Privacy Policy

1 Definitions

The following definitions apply throughout this Privacy Policy:

"Platform"The fit188 website at https://fit188.cam and any associated interfaces, applications, or services offered by fit188.

"Personal Data"Any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data — including name, email address, phone number, national ID number, IP address, and device identifiers.

"Processing"Any operation performed on Personal Data — including collection, storage, retrieval, use, disclosure, alteration, and deletion.

"Data Controller"fit188, the entity that determines the purposes and means of processing Personal Data collected through the Platform.

"Data Processor"A third-party entity that processes Personal Data on behalf of fit188, under contractual obligation and with strictly limited permissions — such as payment processors, KYC verification providers, and game studios.

"You / Player"Any individual who accesses, registers on, or otherwise uses the fit188 Platform.

"Cookies"Small text files stored on your device by your web browser when you visit the Platform, used to remember preferences and support analytical functions.

"KYC"Know Your Customer — the identity and address verification process required by fit188 before withdrawal requests are processed.

"IDR / Rp"Indonesian Rupiah — the sole transactional currency accepted on the fit188 Platform.

2 Scope & Application

This Privacy Policy applies to all Personal Data collected by fit188 in connection with your use of the Platform, regardless of whether you are a registered Account holder or a visitor browsing without an Account.

This Policy covers data collected through:

The fit188 website at https://fit188.cam and all sub-pages.
The Account registration and KYC verification processes.
Deposit, withdrawal, and wagering transactions conducted on the Platform.
Customer support interactions via live chat or email.
Promotional campaigns, surveys, or competitions hosted or co-hosted by fit188.
Automated technical data collection (server logs, cookies, analytics tools) when you browse the Platform.

By registering an Account or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood the data practices described herein.

Indonesia Market Context: fit188 primarily serves players based in Indonesia, including those located in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and other cities. Indonesian players' data is handled with the same level of care and security applied globally across fit188's operations.

3 Data We Collect

fit188 collects the following categories of Personal Data from players:

3.1 Account Registration Data

Full legal name (as it appears on your government-issued ID)
Date of birth (to verify the 21+ age requirement)
Indonesian national ID number (NIK, from your KTP)
Residential address
Email address and phone number
Username and encrypted password hash

3.2 KYC Verification Data

Photograph or scan of your KTP (Indonesian national identity card) or valid passport
Proof of address document (utility bill or bank statement, not older than 90 days)
Payment method evidence (screenshot or statement showing your name and BCA / BRI / BNI / Mandiri / OVO / DANA account details)
Source of funds documentation where required for large withdrawal requests

3.3 Transactional Data

Deposit and withdrawal amounts, timestamps, and payment method references
Wagering history including game type, stake amount, outcome, and settlement time
Bonus claims, promotional participation records, and wagering progress

3.4 Technical & Device Data

IP address and approximate geographic location (city/region level)
Browser type, version, and operating system
Device type (desktop, mobile, tablet) and screen resolution
Session duration, pages visited, and clickstream data
Cookie identifiers and similar tracking technologies (see Section 9)

3.5 Communication Data

Records of live chat sessions, email correspondence, and support ticket content
Any information you voluntarily provide when submitting a complaint, feedback, or data rights request

fit188 does not collect sensitive special-category data (such as racial or ethnic origin, religious beliefs, or health data) and does not require you to provide such information at any point.

4 How We Use Your Data

fit188 uses the Personal Data we collect for the following purposes:

Purpose	Data Categories Used
Account creation and management	Registration data, email, phone number
Identity verification (KYC)	KYC documents, registration data
Processing deposits and withdrawals	Transactional data, payment method evidence
Fraud prevention and AML compliance	All data categories, IP address, device data
Responsible gaming monitoring	Wagering history, session data, communication records
Customer support delivery	Communication data, account data
Platform analytics and improvement	Technical data, clickstream data, session duration
Promotional and bonus administration	Transactional data, bonus claim records
Marketing communications (opt-in only)	Email address, phone number, wagering preferences
Legal and regulatory obligations	All data categories as required by applicable law

fit188 will not use your Personal Data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

5 Legal Basis for Processing

fit188 processes your Personal Data on the following legal grounds:

Contractual Necessity. Processing is required to perform our obligations under the Player Account agreement — including Account management, payment processing, KYC verification, and game delivery.
Legitimate Interests. Processing is necessary for fit188's legitimate business i nterests — including fraud detection, security monitoring, platform analytics, responsible gaming oversight, and service improvement — provided these interests are not overridden by your privacy rights.
Legal Obligation. Processing is required to comply with applicable anti-money-laundering (AML) regulations, international gaming license conditions, and other legal obligations to which fit188 is subject.
Consent. For optional activities such as marketing communications and non-essential cookies, fit188 relies on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

fit188 does not sell your Personal Data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and under binding contractual data protection obligations:

Payment Processors. BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja receive transaction references and account identifiers necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are not permitted to use your data for any purpose beyond payment processing.
KYC & Identity Verification Providers. fit188 may engage third-party identity verification services to authenticate KYC documents. These providers are contractually bound to process your documents solely for verification purposes and to delete them upon completion of the verification workflow.
Game Content Studios. Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe receive anonymized session identifiers necessary to deliver game content and record outcomes. They do not receive your full personal profile.
Analytics Providers. fit188 uses analytics tools to understand Platform usage patterns. Where such tools process Personal Data, they do so under data processing agreements that restrict use to analytics purposes only.
Regulatory and Legal Authorities. fit188 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required by law, court order, or our international gaming license obligations. We will notify you of such disclosures where legally permitted to do so.
Business Transfers. In the event of a merger, acquisition, or asset sale involving fit188, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it, with a minimum of 30 days' notice prior to the transfer taking effect.

No Third-Party Marketing: fit188 will never share your Personal Data with third-party advertisers, marketing agencies, or data brokers for the purpose of targeting you with advertisements unrelated to fit188's own services.

7 Data Retention

fit188 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of Account + 5 years post-closure	AML compliance and dispute resolution
KYC documents	Duration of Account + 5 years post-closure	Regulatory obligation under gaming license conditions
Transaction records	7 years from transaction date	Financial record-keeping and AML requirements
Wagering history	Duration of Account + 2 years post-closure	Bonus audit, responsible gaming monitoring
Support communications	3 years from last interaction	Quality assurance and dispute evidence
Technical / device data	13 months from collection	Analytics and fraud detection
Marketing consent records	Until consent is withdrawn + 1 year	Proof of lawful marketing basis

Upon expiry of the applicable retention period, your data will be securely deleted or irreversibly anonymized so that it can no longer be linked to you as an individual.

8 Security Measures

fit188 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, and disclosure:

Encryption in Transit. All data transmitted between your browser and fit188's servers is encrypted using TLS 1.3 with 256-bit AES encryption. The Platform operates exclusively over HTTPS.
Encryption at Rest. Sensitive fields in fit188's databases — including password hashes, KYC document references, and financial identifiers — are encrypted at rest using AES-256.
Access Controls. fit188 enforces strict role-based access controls (RBAC) on all internal systems. Staff members can only access the Personal Data categories necessary for their specific job function, and all access events are logged and audited.
Two-Factor Authentication. Internal system access for fit188 staff requires multi-factor authentication. We also encourage all players to enable 2FA on their Accounts via Account Settings.
Penetration Testing. fit188's platform and infrastructure undergo regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
Incident Response. In the event of a data security incident that materially affects your Personal Data, fit188 will notify affected players within 72 hours of becoming aware of the breach, and will detail the nature of the incident, the data affected, and the remedial steps taken.

While fit188 takes every reasonable precaution to protect your data, no internet-based system can be guaranteed to be 100% secure. You also have a role to play — keep your Account password unique and strong, enable 2FA, and never share your login credentials with anyone.

9 Cookies & Tracking Technologies

fit188 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyze how players use the site. The following cookie categories are used:

Cookie Type	Purpose	Consent Required?
Strictly Necessary	Session management, login authentication, security tokens, load balancing	No — essential for Platform operation
Functional	Language preferences, game lobby layout preferences, currency display settings	No — required for core functionality
Analytical	Page view counts, session duration, feature usage patterns — used to improve the Platform	Yes — opt-in via preferences
Marketing	Tracking promotional campaign performance, retargeting (fit188 campaigns only)	Yes — opt-in via preferences

You can manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will affect the Platform's ability to function correctly. Disabling analytical or marketing cookies will not prevent you from using any core Platform features.

fit188 does not use cookies to track your activity on third-party websites, nor does it share cookie data with external advertising networks for purposes unrelated to fit188's own platform.

10 Your Privacy Rights

As a fit188 player, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 calendar days of receiving a valid request.

Right of Access Request a copy of all Personal Data fit188 holds about you, along with information on how it is being processed.

Right to Rectification Request correction of any inaccurate or incomplete Personal Data held on your Account without undue delay.

Right to Erasure Request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.

Right to Restriction Request that we restrict the processing of your data while a rectification or objection request is being assessed.

Right to Portability Request that we provide your Personal Data in a structured, machine-readable format so you can transfer it to another service provider.

Right to Object Object to processing based on legitimate interests or for direct marketing purposes at any time. Marketing opt-outs take effect within 5 business days.

Right to Withdraw Consent Withdraw consent for any consent-based processing (e.g., marketing emails, analytical cookies) at any time without affecting prior lawful processing.

Right to Lodge a Complaint If you believe your privacy rights have been violated, you may raise a formal complaint with fit188 support or with the relevant data protection authority in your jurisdiction.

11 Protection of Minors

fit188 enforces a strict minimum age requirement of 21 years for all registered players. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 21.

Age verification is conducted as part of the KYC process for all Accounts before withdrawal requests are processed. If fit188 discovers or reasonably suspects that an Account is being used by a person under 21 years of age, the following steps will be taken immediately:

The Account will be suspended and access to the Platform will be blocked.
All pending wagers will be voided and any deposited funds will be returned to the original payment source.
All Personal Data associated with the underage Account will be securely deleted, except where retention is required for fraud prevention or legal purposes.
The incident will be logged and, where required by our gaming license conditions, reported to the relevant regulatory authority.

If you are a parent or guardian and believe that a minor in your care has registered an Account on fit188, please contact our support team immediately at [email protected]. We will investigate and act within 24 hours of receiving your report.

12 International Data Transfers

fit188 operates internationally, and your Personal Data may be transferred to and processed in countries other than Indonesia — including the jurisdiction in which fit188 holds its offshore gaming license and the locations of our third-party Data Processors (game studios, KYC providers, analytics services).

Where such international transfers occur, fit188 ensures that adequate safeguards are in place to protect your data, including:

Binding contractual clauses with all Data Processors that mirror the data protection standards described in this Policy.
Transfers only to jurisdictions or entities that provide a comparable level of data protection to that applied by fit188.
Regular review of international data transfer arrangements to ensure ongoing compliance with evolving data protection standards.

Note for Indonesian Players: By registering an Account on fit188, you consent to the transfer of your Personal Data to fit188's international processing locations as described in this section. You may withdraw this consent by closing your Account, subject to fit188's legal retention obligations set out in Section 7.

13 Policy Amendments

fit188 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will:

Update the "Last Updated" date displayed at the top of this page.
Send a notification to your registered email address at least 14 days before material changes take effect, summarizing the key updates.
Display a prominent notice on the Platform for a period of at least 30 days following the publication of significant revisions.

Minor clarifications or administrative corrections that do not affect your rights or the way we process your data may be made without prior notice. We encourage you to review this Privacy Policy periodically to stay informed of how fit188 protects your information.

Your continued use of the Platform after any amended Privacy Policy takes effect constitutes your acceptance of those changes. If you do not accept the revised Policy, you should cease using the Platform and contact support to close your Account.

14 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to report a potential data protection concern, please reach out to the fit188 support team through the following channel:

Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform. Our support agents include Indonesian-speaking staff to assist players across Jakarta, Surabaya, Bandung, Bali, and all other regions of Indonesia.
Response Time: Data rights requests submitted by email are acknowledged within 5 business days and fully resolved within 30 calendar days. Urgent data security concerns raised via live chat are escalated immediately to our security team.

When submitting a data rights request, please include your registered Account username and the email address associated with your Account so we can verify your identity before processing the request.

For information on our overall terms of service, please review our Terms & Conditions. For guidance on responsible gambling tools available to fit188 players, visit our Responsible Gaming page.

Privacy at a Glance

256-Bit SSL Encryption

No Data Selling

You Control Your Data

Secure Data Storage

Payment Data Protection

Marketing Opt-Out

Table of Contents