At lapan8, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data in compliance with international data protection standards.
Last Updated: January 15, 2026 | Effective Date: January 15, 2026
Our Privacy Commitment
Your privacy is paramount. lapan8 collects only the personal information necessary to provide our gaming services, comply with international regulatory requirements, and ensure platform security.
Data Protection: We employ industry-leading security measures including 256-bit SSL encryption, secure database storage with restricted access controls, and regular third-party security audits to protect your personal data from unauthorized access, disclosure, or misuse.
Your Rights: You have the right to access, correct, export, or delete your personal data at any time. Contact our customer support team to exercise these rights.
lapan8 is the data controller responsible for the personal information you provide when using our services. We determine the purposes and means of processing your personal data in accordance with this Privacy Policy and applicable data protection laws.
Contact Information: For privacy-related inquiries, data access requests, or to exercise your privacy rights, please contact our Data Protection team through our customer support channels:
WhatsApp: Indonesian-speaking support available 24/7 (contact number displayed after login)
2. Information We Collect
lapan8 collects various types of personal information to provide our gaming services, ensure platform security, and comply with regulatory requirements. The information we collect includes:
2.1 Information You Provide Directly
When you register an account with lapan8, you voluntarily provide the following information:
Identity Information: Full legal name, date of birth, gender, nationality
Contact Information: Email address, Indonesian mobile phone number, residential address (city, province, postal code)
Identity Verification Documents: Copies of your KTP (Indonesian identity card), passport, or driver's license for KYC (Know Your Customer) compliance
Payment Information: Bank account numbers, bank names (BCA, BRI, BNI, Mandiri, etc.), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction references
Account Credentials: Username, password (stored in encrypted form), security questions and answers, PIN codes for withdrawals
Communication Records: Content of your communications with our customer support team via live chat, email, WhatsApp, or phone
2.2 Information Collected Automatically
When you use the lapan8 platform, we automatically collect certain technical and usage information:
Device Information: Device type (mobile phone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers
Connection Information: IP address, internet service provider, approximate geographic location (city-level, derived from IP address), timestamp of access
Usage Data: Pages visited, features used, games played, time spent on platform, click patterns, navigation paths
Cookies and Similar Technologies: Session cookies for login state management, preference cookies for language and display settings, analytics cookies for platform performance monitoring (see Section 8 for details)
2.3 Information from Third Parties
In limited circumstances, we may receive information about you from third-party sources:
Payment Processors: Confirmation of successful transactions, fraud alerts, chargeback notifications
Identity Verification Services: Results of identity document validation checks, age verification confirmations
Affiliate Partners: If you register through an affiliate referral link, we receive anonymized referral tracking information (we do not receive your personal data from affiliates before you register)
Data Category
Collection Method
Primary Purpose
Legal Basis
Identity & Contact
Registration Form
Account Creation, Communication
Contract Performance
KYC Documents
Upload / Email Submission
Age Verification, AML Compliance
Legal Obligation
Payment Details
Deposit / Withdrawal Forms
Transaction Processing
Contract Performance
Gaming Activity
Automatic Collection
Service Provision, Fraud Prevention
Legitimate Interest
Device & Usage Data
Automatic Collection
Security, Platform Optimization
Legitimate Interest
3. How We Use Your Information
lapan8 uses your personal information for the following purposes:
3.1 Service Provision and Account Management
Creating and maintaining your lapan8 gaming account
Processing deposits, withdrawals, and internal fund transfers
Enabling gameplay across our casino games, sports betting, togel (lottery), and other gaming products
Managing your VIP tier status and loyalty program benefits
Providing customer support and responding to your inquiries
Verifying your identity and age (21+ requirement) through KYC procedures
Complying with anti-money laundering (AML) regulations and preventing financial crime
Detecting and preventing fraud, collusion, bonus abuse, and other prohibited activities
Maintaining transaction records as required by gaming regulations
Responding to legal requests from law enforcement or regulatory authorities when legally obligated
Enforcing our Terms & Conditions and investigating violations
3.3 Platform Security and Fraud Prevention
Monitoring account activity for signs of unauthorized access, hacking attempts, or account takeover
Analyzing betting patterns to detect match-fixing, syndicate activity, or advantage play schemes
Identifying duplicate accounts created to abuse bonuses or circumvent restrictions
Protecting against distributed denial-of-service (DDoS) attacks and other cybersecurity threats
Verifying payment method ownership to prevent payment fraud and money laundering
3.4 Marketing and Personalization (with Your Consent)
Sending promotional emails about new games, bonuses, and special offers (opt-in required; you can unsubscribe anytime)
Displaying personalized game recommendations based on your playing preferences
Offering targeted bonuses relevant to your VIP tier and gaming activity
Conducting customer satisfaction surveys to improve our services
3.5 Platform Improvement and Analytics
Analyzing usage patterns to optimize website performance and user experience
Conducting A/B testing on interface designs and feature layouts
Generating aggregated, anonymized statistics about player behavior (no personally identifiable information in aggregate reports)
Identifying technical issues and bugs based on error logs and user reports
3.6 Responsible Gaming Support
Implementing deposit limits, loss limits, and session time limits you set on your account
Enforcing self-exclusion requests and cooling-off periods
Monitoring for signs of problem gambling behavior and proactively reaching out with support resources
Providing access to responsible gaming tools and educational materials
4. Data Sharing and Disclosure
lapan8 does not sell your personal information to third parties. We only share your data in the following limited circumstances:
4.1 Service Providers and Business Partners
We share necessary personal information with trusted third-party service providers who assist us in operating the lapan8 platform:
Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive your payment details to process transactions. We do not store full credit/debit card numbers on our servers.
Game Providers: Casino game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.) receive anonymized gameplay data for RNG certification and game performance monitoring. They do not receive your identity information.
Identity Verification Services: Third-party KYC providers receive copies of your identity documents to verify authenticity and check against watchlists.
Customer Support Tools: Live chat software providers process your support conversations to enable our agents to assist you effectively.
Cloud Infrastructure Providers: Our platform is hosted on secure cloud servers operated by reputable data center providers with ISO 27001 certification.
All third-party service providers are bound by strict confidentiality agreements and are prohibited from using your personal data for any purpose other than providing services to lapan8. We conduct due diligence to ensure our partners maintain adequate data security standards.
4.2 Legal and Regulatory Disclosure
We may disclose your personal information when required by law or to protect lapan8's legal rights:
In response to valid legal requests from Indonesian or international law enforcement agencies (search warrants, subpoenas, court orders)
To comply with gaming regulatory requirements or licensing obligations
To enforce our Terms & Conditions or investigate suspected violations (fraud, money laundering, bonus abuse)
To protect the safety, rights, or property of lapan8, our employees, or our users
In connection with a corporate transaction such as a merger, acquisition, or asset sale (your data would be transferred to the acquiring entity)
4.3 Aggregated and Anonymized Data
We may share aggregated, anonymized data that cannot be used to identify individual users with partners for business intelligence and industry research purposes. For example: "Indonesian players prefer slots with 96%+ RTP" or "Mobile usage accounts for 70% of total traffic." This aggregated data does not contain any personally identifiable information.
256-Bit SSL Encryption
All data transmitted between your device and lapan8 servers is protected by bank-grade SSL encryption, the same technology used by financial institutions worldwide.
Secure Database Storage
Your personal data is stored in encrypted databases with restricted access controls. Only authorized personnel can access customer data, and all access is logged and audited.
Two-Factor Authentication
Optional 2FA adds an extra layer of security to your account, requiring both your password and a time-sensitive code from your mobile device to log in.
Regular Security Audits
lapan8 undergoes third-party security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
Privacy by Design
We collect only the minimum data necessary to provide our services and automatically delete data that is no longer needed for legitimate purposes.
Employee Training
All lapan8 employees receive mandatory data protection and privacy training. Staff members sign confidentiality agreements and face disciplinary action for unauthorized data access.
5. Data Security Measures
Protecting your personal information is a top priority for lapan8. We implement comprehensive technical, organizational, and administrative security measures:
5.1 Technical Security Controls
Encryption: All sensitive data is encrypted both in transit (via SSL/TLS) and at rest (AES-256 encryption for stored data)
Vulnerability Scanning: Automated tools regularly scan our systems for known security vulnerabilities
5.2 Organizational Security Controls
Access Control: Principle of least privilege - employees only have access to the data necessary for their specific role
Authentication: All internal systems require multi-factor authentication for employee access
Audit Logs: All access to customer data is logged with timestamp, user ID, and action performed for accountability
Incident Response Plan: Documented procedures for responding to data breaches, including user notification within 72 hours if legally required
Vendor Management: Third-party service providers undergo security assessments before we share any customer data with them
5.3 Your Role in Security
While we implement robust security measures, you also play a crucial role in protecting your account:
Choose a strong, unique password and never share it with anyone (lapan8 staff will never ask for your password)
Enable two-factor authentication if available
Log out after each session, especially on shared or public computers
Beware of phishing attempts - verify that you are on the official lapan8.cam domain before entering credentials
Keep your registered email address and phone number secure, as they are used for account recovery
Immediately report any suspicious account activity to our support team
6. Data Retention and Deletion
lapan8 retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:
6.1 Active Account Data
While your account remains active, we retain all account data including identity information, transaction history, and gaming activity. This data is necessary to provide ongoing services and ensure platform security.
6.2 Closed Account Data
After you voluntarily close your account or we terminate your account for policy violations:
Identity and KYC Documents: Retained for 7 years to comply with anti-money laundering regulations and licensing requirements
Transaction Records: Retained for 7 years for financial auditing and regulatory compliance purposes
Gameplay History: Retained for 5 years to resolve potential disputes and ensure game integrity
Marketing Communications: Deleted immediately upon account closure (unless you specifically opt in to continue receiving newsletters)
Login and Usage Logs: Retained for 2 years for security monitoring and fraud prevention
6.3 Self-Exclusion and Responsible Gaming
If you self-exclude from lapan8 for responsible gaming reasons, we retain your identity information for the duration of your self-exclusion period (and potentially longer) to prevent you from creating new accounts during the exclusion period. This is for your protection and is required by responsible gaming regulations.
6.4 Right to Deletion
You may request deletion of your personal data by contacting customer support. However, we may be unable to delete certain information if we have a legal obligation to retain it (e.g., financial transaction records required by law). In such cases, we will delete all non-essential data and anonymize the remaining records where possible. See Section 7 for details on exercising your privacy rights.
Your Privacy Rights
Right to Access
You have the right to request a copy of all personal data lapan8 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your request.
Right to Rectification
If any of your personal information is inaccurate or incomplete, you can request that we correct or update it. Some information (like your name and date of birth) can be updated via your account settings; other changes may require verification.
Right to Erasure
You can request deletion of your personal data, subject to certain legal exceptions (e.g., we must retain financial records for regulatory compliance). We will delete or anonymize all data we are legally permitted to remove.
Right to Restriction
You can request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of disputed information or if you object to our processing on legitimate interest grounds.
Right to Data Portability
You have the right to receive your personal data in a portable format and transmit it to another service provider. We will provide your data in CSV or JSON format upon request.
Right to Object
You can object to processing of your personal data for direct marketing purposes at any time. Click "unsubscribe" in marketing emails or contact support to opt out. You can also object to processing based on legitimate interests by explaining your specific situation.
Right to Withdraw Consent
Where we process your data based on consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
7. Exercising Your Privacy Rights
To exercise any of the privacy rights described above, please contact our customer support team through one of the following channels:
Email: Send your request to [email protected] with subject line "Privacy Rights Request - [Your Request Type]"
Live Chat: Available 24/7 on the lapan8 website - inform the agent you have a privacy rights request
Account Settings: Some data (email address, phone number, communication preferences) can be updated directly in your account settings
When submitting a privacy rights request, please include:
Your full name and lapan8 username
Registered email address for identity verification
Specific details of your request (e.g., "I request a copy of all my personal data" or "Please delete my account and all associated data")
Verification: To protect your privacy, we will verify your identity before fulfilling data access or deletion requests. This typically involves confirming your identity through your registered email address and answering security questions. For high-risk requests (deletion, data export), we may require additional verification such as a copy of your identity document.
Response Timeline: We will respond to all privacy rights requests within 30 days. For complex requests requiring extensive data compilation, we may extend this period by an additional 30 days with prior notification to you.
8. Cookies and Tracking Technologies
lapan8 uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and provide personalized features.
8.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences, maintain your login session, and collect usage statistics.
8.2 Types of Cookies We Use
Essential Cookies: Required for basic platform functionality including login state management, security features, and session maintenance. You cannot disable these cookies without losing the ability to use lapan8 services.
Functional Cookies: Remember your preferences such as language selection, currency display format, and notification settings. These enhance your user experience but are not strictly necessary.
Analytics Cookies: Collect anonymized data about how users interact with our platform, including page views, click patterns, and session duration. We use this data to identify technical issues and improve the user interface. We use Google Analytics with IP anonymization enabled.
Marketing Cookies: Used to deliver personalized advertisements and promotions based on your gaming preferences. These cookies may track your activity across websites. You can opt out of marketing cookies through your browser settings or our cookie consent banner.
8.3 Managing Cookies
Most web browsers allow you to control cookies through their settings. You can typically:
View and delete existing cookies
Block all cookies (note: this will prevent you from logging into lapan8)
Block third-party cookies only
Receive a notification each time a cookie is set
Refer to your browser's help documentation for specific cookie management instructions. Note that disabling essential cookies will prevent you from accessing your lapan8 account.
9. International Data Transfers
lapan8 operates as an international gaming platform with infrastructure located in multiple countries. When you use our services, your personal data may be transferred to, stored, and processed in countries outside of Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law.
We ensure that all international data transfers comply with applicable data protection regulations through the following safeguards:
Contractual Protections: We require all third-party service providers located outside Indonesia to sign data processing agreements containing standard contractual clauses approved by international data protection authorities.
Security Standards: All data centers and cloud infrastructure providers we use maintain ISO 27001 information security certification and undergo regular security audits.
Data Minimization: We transfer only the minimum data necessary to provide our services or fulfill legal obligations. For example, game providers receive anonymized gameplay data without your identity information.
Encryption: All data transmitted internationally is encrypted using industry-standard protocols.
By using lapan8 services, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.
10. Protection of Minors
lapan8 is strictly for users who are 21 years of age or older. We do not knowingly collect personal information from individuals under 21 years of age.
We implement the following measures to prevent underage gambling:
Mandatory age declaration during registration
KYC verification requiring government-issued identity documents showing date of birth
Automated age verification checks against national identity databases where available
Monitoring for signs of identity fraud or use of borrowed documents
If we discover that we have inadvertently collected personal information from an individual under 21, we will immediately close the account, void any transactions, refund deposits, and delete all associated personal data from our systems.
Parents and Guardians: If you believe your child has created a lapan8 account using false information, please contact our customer support team immediately. We will investigate and take appropriate action, including permanent account closure and reporting to relevant authorities if necessary.
11. Changes to This Privacy Policy
lapan8 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will:
Update the "Last Updated" date at the top of this page
Notify active users via email to their registered email address
Display a prominent notice on the lapan8 website and mobile app
For significant changes affecting your rights, request your explicit consent before the changes take effect
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Continued use of lapan8 services after changes are posted constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact our customer support team:
Email:[email protected] (for privacy inquiries, use subject line "Privacy Policy Question")
Live Chat: Available 24/7 directly on the lapan8 website after logging in
WhatsApp: Indonesian-speaking support agents available 24/7 (contact number displayed after login)
We aim to respond to all privacy inquiries within 48 hours during business days (Monday-Friday, 09:00-18:00 WIB). For urgent security concerns (suspected account breach, unauthorized transactions), contact us immediately via live chat for priority assistance.
Data Protection Officer: For formal complaints regarding our data handling practices or to escalate unresolved privacy concerns, you may contact our Data Protection Officer by emailing [email protected] with subject line "ATTN: Data Protection Officer".
Related Policies
This Privacy Policy should be read together with our other policy documents: