matrix88 Privacy Policy

This page describes what data we collect when you use matrix88 and how we keep that data protected. We at matrix88 operate an online gaming and sportsbook platform available where local law permits. Our commitment to privacy underpins every transaction—from your first deposit via DANA or e-wallet through your withdrawal requests and ongoing account activity.

We recognise that your personal information is entrusted to us, and we take that responsibility seriously. Whether you access our platform from Jakarta, Surabaya, Bandung, or any other supported location, our privacy practices remain consistent. We do not sell your data to third parties for marketing purposes. We do not use your information to build profiles for external sale. We collect what we need to operate fairly, verify your identity, process payments, and comply with applicable regulations in jurisdictions where our service runs.

Our platform's privacy framework applies to account holders across all regions we serve in Southeast Asia. If you have questions about how we handle your data after reading this policy, our support team responds to privacy inquiries within 4 business hours through the contact details listed at the end of this page.

What Data We Collect on matrix88

When you create an account on matrix88, we collect your email address, full name, date of birth, and phone number. We store these details encrypted in our database to verify your identity and contact you about account activity or service updates. We ask for your residential address during Know Your Customer (KYC) verification—this step is mandatory in all jurisdictions where we operate and helps us prevent fraud and money laundering.

We collect payment information only when you deposit. If you use DANA, e-wallet, mobile banking, local payment, or online payment, your payment details remain with those e-wallet providers; we receive only a confirmation that your transaction succeeded. The same applies to e-wallet scan-and-pay transfers and bank virtual accounts (mobile banking, local payment, online payment, e-wallet): we log the deposit amount and timestamp but do not store your banking credentials. Our servers do not hold your credit-card data or bank-account numbers.

We collect behavioural data passively—your login timestamps, which games you view, which matches in Liga 1 or Piala Indonesia you wager on, your live-dealer table sessions, and your withdrawal requests. This data helps us detect unusual account activity (a sign of unauthorised access) and optimise our platform's performance. We do not use behavioural data to profile you for sale; we use it to secure your account and improve our service.

How We Use Your Data

We use your email and phone number to send account notifications—login alerts, deposit confirmations, withdrawal status updates, and promotional messages (which you can opt out of at any time). We use your full name and date of birth to confirm your identity during KYC verification and to match your account to your chosen payment method. We use your address to verify that you live in a jurisdiction where our service is legally available.

We share payment data with our payment processors—the e-wallet companies, mobile banking networks, and banks—only to the extent needed to complete your transaction. We do not instruct these third parties to use your data for any purpose beyond settlement. We may disclose account information to law enforcement or regulators if compelled by legal process in jurisdictions where we operate. We do not voluntarily report your activity to external parties unless required by local law.

Our live-dealer tables operate from multi-camera studios; we do not record your face or voice during play. We record table feeds to ensure game integrity and to resolve any disputes about outcomes. These recordings are retained for 30 days and then deleted unless a dispute investigation requires longer retention.

Third-Party Processors and Data Location

Our servers may sit outside your jurisdiction. We use data centres in Singapore and Malaysia to host our platform and player accounts. This means your data may be transferred across borders. By using matrix88, you consent to this cross-border transfer. We ensure that all transferred data remains encrypted in transit and at rest.

We engage third-party processors for specific functions: payment gateways (Xendit, doku) handle e-wallet and bank transfers; a dedicated KYC provider (Onfido or similar) verifies your identity documents; our analytics partner (Google Analytics) tracks aggregate site traffic. Each processor signs a data-processing agreement committing them to use your data only for their assigned function and to maintain confidentiality.

Your Rights

Under applicable data-protection regulations in Indonesia and other Southeast Asian jurisdictions, you have the right to:

Access your data: Request a copy of all personal information we hold on you.
Rectify your data: Ask us to correct inaccurate or incomplete information (e.g. if your address changed).
Erasure: Request deletion of your account and associated data, subject to our legal obligations to retain transaction records for anti-money-laundering compliance.
Restrict processing: Ask us to limit how we use your data while a dispute is under investigation.
Data portability: Request your data in machine-readable format so you can transfer it to another service.
Opt out of marketing: Unsubscribe from promotional emails and SMS at any time via the link in each message.

To exercise any of these rights, email us at the address provided in the Contact section. We will respond within 14 business days.

Cookies and Tracking

Our website uses cookies to store your login session, remember your language preference, and track whether you have viewed this policy. Cookies are small text files stored on your device; we use both session cookies (deleted when you close your browser) and persistent cookies (retained for up to 2 years). You can disable cookies in your browser settings, though this may prevent you from logging into your matrix88 account.

We do not use cookies to track you across third-party websites. Our analytics platform (Google Analytics) receives anonymised, aggregated traffic data—we do not pass your name or account ID to Google. If you wish to opt out of Google Analytics entirely, you can install the Google Analytics Opt-Out Browser Add-on.

How Long We Keep Your Data

We retain your account information for as long as your account is active. If you close your account, we retain transaction records (deposits, withdrawals, bets placed) for seven years to comply with anti-money-laundering regulations and tax reporting obligations in Indonesia and other jurisdictions. We delete non-transactional personal data (your email, phone, address) after two years of inactivity, unless you reactivate your account.

If you request account deletion, we anonymise your data within 30 days—we remove your name, email, and address but retain a transaction record linked to a unique code, not your identity. This allows us to honour future regulatory requests without exposing your personal details.

Security Measures We Undertake

We protect your data using industry-standard encryption (TLS 1.3 for data in transit, AES-256 for data at rest). Our infrastructure uses firewalls, intrusion-detection systems, and regular security audits to prevent unauthorised access. We do not guarantee absolute security—no system is immune to all threats—but we commit to maintaining reasonable safeguards and notifying you immediately if we discover a breach affecting your account.

Your account password is hashed with bcrypt; we do not store it in plain text. We encourage you to use a strong, unique password and to enable two-factor authentication (2FA) if your account supports it. If you suspect your password has been compromised, change it immediately and contact our support team.

Contact Us About Privacy

If you have questions about this privacy policy, wish to exercise your data rights, or want to report a suspected data breach, contact us at:

Email: [email protected]
Postal address: matrix88 Data Protection Officer, Jakarta, Indonesia
Response time: 14 business days for data-access and deletion requests; 4 business hours for urgent security concerns.

We update this policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by email or by posting a notice on our website. Your continued use of matrix88 after any update constitutes acceptance of the revised policy.

Last updated: January 2025. Our commitment to your privacy extends across all supported jurisdictions in Southeast Asia, from Medan to Yogyakarta, and covers all payment methods we accept—DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank virtual accounts. This policy is available in English and applies to all users of the matrix88 platform.