Privacy Policy

1. Introduction

xo368 ("we," "us," "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information obtained from users ("you," "your") of our online gaming platform, including our website, mobile applications, and related services (collectively, the "Platform").

By creating an account or using xo368 services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our practices, please do not use our Platform. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of xo368 services.

2. Information We Collect

xo368 collects various types of information to provide, maintain, and improve our services, ensure platform security, and comply with legal obligations. The information we collect falls into three primary categories:

2.1 Information You Provide Directly

When you register for an xo368 account, you provide us with personal information including:

• Account Registration Data: Full legal name, date of birth, email address, phone number, residential address, and chosen username and password.
• Identity Verification Documents: Government-issued identification (Indonesian National ID / KTP), proof of address (utility bills, bank statements), and selfie photographs for KYC (Know Your Customer) verification purposes.
• Financial Information: Bank account details, e-wallet account information, payment card details (processed securely through our payment partners), and transaction history including deposits and withdrawals.
• Communications: Any information you provide when contacting our customer support team via live chat, email, WhatsApp, or other communication channels, including the content of your messages and attached files.
• Preferences and Settings: Gaming preferences, notification settings, language preferences, and responsible gaming limits you set on your account.

2.2 Information Collected Automatically

When you access and use xo368, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Usage Data: Pages visited, games played, bet amounts and outcomes, session duration, click patterns, features accessed, and timestamps of all activities.
• Location Information: IP address, approximate geographic location based on IP address, and precise location data if you grant permission through your device settings.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to recognize your device, remember your preferences, analyze platform usage, and deliver targeted content. For detailed information about our cookie usage, see Section 7 below.

2.3 Information From Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Enhanced due diligence data from third-party KYC verification providers to confirm your identity and prevent fraud.
• Fraud Prevention Partners: Information from security and fraud detection services that help us identify suspicious activities and protect player accounts.
• Publicly Available Sources: Information from public databases and sanctions lists to fulfill our legal and regulatory compliance obligations.

3. How We Use Your Information

xo368 uses the collected information for the following purposes, all of which are necessary for providing our services or fulfilling legal obligations:

3.1 Service Provision and Account Management

• Create, maintain, and manage your xo368 account
• Process deposits, withdrawals, and other financial transactions
• Provide access to casino games, sports betting, and other gaming services
• Calculate and credit winnings, bonuses, and promotional rewards
• Maintain game history, transaction records, and account statements
• Implement responsible gaming tools including deposit limits, self-exclusion, and session reminders

3.2 Identity Verification and Security

• Verify your identity and age to comply with 21+ age restrictions
• Prevent fraud, money laundering, terrorist financing, and other illegal activities
• Detect and prevent multiple accounts created by the same individual
• Secure your account against unauthorized access through authentication mechanisms
• Monitor platform usage to identify suspicious patterns or policy violations

3.3 Customer Support and Communications

• Respond to your inquiries, complaints, and support requests
• Send transactional communications including deposit confirmations, withdrawal notifications, and account alerts
• Provide updates about platform features, game releases, and service changes
• Deliver promotional communications about bonuses, tournaments, and special offers (you may opt out at any time)

3.4 Platform Improvement and Analytics

• Analyze usage patterns to understand how players interact with our platform
• Identify technical issues, bugs, and performance bottlenecks
• Conduct research and development to improve existing features and develop new services
• Personalize your experience by recommending games and content based on your preferences

3.5 Legal and Regulatory Compliance

• Comply with international gaming regulations and licensing requirements
• Respond to legal requests from law enforcement and regulatory authorities
• Enforce our Terms & Conditions and other policies
• Resolve disputes and protect our legal rights
• Maintain audit trails and records as required by gaming regulations

4. How We Share Your Information

xo368 does not sell your personal information to third parties for marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including payment processing, identity verification, fraud detection, customer support, data analytics, hosting services, and email delivery. These providers have access only to the information necessary to perform their functions and are contractually obligated to protect your data and use it solely for the purposes we specify.

4.2 Game and Content Providers

We share limited gameplay data with our game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and others) to facilitate game sessions, calculate outcomes, and track progressive jackpots. These providers are bound by strict confidentiality agreements and data protection standards.

4.3 Payment Partners

When you make deposits or withdrawals, we share necessary transaction information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your payments. Financial data is transmitted through secure, encrypted channels and tokenized where possible to minimize exposure.

4.4 Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, gaming regulators, tax authorities, or other government bodies when required by law, court order, or regulatory request. We may also disclose information when we believe in good faith that such disclosure is necessary to protect our rights, investigate fraud, respond to claims, or protect the safety of our users or the public.

4.5 Business Transfers

In the event xo368 undergoes a merger, acquisition, sale of assets, or similar corporate transaction, your personal information may be transferred to the acquiring entity as part of the transaction. You will be notified of any such change in ownership or control of your personal information.

4.6 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when participating in partner promotions or third-party integrations you authorize.

5. Data Security

xo368 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmission between your device and our servers uses 256-bit SSL (Secure Socket Layer) encryption, the same standard employed by major financial institutions.
• Secure Storage: Personal information is stored on secure servers protected by firewalls, intrusion detection systems, and physical access controls. Sensitive data such as passwords and payment information is encrypted at rest using advanced encryption algorithms.
• Access Controls: Access to personal information is restricted to authorized personnel who require such access to perform their job functions. All employees undergo background checks and sign confidentiality agreements.
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential security weaknesses.
• Incident Response: We maintain an incident response plan to detect, investigate, and respond to security breaches promptly. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

While we implement robust security measures, no system is completely secure. You also play a role in protecting your information by maintaining strong, unique passwords, enabling two-factor authentication, and not sharing your account credentials with others.

6. Data Retention

xo368 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Account information and transaction history are retained for the duration of your active account relationship with xo368.
• Closed Accounts: After account closure, we retain certain information for up to seven (7) years to comply with legal obligations, resolve disputes, enforce our agreements, and prevent fraud and abuse.
• Communications: Customer support communications are typically retained for two (2) years for quality assurance and training purposes.
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you again.

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule and applicable regulations.

7. Cookies and Tracking Technologies

xo368 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize your browser and remember your preferences.

7.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, including account authentication, session management, and security features. These cookies cannot be disabled without affecting your ability to use xo368 services.
• Performance Cookies: Collect information about how you use our platform, including which pages you visit, error messages encountered, and response times. This data helps us improve platform performance.
• Functional Cookies: Remember your preferences such as language selection, currency display, and display settings to provide a personalized experience.
• Analytical Cookies: Used with analytics tools (such as Google Analytics) to understand user behavior, measure traffic, and identify popular content. This information is aggregated and anonymized.
• Advertising Cookies: Track your activity across websites to deliver targeted promotional content based on your interests. You can opt out of targeted advertising through your browser settings.

7.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may affect your ability to access certain features of xo368. Mobile device users can manage tracking through their device settings or opt out of targeted advertising through platform-specific privacy controls.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. While xo368 operates under international law, we respect and honor the following rights where applicable:

8.1 Access and Portability

You have the right to access the personal information we hold about you and receive a copy in a structured, commonly used format. You can request your account data by contacting our support team at [email protected].

8.2 Correction and Update

You can update your account information at any time through your account settings dashboard. If you need assistance correcting inaccurate information, contact our customer support team.

8.3 Deletion

You may request deletion of your personal information, subject to our legal obligations to retain certain data for regulatory compliance, fraud prevention, and dispute resolution. To request account deletion, contact [email protected]. Note that account deletion is permanent and cannot be reversed.

8.4 Marketing Opt-Out

You can opt out of promotional communications at any time by clicking the unsubscribe link in our emails, adjusting your notification preferences in your account settings, or contacting customer support. Note that you will continue to receive transactional communications related to your account even if you opt out of marketing.

8.5 Objection and Restriction

In certain circumstances, you may object to our processing of your personal information or request that we restrict such processing. We will evaluate such requests on a case-by-case basis while balancing your rights against our legitimate interests and legal obligations.

9. Children's Privacy

xo368 services are intended exclusively for individuals aged twenty-one (21) years or older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information and terminate the associated account. Parents or guardians who believe their child has provided information to xo368 should contact us immediately at [email protected].

10. International Data Transfers

xo368 operates internationally and may transfer your personal information to servers located outside of Indonesia. When we transfer data across borders, we implement appropriate safeguards to ensure your information receives adequate protection, including standard contractual clauses, encryption, and compliance with applicable data protection laws. By using xo368 services, you consent to the transfer of your information to our international servers and third-party service providers.

11. Third-Party Links

Our Platform may contain links to third-party websites, services, or applications that are not operated by xo368. This Privacy Policy does not apply to third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit. xo368 provides these links solely for your convenience and does not endorse or assume responsibility for the content or practices of third parties.

12. Changes to This Privacy Policy

xo368 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by email (sent to the email address associated with your account) and through prominent notice on our Platform at least thirty (30) days before the changes take effect.

Your continued use of xo368 services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated policy, you must cease using our services and close your account. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the xo368 platform
• WhatsApp: +62 812-3456-7890 (08:00-24:00 WIB)

We will respond to privacy-related inquiries within thirty (30) days of receipt. For urgent security matters, please indicate "URGENT - SECURITY" in your subject line, and we will prioritize your request.