on a need-to-know basis and subject to strict authorization controls:

• Role-based access control (RBAC) limiting employee access to specific data categories required for their job function
• Multi-factor authentication (MFA) required for all administrative access to production systems
• Comprehensive audit logs recording all data access, modification, and deletion events
• Annual security training for all employees handling personal data
• Confidentiality agreements binding all staff and contractors with access to Member information

4.3 Infrastructure Security

luki88's technical infrastructure is hosted in secure, certified data centers meeting international security standards:

• ISO 27001-certified data center facilities with 24/7 physical security and monitoring
• Redundant network architecture and automatic failover systems ensuring 99.9% uptime
• Regular penetration testing and vulnerability assessments by independent security firms
• Web application firewall (WAF) and DDoS mitigation protecting against cyberattacks
• Intrusion detection systems (IDS) monitoring for unauthorized access attempts

4.4 Data Breach Response

In the unlikely event of a data breach affecting your personal information, luki88 will:

1. Contain and remediate the breach immediately upon detection
2. Conduct a thorough investigation to determine the scope and cause of the breach
3. Notify affected Members within 72 hours of confirming the breach, detailing what data was compromised and what steps we are taking
4. Report the breach to relevant regulatory authorities as required by law
5. Provide guidance on protective measures Members can take (e.g., password changes, monitoring for suspicious account activity)

Cookies & Tracking Technologies

luki88 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps our servers recognize your browser and remember certain information about your session.

5.1 Types of Cookies We Use

5.2 Managing Cookie Preferences

You can control cookie usage through your browser settings. Most browsers allow you to block or delete cookies, although this may affect platform functionality. To manage cookies:

• Browser settings: Access your browser's privacy/security settings to block third-party cookies or clear existing cookies
• Account preferences: Log into your luki88 account and navigate to Privacy Settings to adjust marketing and analytics cookie preferences
• Opt-out tools: Use industry opt-out tools such as the Network Advertising Initiative (NAI) opt-out page for behavioral advertising cookies

Note that disabling essential cookies will prevent you from logging into your account and accessing core platform features.

Third-Party Sharing & Disclosure

luki88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we do share specific data categories with trusted service providers and partners necessary to operate the platform and comply with legal obligations.

6.1 Service Providers & Processors

We engage third-party service providers who process personal data on our behalf under strict contractual data protection obligations:

• Payment processors: Bank partners and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction details necessary to process deposits and withdrawals
• Identity verification services: Third-party KYC providers analyze submitted documents to verify identity and prevent fraud
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized gameplay data to deliver game content
• Customer support tools: Live chat and ticketing software providers process support interactions to help resolve Member inquiries
• Cloud infrastructure: Hosting and storage providers maintain the servers and databases where luki88 data is stored
• Analytics platforms: Web analytics tools process aggregated usage data to generate platform performance insights

6.2 Legal and Regulatory Disclosure

luki88 may disclose personal information when required by law or in response to valid legal processes:

• Compliance with court orders, subpoenas, or other legal obligations
• Cooperation with law enforcement investigations into fraud, money laundering, or other criminal activity
• Reporting to gaming regulatory authorities as required by our operating license
• Sharing necessary information to enforce our Terms & Conditions or protect the rights, property, or safety of luki88, our Members, or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, personal data held by luki88 may be transferred to the acquiring entity. Members will be notified of any such transfer, and the acquiring party will be bound by the commitments made in this Privacy Policy unless you consent to a revised policy.

Data Retention

luki88 retains personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data category:

7.1 Account Closure and Data Deletion

When you close your luki88 account, we will:

1. Immediately deactivate your login credentials, preventing further access
2. Process any pending withdrawals and settle outstanding balances
3. Archive your account data in a restricted-access system for the legally mandated retention period
4. Pseudonymize or anonymize your data where possible while maintaining compliance with regulatory obligations
5. Permanently delete your data after the retention period expires, except where longer retention is required by court order or ongoing legal proceedings

Note that certain data must be retained beyond account closure to comply with anti-money laundering regulations, tax reporting obligations, and gaming license requirements. This includes transaction records, KYC documentation, and responsible gaming interactions.

Your Rights Under Data Protection Law

Subject to applicable data protection regulations, you have the following rights regarding your personal information held by luki88:

8.1 Right of Access

You have the right to obtain confirmation of whether luki88 is processing your personal data and, if so, to request access to that data. You can request a copy of your personal data by contacting [email protected] (plain text only). We will provide this information within 30 days of verifying your identity, free of charge for the first request.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through Account Settings. For changes to verified information (such as registered name or date of birth), contact support with documentation supporting the correction.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent for processing based on consent. Note that this right is not absolute — luki88 may be legally required to retain certain data even after you request deletion, particularly for regulatory compliance purposes.

8.4 Right to Restriction of Processing

You have the right to request that luki88 restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests. During the restriction period, we will store the data but not actively process it except with your consent or for specific permitted purposes.

8.5 Right to Data Portability

Where processing is based on your consent or performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes. If you object to marketing, we will cease processing your data for that purpose immediately. For objections based on legitimate interests, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

8.7 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, and does not affect processing based on other legal grounds (contractual necessity, legal compliance, etc.).

8.8 Right to Lodge a Complaint

If you believe luki88 has violated your data protection rights, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

Children's Privacy (21+ Only)

luki88 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. Our age verification measures include:

• Mandatory date of birth declaration during registration, with automatic rejection of accounts indicating age below 21
• KYC document verification requiring government-issued ID showing date of birth
• Ongoing behavioral monitoring to identify potential underage account usage

If we discover that we have inadvertently collected personal information from an individual under 21 years of age, we will:

1. Immediately suspend the account and prevent further access
2. Investigate how the underage user bypassed age verification controls
3. Delete all personal information related to the underage account from our systems
4. Return any deposited funds to the source account after verification
5. Report the incident to our compliance team and implement additional safeguards as necessary

Parents or guardians who believe their child has provided personal information to luki88 should contact us immediately at [email protected] so we can take prompt corrective action.

International Data Transfers

luki88 operates internationally, and your personal data may be transferred to, stored in, and processed in countries outside Indonesia, including countries that may not provide the same level of data protection as Indonesian law. These transfers are necessary to provide our services and are subject to appropriate safeguards, including:

• Standard Contractual Clauses (SCCs): When transferring data to service providers in jurisdictions without adequate data protection laws, we use European Commission-approved Standard Contractual Clauses to ensure your data receives equivalent protection.
• Adequacy decisions: We prioritize transfers to countries recognized by relevant authorities as providing adequate data protection.
• Binding Corporate Rules: Where applicable, we rely on approved Binding Corporate Rules governing internal data transfers within multinational service providers.
• Your explicit consent: In some cases, we may ask for your explicit consent to transfer data to specific third countries for particular purposes.

By using luki88, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy. You have the right to request information about the safeguards in place for any specific data transfer.

Changes to This Privacy Policy

luki88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this document
• Notify all registered Members via email to their registered email address
• Display a prominent notice on the luki88 homepage and within Member account dashboards for 30 days following the change
• Where required by law, obtain your explicit consent before implementing changes that expand our data processing activities

Your continued use of luki88 after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Information & Data Protection Officer

For questions, concerns, or requests related to this Privacy Policy or how luki88 handles your personal data, please contact us through the following channels:

When contacting us regarding your personal data, please include your full name, registered email address, and a detailed description of your inquiry or request. We will verify your identity before processing any data-related requests to protect your privacy.