Privacy Policy

1. Introduction

This Privacy Policy governs the collection, processing, and use of personal data by xyz338 ("we," "us," or "our") in connection with your use of our online casino and sports betting platform available at https://xyz338.cam (the "Platform"). By creating an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

xyz338 operates primarily for users in the Indonesian market and complies with applicable data protection regulations governing online gaming services. We recognize the importance of protecting your personal information and maintaining your trust. This policy outlines our practices regarding data collection, processing, storage, and your rights as a data subject.

If you do not agree with the terms of this Privacy Policy, you must discontinue use of the xyz338 Platform immediately and refrain from providing any personal information to us. Continued use of our services following any updates to this policy constitutes acceptance of the revised terms.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an xyz338 account, we collect personal information necessary to verify your identity, comply with legal obligations, and provide our services. This information includes:

• Identity Information: Full legal name as it appears on your government-issued identification, date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, residential address (including street, city, postal code, and province), and preferred communication language.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account details), payment card information if applicable, and transaction history.
• Verification Documents: Copies of government-issued photo identification (KTP, passport, driver's license), proof of address documents (utility bills, bank statements dated within the last three months), and proof of payment method ownership.
• Account Credentials: Username, password (stored in encrypted form), and security questions and answers.

2.2 Information Automatically Collected

When you access the xyz338 Platform, we automatically collect certain technical and usage information through cookies and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network information.
• Connection Data: IP address, geographic location (country, region, city based on IP), internet service provider, and connection timestamps.
• Usage Data: Pages viewed, features accessed, time spent on pages, click patterns, search queries, game play history, betting patterns, deposit and withdrawal transactions, and customer support interactions.
• Performance Data: Error logs, crash reports, loading times, and technical diagnostics to improve platform stability and performance.

2.3 Information from Third Parties

We may receive additional information about you from third-party sources including payment processors (bank transaction confirmations), fraud prevention services (risk assessment data), and identity verification providers (KYC validation results). This information is used to enhance security, prevent fraud, and comply with regulatory requirements.

3. How We Use Your Information

xyz338 processes your personal data for the following legitimate purposes:

• Account Management: Creating and maintaining your user account, authenticating your identity during login, and managing account settings and preferences.
• Service Provision: Processing deposits and withdrawals, enabling game play and sports betting, calculating winnings and losses, managing bonuses and promotions, and providing customer support.
• Verification and Compliance: Verifying your age (21+ requirement), confirming your identity and residential address, validating payment method ownership, complying with Know Your Customer (KYC) regulations, and fulfilling Anti-Money Laundering (AML) obligations.
• Security and Fraud Prevention: Detecting and preventing fraudulent transactions, identifying suspicious account activity, preventing multiple account registrations, protecting against unauthorized access, and investigating security incidents.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal approvals, account alerts), promotional offers and bonuses (with your consent), responsible gaming reminders, and important platform updates.
• Platform Improvement: Analyzing usage patterns to enhance user experience, optimizing platform performance and stability, developing new features and games, and conducting market research.
• Legal Obligations: Responding to legal requests from law enforcement or regulatory authorities, resolving disputes and enforcing our Terms and Conditions, maintaining records as required by gambling regulations, and protecting our legal rights.

4. Data Sharing and Disclosure

xyz338 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers to support our operations, including payment processors (Indonesian banks and e-wallet providers), identity verification services, cloud hosting providers, customer support platforms, and security and fraud detection services. These providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 Legal and Regulatory Requirements

We may disclose your information when required by law, including responses to court orders, subpoenas, or regulatory inquiries; cooperation with law enforcement investigations; compliance with gambling licensing requirements; and protection of xyz338's legal rights and property.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will provide notice and ensure that the receiving party maintains equivalent data protection standards.

4.4 With Your Consent

We may share your information with third parties when you have provided explicit consent for such disclosure, such as participating in promotional partnerships or referral programs.

5. Data Security Measures

xyz338 implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

• Encryption: 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and our servers. All sensitive data stored in our databases is encrypted using industry-standard algorithms.
• Access Controls: Strict role-based access controls ensuring only authorized personnel can access personal data. Multi-factor authentication requirements for administrative access. Regular access audits and permission reviews.
• Network Security: Advanced firewalls protecting our infrastructure from external threats. Intrusion detection and prevention systems monitoring for suspicious activity. Regular security vulnerability assessments and penetration testing.
• Data Segregation: Personal information is stored separately from gaming data. Payment information is tokenized and never stored in plain text. Financial transactions are processed through PCI-DSS compliant payment gateways.
• Employee Training: Mandatory data protection training for all employees. Confidentiality agreements signed by all staff with access to personal data. Clear data handling policies and procedures.
• Incident Response: Dedicated security team monitoring for potential breaches. Incident response plan ready to activate in case of data security events. Commitment to notify affected users within 72 hours of confirmed data breaches.

While we implement robust security measures, no system is entirely immune to threats. Users are responsible for maintaining the confidentiality of their account credentials and should notify us immediately if they suspect unauthorized access.

6. Data Retention

xyz338 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations. Specific retention periods include:

• Active Accounts: Data is retained throughout the duration of your active account relationship with xyz338.
• Closed Accounts: Following account closure, personal data is retained for a minimum of 5 years to comply with financial record-keeping requirements and potential dispute resolution.
• Transaction Records: Deposit, withdrawal, and gaming transaction records are retained for 7 years in accordance with financial regulations.
• Identity Verification Documents: KYC documents are retained for 7 years following account closure.
• Marketing Communications: Consent records for marketing communications are retained until consent is withdrawn, plus an additional 3 years.
• Legal Hold: Data subject to legal proceedings, regulatory investigations, or disputes is retained until the matter is fully resolved.

After the retention period expires, personal data is securely deleted or anonymized beyond reconstruction. You may request early deletion of certain data types subject to our legal obligations.

7. Your Privacy Rights

As a xyz338 user, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update certain information directly through your account settings.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations. Account closure will trigger our data deletion procedures after the required retention period.
• Right to Restriction: You may request that we limit the processing of your data in certain circumstances, such as while verifying data accuracy or resolving disputes.
• Right to Data Portability: You may request transfer of your data to another service provider in a machine-readable format where technically feasible.
• Right to Object: You may object to processing of your data for direct marketing purposes or when processing is based on legitimate interests. We will cease such processing unless we have compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact our Data Protection Officer via email at [email protected] (plain text, not clickable). We will respond to all requests within 30 days and may require identity verification before processing certain requests.

8. Cookies and Tracking Technologies

xyz338 uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you during subsequent visits.

8.1 Types of Cookies We Use

You can control cookie settings through your browser preferences. Disabling certain cookies may affect platform functionality and limit access to specific features. Most browsers allow you to view, delete, and block cookies. Refer to your browser's help documentation for specific instructions.

9. Third-Party Services

The xyz338 Platform may contain links to third-party websites, services, or content, including payment processors, game providers, and social media platforms. This Privacy Policy applies only to information collected by xyz338. We are not responsible for the privacy practices of third-party services, and we encourage you to review their privacy policies before providing any personal information.

When you use third-party payment methods (Indonesian banks, e-wallets), you are subject to their respective privacy policies and terms of service. xyz338 receives only transaction confirmation data necessary to process deposits and withdrawals—we do not access your full banking credentials or account balances.

10. Policy Updates

xyz338 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. All updates will be effective immediately upon posting to the xyz338 website with a revised "Last Updated" date. Material changes will be communicated via email or prominent notice on the Platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of xyz338 services following any update constitutes acceptance of the revised policy. If you do not agree with changes, you must discontinue use and may request account closure.

11. Contact Information

For questions, concerns, or requests related to this Privacy Policy or our data practices, please contact xyz338's Data Protection team:

• Email: [email protected] (plain text, not a clickable link)
• Subject Line: Include "Privacy Inquiry" or "Data Protection Request" for faster routing
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours and complete formal data requests within 30 days

If you believe xyz338 has not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.