Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by pay388 through our website at https://pay388.cam, mobile applications, and any related services (collectively, "the Platform"). By creating an account and using pay388 services, you acknowledge that you have read, understood, and consent to the data practices described in this policy.

pay388 operates as an online gaming platform serving Indonesian players with casino games, live dealer experiences, sports betting, and related entertainment services. As a responsible gaming operator, we process personal data in accordance with applicable data protection regulations and industry best practices. This policy covers what information we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding your personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The "Last Updated" date at the bottom of this document indicates when the most recent changes were made. We encourage you to review this policy periodically. Continued use of pay388 services after changes are posted constitutes your acceptance of the updated policy.

2. Data Controller

pay388 acts as the data controller for personal information collected through our Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable privacy laws and regulations. If you have questions about our data practices or wish to exercise your privacy rights, please contact us at [email protected].

3. Information We Collect

pay388 collects several categories of personal information to provide, maintain, and improve our services. The information we collect includes:

3.1 Account Registration Information

When you create a pay388 account, we collect:

• Full name as it appears on your government-issued identification
• Date of birth (to verify you meet the minimum age requirement of 21 years)
• Email address for account communications and notifications
• Phone number for account security and customer support
• Residential address including city, province, and postal code
• Username and encrypted password for account access
• Preferred currency (Indonesian Rupiah for all pay388 transactions)

3.2 Identity Verification Information (KYC)

To comply with regulatory requirements and prevent fraud, we collect:

• Government-issued identification documents (KTP - Indonesian ID card, passport, or driver's license)
• Proof of address documents (utility bills, bank statements, or government correspondence)
• Payment method verification (bank account statements, e-wallet screenshots showing account ownership)
• Selfie photographs holding your ID document for additional verification when necessary

3.3 Payment and Transaction Information

When you make deposits or withdrawals, we collect:

• Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, and BSI
• E-wallet information (account numbers or phone numbers) for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history including deposits, withdrawals, bonus claims, and wagers
• Payment processing information required by our third-party payment processors

3.4 Gaming Activity Information

To provide gaming services and ensure fair play, we collect:

• Game play history including games played, bets placed, wins, and losses
• Session duration and frequency of visits to the Platform
• Favorite games, betting patterns, and gameplay preferences
• Bonus usage, wagering progress, and promotional participation
• Responsible gaming settings (deposit limits, loss limits, session limits, self-exclusion status)

3.5 Technical and Device Information

When you access pay388, we automatically collect:

• IP address and geolocation data (to verify you are accessing from an authorized jurisdiction)
• Device type, operating system, browser type, and version
• Screen resolution and device identifiers
• Pages visited, links clicked, and navigation patterns on our Platform
• Cookies and similar tracking technologies (as described in our Cookie Policy)
• Error logs and crash reports to improve Platform stability

3.6 Communications and Support Information

When you contact pay388 customer support, we collect:

• Content of your inquiries, complaints, or feedback
• Live chat transcripts, email correspondence, and phone call recordings
• Support ticket history and resolution details
• Survey responses and feedback forms

4. How We Use Your Information

pay388 uses your personal information for the following purposes:

• Account Management: Creating and maintaining your pay388 account, authenticating your identity, and providing secure access to our services.
• Payment Processing: Processing deposits and withdrawals, managing your account balance, and reconciling financial transactions through our payment partners.
• Regulatory Compliance: Verifying your age and identity to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations, as well as maintaining records as required by gaming authorities.
• Service Provision: Delivering gaming content, enabling gameplay, tracking bets and winnings, and managing bonuses and promotions.
• Customer Support: Responding to inquiries, resolving disputes, providing technical assistance, and improving service quality based on feedback.
• Fraud Prevention: Detecting and preventing fraudulent activities, multiple account creation, collusion, cheating, and other violations of our Terms & Conditions.
• Responsible Gaming: Monitoring gaming behavior to identify potential problem gambling patterns, enforcing self-exclusion requests, and implementing responsible gaming limits.
• Marketing Communications: Sending promotional offers, bonus notifications, tournament announcements, and other marketing materials to registered users (with opt-out options available).
• Platform Improvement: Analyzing usage patterns, testing new features, improving user experience, and optimizing Platform performance.
• Legal Obligations: Complying with legal requirements, responding to law enforcement requests, and protecting pay388's legal rights and interests.

5. Legal Basis for Processing

pay388 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you when you create an account and use our services.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including KYC, AML, and gaming license requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and improving our services, provided such interests are not overridden by your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing certain categories of personal data, such as marketing communications.

6. How We Share Your Information

pay388 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for legitimate business purposes:

• Payment Processors: We share necessary payment information with Indonesian banks and e-wallet providers to process deposits and withdrawals on your behalf.
• Game Providers: We share limited technical information with third-party game providers whose games appear on our Platform to enable gameplay and track session data.
• Identity Verification Services: We may share identification documents with KYC verification partners who help us confirm player identities and comply with regulatory requirements.
• Customer Support Tools: We share customer inquiry data with third-party support platforms and live chat services to provide efficient customer service.
• Marketing Partners: With your consent, we may share anonymized or aggregated data with marketing partners for analytics purposes, though we never share identifiable personal information for marketing.
• Legal Authorities: We may disclose personal information to law enforcement, regulatory bodies, or government agencies when required by law or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers with whom we share data are contractually obligated to protect your information and use it only for the specified purposes. We conduct due diligence to ensure these partners maintain appropriate data security standards.

7. Data Security Measures

pay388 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols.
• Secure Storage: Personal data is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems.
• Access Controls: Only authorized pay388 personnel with legitimate business needs can access personal data, and all access is logged and monitored.
• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential security risks.
• Employee Training: Our staff receives regular training on data protection principles and security best practices.
• Incident Response: We maintain an incident response plan to quickly detect, contain, and remediate security breaches if they occur.

While we implement robust security measures, no data transmission over the internet or electronic storage system is completely secure. You also play a role in protecting your account by choosing a strong password, keeping it confidential, and logging out after each session.

8. Data Retention

pay388 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Data is retained for the duration of your active account and ongoing use of our services.
• Closed Accounts: After account closure, we retain certain data for up to 7 years to comply with financial record-keeping requirements and legal obligations.
• Transaction Records: Financial transaction data is retained for a minimum of 7 years as required by anti-money laundering regulations.
• Marketing Data: If you opt out of marketing communications, we retain minimal contact information to respect your opt-out preference and prevent future unwanted communications.
• Legal Claims: Where necessary to establish, exercise, or defend legal claims, we may retain data beyond standard retention periods.

Upon expiration of applicable retention periods, we securely delete or anonymize personal information so it can no longer be associated with you.

9. Your Privacy Rights

Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal information:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal information.
• Right to Erasure: You can request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: You can request that we limit how we use your personal data in certain circumstances.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw consent at any time.

To exercise these rights, please contact pay388 customer support at [email protected] with your request. We will respond within a reasonable timeframe as required by applicable law. Please note that certain rights may be subject to limitations based on legal obligations or legitimate business interests.

10. International Data Transfers

pay388 primarily serves Indonesian players and stores data on servers located in secure data centers. However, some of our service providers and game providers may be located outside Indonesia, which may result in your personal data being transferred to, processed in, or stored in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information in accordance with applicable data protection laws.

11. Children's Privacy

pay388 services are strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal information from anyone under the age of 21. If we discover that we have inadvertently collected information from someone under 21, we will delete that information immediately. If you believe a minor has provided personal information to pay388, please contact us at [email protected] so we can take appropriate action.

12. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact pay388:

• Email: [email protected]
• Live Chat: Available 24/7 through our website
• Customer Support: Available 24/7 WIB

We are committed to resolving any privacy concerns you may have in a timely and professional manner.