Privacy Policy

Effective Date: January 1, 2026

1. Introduction

xyz388 ("we", "us", "our", or the "Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect information about you when you access or use our website, mobile applications, services, and products (collectively, the "Services"). This policy applies to all users of xyz388 Services, including visitors, registered players, and former account holders.

By accessing or using xyz388 Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with the terms of this Privacy Policy, you must immediately discontinue use of our Services and refrain from creating an account.

2. Information We Collect

xyz388 collects various types of information to provide, maintain, improve, and secure our Services. The categories of personal data we collect include:

2.1 Information You Provide Directly

When you register an account, use our Services, or communicate with us, you voluntarily provide the following information:

• Account Registration Data: Full legal name, date of birth, email address, Indonesian mobile phone number, residential address, username, and password.
• Identity Verification (KYC) Documents: Copies of your Indonesian national identity card (KTP), selfie photographs for identity confirmation, and any additional documentation required for enhanced verification procedures.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), transaction history, deposit and withdrawal records, and payment method preferences.
• Communication Data: Messages, emails, live chat transcripts, WhatsApp conversations, support tickets, feedback submissions, and any other communications you send to xyz388 customer service.
• Preference Data: Game preferences, favorite sports teams, language settings, notification preferences, and marketing communication opt-in/opt-out choices.

2.2 Information Collected Automatically

When you access xyz388 Services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, device identifiers (IMEI, device ID), screen resolution, and mobile network information.
• Connection Data: IP address, internet service provider, geographic location (country, city), time zone, and connection timestamps.
• Usage Data: Pages visited, features accessed, games played, bets placed, session duration, click patterns, navigation paths, referral sources, and interaction with platform elements.
• Transaction Records: Complete history of deposits, withdrawals, bets, wins, losses, bonus claims, and account balance changes.
• Performance Data: Error logs, crash reports, loading times, and technical diagnostic information used to improve platform stability and performance.

2.3 Information from Third-Party Sources

We may receive information about you from third-party service providers including:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet providers confirming payment authenticity and success.
• Identity Verification Services: Data validation results from third-party KYC verification providers confirming the authenticity of submitted identification documents.
• Fraud Prevention Partners: Risk assessment data, fraud detection signals, and security alerts from specialized anti-fraud service providers.
• Marketing Partners: Attribution data and conversion tracking information (where you have provided appropriate consent) from advertising platforms.

3. How We Use Your Information

xyz388 processes your personal data for the following legitimate purposes:

3.1 Service Provision and Account Management

• Create, maintain, and manage your xyz388 account;
• Verify your identity and age to comply with 21+ age restriction requirements;
• Process deposits, withdrawals, and financial transactions;
• Deliver gaming services including sports betting, casino games, and slot entertainment;
• Calculate odds, settle bets, and distribute winnings;
• Manage bonuses, promotions, and loyalty rewards;
• Provide customer support and respond to inquiries;
• Facilitate communication regarding your account or Services.

3.2 Security, Fraud Prevention, and Compliance

• Detect, prevent, and investigate fraudulent activity, collusion, cheating, or terms violations;
• Monitor transactions for suspicious patterns indicative of money laundering or financial crimes;
• Enforce our Terms and Conditions and protect xyz388's legal rights;
• Comply with legal obligations, regulatory requirements, and licensing conditions;
• Respond to law enforcement requests, court orders, or government inquiries when legally required;
• Maintain platform security, prevent unauthorized access, and protect against cyber threats.

3.3 Service Improvement and Personalization

• Analyze usage patterns to improve platform functionality, user interface, and user experience;
• Develop new features, games, and services based on user preferences and behavior;
• Personalize content, recommendations, and promotions relevant to your interests;
• Conduct research, testing, and statistical analysis to optimize Services;
• Troubleshoot technical issues and improve platform stability and performance.

3.4 Marketing and Communications

• Send promotional emails, SMS messages, and push notifications about bonuses, special offers, and new features (only with your consent, which you may withdraw at any time);
• Deliver personalized marketing content based on your gaming preferences and activity;
• Conduct surveys, request feedback, and gather testimonials to improve our Services;
• Send important service announcements, account updates, and policy changes.

4. Data Sharing and Disclosure

xyz388 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banks and e-wallet providers process your deposits and withdrawals. We share necessary financial information to complete transactions securely.
• Game Providers: Third-party software suppliers providing casino games, slots, and live dealer services may receive limited data required to deliver their products through our platform.
• Identity Verification Services: KYC verification partners receive identification documents to confirm your identity and age.
• Customer Service Tools: Live chat, email management, and CRM platforms used to deliver customer support services.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers store and process data on our behalf.
• Analytics Services: Platforms that help us understand user behavior, optimize performance, and improve Services.

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable data protection regulations.

4.2 Legal and Regulatory Disclosures

We may disclose your information when required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or government requests;
• Cooperate with law enforcement investigations into illegal activity or suspected criminal conduct;
• Meet licensing requirements imposed by gaming regulators in jurisdictions where we operate;
• Enforce our Terms and Conditions, investigate terms violations, or protect xyz388's legal rights;
• Protect the safety, security, or property of xyz388, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, reorganization, or bankruptcy involving xyz388, your personal information may be transferred to the acquiring or successor entity as part of the transaction. We will notify you of any such transfer and any choices you may have regarding your information.

5. Data Security Measures

xyz388 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Security Controls

• Encryption: All data transmission between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by major financial institutions.
• Secure Storage: Personal data is stored on secure servers with encrypted databases, access controls, and regular security audits.
• Firewalls and Intrusion Detection: Advanced firewall systems and intrusion detection/prevention systems (IDS/IPS) monitor and block unauthorized access attempts.
• Authentication: Multi-factor authentication options and strong password requirements protect account access.
• Regular Updates: Security patches, software updates, and vulnerability assessments are performed continuously to address emerging threats.

5.2 Organizational Security Practices

• Access Restrictions: Personal data access is limited to authorized employees who require it to perform their job functions, following the principle of least privilege.
• Confidentiality Agreements: All employees and contractors with data access sign strict confidentiality agreements and receive regular privacy and security training.
• Vendor Management: Third-party service providers undergo security assessments and must meet our data protection standards.
• Incident Response: We maintain a security incident response plan to quickly detect, contain, and respond to any data breaches or security incidents.

6. Your Privacy Rights

As an xyz388 user, you have the following rights regarding your personal data:

6.1 Right to Access

You may request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of your verified request.

6.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings, or contact customer support for assistance.

6.3 Right to Erasure

You may request deletion of your personal data, subject to certain limitations. We must retain some information for legal compliance, fraud prevention, dispute resolution, and accounting purposes even after account closure.

6.4 Right to Restrict Processing

You may request that we limit how we process your personal data in certain circumstances, such as while we verify data accuracy or assess the legitimacy of a processing activity.

6.5 Right to Data Portability

You may request a copy of your personal data in a portable format that can be transferred to another service provider, where technically feasible.

6.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time by using unsubscribe links in emails or adjusting your communication preferences in your account settings.

6.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before consent was withdrawn.

6.8 Exercising Your Rights

To exercise any of these rights, please contact xyz388 customer support via email, live chat, or WhatsApp. We may need to verify your identity before processing requests to ensure data security. We will respond to verified requests within 30 days.

7. Cookies and Tracking Technologies

xyz388 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content.

7.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, including login, session management, and security features. These cannot be disabled without affecting core Services.
• Performance Cookies: Collect information about how you use our platform, such as pages visited and features accessed, to help us improve performance and user experience.
• Functional Cookies: Remember your preferences (language, currency, settings) to provide a more personalized experience.
• Advertising Cookies: Used to deliver relevant advertisements and track marketing campaign effectiveness (only with your consent).

7.2 Managing Cookie Preferences

Most web browsers allow you to control cookies through settings. You can set your browser to refuse all cookies or alert you when cookies are being sent. However, disabling essential cookies may prevent you from accessing certain features of xyz388 Services. For more information on managing cookies, consult your browser's help documentation.

8. Data Retention

xyz388 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Retention Periods

• Active Accounts: Personal data is retained while your account remains active and for the duration necessary to provide ongoing Services.
• Closed Accounts: After account closure, we retain certain information for up to 7 years to comply with legal obligations, resolve disputes, enforce agreements, and prevent fraud.
• Transaction Records: Financial transaction data is retained for at least 7 years to comply with accounting, tax, and anti-money laundering regulations.
• Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list to honor your preference and prevent future marketing.

8.2 Secure Deletion

When personal data is no longer required, it is securely deleted or anonymized using industry-standard methods to prevent unauthorized access or recovery.

9. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact xyz388 through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the xyz388 platform
• WhatsApp Support: Available 09:00-02:00 WIB daily

We will respond to all privacy-related inquiries within 30 days of receipt.

10. Changes to This Privacy Policy

xyz388 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our practices, Services, legal requirements, or operational needs. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Effective Date";
• Sending email notification to your registered email address;
• Displaying a prominent notice on the xyz388 platform.

Your continued use of xyz388 Services after the effective date of any changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

Last Updated: January 1, 2026 | Version: 1.0 | This Privacy Policy is effective immediately for new users and will become effective 30 days from the posting date for existing users.