Privacy Policy

1. Introduction

This Privacy Policy describes how x368 ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects personal information obtained from users ("you", "your", "User", "Player") of our online casino and sports betting platform accessible at https://x368.cam. By creating an account or using x368 services, you consent to the data practices described in this Privacy Policy. This policy should be read in conjunction with our Terms & Conditions, which govern your use of x368 services.

x368 operates under international gaming licenses and is committed to compliance with applicable data protection regulations. We recognize that privacy is important to Indonesian users and have implemented comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. This Privacy Policy is transparent about what information we collect, why we collect it, how we use it, and the choices you have regarding your personal data.

If you have questions or concerns about this Privacy Policy or our data handling practices, please contact our Data Protection Team through the contact information provided at the end of this document.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an x368 account, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, gender, nationality, and government identification number (KTP number for Indonesian residents).
• Contact Information: Email address, mobile phone number, residential address including street address, city, province, and postal code.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals, e-wallet account information (OVO, DANA, GoPay, ShopeePay), payment transaction history, and deposit/withdrawal amounts.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers, and any other authentication information you create.
• Verification Documents: Copies of government-issued identification documents (KTP, passport, driver's license), proof of address documents (utility bills, bank statements, government correspondence), and selfie photographs for identity verification purposes.
• Communication Data: Content of messages you send to our customer support team via Live Chat, WhatsApp, email, or other communication channels, including inquiries, complaints, and feedback.

2.2 Information Collected Automatically

When you access and use x368 services, we automatically collect certain technical and usage information through cookies and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system and version (Windows, macOS, Android, iOS), browser type and version, screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages visited, features accessed, time spent on pages, games played, bets placed, betting patterns, deposit and withdrawal activity, login times and frequency, and navigation paths through the website.
• Technical Data: IP address, geolocation data (city/region level, not precise GPS coordinates), internet service provider (ISP), referring/exit pages, clickstream data, and cookie identifiers.
• Gameplay Data: Game selections, bet amounts, bet types, winning and losing outcomes, bonus usage, promotional participation, and gaming session duration.

2.3 Information from Third Parties

We may receive information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay).
• Identity Verification Services: Information from third-party KYC verification providers used to confirm your identity and age, detect fraudulent documents, and comply with anti-money laundering (AML) regulations.
• Game Providers: Gameplay data, technical performance metrics, and game outcome information from third-party game studios whose games are offered on x368.
• Publicly Available Sources: Information from public databases and registries used for verification purposes, sanctions screening, and compliance with regulatory requirements.

3. How We Use Your Information

x368 uses collected information for the following purposes, all of which are necessary for providing online gambling services or fulfilling our legal obligations:

3.1 Service Provision and Account Management

• Creating and maintaining your x368 account
• Processing your registration and identity verification (KYC)
• Authenticating your login credentials and preventing unauthorized account access
• Processing deposits, withdrawals, and other financial transactions
• Managing your account balance and transaction history
• Providing customer support and responding to your inquiries
• Communicating important account-related information including security alerts and policy updates

3.2 Gaming Operations

• Enabling you to place bets on sports events and play casino games
• Processing and settling bets according to game rules and outcomes
• Crediting winnings to your account and debiting losses
• Administering bonuses, promotions, and loyalty programs
• Calculating and applying wagering requirements on bonuses
• Maintaining game fairness and ensuring compliance with gaming regulations
• Generating random outcomes for casino games using certified RNG systems

3.3 Security, Fraud Prevention, and Compliance

• Detecting and preventing fraud, money laundering, and other illegal activities
• Identifying multiple accounts, collusion, and bonus abuse
• Monitoring for suspicious betting patterns or technical exploitation
• Verifying your age to prevent underage gambling (21+ enforcement)
• Complying with anti-money laundering (AML) and Know Your Customer (KYC) regulations
• Maintaining audit trails for regulatory reporting and dispute resolution
• Responding to legal requests, court orders, and government investigations
• Protecting x368 systems, infrastructure, and intellectual property from security threats

3.4 Responsible Gaming

• Implementing and enforcing deposit limits, loss limits, and session time limits you set
• Administering self-exclusion and cooling-off periods
• Monitoring for signs of problem gambling behavior
• Providing access to responsible gaming tools and resources
• Intervening when patterns suggest gambling may be harmful

3.5 Service Improvement and Personalization

• Analyzing usage patterns to improve website functionality and user experience
• Understanding player preferences to enhance game selection and features
• Personalizing content, recommendations, and promotions based on your activity
• Conducting market research and gathering feedback to develop new services
• Optimizing website performance for Indonesian users and mobile devices

3.6 Marketing and Communications

• Sending promotional offers, bonus announcements, and special event notifications
• Providing updates about new games, features, and platform improvements
• Delivering personalized marketing based on your gaming preferences (with your consent)
• Conducting customer satisfaction surveys and requesting feedback

4. Legal Basis for Processing (Indonesian Context)

Under applicable data protection principles, x368 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under the Terms & Conditions, including account creation, transaction processing, game provision, and customer support.
• Legal Compliance: Processing is required to comply with legal obligations including age verification (21+ minimum), anti-money laundering (AML) regulations, tax reporting, sanctions screening, and responses to lawful government requests.
• Legitimate Interests: Processing serves legitimate business interests such as fraud prevention, security maintenance, service improvement, and network infrastructure protection, balanced against your privacy rights.
• Consent: For certain activities such as personalized marketing, optional data collection, and non-essential cookies, we obtain your explicit consent which you may withdraw at any time.

5. Data Sharing and Disclosure

x368 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

5.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist in operating x368 services, subject to strict confidentiality agreements:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive financial information necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC/AML services receive identification documents and personal data to verify your identity and age, detect fraudulent documents, and screen against sanctions lists.
• Game Providers: Third-party game studios (Evolution Gaming, Pragmatic Play, and others) receive minimal gameplay data necessary to deliver casino games, live dealer services, and slot games on x368.
• Technology Infrastructure Providers: Cloud hosting services, content delivery networks (CDNs), and IT security providers who maintain the technical infrastructure supporting x368 operations.
• Customer Support Tools: Live Chat software, ticketing systems, and communication platforms used by our support team to assist you.
• Analytics and Fraud Detection: Services that help us analyze usage patterns, detect fraud, prevent account takeovers, and improve platform security.

5.2 Legal and Regulatory Obligations

We may disclose your information when required by law or to protect legal rights:

• To comply with court orders, subpoenas, warrants, or other legal processes
• To respond to lawful requests from government authorities, law enforcement, or regulatory bodies
• To comply with gaming license requirements and regulatory reporting obligations
• To enforce our Terms & Conditions and protect our rights and property
• To investigate suspected fraud, money laundering, or other illegal activities
• To protect the safety and security of x368, our users, or the public

5.3 Business Transfers

In the event x368 is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the website before your information becomes subject to a different privacy policy.

5.4 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. Such data may be shared with business partners, researchers, or used for public reporting purposes without restriction.

6. Data Security

x368 implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

6.1 Encryption and Secure Transmission

• All data transmitted between your device and x368 servers is encrypted using 256-bit SSL/TLS encryption—the same security standard used by banks and financial institutions worldwide.
• Passwords are hashed using strong cryptographic algorithms and are never stored in plain text or reversible formats.
• Payment card information, if collected, is encrypted and processed through PCI-DSS compliant payment gateways.

6.2 Infrastructure Security

• Personal data is stored on secure servers located in protected data centers with physical security controls including surveillance, access restrictions, and environmental safeguards.
• Firewalls, intrusion detection systems, and regular security audits protect against unauthorized access and cyber attacks.
• Access to personal data is restricted to authorized personnel only, based on role-specific permissions and need-to-know principles.
• All x368 employees and contractors with access to personal data sign confidentiality agreements and receive data protection training.

6.3 Monitoring and Incident Response

• We continuously monitor systems for security threats, suspicious activity, and potential data breaches.
• In the unlikely event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities as required by law.
• We maintain incident response procedures to contain breaches quickly, assess impact, and implement remediation measures.

7. Data Retention

x368 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: While your account remains active, we retain all account information, transaction history, and communications to provide ongoing services and support.
• Closed Accounts: After you close your account, we retain certain information for legal and regulatory purposes including tax reporting, anti-money laundering compliance, and dispute resolution. Retention periods typically range from 5 to 7 years depending on the data type and applicable regulations.
• Financial Records: Transaction records, deposit and withdrawal history, and related financial data are retained for at least 7 years to comply with financial record-keeping laws.
• Identity Verification Documents: Copies of identification documents are retained for the duration required by anti-money laundering and Know Your Customer regulations.
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference to ensure we do not contact you in the future.

After the retention period expires, we securely delete or anonymize personal data so it can no longer identify you. Some aggregated, anonymized data may be retained indefinitely for statistical and analytical purposes.

8. Your Privacy Rights

As an x368 user, you have the following rights regarding your personal information:

8.1 Access and Portability

You have the right to request access to the personal information we hold about you. You can download a copy of your data in a structured, commonly-used format by contacting our support team. This includes account details, transaction history, and communication records.

8.2 Correction and Update

You have the right to correct inaccurate or incomplete personal information. You can update most information directly in your account settings, including contact details and communication preferences. For changes to identity information (name, date of birth), please contact support with appropriate documentation.

8.3 Deletion and Erasure

You have the right to request deletion of your personal information in certain circumstances. However, this right is not absolute—we may be required to retain information for legal compliance, fraud prevention, or dispute resolution. To request deletion, close your account through customer support and explicitly request data deletion. We will delete information that is no longer legally required to be retained.

8.4 Restriction and Objection

You have the right to request restriction of processing or object to certain uses of your personal information, such as marketing communications. You can opt out of promotional emails and personalized marketing through your account settings or by contacting support.

8.5 Withdraw Consent

Where processing is based on your consent (such as for marketing or optional features), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

8.6 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Team via email at [email protected] with "Privacy Rights Request" in the subject line. We will respond to verified requests within 30 days. To protect your privacy, we may require verification of your identity before fulfilling requests. There is no fee for exercising your rights unless requests are manifestly unfounded, excessive, or repetitive.

9. Cookies and Tracking Technologies

x368 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on return visits.

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic website functionality including login, account access, and secure transactions. Cannot be disabled.	Session or 1 year
Performance Cookies	Collect anonymous information about how visitors use x368, including page views, navigation paths, and error messages. Help us improve website performance.	1-2 years
Functionality Cookies	Remember your preferences such as language settings, display options, and recently played games to provide a personalized experience.	1 year
Marketing Cookies	Track your browsing activity to deliver relevant promotional offers and measure effectiveness of marketing campaigns. Require your consent.	1-2 years

9.2 Managing Cookies

Most web browsers allow you to control cookies through settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. However, if you disable essential cookies, some features of x368 may not function properly. Disabling performance and marketing cookies will not prevent you from using the site but may result in a less personalized experience.

10. Third-Party Links and Services

x368 may contain links to third-party websites, game providers, or services that are not operated by us. This Privacy Policy applies only to x368—we are not responsible for the privacy practices of third-party websites or services. When you click on third-party links or access external services integrated into x368 (such as payment processors or game platforms), you are subject to their privacy policies. We encourage you to review the privacy policies of any third-party services you interact with.

11. International Data Transfers

x368 operates internationally, and your personal information may be transferred to, stored in, and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have data protection laws that differ from Indonesian law. When we transfer your information internationally, we implement appropriate safeguards to protect your data, including:

• Ensuring third-party service providers are bound by data protection agreements
• Using standard contractual clauses approved by data protection authorities
• Transferring only the minimum data necessary to provide services
• Ensuring adequate security measures are in place at receiving locations

By using x368, you consent to the transfer of your information to countries outside Indonesia as necessary to provide our services.

12. Children's Privacy

x368 services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from anyone under the age of 21. Our registration process includes age verification, and we employ additional checks to prevent underage access. If we become aware that we have inadvertently collected information from someone under 21, we will immediately delete that information and terminate the associated account. If you believe a minor has provided information to x368, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

x368 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you by:

• Posting a prominent notice on the x368 website
• Sending an email to the address associated with your account
• Requiring you to acknowledge the updated policy upon your next login

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this document indicates when the policy was last revised. Your continued use of x368 services after changes are posted constitutes your acceptance of the updated Privacy Policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact x368 Data Protection Team:

• Email: [email protected] (subject line: "Privacy Policy Inquiry")
• 24/7 Live Chat: Available directly on the x368 website
• WhatsApp: Contact through our support page for privacy-related inquiries

We aim to respond to all privacy inquiries within 48 hours. For formal data protection requests (access, deletion, correction), we will respond within 30 days as required by applicable law. Our Indonesian-speaking support team is available around the clock to assist with any privacy concerns or questions you may have about how x368 handles your personal information.