1. Introduction
Welcome to the score8 Privacy Policy. This document outlines how score8 ("we", "us", or "our") collects, uses, processes, stores, and protects the personal information of users ("you" or "your") who access our online betting platform at https://score8.cam.
score8 operates as an international online betting platform serving Indonesian players. We are committed to maintaining the highest standards of data protection and privacy in accordance with international privacy regulations, including principles aligned with the General Data Protection Regulation (GDPR), and applicable Indonesian data protection laws.
By creating an account with score8, accessing our website, or using our services, you acknowledge that you have read, understood, and consent to the collection, use, and processing of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this policy, please discontinue use of our services immediately.
Key Privacy Principle
score8 operates on a fundamental principle of data minimization: we only collect personal information that is necessary to provide our services, comply with legal obligations, and ensure platform security. We do not collect excessive or irrelevant data.
score8 collects several categories of information to provide, maintain, and improve our services. The information we collect includes:
2.1 Information You Provide Directly
When you register for a score8 account or use our services, you provide the following information:
- Account Registration Data: Full legal name, date of birth, gender, residential address (including city, province, and postal code), email address, mobile phone number, preferred username, and account password.
- Identity Verification Documents: Indonesian national identification card (KTP), proof of address documents such as utility bills or bank statements, and in some cases, photographic proof of identity (selfie holding KTP) as part of our KYC (Know Your Customer) compliance requirements.
- Financial Information: Bank account details including bank name (e.g., BCA, BRI, BNI, Mandiri), account number, and account holder name for processing deposits and withdrawals. E-wallet information such as OVO, DANA, or GoPay account details when used as payment methods.
- Communication Data: Any information you provide when contacting our customer support team via live chat, email, or other communication channels, including the content of your messages, support tickets, and feedback.
- Voluntary Information: Any additional information you choose to provide, such as preferences for promotional communications or participation in surveys.
2.2 Information Collected Automatically
When you access or use score8, we automatically collect certain technical and usage information:
- Device Information: Device type (mobile, tablet, desktop), operating system (Windows, macOS, iOS, Android), browser type and version, screen resolution, and device identifiers.
- Connection Data: IP address, internet service provider, approximate geographic location (city/region level based on IP address), and time zone setting (primarily Western Indonesia Time - WIB).
- Usage Data: Pages visited, features used, time spent on different sections of the website, click patterns, navigation paths, referring URLs, and interaction with promotional content.
- Transaction History: Complete records of all deposits, withdrawals, bets placed, game sessions, bet outcomes, account balance changes, and bonus activations.
- Gaming Activity: Games played, betting patterns, session duration, win/loss records, and gameplay statistics necessary for platform operation and responsible gaming monitoring.
2.3 Information from Third Parties
In limited circumstances, score8 may receive information about you from third-party sources:
- Payment Processors: Transaction confirmation data, payment method verification, and fraud prevention information from banks and payment service providers.
- Identity Verification Services: Verification status and risk assessment data from third-party KYC and anti-fraud services to comply with regulatory requirements.
- Sports Data Providers: Information related to bet settlement and sporting event outcomes from official data feed providers.
| Data Category |
Examples |
Primary Purpose |
Legal Basis |
| Identity Data |
Name, date of birth, KTP number |
Account creation, age verification |
Legal obligation, contract performance |
| Contact Data |
Email, phone number, address |
Communication, account recovery |
Contract performance |
| Financial Data |
Bank account, transaction history |
Processing payments |
Contract performance |
| Technical Data |
IP address, device type, browser |
Platform security, fraud prevention |
Legitimate interests |
| Usage Data |
Betting patterns, game preferences |
Service improvement, responsible gaming |
Legitimate interests, consent |
3. How We Use Your Information
score8 uses the collected information for the following legitimate purposes:
3.1 Service Provision and Account Management
- Creating and maintaining your score8 account
- Verifying your identity and age (21+ requirement enforcement)
- Processing deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay)
- Enabling you to place bets on sports events, play casino games, and access all score8 features
- Maintaining accurate transaction and betting records
- Providing customer support and responding to your inquiries
- Managing your account settings and preferences
3.2 Security and Fraud Prevention
- Detecting and preventing fraudulent activity, unauthorized access, and account takeover attempts
- Monitoring for suspicious betting patterns that may indicate match-fixing, collusion, or other prohibited activities
- Complying with anti-money laundering (AML) and Know Your Customer (KYC) regulations
- Protecting score8 and other users from security threats
- Investigating and resolving disputes, complaints, or terms violations
3.3 Responsible Gaming and Player Protection
- Monitoring gambling behavior to identify potential problem gambling indicators
- Implementing deposit limits, session timers, and self-exclusion tools
- Providing personalized responsible gaming alerts when concerning patterns are detected
- Enforcing age restrictions to prevent underage gambling
- Complying with responsible gaming regulations and best practices
3.4 Service Improvement and Personalization
- Analyzing platform usage to improve user experience and functionality
- Developing new features based on user behavior and feedback
- Personalizing content and game recommendations based on your preferences
- Optimizing website performance and mobile responsiveness
- Conducting internal research and analytics to enhance our services
3.5 Marketing and Communications
- Sending promotional offers, bonus announcements, and marketing communications (only with your consent)
- Notifying you about new games, features, and platform updates
- Delivering VIP program benefits and tier upgrade notifications
- Conducting customer satisfaction surveys (optional participation)
You may opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in any promotional email. Note that you will still receive essential service communications (e.g., transaction confirmations, security alerts, account status changes) regardless of marketing preferences.
3.6 Legal Compliance
- Complying with applicable Indonesian laws and international gaming regulations
- Responding to lawful requests from government authorities, law enforcement, or regulatory bodies
- Enforcing our Terms and Conditions and other legal agreements
- Protecting score8's legal rights and defending against claims
- Maintaining records as required by licensing authorities
4. Data Sharing and Disclosure
score8 respects your privacy and does not sell your personal information to third parties. However, we may share your data in the following limited circumstances:
4.1 Service Providers and Business Partners
We share necessary information with trusted third-party service providers who assist in operating our platform:
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals.
- Identity Verification Providers: KYC and AML compliance services that verify your identity documents and screen for fraud or sanctions.
- Game Providers: Software suppliers such as Pragmatic Play, PG Soft, Microgaming, NetEnt, Evolution Gaming, and Asia Gaming who power our casino games and live dealer tables.
- Sports Data Providers: Third-party services that supply real-time odds, scores, and event data for bet settlement.
- Cloud Hosting and IT Infrastructure: Secure server and database hosting providers that store platform data with appropriate security measures.
- Customer Support Tools: Live chat and ticketing systems used by our Indonesian-speaking support team.
- Analytics and Performance Monitoring: Services that help us analyze website performance and user behavior (with data anonymization where possible).
All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable privacy regulations. We conduct due diligence on all partners to ensure appropriate security standards.
4.2 Legal Requirements and Protection
score8 may disclose your information when required by law or when necessary to protect our legal interests:
- In response to valid legal requests from Indonesian government authorities, law enforcement agencies, or regulatory bodies
- To comply with court orders, subpoenas, or other legal processes
- To investigate or prevent illegal activity, fraud, or violations of our Terms and Conditions
- To protect the rights, property, or safety of score8, our users, or the public
- In connection with anti-money laundering investigations or suspicious activity reporting
4.3 Business Transfers
In the event that score8 undergoes a business transition such as a merger, acquisition, sale of assets, or reorganization, your personal information may be transferred to the successor entity. We will provide notice of any such change and ensure the new entity honors this Privacy Policy.
4.4 With Your Consent
In circumstances not covered above, we will seek your explicit consent before sharing your personal information with third parties.
5. Data Security Measures
score8 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:
5.1 Technical Security Controls
- SSL/TLS Encryption: All data transmitted between your device and score8 servers is encrypted using 256-bit Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
- Database Encryption: Personal information stored in our databases is encrypted at rest using industry-standard encryption algorithms.
- Secure Password Storage: User passwords are hashed using strong cryptographic algorithms (bcrypt or similar) and never stored in plain text.
- Firewall Protection: Multi-layer firewalls protect our servers from unauthorized network access and cyberattacks.
- Intrusion Detection Systems: Real-time monitoring systems detect and respond to potential security breaches.
- Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments on our platform.
- DDoS Protection: Distributed denial-of-service attack mitigation to ensure continuous service availability.
5.2 Organizational Security Practices
- Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis.
- Employee Training: All staff with access to user data receive regular privacy and security training.
- Confidentiality Agreements: Employees and contractors are bound by confidentiality obligations regarding user data.
- Secure Development Practices: Our development team follows secure coding standards to prevent vulnerabilities.
- Incident Response Plan: A documented procedure for responding to data breaches or security incidents, including user notification protocols.
- Data Segregation: Financial transaction data is segregated from other systems for enhanced security.
5.3 User Security Responsibilities
While score8 implements robust security measures, you also play a crucial role in protecting your account:
- Create a strong, unique password and never share it with anyone
- Enable two-factor authentication if offered
- Log out after each session, especially on shared devices
- Keep your registered email and phone number secure
- Report any suspicious account activity immediately to [email protected]
- Be cautious of phishing emails claiming to be from score8 (we never ask for passwords via email)
Data Breach Notification
In the unlikely event of a data breach affecting your personal information, score8 will notify you via email within 72 hours of becoming aware of the breach, in accordance with international privacy regulations. The notification will include details of what data was affected, the potential impact, and the steps we are taking to address the situation.
6. Data Retention
score8 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
6.1 Active Accounts
For active score8 accounts, we retain your personal information for the duration of your account relationship with us. This includes:
- Account registration data and identity verification documents
- Transaction history and betting records
- Communication records and support tickets
- Login history and usage data
6.2 Closed Accounts
When you close your score8 account (either voluntarily or through self-exclusion), we retain certain data for specific periods:
- Financial Records: Transaction history, deposits, and withdrawals are retained for a minimum of 7 years to comply with Indonesian tax laws and international anti-money laundering regulations.
- Identity Verification Documents: KYC documents are retained for 5 years after account closure for regulatory compliance and fraud prevention.
- Betting Records: Game history and bet settlement data are retained for 5 years for dispute resolution and regulatory audit purposes.
- Marketing Opt-Outs: Records of your marketing preferences are retained indefinitely to honor your request not to receive promotional communications.
- Self-Exclusion Records: Self-exclusion data is retained permanently to prevent account reopening during the exclusion period and for responsible gaming compliance.
6.3 Inactive Accounts
If your account has been inactive (no login or transactions) for 12 consecutive months, we may contact you to confirm whether you wish to keep the account active. After 24 months of inactivity, we may close the account and apply the closed account retention policies outlined above.
6.4 Data Deletion
After the applicable retention periods expire, personal information is securely deleted or anonymized such that it can no longer identify you. This includes overwriting data on storage devices and ensuring backup copies are also removed.
7. Your Privacy Rights
As a score8 user, you have the following rights regarding your personal information:
7.1 Right to Access
You have the right to request a copy of the personal information we hold about you. This includes account data, transaction history, betting records, and communication logs. You can access most of this information directly through your account dashboard. For a comprehensive data export, contact our support team.
7.2 Right to Rectification
If any of your personal information is inaccurate or incomplete, you have the right to request corrections. You can update your contact details, address, and preferences through your account settings. For changes to your name or identity documents, contact customer support with updated documentation.
7.3 Right to Erasure (Right to be Forgotten)
You may request deletion of your personal information in certain circumstances, such as when:
- The data is no longer necessary for the purposes for which it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Note that we may not be able to delete all data immediately if we have a legal obligation to retain it (e.g., financial records for tax purposes, anti-money laundering compliance). In such cases, we will restrict processing to the minimum necessary for compliance.
7.4 Right to Restriction of Processing
You may request that we limit how we use your personal information in specific situations, such as while we verify the accuracy of disputed data or assess your objection to processing.
7.5 Right to Data Portability
You have the right to receive your personal information in a structured, commonly used, and machine-readable format (e.g., CSV or JSON) and to transmit that data to another service provider where technically feasible.
7.6 Right to Object
You may object to processing of your personal information for direct marketing purposes at any time. Simply adjust your marketing preferences in your account settings or click "unsubscribe" in any promotional email. For objections to other types of processing, please contact us with your specific concerns.
7.7 Right to Withdraw Consent
Where we process your personal information based on consent (e.g., for certain marketing activities), you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing conducted before withdrawal.
7.8 Right to Lodge a Complaint
If you believe score8 has violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In Indonesia, this would be Kominfo (Kementerian Komunikasi dan Informatika) or other applicable regulatory bodies.
7.9 Exercising Your Rights
To exercise any of these privacy rights, please contact us at:
- Email: [email protected] with subject line "Privacy Rights Request"
- Live Chat: Available 24/7 through the website
We will respond to all valid requests within 30 days. For complex requests or high volumes, we may extend this period by an additional 60 days with notification. We may request additional information to verify your identity before fulfilling your request.
8. Cookies and Tracking Technologies
score8 uses cookies and similar tracking technologies to enhance your experience, analyze platform performance, and deliver personalized content.
8.1 What Are Cookies?
Cookies are small text files stored on your device by your web browser when you visit a website. They contain information that allows the website to remember your preferences and recognize you on subsequent visits.
8.2 Types of Cookies We Use
- Essential Cookies: Required for the website to function properly. These enable core features like account login, session management, and secure transaction processing. You cannot opt out of essential cookies.
- Performance Cookies: Collect anonymous data about how visitors use the website, such as which pages are most visited and error messages encountered. This helps us improve platform performance.
- Functionality Cookies: Remember your preferences (e.g., language selection, favorite game filters) to provide a personalized experience.
- Targeting/Advertising Cookies: Track your activity across the website to deliver relevant promotional offers and personalized game recommendations based on your interests.
8.3 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, please note that disabling essential cookies may impair website functionality and prevent you from accessing certain features.
8.4 Other Tracking Technologies
In addition to cookies, score8 may use:
- Web Beacons (Pixel Tags): Small transparent images embedded in web pages or emails to track page views and email opens.
- Local Storage: HTML5 local storage to save preferences and enhance performance.
- Device Fingerprinting: Collecting device characteristics for fraud prevention and security purposes.
9. International Data Transfers
score8 operates as an international platform and may transfer your personal information to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place:
- Transferring data only to countries with adequate data protection laws recognized by international standards
- Using standard contractual clauses approved by regulatory authorities
- Ensuring service providers implement appropriate technical and organizational security measures
- Conducting due diligence on all international partners
By using score8, you consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or how score8 handles your personal information, please contact us:
- Email: [email protected]
- Live Chat: Available 24/7 through the website with Indonesian and English language support
- Operating Hours: Customer support operates 24 hours a day, 7 days a week on Western Indonesia Time (WIB, UTC+7)
We are committed to resolving privacy concerns promptly and transparently. Our support team will respond to all privacy-related inquiries within 48 hours.
Policy Updates
score8 reserves the right to update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email to your registered address and prominently displayed on our website. The "Last Updated" date at the top of this document indicates when the most recent revision was made. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your data.
By continuing to use score8 after changes to this Privacy Policy are published, you acknowledge acceptance of the updated terms. If you do not agree with any changes, you may close your account by contacting customer support. This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy.