club388 Privacy Policy

This page describes what we collect when you use club388 and how we keep that data protected. Our commitment is to handle your personal information—registration details, payment records, gameplay history, and device identifiers—according to established privacy principles and applicable local data-protection law.

We at club388 operate an online gaming platform offering slot tournaments, live-dealer tables, sportsbook markets, and esports competitions. To deliver these services securely, we collect information directly from you during registration and account use, and we may receive additional data from our payment partners and service providers. This policy explains what we collect, why we collect it, how long we retain it, and what rights you hold over your data.

Our privacy practices centre on account security and regulatory compliance. We do not sell your personal data to marketers or advertisers. We share data only with payment processors, hosting providers, and compliance authorities as required by law. By opening an account with club388, you affirm that you have read this policy and consent to the data practices described herein.

What We Collect on club388

We collect your email address, full name, date of birth, phone number, and residential address during registration. This information is mandatory for account creation and identity verification. We also collect a government-issued ID (passport, national identity card, or driver's license) and a live selfie for Know-Your-Customer (KYC) verification; these documents are encrypted and stored separately from your account profile.

When you deposit or withdraw funds on club388, we record the transaction amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers via mobile banking, local payment, online payment, e-wallet), and the date of the transaction. We retain these records to comply with anti-money-laundering (AML) regulations and to investigate disputes. Our payment partners may share additional data with us—such as your e-wallet account holder name or bank account number—to facilitate settlement and prevent fraud.

We collect gameplay data: which games you play (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways, or live-dealer tables), session duration, bet amounts, and outcomes. We use this data to calculate your account balance, settle winnings, detect irregular patterns, and improve platform performance. We also collect technical data: your IP address, device type, operating system, browser, and timestamps of your sessions. This technical information helps us diagnose connectivity issues, enforce security controls, and prevent unauthorized access.

How We Use and Protect Your Data on club388

We at club388 use your personal data to authenticate your account, process deposits and withdrawals, settle winnings, and comply with KYC and AML regulations. When you submit a password reset request, we verify your identity by sending a secure link to your registered email; only you can reset your password using this link. When you enable two-factor authentication (2FA), we send a time-limited code via email or SMS to authorise sensitive actions such as withdrawals or password changes. We never request your password via email, chat, or phone—password reset occurs only through our secure login interface.

We protect your data using industry-standard encryption (HTTPS for all transmissions, AES-256 for stored data). Our servers are hosted in geographically distributed data centres; your data may be processed outside your resident jurisdiction but remains encrypted and access-controlled. We employ role-based access restrictions, meaning only staff with explicit job need can view your personal or payment information. Our compliance team regularly audits data-handling procedures and conducts security assessments.

We retain your account records—email, name, ID documents, KYC verification status—for the duration of your account lifecycle. After you close your account, we retain records for a compliance retention window (typically 5–7 years) as required by applicable AML and tax regulations. We permanently delete sensitive data such as plaintext passwords and payment card details immediately after processing; we store only encrypted transaction references.

We at club388 treat your data as a trust asset. We do not monetise it, we do not share it without legal obligation, and we do not use it for purposes beyond operating your account.

Third-Party Data Sharing and Compliance

We share your data with payment processors (such as mobile banking, local payment, online payment, and bank partners) only to the extent necessary to process your deposits and withdrawals. These processors operate under their own privacy policies; we do not control their practices and recommend reviewing their privacy notices before initiating transactions.

We may disclose your data to regulatory authorities, law-enforcement agencies, and financial intelligence units if required by law or court order. We undertake to notify you of such requests whenever legally permissible, unless doing so would compromise an investigation or violate the requesting authority's instructions.

Our hosting and analytics partners (such as cloud infrastructure and error-logging services) may access aggregate, anonymised data but not your personal account information. We contractually prohibit these partners from using your data for their own marketing or business purposes.

Your Rights and Data Subject Requests on club388

You have the right to request access to the personal data we hold about you on club388. You may also request correction of inaccurate information, deletion of data (subject to regulatory retention requirements), and a machine-readable export of your account records. To exercise these rights, contact our data-protection team through your account dashboard or via our support email. We respond to verified requests within a documented timeframe, typically 14–30 business days.

If you reside in Jakarta, Surabaya, Bandung, Medan, or Semarang and believe we have mishandled your data, you may escalate your concern to your local data-protection authority or regulatory body. We cooperate fully with regulatory investigations and provide requested documentation.

Cookies and Tracking Technologies

We use session cookies to maintain your login state, remember your account preferences (such as game-history filters), and prevent cross-site forgery attacks. These cookies expire when you close your browser or log out. We do not use persistent tracking cookies or third-party analytics pixels that follow you across unrelated websites. Our cookie policy is transparent: you can inspect browser settings to view or delete cookies from club388 at any time.

Policy Updates and Contact

We may update this privacy policy periodically to reflect changes in our practices, technology, or law. We notify you of material changes via email at least 30 days before the updated policy takes effect. Your continued use of club388 after the notification period constitutes acceptance of the updated terms. For questions about this policy or to submit a data-protection request, contact our privacy team through the contact information in our legal notice. We undertake to respond to all inquiries professionally and within documented timelines.