Privacy Policy

1. Introduction

au238 ("we," "us," "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your data when you access or use our online gaming platform at https://au238.cam.

We understand that trust is fundamental to our relationship with you. This policy has been designed to be transparent and comprehensive, providing you with a clear understanding of our data practices. By using au238 services, you consent to the collection and use of your information as described in this Privacy Policy.

This Privacy Policy applies to all users of the au238 platform, including visitors who browse without creating an account and registered users who actively participate in gaming activities. It covers personal information collected through our website, mobile-optimized interface, customer support channels, and any other touchpoints where au238 collects personal data.

We comply with international data protection standards and best practices, including principles similar to those established by the General Data Protection Regulation (GDPR) and other recognized privacy frameworks. As an international platform serving Indonesian players, we recognize the importance of respecting local privacy expectations while maintaining global security standards.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account with au238, you voluntarily provide us with personal information, including:

• Identity Information: Full legal name, date of birth, gender, nationality, and place of birth.
• Contact Information: Email address, telephone number, and residential address (street address, city, postal code, country).
• Account Credentials: Username, password (stored in encrypted form), and security questions.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account identifiers), and payment transaction history.
• Identity Verification Documents: Copies of government-issued identification (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and payment method verification documents (bank statements, e-wallet screenshots).
• Communication Data: Content of your communications with our customer support team, including chat transcripts, emails, and any attachments or screenshots you provide.

2.2 Information Collected Automatically

When you access or use the au238 platform, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Connection Information: IP address, internet service provider, connection type, and approximate geographic location (city-level based on IP).
• Usage Data: Pages visited, features used, time spent on pages, navigation paths, clickstream data, game sessions, betting history, and timestamps of all activities.
• Performance Data: Page load times, error messages, system crashes, and other diagnostic information.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment success/failure status, and fraud screening results from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers.
• Identity Verification Services: Results from KYC verification checks conducted by third-party identity verification providers.
• Game Providers: Gaming activity data from our partner software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.).
• Marketing Partners: Referral information if you were referred to au238 by a partner or affiliate.

3. How We Use Your Information

au238 uses your personal information for the following purposes:

3.1 Account Management & Service Delivery

• Creating and maintaining your account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to gaming products and services
• Managing bonuses, promotions, and loyalty rewards
• Responding to your inquiries and providing customer support

3.2 Verification & Compliance

• Verifying your identity and age to comply with the 21+ requirement
• Conducting Know Your Customer (KYC) checks
• Screening for anti-money laundering (AML) risks
• Detecting and preventing fraud, cheating, and other prohibited activities
• Complying with legal obligations and regulatory requirements

3.3 Platform Improvement & Analytics

• Analyzing usage patterns to improve user experience
• Testing new features and functionality
• Conducting research and statistical analysis
• Optimizing platform performance and reliability
• Personalizing content and recommendations

3.4 Communication & Marketing

• Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts)
• Providing customer service and technical support
• Sending promotional offers, bonuses, and marketing communications (only with your consent)
• Conducting surveys and gathering feedback

3.5 Security & Risk Management

• Monitoring for suspicious activity and security threats
• Investigating disputes and enforcing our Terms and Conditions
• Protecting against unauthorized access and data breaches
• Identifying and addressing responsible gaming concerns

4. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you, including providing gaming services, processing transactions, and maintaining your account.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including age verification, KYC requirements, AML screening, and record-keeping obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and analytics, provided these interests do not override your privacy rights.
• Consent: For marketing communications and certain optional data processing activities, we obtain your explicit consent, which you may withdraw at any time.

5. Data Security Measures

au238 implements comprehensive technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, alteration, or destruction:

5.1 Technical Security

• Encryption: All data transmitted between your device and our servers is protected by industry-standard SSL/TLS encryption (minimum 256-bit).
• Secure Storage: Personal information is stored on secure servers with restricted access, protected by firewalls and intrusion detection systems.
• Password Protection: User passwords are hashed using strong cryptographic algorithms (bcrypt or similar) and never stored in plain text.
• Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment gateways. We do not store complete credit card numbers or sensitive payment credentials.
• Regular Security Audits: Our systems undergo regular security assessments, vulnerability scans, and penetration testing by independent security firms.

5.2 Organizational Security

• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their duties, governed by strict access control policies.
• Employee Training: All staff members receive regular training on data protection, privacy, and security best practices.
• Confidentiality Agreements: Employees and contractors are bound by confidentiality agreements and face disciplinary action for unauthorized data access or disclosure.
• Incident Response: We maintain an incident response plan to quickly detect, contain, and remediate any security breaches.

5.3 User Responsibility

While we implement strong security measures, you also play a critical role in protecting your information. Please:

• Choose a strong, unique password and change it regularly
• Never share your password with anyone
• Log out of your account when using shared or public devices
• Report any suspicious activity immediately to our support team
• Keep your contact information up to date so we can reach you about security matters

6. Data Sharing & Third Parties

au238 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients:

6.1 Service Providers

We work with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay) process your deposits and withdrawals.
• Game Providers: Software developers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe) deliver gaming content and may receive gameplay data.
• Identity Verification Services: KYC verification providers validate your identity documents to comply with regulatory requirements.
• Customer Support Tools: Live chat and help desk software providers facilitate our customer service operations.
• Analytics Services: Analytics platforms help us understand user behavior and improve our services.

All service providers are contractually obligated to maintain data confidentiality and use your information only for the purposes we specify.

6.2 Legal Requirements

We may disclose your information when required by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Government or regulatory investigations
• Requests from law enforcement authorities
• Legal proceedings or litigation

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

7. Cookies & Tracking Technologies

au238 uses cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content.

7.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, including login, session management, and security features. These cookies cannot be disabled.	Session / Up to 1 year
Performance Cookies	Collect anonymous data about how users interact with our platform, helping us identify and fix issues.	Up to 2 years
Functional Cookies	Remember your preferences (language, region, game favorites) to provide a personalized experience.	Up to 1 year
Marketing Cookies	Track your browsing behavior to deliver relevant promotional content. You can opt out of these cookies.	Up to 13 months

7.2 Managing Cookies

Most browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete existing cookies. However, disabling essential cookies may limit your ability to use certain features of the au238 platform.

8. Data Retention

au238 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Retention Periods

• Active Accounts: Personal information is retained for the duration of your active account plus any applicable legal retention period.
• Closed Accounts: After account closure, we retain certain information for up to 7 years to comply with financial record-keeping requirements, anti-money laundering regulations, and to defend against potential legal claims.
• Transaction Records: Financial transaction records are retained for at least 7 years in accordance with international financial compliance standards.
• Identity Verification Documents: KYC documents are retained for the period required by applicable regulations, typically 5-7 years after account closure.
• Marketing Communications: If you unsubscribe from marketing emails, we retain your email address on a suppression list to ensure we do not contact you again.

8.2 Data Deletion

Once the applicable retention period expires, we securely delete or anonymize your personal information so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

9. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. au238 respects these rights and provides mechanisms for you to exercise them:

9.1 Access & Portability

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format where technically feasible.

9.2 Correction & Update

You can update your account information at any time through your account settings. If you believe any information we hold about you is inaccurate or incomplete, please contact us to request corrections.

9.3 Deletion & Right to Be Forgotten

You may request deletion of your personal information, subject to certain legal exceptions. We may retain information necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

9.4 Restriction & Objection

You have the right to restrict or object to certain types of data processing, such as marketing communications or profiling for personalized offers.

9.5 Withdrawal of Consent

Where we rely on your consent for data processing, you may withdraw that consent at any time. This will not affect the lawfulness of processing conducted before the withdrawal.

9.6 Exercising Your Rights

To exercise any of these rights, please contact our privacy team at [email protected]. We will respond to your request within 30 days. We may require verification of your identity before processing your request to ensure data security.

10. International Data Transfers

au238 operates internationally and may transfer your personal information to countries outside of Indonesia. When we transfer data across borders, we ensure appropriate safeguards are in place to protect your information:

• Secure Transfer Mechanisms: All international data transfers are encrypted in transit using secure protocols.
• Contractual Protections: We enter into data processing agreements with international service providers that include standard contractual clauses approved by recognized data protection authorities.
• Adequacy Assessments: We assess the data protection laws of recipient countries to ensure they provide adequate protection for your information.

By using au238 services, you acknowledge and consent to the transfer of your personal information to countries that may have different data protection standards than Indonesia.

11. Children's Privacy

au238 services are strictly intended for individuals aged 21 years and older. We do not knowingly collect, use, or maintain personal information from anyone under the age of 21.

If we become aware that a user is under 21, we will immediately suspend the account, void any bets or transactions, and delete all associated personal information in accordance with our data retention obligations. Parents or guardians who believe their child may have provided information to au238 should contact us immediately.

We implement age verification measures during registration and may request additional documentation if we suspect a user does not meet the minimum age requirement. Providing false age information is a serious violation of our Terms and Conditions and may result in account closure and forfeiture of funds.

12. Changes to This Policy

au238 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email to the address registered on your account
• Display a prominent notice on our platform
• For significant changes affecting your rights, we may request your explicit consent before applying the new policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of au238 services after changes are posted constitutes acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact au238's privacy team:

Email: [email protected]

Subject Line: "Privacy Inquiry" or "Data Protection Request"

Live Chat: Available 24/7 through the platform for urgent privacy or security matters

Response Time: We aim to respond to all privacy-related inquiries within 30 days, and urgent security matters within 24 hours.

When contacting us, please provide your username and sufficient details to help us locate your account and address your concern efficiently. For identity verification purposes, we may ask you to confirm additional account information before discussing specific details of your personal data.