navi88 takes the protection of your personal data seriously. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used and stored, and what rights you hold over your own data as a member of our platform. Please read this document carefully before registering or making a deposit.
Summary
The six points below are a plain-English summary of navi88's core data protection commitments. They do not replace the full Privacy Policy — please read each section in full for complete information.
Every connection between your device and navi88 is protected by industry-standard 256-bit SSL encryption. Your login credentials, KYC documents, and IDR transaction data are transmitted securely and are never exposed in transit.
navi88 collects only the personal data that is strictly necessary to operate your account, process IDR transactions, and fulfil regulatory KYC and AML obligations. We do not collect data speculatively or beyond what is required for these stated purposes.
navi88 does not sell, rent, or trade your personal data to any third-party advertiser, data broker, or marketing network under any circumstances. Your information is used solely to provide, maintain, and improve the navi88 platform and to meet our legal obligations.
You have the right to request a copy of all personal data navi88 holds about you, to correct inaccuracies, and — subject to regulatory retention requirements — to request deletion of your data. Submit a Data Subject Access Request (DSAR) to our support team at any time.
navi88 uses only strictly necessary, functional, and anonymised analytical cookies. We do not deploy third-party advertising trackers, retargeting pixels, or cross-site profiling technologies. You can review and manage cookie preferences at any time via your browser settings.
Our customer support team handles privacy-related requests — including DSARs, marketing opt-outs, and data correction — with priority routing 24 hours a day, 7 days a week. All support is available in English and Indonesian, aligned to WIB (UTC+7) business hours for escalations.
In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:
navi88 is the sole Data Controller for all Personal Data collected, processed, and stored in connection with your use of the Platform. As Data Controller, navi88 is responsible for determining the purposes for which your Personal Data is used and ensuring that appropriate technical and organisational measures are in place to protect it.
navi88 operates the Platform under internationally recognised data protection standards. While online gambling is subject to legal restrictions in certain jurisdictions, navi88 applies privacy protections aligned with widely accepted international data privacy frameworks in its treatment of all members' Personal Data, regardless of the member's country of residence.
For any questions relating to data controller responsibilities, or to exercise any of your rights described in Section 8 of this Policy, please contact us using the details set out in Section 14. All data-related correspondence will be handled by our dedicated privacy team and responded to within the timeframes set out in Section 8.
navi88 collects Personal Data through several channels in the course of operating the Platform. The categories of data we collect, and the context in which each is gathered, are described below.
3.1 Registration Data. When you create a navi88 account, we collect: your full legal name, date of birth, email address, username, and the password you set (stored in hashed, non-reversible form). This data is required to establish and maintain your account identity.
3.2 KYC Verification Data. To comply with age-verification and AML obligations, navi88 requires members to submit identity documents before full account privileges are granted. KYC documents typically include:
3.3 Financial Transaction Data. When you make a deposit or request a withdrawal in Indonesian Rupiah (IDR/Rp) via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja, navi88 records the transaction amount, timestamp, payment channel, and the masked account or wallet identifier. Full bank account numbers are never stored in navi88's primary database.
3.4 Gameplay and Betting Data. navi88 records a complete history of all wagers placed, games played, bet amounts, outcomes, and bonus activity associated with your account. This data is used for account administration, dispute resolution, regulatory reporting, and responsible gaming monitoring.
3.5 Technical and Device Data. When you access the Platform, our servers automatically log: your IP address, browser type and version, operating system, device type, screen resolution, session duration, pages visited, referral URL, and clickstream data. This information is collected via server logs and first-party cookies (see Section 9).
3.6 Communications Data. If you contact navi88 customer support by email or live chat, we retain the content of those communications — including attachments — for quality assurance, training, and dispute resolution purposes. Support communications are stored for a minimum of 12 months from the date of the interaction.
3.7 Marketing Preferences. Where you have opted in to marketing communications, navi88 records your consent, the date and method of consent, and your stated preferences. This allows us to tailor promotions to your interests and to maintain accurate opt-in/opt-out records.
navi88 uses your Personal Data only for the purposes described in this Policy. The primary purposes for which your data is processed are set out below:
navi88 does not use your Personal Data for automated decision-making that produces significant legal effects on you without human review. Where automated screening produces a flag — for example, during AML checks or duplicate account detection — a member of navi88's compliance team will review the flagged case before any account action is taken.
navi88 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
6.1 We Do Not Sell Your Data. navi88 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. This commitment is unconditional and applies regardless of the jurisdiction in which you are located.
6.2 Service Providers (Data Processors). navi88 engages carefully vetted third-party service providers who process Personal Data solely on navi88's behalf and under binding data processing agreements. These providers include:
6.3 Legal and Regulatory Disclosure. navi88 may disclose Personal Data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, a valid court order, or a binding regulatory directive. navi88 will, where legally permitted, notify the affected member of any such disclosure request.
6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of navi88's assets, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy commitments applicable to your data under the new entity at least 30 days before the transfer takes effect.
6.5 No Sharing with Advertising Networks. navi88 does not share your Personal Data — including device identifiers, IP addresses, or behavioural data — with any third-party advertising network, social media platform, or data broker for the purpose of targeted advertising or audience profiling.
navi88 retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. The following retention principles apply:
Where Personal Data is no longer required for any active purpose and no regulatory retention obligation applies, navi88 will securely delete or irreversibly anonymise it in accordance with its internal data lifecycle management procedures.
As a member of navi88, you hold the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered username and a clear description of the right you wish to exercise.
| Right | What It Means | Response Time |
|---|---|---|
| Access (DSAR) | Receive a copy of all Personal Data navi88 holds about you, in a structured and readable format. | Within 30 days |
| Rectification | Request correction of any inaccurate or incomplete Personal Data held on your account. | Within 14 days |
| Erasure | Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations. | Within 30 days |
| Restriction | Request that navi88 restrict processing of your data while an accuracy dispute or objection is being resolved. | Within 14 days |
| Portability | Receive your registration and account data in a machine-readable format (CSV or JSON) for transfer to another service. | Within 30 days |
| Objection | Object to processing based on legitimate interests. navi88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests. | Within 30 days |
| Withdraw Consent | Withdraw consent for marketing communications or non-essential cookies at any time. Withdrawal does not affect the lawfulness of prior processing. | Within 5 days |
navi88 will not charge a fee for processing any privacy rights request. We may request reasonable proof of identity before processing a DSAR or erasure request to ensure we are responding to the correct data subject. Where a request is manifestly unfounded or excessive, navi88 reserves the right to refuse it, with written reasons provided.
navi88 uses a limited set of cookies and similar technologies to operate the Platform securely and to understand how members use our services. We do not deploy advertising cookies, retargeting pixels, or cross-site tracking technologies of any kind.
The cookies used on navi88 fall into the following categories:
navi88 does not use or permit third-party advertising cookies, Facebook Pixel, Google Ads remarketing tags, or any equivalent technology on the Platform.
You can manage or delete cookies at any time through your browser's settings. Disabling functional or analytical cookies will not prevent you from using the Platform, but may affect your experience of certain features. Disabling strictly necessary cookies will prevent the Platform from operating correctly.
10.1 Technical Measures. navi88 employs the following technical security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:
10.2 Organisational Measures. Access to Personal Data within navi88's internal systems is governed by strict role-based access controls. Only personnel with a documented operational need to access specific data categories are granted that access. All staff with access to member data are subject to confidentiality obligations and receive regular data protection training.
10.3 Data Breach Response. In the event of a confirmed data breach that is likely to result in a high risk to affected members, navi88 will notify impacted members without undue delay — and in any case within 72 hours of becoming aware of the breach — via the email address registered on their navi88 account. The notification will describe the nature of the breach, the categories of data affected, and the steps navi88 is taking to mitigate the impact.
10.4 Member Responsibility. The security of your account is a shared responsibility. You must maintain the confidentiality of your login credentials, use a strong and unique password, and notify navi88 immediately at [email protected] if you suspect unauthorised access to your account. navi88 will not be liable for any loss arising from your failure to maintain the security of your own credentials.
The navi88 Platform is strictly intended for adults aged 21 and above. navi88 does not knowingly collect Personal Data from any person under the age of 21. If navi88 becomes aware that it holds Personal Data relating to a person under 21, that data will be deleted immediately, the associated account will be suspended, and any deposited funds will be returned to source following investigation.
If you are a parent or guardian and believe that a minor has registered an account on navi88 or submitted Personal Data to our Platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". navi88 will investigate and respond within 24 hours.
We strongly encourage members who share devices or network connections with minors to use device-level parental controls to prevent accidental access to the Platform by anyone under the age of 21.
navi88 operates globally and may process or store Personal Data on servers located outside Indonesia. Where Personal Data is transferred to a country that does not provide a level of data protection equivalent to internationally recognised standards, navi88 ensures that appropriate safeguards are in place before the transfer occurs.
Safeguards used by navi88 for international data transfers include:
By registering an account on navi88, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia as described in this section. If you have questions about the international transfer safeguards navi88 applies, please contact us using the details in Section 14.
13.1 Right to Update. navi88 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect new data processing activities, changes in applicable law, improvements in our security practices, or feedback from members and regulators.
13.2 Notification of Material Changes. Where a proposed change materially affects your rights or the way navi88 uses your Personal Data, we will provide at least 14 days' advance notice via a prominent in-platform notification and an email to your registered address before the change takes effect. The updated effective date will always be displayed at the top of this page.
13.3 Minor Amendments. Non-material updates — such as typographical corrections, clarifications that do not alter the substance of the Policy, and administrative changes — may be made without advance notice and will take effect immediately upon publication.
13.4 Continued Use. Your continued use of the navi88 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised terms, you should cease using the Platform and contact support to request account closure.
For all privacy-related enquiries — including Data Subject Access Requests, requests to exercise any right listed in Section 8, questions about this Policy, or concerns about how navi88 handles your Personal Data — please contact our privacy team using the details below. All privacy communications are handled by trained staff and responded to within the timeframes set out in Section 8.
When submitting a DSAR or any rights request, please include your registered navi88 username and, if applicable, the email address associated with your account. navi88 may request a copy of a government-issued identification document to verify your identity before processing the request, in line with our obligations to protect members' data against third-party access.
navi88 aims to resolve all privacy enquiries informally at first instance. If you are not satisfied with our response, you may escalate the matter through navi88's formal dispute resolution procedure, details of which are available from our support team upon request.
Related Documents
This Privacy Policy works alongside navi88's Terms and Conditions and Responsible Gaming Policy. Together, these three documents define how navi88 operates and how we protect every member on the platform. 21+ only. Play responsibly.