shp888 is committed to protecting your personal data. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and safeguard it, and what rights you hold as a data subject.
Six principles that underpin every data decision we make at shp888
All personal data transmitted to and from shp888 is protected by 256-bit SSL encryption. Data at rest is stored on hardened servers with access controls, intrusion detection, and regular independent security audits.
shp888 never sells, rents, or trades your personal information to third-party advertisers or data brokers. Your data is used exclusively to operate your account, comply with regulatory obligations, and improve your experience on the platform.
You have the right to access, correct, export, and request deletion of your personal data at any time, subject to our legal retention obligations. Submit your request to our data team at [email protected] and we will respond within 30 days.
We collect only the data that is strictly necessary for the purposes described in this policy. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required by law.
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. Financial records are retained for a minimum of five years in line with standard anti-money-laundering regulations.
In the unlikely event of a data breach that poses a risk to your rights, shp888 will notify affected players within 72 hours of becoming aware of the incident, in accordance with internationally recognized data protection standards.
In this Privacy Policy, the following terms have the meanings set out below:
shp888 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, shp888 is responsible for determining why and how your Personal Data is processed, and for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with internationally recognized data protection principles.
shp888 has appointed a Data Protection Officer (DPO) to oversee compliance with this policy and applicable data protection law. You may contact the DPO directly at [email protected] with the subject line "Data Protection Enquiry". All data-related requests and complaints are handled exclusively by the DPO team.
Where shp888 engages third-party service providers to process Personal Data on its behalf (for example, payment processors, identity verification vendors, or customer support platforms), shp888 enters into binding data processing agreements with each such provider requiring them to process data only on shp888's documented instructions and to implement appropriate security measures.
shp888 collects the following categories of Personal Data, which vary depending on how you interact with the Platform:
| Category | Examples | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP / passport) | Yes — for account registration and KYC |
| Contact Data | Email address, Indonesian mobile number, residential address | Yes — for account communications |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records | Yes — for payment processing |
| KYC Documentation | Scanned identity documents, proof of address documents, selfie verification images | Yes — before first withdrawal |
| Gaming Activity Data | Bet history, game session logs, wagering amounts, win/loss records, bonus redemptions | Yes — generated automatically |
| Behavioural Data | Pages visited, features used, click patterns, session duration, search queries within the Platform | No — optional analytics |
| Behavioural Data | Pages visited, features used, click patterns, session duration, search queries within the Platform | No — optional analytics |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | No — only when you contact us |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, time-out history, reality-check preferences | No — only when tools are activated |
shp888 does not collect or process special categories of Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) unless explicitly required by applicable law or regulatory compliance obligations.
shp888 collects Personal Data through the following channels:
shp888 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose of processing:
shp888 processes your Personal Data for the following specific purposes:
shp888 does not sell or rent your Personal Data. We share your data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:
shp888 operates internationally and some of our service providers and infrastructure partners are located outside Indonesia. Where Personal Data is transferred to a country that does not provide an equivalent level of data protection, shp888 implements appropriate safeguards to ensure your data remains protected, including:
By using the Platform and providing your Personal Data, you acknowledge that your data may be transferred to and processed in countries outside Indonesia as described in this section, subject to the safeguards above.
shp888 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account plus 5 years after closure | Legal obligation (AML regulations) |
| Financial Transaction Records | Minimum 5 years from transaction date | Legal obligation (financial record-keeping) |
| KYC Documentation | Duration of account plus 5 years after closure | Legal obligation (AML regulations) |
| Gaming Activity Logs | 3 years from session date | Legitimate interests (dispute resolution) |
| Support Communications | 2 years from last interaction | Legitimate interests (quality assurance) |
| Marketing Preferences | Until opt-out, then deleted within 30 days | Consent |
| Technical / Log Data | 90 days | Legitimate interests (security monitoring) |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized data may be retained indefinitely for statistical and analytical purposes.
shp888 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
While shp888 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.
The shp888 Platform uses cookies and similar tracking technologies to operate core functionality, analyze usage patterns, and improve the user experience. The following categories of cookies are used:
shp888 does not use third-party advertising or retargeting cookies. No cookie data is shared with external advertising networks.
You may manage cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect the quality of your experience on the Platform, but will not prevent access to core features. Disabling strictly necessary cookies will prevent login and normal Platform use.
As a data subject, you hold the following rights with respect to your Personal Data held by shp888. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 Business Days and provide a substantive response within 30 calendar days.
Please note that certain rights are subject to limitations where processing is required by law or for the performance of our contract with you. shp888 will explain any such limitations clearly when responding to your request.
The shp888 Platform is strictly intended for adults aged 21 and above. shp888 does not knowingly collect, store, or process Personal Data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and shp888 employs automated screening tools to detect and prevent underage access.
If shp888 becomes aware that Personal Data has been collected from an individual under 21 years of age, we will immediately suspend the associated account, delete all related Personal Data to the extent permitted by applicable law, and notify relevant parties where legally required to do so.
If you are a parent or guardian and believe that a minor in your care has registered on the shp888 Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action within one Business Day of receiving your report.
The shp888 Platform may contain references to or integrations with third-party services, including game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) whose game interfaces may be rendered within the Platform environment. While shp888 selects its technology partners carefully and requires them to maintain appropriate data protection standards under contract, shp888 is not responsible for the privacy practices of third-party services operating under their own separate privacy policies.
shp888 does not maintain external links to unrelated third-party websites from the Platform. If you navigate away from the Platform to any external site, your interactions with that site are governed entirely by the privacy policy of that site, and shp888 accepts no responsibility or liability for those interactions.
shp888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, shp888 will:
Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you must cease using the Platform and may request account closure by contacting [email protected].
We encourage you to review this Privacy Policy periodically to stay informed about how shp888 protects your Personal Data.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the shp888 Data Protection Officer through the following channels:
If you are not satisfied with our response to a data rights request or privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.
Our Data Protection Officer is available to assist with any privacy-related request. You can also review our full Terms & Conditions, explore our Responsible Gaming tools, or visit our FAQ for quick answers.