Privacy Policy of t0388

Introduction

t0388 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at https://t0388.pro (the "Platform"). We recognise that when you create an account and play on t0388, you trust us with personal information about yourself. That trust is not something we take lightly.

This Privacy Policy describes our practices concerning the personal data we collect from users of the Platform, including players based in Indonesia and wherever else the Platform is accessible. It explains the types of data we gather, the purposes for which we process it, the parties with whom we may share it, the safeguards we apply to keep it secure, and the rights available to you under applicable data protection frameworks.

By registering an Account on t0388 or by continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions.

Data Controller

For the purposes of this Privacy Policy, t0388 is the data controller in respect of personal data collected through the Platform. As data controller, t0388 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection legislation and the terms of this Policy.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our designated Privacy Officer using the contact details provided in Section 16 of this Policy.

Data We Collect

t0388 collects personal data in several categories depending on how you interact with the Platform. The categories of data we may hold about you are set out in the table below:

You are not required to provide all categories of data at all times. However, certain data — particularly Identity Data, Contact Data, and Financial Data — is mandatory for Account registration, KYC completion, and withdrawal processing. Failure to provide mandatory data may prevent you from accessing certain features of the Platform.

How We Collect Your Data

t0388 collects personal data through the following channels:

4.1 Directly From You

The majority of the personal data we hold is provided directly by you when you:

• Register an Account on the Platform by completing the registration form.
• Complete identity verification (KYC) by submitting identity documents and selfie photographs.
• Make a deposit or submit a withdrawal request, which requires you to provide banking or e-wallet details.
• Contact our support team via live chat or email.
• Respond to surveys, promotions, or other interactive features on the Platform.
• Update your Account profile or communication preferences within your Account dashboard.

4.2 Automatically Through Platform Use

When you access and use the Platform, we automatically collect Technical Data including your IP address, device identifiers, browser information, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 10.

4.3 From Third Parties

In limited circumstances, t0388 may receive personal data about you from third parties, including:

• Identity verification service providers engaged to assist with KYC checks.
• Fraud prevention and anti-money-laundering screening databases.
• Payment processing partners (solely to confirm the status of a transaction — t0388 does not receive full card numbers or full bank account credentials from payment partners).
• Our licensing authority, in connection with a compliance or regulatory enquiry.

How We Use Your Data

t0388 uses your personal data only for the purposes for which it was collected, or for compatible purposes that you would reasonably expect given the nature of our Platform. The specific purposes for which we process personal data are as follows:

• Account management: Creating, maintaining, and administering your Account, including processing logins, Account settings changes, and Account closure requests.
• Transaction processing: Processing your deposits and withdrawals via local Indonesian payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and others), and maintaining an accurate record of your Balance.
• Identity and age verification: Verifying that you meet the 21+ age requirement and confirming that the identity information you have provided is accurate, as required under our international gaming licence and responsible gaming obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Customer support: Responding to your queries, resolving disputes, and improving our support quality through the review of chat and email correspondence.
• Responsible gaming: Monitoring your gaming activity for patterns that may indicate problem gambling behaviour, and facilitating the use of responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money-laundering frameworks, our licensing authority's requirements, and any other legal obligations that apply to t0388 as an internationally licensed gaming operator.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players interact with the Platform and to improve the user experience, game selection, and performance.
• Marketing communications: Sending you promotional emails, bonus offers, and platform updates where you have opted in to receive such communications. You may withdraw your consent to marketing communications at any time by updating your preferences in your Account dashboard or by contacting support.

Legal Basis for Processing

t0388 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to provide the services set out in our Terms & Conditions — including Account registration, deposit and withdrawal processing, gameplay, and customer support — is carried out on the basis that it is necessary for the performance of our contract with you.
• Legal obligation: Processing carried out to comply with our anti-money-laundering obligations, KYC requirements under our gaming licence, and any other mandatory legal requirements is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, and the analysis of aggregated usage data for product improvement is carried out on the basis of t0388's legitimate business interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and for the use of non-essential cookies is carried out on the basis of your explicit consent. You may withdraw consent at any time; withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Sharing Your Data

t0388 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

7.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include payment processing partners (who facilitate your deposits and withdrawals via Indonesian banks and e-wallets), identity verification providers (who assist with KYC checks), IT and cloud infrastructure providers (who host the Platform and store data securely), and customer support platform providers. All service providers are bound by data processing agreements that restrict their use of your data to the scope of their service mandate.

7.2 Game Studios and Content Providers

Where you play games provided by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — limited technical data (such as a session token and your anonymised player identifier) is shared with the relevant studio solely to facilitate the game session. Game studios are contractually prohibited from using this data for any purpose other than game delivery.

7.3 Regulatory and Law Enforcement Authorities

t0388 may disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where required by law, where required by the terms of our gaming licence, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or serious harm.

7.4 Business Transfers

In the event that t0388 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, t0388 will take reasonable steps to notify you and to ensure that the successor entity is bound by data protection obligations no less protective than those in this Policy.

Data Retention

t0388 retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law or our licensing obligations. The general retention periods we apply are as follows:

• Active Account data: Retained for the duration of your Account's active lifetime plus a minimum of five (5) years following Account closure, to comply with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or longer if required under applicable AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the correspondence, unless the communication relates to an open dispute, in which case it is retained until the dispute is resolved plus one (1) year.
• Marketing preferences: Retained until you withdraw your consent or close your Account, whichever occurs first.
• Technical / log data: Retained for twelve (12) months from collection, except where a security incident requires longer retention for investigation purposes.

When personal data is no longer required, t0388 securely deletes or anonymises it in accordance with industry best practices. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

Data Security

t0388 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• SSL/TLS encryption: All data transmitted between your device and the t0388 Platform is encrypted in transit using industry-standard TLS protocols, so that your personal and financial information cannot be intercepted by third parties.
• Encryption at rest: Sensitive personal data — including KYC documents and financial data — is encrypted at rest in our storage infrastructure.
• Access controls: Access to systems containing personal data is restricted to authorised t0388 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Intrusion detection: Our infrastructure is monitored around the clock for unusual access patterns, attempted breaches, and other security events by our dedicated security operations team.
• Regular security audits: t0388 conducts periodic internal and external security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All t0388 employees who handle personal data receive regular data protection training and are bound by confidentiality obligations.

Cookies & Tracking Technologies

t0388 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to remember your preferences, to maintain your login session, and to gather analytical data about how the Platform is used. The categories of cookies we use are as follows:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as maintaining your login session, processing transactions, and enforcing security measures. Strictly necessary cookies cannot be disabled. They do not store any personally identifiable information beyond a session token.

10.2 Analytical / Performance Cookies

These cookies collect anonymised information about how visitors interact with the Platform — for example, which pages are visited most frequently and whether any error messages are encountered. This data helps us improve the Platform's performance and usability. These cookies are only placed with your consent.

10.3 Functional Cookies

Functional cookies remember choices you make on the Platform — such as your display preferences — to provide a more personalised experience. These cookies do not track your activity across other websites. They are placed with your consent.

10.4 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed guidance on managing cookies in your specific browser, please consult your browser's help documentation.

Your Rights

t0388 respects your rights in relation to your personal data. Depending on the applicable data protection framework and your specific circumstances, you may hold some or all of the following rights:

• Right of access: You have the right to request a copy of the personal data t0388 holds about you, along with information about how it is being used. We will provide this information within 30 days of a verified request.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (such as an email address update), you may update your data directly through your Account dashboard.
• Right to erasure: In certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected — you have the right to request that t0388 delete your personal data. This right is subject to our legal obligations to retain certain data (see Section 8).
• Right to restrict processing: You have the right to request that t0388 restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to t0388's processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, t0388 will cease using your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact t0388's Privacy Officer via live chat or by emailing [email protected]. We may need to verify your identity before processing a data rights request. We will respond to all verified requests within 30 calendar days.

Protection of Minors

t0388 is strictly an adults-only platform. You must be 21 years of age or older to register an Account and use the Platform. t0388 does not knowingly collect personal data from individuals under 21 years of age. Age verification is carried out as part of the KYC process, and t0388 reserves the right to request proof of age at any stage of the Account lifecycle.

If t0388 discovers that personal data has been collected from an individual under the age of 21, the Account will be immediately suspended, all associated Balances will be withheld pending investigation, and the personal data will be deleted as soon as practicable in accordance with our legal obligations. If you are a parent or guardian and believe that a minor has registered an Account on t0388, please contact us immediately at [email protected].

International Data Transfers

t0388 operates as an internationally licensed gaming platform. As a result, personal data collected from Indonesian players may be transferred to, and processed in, countries outside of Indonesia where our servers, service providers, or licensing authority are located. Where such transfers take place, t0388 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

Safeguards applied to international transfers may include contractual clauses with service providers that impose data protection obligations consistent with this Policy, and technical controls such as encryption of data in transit and at rest. By using the Platform, you acknowledge and consent to the transfer of your personal data as described in this section.

Third-Party Links

The t0388 Platform does not include links to third-party websites as a standard feature of its design. However, in the event that any third-party content or links are encountered via the Platform, please be aware that t0388 has no control over the privacy practices of third-party websites and accepts no responsibility for their privacy policies or the data they may collect. We strongly encourage you to review the privacy policy of any third-party website before providing personal information.

Changes to This Privacy Policy

t0388 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. When material changes are made, we will notify registered players via email or an in-platform notification at least 7 days before the updated Policy takes effect. The date of the most recent update is always displayed at the top of this page.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes and your consent to the updated terms where consent is the applicable legal basis. If you do not accept the updated Policy, you must cease using the Platform and may close your Account in accordance with the Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way t0388 processes your personal data, please contact our Privacy Officer through any of the following channels:

• Live Chat: Available 24/7 directly from the t0388 Platform. Average first-response time is under 3 minutes. This is the fastest channel for urgent privacy matters.
• Email: [email protected] — standard queries are responded to within 24 hours. Data rights requests are handled within 30 calendar days of identity verification.

We are committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you may escalate your concern to the dispute resolution body associated with t0388's licensing authority.