lmb88 Privacy Policy

The following definitions apply throughout this Privacy Policy. Capitalised terms not defined here carry the meaning given to them in the lmb88 Terms & Conditions.

lmb88 operates the online betting and casino platform accessible at https://lmb88.bio and is the Data Controller responsible for all Personal Data collected from Members and visitors to the Platform.

As Data Controller, lmb88 determines what Personal Data is collected, for what purposes it is used, how long it is retained, and to whom it may be disclosed. lmb88 is committed to Processing Personal Data lawfully, transparently, and in accordance with the principles set out in this Privacy Policy.

lmb88 collects Personal Data in the following categories. We collect only what is necessary for the specific purposes described in Clause 5.

lmb88 collects Personal Data through the following channels:

• Direct Registration: When you create a Member Account, you provide Registration Data directly through the registration form on the Platform.
• KYC Submission: When you submit identity documents in connection with our Know Your Customer verification process (see Clause 5 of our Terms & Conditions), we collect the document images and the data contained within them.
• Transactional Activity: Every deposit and withdrawal you make generates Financial Data — transaction timestamps, amounts in Indonesian Rupiah (IDR / Rp), payment channel used, and bank or e-wallet reference numbers.
• Platform Interaction: Our servers automatically record Technical Data and Usage Data as you navigate the Platform, place bets, and interact with games — including slot gacor (high-payout slot game) sessions, live casino tables, and togel (Indonesia's traditional numbers lottery) draw participation.
• Customer Support Interactions: Any communications you send to our support team via live chat or email are recorded and stored as Communications Data.
• Cookies and Similar Technologies: As described in Clause 9, we use cookies and similar tracking technologies to collect session and behavioural data automatically when you visit the Platform.
• Third-Party Sources: In limited circumstances, we may receive data about you from third-party identity verification providers, fraud prevention services, or payment processors — solely to verify the accuracy of information you have already provided.

lmb88 processes your Personal Data only where we have a lawful basis for doing so. The following table sets out the primary purposes for which we Process your data and the corresponding legal basis for each purpose.

lmb88 does not sell, rent, or trade your Personal Data. We share data only in the specific circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment Processors: When you make a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment provider will receive the transaction data required to execute and settle that transaction. Their handling of your data is governed by their own privacy policies.
• KYC and Identity Verification Providers: We may share your KYC Documents with specialist third-party identity verification partners who assist us in confirming document authenticity and validating your identity. These partners act as Data Processors under contractual obligations that meet our data protection standards.
• Fraud Prevention Services: To detect and prevent fraudulent activity, account abuse, and money laundering, lmb88 may share Technical Data and Financial Data with third-party fraud intelligence services. Shared data includes IP addresses, device identifiers, and transaction patterns.
• Game Studios and Technology Providers: When you play games powered by Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, or other licensed studios, limited technical session data is transmitted to those studios' platforms to render the game and record the result. These studios are Data Processors under contractual agreements with lmb88.
• Cloud Infrastructure Providers: lmb88's Platform is hosted on secure cloud infrastructure. Our infrastructure providers process Technical Data in the course of providing hosting, storage, and networking services. They act as Data Processors under contractual obligations.
• Legal and Regulatory Authorities: lmb88 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or our international licensing obligations. We will notify you of any such disclosure where legally permitted to do so.
• Corporate Restructuring: In the event of a merger, acquisition, or sale of all or substantially all of lmb88's assets, Member Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such change and its implications for the processing of your data.

lmb88 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by our international licensing obligations or applicable law.

• Active Account Data: For the duration of your membership and for a minimum of five (5) years following account closure, to satisfy our AML record-keeping obligations.
• KYC Documents: For a minimum of five (5) years after your Account is closed, in compliance with our international licensing requirements.
• Financial Transaction Records: For a minimum of five (5) years after the date of each transaction.
• Customer Support Records: For three (3) years following resolution of the relevant interaction, in order to facilitate dispute resolution and regulatory audits.
• Responsible Gaming Records: For the duration of any active self-exclusion period, plus five (5) years, to ensure compliance with self-exclusion commitments.
• Technical and Usage Logs: For twelve (12) months from the date of collection, after which anonymised aggregate data may be retained indefinitely for analytics purposes.
• Marketing Consent Records: For the period of consent plus three (3) years following withdrawal of consent, as evidence of the consent given.

When Personal Data is no longer required, lmb88 will securely destroy or irreversibly anonymise it in accordance with industry best-practice data disposal procedures.

lmb88 applies a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your Personal Data against unauthorised access, loss, destruction, or disclosure:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and lmb88 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption — the same standard applied by major Indonesian banks including BCA and Mandiri.
• Encryption at Rest: Sensitive data stored in our databases — including passwords (stored as salted cryptographic hashes), KYC documents, and financial account numbers — is encrypted at rest using AES-256.
• Access Controls: Access to systems containing Personal Data is restricted to authorised personnel only, enforced through role-based access control (RBAC), multi-factor authentication (MFA), and regular access reviews.
• Intrusion Detection and Monitoring: lmb88 operates 24/7 security monitoring with automated intrusion detection systems that flag and respond to anomalous activity in real time.
• Regular Security Audits: Our platform and infrastructure undergo periodic independent security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in risk to your rights and freedoms, lmb88 will notify affected Members without undue delay and take all necessary steps to contain and remediate the breach.

lmb88 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and understand how Members use our services. The following types of cookies may be present on the Platform:

You can manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. lmb88 does not use third-party advertising cookies or cross-site behavioural tracking cookies.

As a Member of lmb88, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, contact our support team via the channels described in Clause 15. We will respond within five (5) business days.

Please note that some rights are subject to exceptions — for example, we cannot erase data that we are legally required to retain under our licensing obligations or AML regulations. Where a limitation applies, we will explain the reason clearly in our response to your request.

lmb88 strictly prohibits use of the Platform by anyone under the age of 21. 21+ Only

We do not knowingly collect Personal Data from individuals under 21 years of age. If our age verification checks indicate that a Member is under 21, the Account will be suspended immediately, all transactions will be frozen, and any Personal Data collected will be handled in accordance with our data retention obligations and applicable law — including notification to relevant authorities where required.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on lmb88 without your knowledge, please contact our support team immediately at [email protected]. We will investigate and take appropriate action promptly.

lmb88 encourages parents and guardians to use parental control software to restrict access to online gambling platforms for minors in their household.

The lmb88 Platform integrates with a number of third-party services to deliver its full range of features. When you interact with these services, your data may be processed by those third parties in accordance with their own privacy policies:

• Game Studios: Pragmatic Play, Evolution Gaming, PG Soft (Pocket Games Soft), Microgaming, NetEnt, Habanero, Spribe, and other licensed studios deliver game content through APIs integrated into the Platform. Session data is exchanged with these studios to render games and record outcomes.
• Payment Service Providers: Banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, and OCBC NISP, and e-wallet providers including OVO, DANA, GoPay, ShopeePay, and LinkAja, handle the financial data necessary to process your deposits and withdrawals.
• Analytics Providers: lmb88 may use privacy-focused analytics tools to collect aggregated usage data. Where such tools are used, they are configured to anonymise IP addresses and not to collect personally identifiable information.

lmb88 is not responsible for the data practices of third-party services. We recommend reviewing the privacy policies of any third-party providers with which you interact — particularly your chosen bank or e-wallet provider — to understand how they handle your financial data.

As an internationally operated platform, lmb88 may transfer your Personal Data to countries outside Indonesia for storage or processing — for example, to our cloud infrastructure providers or game studio partners located in other jurisdictions.

Where such transfers occur, lmb88 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that described in this Privacy Policy. Safeguards may include:

• Contractual clauses (data processing agreements) that require the recipient to apply equivalent data protection standards;
• Transfers to jurisdictions that have been recognised as providing an adequate level of data protection by relevant regulatory authorities;
• Technical controls such as end-to-end encryption of data in transit.

By using the lmb88 Platform and accepting this Privacy Policy, you consent to the transfer of your Personal Data to other countries under the safeguards described above.

lmb88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes — those that significantly affect your rights or how we use your data — we will:

• Post a prominent notice on the Platform at least seven (7) days before the change takes effect;
• Send a notification to the email address registered on your Account.

Non-material changes — such as clarifications of existing provisions, correction of typographical errors, or updates to contact details — may take effect immediately upon publication without individual notice.

The "Last Reviewed" date at the top of this Privacy Policy reflects when it was most recently updated. We encourage you to revisit this page periodically. Continued use of the Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way lmb88 handles your Personal Data, please reach out through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the lmb88 Platform. Indonesian-speaking support agents are on standby at all times.
• Email: [email protected] — please include "Privacy Request" in the subject line. We aim to respond to all privacy-related enquiries within two (2) business days.

When submitting a data rights request (as described in Clause 10), please provide your Account username and the email address registered on your Account so we can verify your identity before actioning the request. We will never charge a fee for handling a data rights request in normal circumstances.

This Privacy Policy was last reviewed and updated on 1 January 2026. lmb88 recommends that all Members review this document periodically to remain informed of any updates to our data protection practices.