Privacy Policy

This Privacy Policy applies to all visitors and registered members of lx188, accessible at https://lx188.pro. It covers all personal data collected through the Platform, our customer support channels (including WhatsApp at +62 811-0000-1888 and email at [email protected]), and any promotional communications you receive from us.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the complete framework governing your relationship with lx188.

1 Definitions

Throughout this Privacy Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" means any information that directly or indirectly identifies you as a natural person — including your name, national identity number (NIK on Indonesian KTP), date of birth, email address, mobile number, physical address, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" means lx188, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of lx188 under a written data processing agreement (e.g., payment processors, KYC verification providers).
• "Member" / "You" means any individual who has registered an account on the lx188 Platform or is in the process of doing so.
• "Platform" means the lx188 website at https://lx188.pro and all associated services, features, and sub-pages.
• "Cookies" means small text files placed on your device by the Platform to store session state, preferences, and analytics data.
• "KYC" means Know Your Customer — the identity and address verification process required before we process your first withdrawal or when we have a compliance obligation to verify your identity.

2 Data We Collect

lx188 collects the following categories of Personal Data from members and Platform visitors. We collect only what is necessary for the specific purposes described in Section 4.

3 How Data Is Collected

lx188 collects your Personal Data through the following channels and mechanisms:

• Account Registration: When you complete the lx188 sign-up form, you directly provide Identity Data, Contact Data, and your chosen login credentials.
• KYC Submission: When you upload identity documents or proof-of-address files to satisfy KYC requirements before your first withdrawal, we collect and store those documents securely.
• Deposits and Withdrawals: When you initiate a financial transaction via a local Indonesian bank or e-wallet, we receive Financial Data from our payment processing partners to confirm the transfer.
• Platform Interaction: As you browse the Platform, place bets, or play casino games, Technical Data and Usage Data are collected automatically via server logs, session tokens, and analytics tools.
• Cookies and Similar Technologies: The Platform places Cookies on your browser or device as described in Section 7. You can manage Cookie preferences through your browser settings.
• Customer Support: When you contact our support team via live chat, WhatsApp, or email, the content of those communications is logged to maintain service quality and resolve disputes.
• Third-Party Sources: In limited circumstances — specifically for enhanced identity verification — lx188 may receive data from reputable identity verification providers or financial crime screening databases. Such sharing is governed by written data processing agreements.

4 Purpose of Processing

lx188 processes your Personal Data only for the specific, legitimate purposes listed below. We do not use your data for purposes incompatible with those disclosed at the time of collection.

• Account Management: To create, maintain, and secure your lx188 account, authenticate your login, and manage your Balance and betting history.
• Service Delivery: To provide sports betting markets (including BRI Liga 1, EPL, Champions League, and AFF Cup fixtures), live casino games (Evolution Gaming, Pragmatic Play Live), slot titles, and all other platform features.
• Payment Processing: To facilitate deposits and withdrawals in IDR via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification (KYC): To verify your age (21+), identity, and source of funds in compliance with anti-money-laundering obligations and responsible gaming commitments.
• Fraud Prevention and Security: To detect, investigate, and prevent unauthorized account access, collusion, match-fixing, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, handle complaints, and process self-exclusion or responsible gaming requests from members across Indonesia.
• Legal and Regulatory Compliance: To maintain transaction records for the minimum period required by applicable law, respond to lawful requests from authorities, and fulfil audit obligations.
• Platform Improvement: To analyze aggregated Usage Data and identify patterns that help us optimize page load times, improve the betting interface, and enhance the overall member experience.
• Marketing Communications (opt-in only): To send you promotional offers, bonus alerts, and news about lx188 via email or SMS — but only if you have opted in to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

lx188 relies on one or more of the following legal bases when processing your Personal Data:

• Contractual Necessity: Processing required to perform the contract between you and lx188 — specifically, to operate your account, process transactions, and deliver the Services described in our Terms & Conditions.
• Legal Obligation: Processing necessary for lx188 to comply with applicable laws, including anti-money-laundering requirements, age-verification obligations, and financial record-keeping duties.
• Legitimate Interests: Processing carried out in the legitimate interests of lx188 or a third party, provided those interests are not overridden by your fundamental privacy rights. Relevant legitimate interests include fraud prevention, platform security, and service improvement through aggregated analytics.
• Consent: Processing based on your freely given, specific, informed consent — primarily for opt-in marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

lx188 does not sell, rent, or trade your Personal Data. We share data with third parties only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment Processors: Indonesian bank transfer gateways and e-wallet integration partners (OVO, DANA, GoPay, ShopeePay, LinkAja) receive Financial Data strictly to process your deposits and withdrawals. These partners are contractually prohibited from using your data for any other purpose.
• KYC and Identity Verification Providers: Specialist third-party verification services may receive a copy of your identity documents and personal details to complete the KYC process on our behalf. All such providers are bound by data processing agreements and applicable data protection law.
• Fraud and Security Technology Providers: We share Technical Data and Usage Data with anti-fraud and security technology partners to detect prohibited conduct, suspicious betting patterns, and account takeover attempts. No directly identifiable personal data (such as your full name or bank account number) is shared for this purpose.
• Game Studio Partners: When you launch a third-party game (e.g., a Pragmatic Play slot or an Evolution Gaming live dealer table), a session token and your Account identifier may be shared with that studio solely to initialize the game session. No additional personal data is transferred beyond what is technically necessary.
• Legal and Regulatory Authorities: lx188 will disclose Personal Data to law enforcement agencies, regulators, or courts where required to do so by a lawful order or where disclosure is necessary to protect the rights, property, or safety of lx188, its members, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of lx188's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. We will notify affected members before any such transfer takes effect.

7 Cookies & Tracking Technologies

lx188 uses cookies and similar tracking technologies to operate the Platform effectively and to understand how members use our services. The types of cookies we use are described in the table below:

lx188 does not use advertising or retargeting cookies. We do not allow third-party advertising networks to place cookies on your device through our Platform.

Managing Cookies: You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For guidance on managing cookies in popular browsers, refer to the help documentation of your browser (Chrome, Firefox, Safari, Edge, or Samsung Internet on Android devices popular among Indonesian users).

8 Data Security

lx188 implements a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our technical and organizational measures include:

• Transport Layer Security (TLS): All data transmitted between your browser or mobile device and the lx188 servers is encrypted using TLS 1.3. The padlock icon in your browser address bar confirms this connection is active.
• Encryption at Rest: Sensitive fields — including national ID numbers, bank account details, and password hashes — are encrypted at the database level using AES-256. Even in the unlikely event of a database breach, this data cannot be read in plain text.
• Access Controls: Access to systems holding Personal Data is restricted to lx188 personnel and authorized vendors who have a documented need to access it. All access is authenticated via multi-factor authentication (MFA) and logged for audit purposes.
• Penetration Testing: lx188 engages independent security specialists to conduct periodic penetration tests of the Platform. Findings are remediated according to severity within defined timelines.
• Data Breach Response: In the event of a data breach that is likely to result in a high risk to your rights, lx188 will notify affected members without undue delay, providing details of the nature of the breach, the categories of data affected, and the remedial steps taken.

9 Your Data Rights

As a Member of lx188, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within fourteen (14) calendar days.

• Right of Access: You may request a copy of all Personal Data lx188 holds about you, including your account history, transaction records, and communications logs.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. For account details you can update yourself (such as your email address or phone number), please do so directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data. Note that this right is subject to limitations where retention is required by law (e.g., financial transaction records must be retained for five years) or where legitimate grounds exist to retain data for fraud prevention purposes.
• Right to Restriction of Processing: You may request that lx188 restrict processing of your Personal Data in certain circumstances — for example, while a dispute about its accuracy is under investigation.
• Right to Data Portability: You may request your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interests. You also have an unconditional right to opt out of marketing communications at any time — simply reply "STOP" to any promotional SMS or email, or contact our support team.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10 Data Retention

lx188 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any legal obligations to retain records for defined minimum periods. The table below summarizes our retention schedule:

Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymized so that it can no longer be associated with any individual Member.

11 Minors

The lx188 Platform is strictly intended for adults aged 21 years and above. lx188 does not knowingly collect Personal Data from individuals under the age of 21. All registration flows include an age declaration step, and KYC verification confirms date of birth before withdrawal rights are activated.

If lx188 becomes aware that a Minor has registered an account and provided Personal Data, we will close that account immediately, void any balances generated, return any deposited real-money funds to the originating payment method (net of any transaction costs), and delete the Minor's Personal Data from our systems within thirty (30) days.

12 International Data Transfers

lx188 operates as an internationally licensed platform. In delivering our services, your Personal Data may be processed on servers or by vendors located outside Indonesia. Where such cross-border transfers occur, lx188 ensures appropriate safeguards are in place, including:

• Written data processing agreements with all third-party vendors incorporating standard contractual clauses aligned with international data protection best practice.
• Transfer-impact assessments conducted for transfers to jurisdictions without an equivalent level of data protection law.
• Technical measures (encryption in transit and at rest) that protect your data regardless of the jurisdiction in which it is processed.

Your Personal Data will never be transferred to a jurisdiction where lx188 cannot ensure an adequate level of protection for your rights as described in this policy.

13 Changes to This Policy

lx188 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a notice in your lx188 account dashboard or send a notification to your registered email address.
• For significant changes affecting your rights, request your renewed acknowledgment before you continue using the Platform.

We encourage you to review this Privacy Policy periodically. Your continued use of lx188 following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the lx188 Data Privacy team through any of the following channels:

• Email: [email protected] — subject line: "Privacy Policy Enquiry — [Your Username]"
• WhatsApp: +62 811-0000-1888 — available 24/7 with Indonesian-speaking agents
• Live Chat: Available directly on the Platform when you are logged in to your lx188 account — typical response time under 3 minutes.

We aim to acknowledge all privacy-related enquiries within 2 business days (WIB, UTC+7) and resolve them fully within 14 calendar days. Complex requests involving data erasure or portability may take up to 30 calendar days, in which case we will notify you of the extended timeline.