At rafi88, your privacy is a foundational commitment, not an afterthought. This Privacy Policy explains in clear, plain terms what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your own information as a player on our platform.
All data transmitted between your device and the rafi88 platform is encrypted using TLS 1.3. Stored data is protected with AES-256 encryption at rest, meeting the highest current industry standards.
rafi88 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to operate your account and deliver our services.
You have the right to access, correct, export, or request deletion of your personal data at any time. Submit your request to our support team and we will respond within five business days.
Transaction data relating to BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and other local payment methods is handled with the highest level of confidentiality and shared only with the relevant payment processor.
We retain your personal data only for as long as is necessary to fulfil the purposes described in this policy or as required by law. Account data is retained for a minimum of five years after closure per applicable AML regulations.
Our privacy support team is available 24/7 to address questions, data access requests, or concerns. Contact us at [email protected] — we treat all privacy inquiries as high priority.
rafi88 ("we", "us", "our", or "the Company") operates the online gaming platform accessible at https://rafi88.cam (the "Platform"). This Privacy Policy applies to all Players who register an account on, access, or interact with the Platform, including those accessing it from Indonesia and other permitted jurisdictions.
We are committed to protecting your personal data and processing it in a transparent, fair, and lawful manner. This policy is written to be as clear and accessible as possible while meeting the standards of international data protection best practice.
By registering an account or continuing to use the Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should cease using the Platform and may close your account in accordance with our Terms & Conditions.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are accessible from the navigation menu above.
We collect personal data across several categories depending on the nature of your interaction with the Platform. The table below summarises the primary categories of data we process:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, Indonesian National ID (KTP) number | Account registration, KYC verification, age verification |
| Contact Data | Email address, Indonesian mobile phone number, residential address | Account communications, security alerts, KYC correspondence |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Processing deposits and withdrawals, fraud prevention, AML compliance |
| KYC Documents | Scanned or photographed copy of KTP, selfie verification photos, proof of address documents | Regulatory compliance, identity verification, withdrawal authorisation |
| Gaming Activity Data | Wager history, game session logs, win/loss records, bonus usage, betting preferences | Account management, responsible gaming monitoring, platform improvement |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, geolocation data | Security monitoring, fraud detection, platform optimisation |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer service delivery, dispute resolution, compliance records |
| Preference Data | Language preferences, notification settings, marketing consent status | Personalised experience delivery, targeted communications (where consented) |
We do not knowingly collect data from individuals who are under 21 years of age. If we discover that data has been collected from a minor, we will delete it promptly. See Section 11 for further detail on children's privacy.
rafi88 collects personal data through the following channels and mechanisms:
We collect data that you voluntarily provide directly to us when you:
When you visit and interact with the Platform, we automatically collect certain technical and behavioural data through server logs, session tracking technologies, and cookies. This includes your IP address, device identifiers, browser fingerprint, pages visited, time spent on each page, and in-game actions taken during a session.
In limited circumstances, we may receive data about you from third parties, including:
We use the personal data we collect for the following purposes, each of which has a corresponding legal basis described in Section 5:
Important: We will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent or establishing a separate legal basis for doing so.
Every instance of personal data processing by rafi88 is grounded in one of the following legal bases:
| Legal Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account creation, payment processing, and service delivery. |
| Legal Obligation | Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and responses to lawful regulatory or law enforcement requests. |
| Legitimate Interests | Processing necessary for our legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your fundamental rights. |
| Consent | Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional personalisation features. Consent may be withdrawn at any time without affecting the lawfulness of prior processing. |
| Vital Interests | Processing strictly necessary to protect the vital interests of you or another person — for example, in emergency situations involving player welfare in the context of responsible gaming. |
rafi88 does not sell, rent, or otherwise commercialise your personal data. We share your data only in the following limited and controlled circumstances:
To process deposits and withdrawals, we share the minimum necessary financial data with our payment processing partners, including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers are contractually bound to use your data solely for payment processing purposes.
KYC document data (including your KTP and selfie verification images) is processed by our third-party identity verification partner. This partner operates under a strict data processing agreement and is prohibited from retaining or using your data beyond the scope of the verification task.
Game studios and content providers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — may receive anonymised session data necessary for delivering their game products. These providers do not receive your name, contact details, or financial information.
Where required by applicable law, licensing obligations, or a valid court order, we may be required to disclose personal data to regulatory bodies, tax authorities, financial intelligence units, or law enforcement agencies. We will notify you of any such disclosure where we are legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you in advance of any such transfer and ensure the receiving entity is bound by privacy obligations equivalent to those in this policy.
We may share data with our legal counsel, auditors, accountants, and insurers on a strictly need-to-know basis and subject to professional confidentiality obligations.
rafi88 uses cookies and similar tracking technologies to operate the Platform, enhance your user experience, and gather analytical data that helps us improve our services.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — session authentication, security tokens, load balancing. Cannot be disabled without breaking core functionality. | Session / up to 24 hours |
| Functional | Remember your preferences such as language settings, display options, and last-visited game categories to personalise your experience. | Up to 12 months |
| Analytical | Track anonymised usage patterns — pages visited, session duration, navigation paths — to help us identify performance issues and improve the Platform. | Up to 24 months |
| Security | Detect and prevent fraudulent activity, bot traffic, and account takeover attempts by fingerprinting devices and monitoring session behaviour. | Up to 6 months |
You may control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies on a per-site basis. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Detailed instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or Opera).
rafi88 does not use cookies to serve third-party advertising or retargeting campaigns on external websites.
rafi88 implements a multi-layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:
Your Responsibilities: No security system is impenetrable. You play an important role in keeping your account safe. Use a strong, unique password for your rafi88 account, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact us immediately at [email protected].
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Minimum 5 years after account closure | AML regulatory requirement |
| KYC Documents | Minimum 5 years after account closure | AML and KYC regulatory requirement |
| Transaction Records | Minimum 5 years after each transaction | Financial record-keeping obligation |
| Gaming Activity Logs | 3 years after account closure | Dispute resolution and responsible gaming |
| Support Communications | 3 years after last interaction | Dispute resolution and service quality |
| Cookie & Analytics Data | Up to 24 months (anonymised) | Platform improvement |
| Marketing Consent Records | Duration of consent plus 3 years | Demonstrating lawful basis for marketing |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.
As a player on the rafi88 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within five (5) business days.
Request a copy of all personal data we hold about you, along with information about how it is being used and with whom it has been shared.
Request correction of inaccurate or incomplete personal data held in your account. Minor updates (such as contact details) can often be made directly in your account settings.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that we restrict processing of your data — for example, while a dispute about accuracy is under investigation — without deleting it.
Request an export of the personal data you provided to us in a structured, machine-readable format (CSV or JSON), where technically feasible.
Object to processing of your data based on our legitimate interests, including any profiling used for marketing or personalisation purposes.
Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time without affecting the lawfulness of prior processing.
Request human review of any significant decision made solely by automated means — such as account restrictions triggered by automated fraud-detection systems.
Please note that certain rights may be limited where their exercise would conflict with our legal obligations (for example, we cannot delete transaction records that we are legally required to retain). Where a limitation applies, we will explain the reason clearly in our response.
rafi88 is strictly an adults-only platform. We do not knowingly collect, store, or process the personal data of individuals under the age of 21. Our registration process requires players to confirm their date of birth, and our KYC verification process independently verifies age using government-issued identification.
If you are a parent or guardian and you believe that a minor has registered an account on the Platform or has submitted personal data to us, please contact us immediately at [email protected]. We will investigate the matter promptly and, where confirmed, delete all associated data and close the account without delay.
We also encourage parents and guardians to make use of parental control software and internet filtering tools to prevent minors from accessing online gaming content. Information on available tools is referenced on our Responsible Gaming page.
rafi88's primary server infrastructure is located in secure data centres in Asia. However, in connection with certain third-party service providers — including cloud infrastructure partners, KYC verification services, and fraud prevention systems — your personal data may be transferred to and processed in countries outside Indonesia.
Where such transfers occur, we ensure that appropriate safeguards are in place to maintain a level of data protection equivalent to that described in this policy. These safeguards may include:
You may request further information about international transfer safeguards applicable to your data by contacting our support team.
The rafi88 Platform may reference or display content from third-party service providers, including game studios, payment processors, and technology partners. While we take care to work only with reputable partners, we are not responsible for the privacy practices of third parties.
This Privacy Policy applies exclusively to data processed by rafi88 in connection with the Platform. Any data you provide directly to a third-party service provider — for example, when authenticating with a payment app such as OVO or GoPay outside our Platform environment — is governed by that provider's own privacy policy.
We encourage you to review the privacy policies of any third-party services with which you interact in connection with your use of rafi88.
rafi88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will:
Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may close your account and request deletion of your data subject to applicable retention obligations, as described in Section 9.
The current version of this Privacy Policy is always available at https://rafi88.cam/privacy-policy. We recommend reviewing it periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way rafi88 handles your personal data, please reach out to our dedicated privacy support team:
Privacy & Data Support
Email: [email protected]
Please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" so that your message is routed to the appropriate team. We aim to respond to all privacy-related enquiries within five (5) business days. Our support team operates 24 hours a day, 7 days a week, including during Indonesian public holidays such as Idul Fitri and Indonesian Independence Day (17 August).
For queries related to your account security, responsible gaming tools, or self-exclusion requests, please also refer to our Responsible Gaming page and our FAQ for additional guidance.
Have questions about how rafi88 handles your data? Our support team is available around the clock. Explore related policies or return to the homepage.