Privacy Policy — x0368

Introduction & Scope

This Privacy Policy ("Policy") is issued by x0368 ("we", "us", "the Platform") and applies to all personal data processed in connection with the x0368 website at https://x0368.cam, its associated mobile applications, and any other services operated under the x0368 brand.

This Policy applies to all current and prospective players, visitors, and any other individuals whose personal data x0368 processes. It should be read alongside our Terms & Conditions, which govern the overall agreement between you and x0368.

x0368 primarily serves players based in Indonesia. Where Indonesian data protection principles apply, we adhere to them in full. We are also guided by internationally recognized data protection principles, including those reflected in the EU General Data Protection Regulation (GDPR) and equivalent frameworks, as a benchmark for best practice.

By registering an Account on x0368 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy.

Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, identification number, location data, online identifier, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means x0368, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of x0368 under a data processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data for a stated purpose.
• "KYC Data" means identity verification documents and related information submitted by a Player to complete the Know Your Customer (KYC) process, including government-issued identification, selfie photographs, and proof of payment account ownership.
• "Cookies" means small text files placed on a user's device by a website for the purpose of storing session information, preferences, and analytics data.

Data Controller

The Data Controller responsible for your Personal Data is x0368, operating the Platform at https://x0368.cam. For all data protection enquiries, requests to exercise your rights, or complaints regarding the handling of your Personal Data, please contact our Data Protection team using the contact details in Section 16 of this Policy.

x0368 appoints Data Processors — including payment service providers, KYC verification partners, fraud detection services, and cloud infrastructure providers — to process data on its behalf. All such processors are bound by written data processing agreements requiring them to maintain equivalent or stricter data security standards.

Personal Data We Collect

x0368 collects the following categories of Personal Data, grouped by the context in which they arise:

x0368 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond that required for KYC) unless explicitly required to do so by law or with your explicit consent.

How We Collect Your Data

x0368 collects Personal Data through the following channels:

• Directly from you: When you register an Account, complete KYC, submit a deposit or withdrawal request, contact support, or respond to a promotional offer.
• Automatically from your device: Through cookies, log files, and device fingerprinting technologies as you browse and interact with the Platform. See Section 12 for full details on our cookie practices.
• From third-party service providers: Identity verification partners may return enriched KYC data (e.g., document validity confirmation). Payment processors confirm the status and ownership of bank accounts and e-wallet identifiers.
• From fraud detection services: Automated systems may cross-reference technical data against known fraud patterns and watchlists to protect the Platform and its players.

How We Use Your Personal Data

x0368 uses the Personal Data it collects strictly for the following purposes:

• Account management: Creating, maintaining, and securing your x0368 Account, including password resets and multi-factor authentication.
• Identity and age verification: Confirming that all players are at least 21 years of age and that the identity provided matches their payment accounts — a requirement under our anti-money laundering obligations.
• Payment processing: Executing deposits and withdrawal requests to and from your registered bank accounts (BCA, BRI, BNI, Mandiri, and others) and e-wallets.
• Platform operation: Displaying personalized game recommendations, processing bets and togel (lottery) stakes, delivering live casino streams, and maintaining real-time sports betting markets.
• Fraud prevention and security: Detecting and preventing multi-accounting, bonus abuse, money laundering, and unauthorized access to Player Accounts.
• Responsible gaming compliance: Monitoring gameplay patterns to identify potentially problematic behavior, enforcing self-exclusion settings, and applying deposit or loss limits configured by the Player.
• Customer support: Responding to queries, resolving disputes, and maintaining records of communications for quality assurance and training.
• Marketing communications: Sending promotional offers, seasonal bonuses (e.g., Idul Fitri, Ramadhan, Indonesian Independence Day promotions), and VIP tier notifications — subject to your communication preferences. You may opt out at any time.
• Legal and regulatory compliance: Fulfilling obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations.
• Service improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game library selection, and user interface design.

Legal Bases for Processing

x0368 processes your Personal Data on the following legal grounds:

• Contract performance: Processing necessary to deliver the services described in our Terms & Conditions, including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, tax reporting, and regulatory inquiries.
• Legitimate interests: Processing carried out for x0368's legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent (e.g., for marketing communications and non-essential cookies), you may withdraw that consent at any time by updating your Account preferences or contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Sharing & Disclosure

x0368 does not sell, rent, or trade your Personal Data to third parties. We share Personal Data only in the following limited circumstances:

• Payment service providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to execute your requested transactions.
• KYC and identity verification partners: Regulated third-party KYC providers process your identity documents to confirm your age and identity on behalf of x0368. These providers operate under strict data processing agreements.
• Fraud detection and security services: Automated fraud prevention platforms may receive technical and behavioral data to identify suspicious patterns. No raw Personal Data is retained by these services beyond their contracted processing scope.
• Cloud infrastructure and hosting providers: x0368 operates on enterprise-grade cloud infrastructure. Hosting providers store Platform data under strict security and confidentiality obligations.
• Legal and regulatory authorities: x0368 will disclose Personal Data to competent legal or regulatory authorities where required to do so by law, court order, or lawful regulatory demand — and only to the extent required.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of x0368's business, Player data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected Players will be notified in advance.

International Data Transfers

x0368's primary data infrastructure is hosted in data centers within the Asia-Pacific region. Some of our Data Processors — including cloud infrastructure, KYC, and fraud detection providers — may process data in jurisdictions outside Indonesia.

Where such transfers occur, x0368 ensures that appropriate safeguards are in place, which may include: (a) transferring data only to processors in jurisdictions recognized as providing adequate data protection; (b) entering into standard contractual clauses approved by relevant data protection authorities; or (c) applying binding corporate rules where applicable.

If you would like further information about the safeguards applicable to any specific transfer, please contact us using the details in Section 16.

Data Retention

x0368 retains Personal Data for as long as necessary to fulfill the purposes for which it was collected, and to comply with applicable legal, regulatory, tax, and accounting obligations. Specific retention periods include:

• Account and KYC data: Retained for the duration of the Account relationship and for a minimum of 5 years after Account closure, in accordance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gameplay logs: Retained for 2 years, or longer if required for the resolution of an active dispute.
• Customer support communications: Retained for 2 years from the date of last communication.
• Marketing preferences and opt-out records: Retained indefinitely to respect your communication preferences, even after Account closure.

When Personal Data is no longer required, x0368 securely deletes or anonymizes it in accordance with our internal data destruction procedures.

Security Measures

x0368 implements a layered security architecture designed to protect Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the x0368 Platform.
• Encryption at rest for all stored Personal Data and KYC documents, using AES-256 or equivalent standards.
• Multi-factor authentication (MFA) available for all Player Accounts and mandatory for all x0368 administrative users.
• Access controls: Personal Data is accessible only to x0368 employees and contractors who require it to perform their specific duties, enforced via role-based access control (RBAC).
• Automated intrusion detection and DDoS mitigation systems monitoring Platform traffic 24 hours a day.
• Regular security audits and penetration testing conducted by independent third-party security firms.
• Incident response procedures: x0368 maintains a formal data breach response plan, including notification obligations to affected Players in the event of a material breach.

Cookies & Tracking Technologies

x0368 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use are described below:

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, authentication tokens, and load balancing. These cannot be disabled without disrupting your ability to use the Platform.
• Functional Cookies: Store your preferences such as language settings, responsible gaming tool configurations, and display preferences to personalize your experience.
• Analytics Cookies: Collect anonymized usage data (page views, session duration, feature interactions) to help x0368 understand how the Platform is used and identify areas for improvement. This data does not identify you personally.
• Security Cookies: Support fraud detection and prevention systems by identifying unusual browsing patterns or suspicious login activity across sessions.

x0368 does not use third-party advertising or retargeting cookies. We do not serve behavioral advertising to players. You may manage your cookie preferences through your browser settings at any time. Note that disabling functional or analytics cookies may affect certain Platform features.

Minors

x0368 is strictly an adults-only platform. You must be at least 21 years of age to register an Account and use x0368 services. We do not knowingly collect Personal Data from individuals under the age of 21.

If x0368 discovers or is notified that Personal Data has been collected from a person under 21, we will immediately suspend the relevant Account, void all associated bets and balances, refund any deposited funds in full, and permanently delete all Personal Data associated with that Account.

If you believe a minor has registered on x0368, please contact us immediately at [email protected] (plain text — not a clickable link).

Your Data Rights

Subject to applicable law and certain limited exceptions, you hold the following rights over your Personal Data held by x0368:

To exercise any of these rights, please submit a request via live chat or email to [email protected] (plain text — not a clickable link), clearly identifying yourself and the right you wish to exercise. x0368 will respond within 30 calendar days. Identity verification may be required before we can fulfill your request.

Policy Amendments

x0368 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, we will notify registered Players via email or in-app notification at least 14 days before the updated Policy takes effect.

The date of the most recent update is displayed at the top of this page. Your continued use of the x0368 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and request Account closure.

Contact & Complaints

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how x0368 has handled your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 on the x0368 Platform — fastest channel for urgent data enquiries.
• Email: [email protected] (plain text only — not a clickable link). Subject line: "Data Privacy Request — [Your Name]". Response within 2 business days (WIB).
• In-App Messaging: Submit a formal data request ticket via the Help Center in your Account dashboard, selecting "Privacy & Data" as the ticket category.

x0368 takes all data privacy complaints seriously. If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction of residence.