Privacy Policy

1 Introduction

ios368 ("we", "us", "the Company") operates the online gaming platform accessible at https://ios368.cam (the "Platform"). This Privacy Policy describes how ios368 collects, processes, stores, shares, and protects personal data provided by or obtained about users ("you", "the Player") when accessing or using the Platform.

By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to arrange Account closure.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and ios368.

2 Data We Collect

ios368 collects the following categories of personal data:

2.1 Identity and Contact Data

• Full legal name as it appears on government-issued identification.
• Date of birth (used to verify the 21+ age requirement).
• Indonesian residential address, including city (Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, Palembang, and others).
• Email address and mobile phone number used for Account communications.
• Copies of identity documents submitted during KYC verification (e.g., KTP, passport, driving licence).

2.2 Financial Data

• Bank account details (bank name, account number, account holder name) for local bank transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata.
• Digital wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Transaction history including deposit amounts, withdrawal requests, and bet records, all denominated in Indonesian Rupiah (IDR / Rp).
• Source of funds declarations submitted in connection with high-value transactions.

2.3 Account and Gaming Data

• Username, encrypted password hash, and Account settings.
• Betting and gaming activity records, including game type (slots, live casino, sports markets, togel — Indonesia's traditional numbers lottery), wager amounts, and outcomes.
• Bonus and promotion history, including active wagering requirement status.
• Responsible gaming settings such as deposit limits, session time limits, and any self-exclusion periods.

2.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps, page navigation paths, and feature interaction logs.
• Cookie identifiers and related tracking data (see Section 8).

2.5 Communication Data

• Records of live chat transcripts, email correspondence, and any written complaints or queries submitted to our support team.
• Survey responses or feedback submitted voluntarily through the Platform.

3 How We Collect Data

ios368 collects personal data through the following mechanisms:

4 Purpose & Legal Basis for Processing

ios368 processes personal data only for defined, legitimate purposes. The primary purposes and their corresponding legal bases are set out below:

4.1 Account Operation and Service Delivery

We process identity, contact, financial, and gaming data in order to create and maintain your Account, process deposits and withdrawals, record betting activity, apply bonuses, and deliver the full range of gaming services on the Platform. This processing is necessary for the performance of our contract with you.

4.2 Identity Verification and Compliance

KYC data is processed to verify your identity, confirm your age (21+), and comply with our anti-money-laundering (AML) and fraud-prevention obligations. This processing is necessary to comply with our legal and regulatory obligations as an operator.

4.3 Customer Support

Communication data is processed to respond to your queries, manage complaints, and improve the quality of our support services. This is processed on the basis of our legitimate interests in operating an effective customer support function.

4.4 Responsible Gaming Monitoring

Gaming activity and Account data may be analysed to identify patterns consistent with problem gambling behaviour. Where such patterns are identified, we may proactively reach out to offer support. This processing reflects our legitimate interests and obligations under our Responsible Gaming framework.

4.5 Security and Fraud Prevention

Technical and usage data is processed to detect and prevent unauthorised access, account takeovers, multi-accounting, bonus abuse, and other fraudulent or prohibited activities. This is processed on the basis of our legitimate interests in protecting the integrity of the Platform and the safety of all players.

4.6 Marketing Communications

Where you have opted in to receiving promotional communications, we will use your contact details to send you information about bonuses, seasonal promotions, and platform updates. You may withdraw your consent to marketing communications at any time by updating your Account preferences or by contacting our support team. Withdrawal of marketing consent does not affect any other aspect of your Account.

4.7 Platform Analytics and Improvement

Aggregated and anonymised usage data is analysed to understand how players interact with the Platform, identify areas for improvement, and develop new features. Where data is fully anonymised and cannot be re-linked to an individual, it falls outside the scope of this Privacy Policy.

5 Data Sharing

ios368 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

5.1 Payment Service Providers

Financial data is shared with our banking and e-wallet partners — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to process deposit and withdrawal transactions. These providers act as independent data controllers in respect of transactions processed through their own systems and are subject to their own privacy policies.

5.2 Identity Verification Providers

Identity documents and associated data submitted during KYC are shared with our contracted identity verification service providers for the purpose of authenticating your identity and age. These providers are engaged under data processing agreements that require them to process your data only on our instructions and to maintain appropriate security standards.

5.3 Game Technology Providers

Certain Account and session data — such as player ID, balance, and game session details — is shared with third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe) in order to facilitate gameplay and resolve technical disputes. Game providers receive only the minimum data necessary for these purposes.

5.4 Fraud Prevention and Security Services

Risk-related data may be shared with specialist fraud prevention and cybersecurity providers to identify and mitigate threats to the Platform and to individual player accounts. This sharing is conducted under appropriate contractual safeguards.

5.5 Legal and Regulatory Authorities

ios368 may disclose personal data to competent legal or regulatory authorities where required to do so by applicable law, court order, or lawful government request. In such cases, we will disclose only the minimum information required to satisfy the legal obligation and, where permitted, will notify you of the disclosure.

5.6 Corporate Restructuring

In the event of a merger, acquisition, restructuring, or sale of all or part of ios368's business, personal data held by the Company may be transferred to the relevant successor entity. We will notify affected players of any such transfer and the privacy terms applicable to their data going forward.

6 Data Retention

ios368 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods we apply are as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes.

7 Data Security

ios368 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password hashing: Account passwords are stored exclusively as salted cryptographic hashes. Our staff cannot retrieve your password in plain text under any circumstances.
• Access controls: Access to personal data within ios368 is restricted on a strict need-to-know basis. Staff members are granted access only to the data required for their specific role.
• Infrastructure security: Our server infrastructure is hosted in secure data centres with physical access controls, redundant power systems, and continuous security monitoring.
• Vulnerability management: We conduct regular security assessments and penetration testing to identify and remediate vulnerabilities in the Platform.
• Incident response: We maintain a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify you and any applicable regulatory body within the timeframes required by law.

While ios368 takes all reasonable precautions to secure your data, no transmission over the internet or electronic storage system is entirely free from risk. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect unauthorised access to your Account.

8 Cookies & Tracking Technologies

ios368 uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and analyse usage patterns. The categories of cookies we use are described below:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens that keep you logged in to your Account, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure consistent performance during high-traffic periods.

8.2 Functional Cookies

Functional cookies remember your preferences and settings — such as your preferred language, display options, and game lobby layout — so that you do not need to reconfigure them on each visit. Disabling these cookies may result in a reduced or inconsistent experience on the Platform.

8.3 Analytics Cookies

We use analytics cookies to collect aggregated data about how players navigate and interact with the Platform. This information helps us identify popular features, optimise page performance, and improve the overall user experience. Analytics data is processed in aggregated form and is not used to identify individual players.

8.4 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your Account. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

9 Your Rights

As a player on the ios368 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within 30 days.

10 Minors & Age Policy

The ios368 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and any Account found to have been registered by a person under 21 will be immediately closed.

If you are a parent or guardian and believe that a minor in your care has submitted personal data to ios368 without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including deletion of any data associated with the minor's account.

11 International Data Transfers

ios368 operates internationally and, in the course of providing the Platform, your personal data may be transferred to and processed in countries outside of Indonesia. This may occur when data is processed by our contracted service providers — such as identity verification services, fraud prevention tools, and game technology providers — who operate infrastructure in multiple jurisdictions.

Where personal data is transferred internationally, ios368 takes appropriate measures to ensure that such transfers are conducted lawfully and that your data receives a level of protection consistent with this Privacy Policy. These measures may include entering into standard contractual clauses with receiving parties, or transferring data only to countries or organisations that have been assessed as providing an adequate level of data protection.

By using the Platform, you acknowledge that your personal data may be transferred internationally as described in this section.

12 Changes to This Privacy Policy

ios368 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the Platform following the publication of any changes constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should discontinue use of the Platform and contact our support team to arrange Account closure.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which ios368 handles your personal data, please do not hesitate to get in touch. Our support team includes Indonesian-speaking agents available around the clock.