Last Updated: January 15, 2026

1. Introduction

This Privacy Policy describes how roma88 ("we", "us", or "our") collects, uses, processes, stores, and protects the personal information of users ("you", "your") who access and use our online sports betting and casino gaming platform at https://roma88.cam (the "Platform"). By creating an account and using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

roma88 operates as an international online gambling platform primarily serving players in Indonesia. We are committed to compliance with applicable international data protection standards and best practices, including principles similar to those outlined in the General Data Protection Regulation (GDPR) and other recognized privacy frameworks. While Indonesian data protection laws are still evolving, we voluntarily adopt stringent privacy measures to protect our users.

This Privacy Policy applies to all personal data collected through the roma88 website, mobile applications, customer support channels (live chat, email, WhatsApp), and any other touchpoints where you interact with our brand. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of roma88 services.

Our Commitment to Privacy

We understand that online gambling requires you to trust us with sensitive personal and financial information. We take this responsibility seriously and have implemented comprehensive security measures, strict access controls, and transparent data practices to earn and maintain your trust. Your privacy is not just a legal obligation—it is a core value at roma88.

2. Information We Collect

To provide you with a secure, personalized, and legally compliant gambling experience, roma88 collects various types of personal information. The data we collect falls into three main categories:

2.1 Information You Provide Directly

When you register for a roma88 account, verify your identity, or interact with our customer support team, you voluntarily provide the following personal information:

  • Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address (including city, province, postal code), and preferred username.
  • Identity Verification Documents: Government-issued identification (KTP, national ID card, passport, or driver's license), proof of address (utility bill, bank statement, or rental agreement dated within the last 3 months), and in some cases, photographic verification (selfie holding your ID document). These documents are required for Know Your Customer (KYC) compliance and to prevent fraud, underage gambling, and money laundering.
  • Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs), transaction history, deposit amounts, withdrawal requests, and payment method preferences. We do not store full credit card numbers or CVV codes—these are handled securely by our certified payment processors.
  • Communication Data: Any information you provide when contacting customer support via live chat, email, or WhatsApp, including support ticket content, chat transcripts, attached files, and feedback surveys.
  • Marketing Preferences: Your consent or opt-out status for receiving promotional emails, SMS messages, push notifications, and other marketing communications from roma88.

2.2 Information Collected Automatically

When you access and use the roma88 platform, we automatically collect certain technical and behavioral data through cookies, log files, and similar tracking technologies:

  • Device Information: IP address, device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, MacOS), browser type and version, screen resolution, device identifiers (IMEI, Android ID, IDFA), and mobile network operator.
  • Usage Data: Pages viewed, features accessed, time spent on each page, click patterns, navigation paths, referring URLs, search queries entered on the roma88 platform, and app events (button clicks, form submissions, game launches).
  • Betting Activity: Sports bets placed (markets selected, odds, stake amounts), casino games played (game titles, bet sizes, session duration), togel number selections, live dealer table interactions, win/loss history, bonus usage, and wagering progress toward promotional requirements.
  • Location Data: Approximate geographic location derived from your IP address (city and region level, not precise GPS coordinates). This helps us comply with geographic restrictions and provide localized content (e.g., displaying BRI Liga 1 prominently for Indonesian users).

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

  • Payment Processors: Confirmation of successful deposits and withdrawals, transaction IDs, and payment status updates from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
  • Fraud Prevention Services: Risk scores, device fingerprints, and identity verification results from specialized security vendors to detect fraudulent accounts, stolen payment methods, and suspicious betting patterns.
  • Affiliate Partners: If you registered through an affiliate link, we may receive referral tracking information (but not additional personal data) to attribute your account properly and calculate affiliate commissions.

3. How We Use Your Data

roma88 processes your personal information for specific, legitimate business purposes that are necessary to provide our services, comply with legal obligations, and enhance your gaming experience. We use your data for the following purposes:

3.1 Account Management and Service Delivery

  • Create and maintain your roma88 user account
  • Verify your identity and age (21+ enforcement) through KYC procedures
  • Process deposits, withdrawals, and all financial transactions
  • Enable you to place bets on sports markets, play casino games, and participate in togel draws
  • Track your betting history, game play, and account balance
  • Apply bonuses, promotions, and loyalty rewards to your account
  • Provide customer support via live chat, email, and WhatsApp

3.2 Security, Fraud Prevention, and Compliance

  • Detect and prevent fraudulent accounts, identity theft, payment fraud, and unauthorized access
  • Monitor betting patterns for signs of match-fixing, arbitrage abuse, bonus abuse, or collusion
  • Comply with anti-money laundering (AML) regulations and counter-terrorism financing (CTF) requirements
  • Enforce our Terms & Conditions, including prohibition of underage gambling, multiple accounts, and geographic restrictions
  • Investigate disputes, rule violations, and suspicious activity
  • Maintain audit logs and transaction records as required by our licensing authority

3.3 Platform Improvement and Personalization

  • Analyze user behavior to improve platform usability, navigation, and feature design
  • Personalize your experience by displaying relevant sports markets (e.g., prioritizing BRI Liga 1 and EPL for Indonesian users), recommending games based on your play history, and tailoring promotions to your preferences
  • Optimize website and app performance, fix bugs, and enhance mobile responsiveness
  • Conduct A/B testing of new features, layouts, and promotional offers

3.4 Marketing and Communication

  • Send you promotional emails, SMS messages, and push notifications about new games, bonus offers, tournament updates, and special events (only with your consent, which you can withdraw at any time)
  • Notify you of important account updates, security alerts, policy changes, and withdrawal confirmations
  • Request feedback through surveys to improve our services

3.5 Legal Obligations and Dispute Resolution

  • Respond to lawful requests from government authorities, law enforcement, or regulatory bodies
  • Defend legal claims, enforce our rights, and protect against liability
  • Resolve disputes between players or between players and roma88
Legal Basis for Processing

Under international privacy standards, we process your data based on the following legal grounds: (a) Contractual Necessity — processing is required to fulfill our agreement to provide gambling services; (b) Legal Compliance — processing is necessary to meet AML, KYC, and licensing obligations; (c) Legitimate Interests — processing is necessary for fraud prevention, security, and service improvement, balanced against your privacy rights; (d) Consent — you have explicitly agreed to marketing communications or optional data collection.

4. Data Sharing & Disclosure

roma88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with trusted partners and service providers in the following limited circumstances:

4.1 Service Providers and Vendors

We engage third-party companies to perform specific functions on our behalf, and these vendors may have access to your personal data only to the extent necessary to perform their duties. Service providers include:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay), and payment gateway operators that facilitate deposits and withdrawals.
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and other studios that supply our casino games and sports betting software. These providers may log your game sessions for fairness audits and RNG verification.
  • Cloud Hosting: Secure server providers that host the roma88 platform and database infrastructure.
  • Customer Support Tools: Live chat software, ticketing systems, and CRM platforms used to manage support requests.
  • Fraud Prevention: Identity verification services, device fingerprinting tools, and fraud detection algorithms.
  • Marketing Services: Email delivery platforms and SMS providers (only for users who have opted in to marketing).

All service providers are contractually obligated to protect your data, use it only for the specified purpose, and comply with applicable privacy laws.

4.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, courts, or regulatory bodies if required by law or in response to valid legal requests, including:

  • Compliance with court orders, subpoenas, or search warrants
  • Investigation of suspected criminal activity, fraud, or money laundering
  • Protection of roma88's legal rights or defense against legal claims
  • Enforcement of our Terms & Conditions or investigation of Terms violations

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy.

4.4 Anonymized and Aggregated Data

We may share anonymized, aggregated data that does not identify individual users with business partners, advertisers, or researchers for industry analysis, marketing insights, and trend reporting. For example, we might share statistics like "70% of Indonesian users prefer football betting over casino games" without revealing any personal identifiers.

5. Data Security

roma88 employs comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

5.1 Encryption and Secure Transmission

  • SSL/TLS Encryption: All data transmitted between your device and roma88 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same standard used by banks and financial institutions. Look for the padlock icon in your browser address bar.
  • Encrypted Storage: Sensitive data such as passwords and financial information is encrypted at rest using industry-standard algorithms.

5.2 Access Controls

  • Access to personal data is restricted to authorized roma88 employees and contractors who require it to perform their job functions.
  • All staff members sign confidentiality agreements and receive privacy training.
  • We employ role-based access controls (RBAC) and multi-factor authentication for internal systems.

5.3 Security Monitoring

  • 24/7 monitoring of network traffic for signs of intrusion, hacking attempts, or data breaches.
  • Regular security audits and penetration testing by independent third-party security firms.
  • Automated alerts for suspicious login attempts, unusual withdrawal requests, and abnormal betting patterns.

5.4 Password Security

  • Passwords are hashed using bcrypt or similar strong one-way algorithms—we never store plain-text passwords.
  • We enforce minimum password strength requirements (length, complexity).
  • Optional two-factor authentication (2FA) adds an extra layer of account protection.
Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account. Never share your username or password with anyone, avoid using public Wi-Fi for financial transactions, log out after each session, and enable 2FA. If you suspect unauthorized access, change your password immediately and contact customer support.

6. Data Retention

roma88 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

6.1 Active Accounts

While your account remains active, we retain all account data, transaction history, betting records, and communication logs to provide ongoing services and customer support.

6.2 Closed Accounts

When you close your roma88 account voluntarily, we retain core account information (name, email, transaction records) for a minimum of 7 years to comply with anti-money laundering regulations, tax reporting requirements, and licensing obligations. After this period, data is securely deleted unless longer retention is required by law.

6.3 Suspended or Banned Accounts

Accounts suspended or permanently banned for Terms violations, fraud, or abuse are retained indefinitely to prevent re-registration and protect platform integrity.

6.4 Marketing Data

If you opt out of marketing communications, we retain your email address and opt-out preference indefinitely to ensure we do not contact you again. We delete all other marketing-related data within 30 days of opt-out.

6.5 Secure Deletion

When data is no longer required, we securely delete or anonymize it using industry-standard methods including cryptographic erasure, data overwriting, and physical destruction of backup media.

7. Your Privacy Rights

You have certain rights regarding your personal data held by roma88. While Indonesian law does not yet provide comprehensive data subject rights similar to the GDPR, we voluntarily extend the following rights to all users:

7.1 Right to Access

You have the right to request a copy of the personal data we hold about you. Contact our customer support team to request a data export, which will be provided in a structured, machine-readable format (typically CSV or JSON) within 30 days.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings or by contacting support.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when data is no longer necessary for the purposes collected or when you withdraw consent. However, we may retain data where required by law (e.g., AML compliance) or to defend legal claims.

7.4 Right to Restrict Processing

You may request that we limit how we use your data in specific situations, such as while disputing data accuracy or contesting the legal basis for processing.

7.5 Right to Data Portability

You can request that we transfer your data to another service provider in a portable format where technically feasible.

7.6 Right to Object

You can object to processing based on legitimate interests (e.g., marketing communications). We will cease processing unless we have compelling legitimate grounds that override your interests.

7.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you can withdraw consent at any time by clicking unsubscribe links or adjusting your account preferences.

To exercise any of these rights, contact us at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days and may request identity verification to protect your security.

8. Cookies & Tracking Technologies

roma88 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

Types of Cookies We Use

  • Essential Cookies: Required for basic platform functionality including login, session management, and security. These cannot be disabled without impairing site functionality.
  • Performance Cookies: Collect anonymous data on page load times, error rates, and user navigation to help us optimize performance.
  • Functional Cookies: Remember your preferences (language, region, display settings) to personalize your experience.
  • Analytics Cookies: Track aggregate user behavior (page views, session duration, bounce rates) using tools like Google Analytics to improve our platform.
  • Marketing Cookies: Track your activity across websites to deliver targeted advertisements and measure campaign effectiveness.

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit platform functionality. Most browsers accept cookies by default, but you can adjust settings to refuse cookies or receive alerts when cookies are being sent.

9. Third-Party Links

The roma88 platform may contain links to third-party websites (e.g., game provider sites, payment processor portals, social media pages). We are not responsible for the privacy practices or content of these external sites. This Privacy Policy applies only to information collected by roma88. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Privacy Policy

roma88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email (to the address on file) and display a prominent notice on the roma88 homepage. The "Last Updated" date at the top of this document indicates when the policy was most recently revised.

Continued use of the roma88 platform after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Team:

  • Email: [email protected] (use subject line "Privacy Inquiry")
  • Live Chat: Available 24/7 via the roma88 website and mobile app
  • WhatsApp: Available upon request through live chat

We are committed to addressing your privacy concerns promptly and transparently. Our support team operates in English and Bahasa Indonesia with average response times under 24 hours for privacy-related inquiries.

Acknowledgment

By using the roma88 platform, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

Our Privacy Protection Measures

256-bit SSL Encryption

Bank-grade encryption protects all data transmitted between your device and roma88 servers, ensuring your personal and financial information remains confidential.

Strict Access Controls

Only authorized personnel with legitimate business needs can access your data, and all access is logged and monitored for security audits.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data stays within the roma88 ecosystem.

Regular Security Audits

Independent third-party security experts conduct penetration testing and vulnerability assessments to identify and fix potential weaknesses.

Your Data Rights

Access, rectify, or delete your personal data at any time through simple requests to our support team. We respect your control over your information.

Transparent Retention

Clear data retention policies ensure we keep your information only as long as necessary for legal compliance and service delivery.

Questions About Your Privacy?

Our dedicated support team is available 24/7 to answer any privacy-related questions and help you exercise your data rights.

View FAQ Read Terms & Conditions