Privacy Policy

1. Introduction

Welcome to the to238 Privacy Policy. This document explains how to238 ("we," "us," "our," or "the Company") collects, uses, stores, shares, and protects your personal information when you access and use our online betting and gaming platform at to238.cam (the "Service"). We are committed to safeguarding your privacy and ensuring that your personal data is handled responsibly, transparently, and in full compliance with applicable data protection laws and international best practices.

This Privacy Policy applies to all users of the to238 Service, including residents of Indonesia who register accounts, place bets, play games, or otherwise interact with our platform. By creating an account, accessing our website, or using any feature of the Service, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

We recognize that online privacy is important to our users, particularly in the context of financial transactions and gaming activities. This Privacy Policy is designed to help you understand what information we collect, why we collect it, how we use it, and what choices you have regarding your personal data. If you do not agree with any aspect of this Privacy Policy, you must not use the Service.

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or other operational needs. Any changes will be effective immediately upon posting on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

2. Information We Collect

to238 collects various types of personal information from users to provide, maintain, improve, and secure our Service. The information we collect falls into the following categories:

2.1 Information You Provide to Us

When you register for an account with to238, you voluntarily provide us with personal information, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, and nationality as they appear on your government-issued identification document (Indonesian National Identity Card / KTP, passport, or driver's license)
• Contact Information: Email address, mobile phone number, residential address (street address, city, postal code, province), and country of residence
• Account Credentials: Username, password, and security questions you choose during registration
• Financial Information: Bank account details including bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga), account number, and account holder name; e-wallet information (e.g., OVO, DANA, GoPay, ShopeePay) including registered phone number or account ID
• Verification Documents: Copies or photographs of your KTP, proof of address (utility bill, bank statement), and proof of payment method ownership submitted during our Know Your Customer (KYC) verification process
• Communication Data: Any information you provide when you contact our customer support team via live chat, email, WhatsApp, or in-app messaging, including the content of your messages, attachments, and support ticket history

2.2 Information We Collect Automatically

When you access and use the to238 Service, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device manufacturer and model
• Connection Information: IP address, Internet Service Provider (ISP), geographic location (country, city, region) derived from your IP address, time zone settings
• Usage Data: Pages visited, features accessed, games played, bets placed, deposit and withdrawal requests, time spent on each page, clickstream data, referral source (how you arrived at our website), date and time stamps of your activities
• Transaction History: Complete record of all financial transactions including deposits, withdrawals, bets placed, winnings, losses, bonus credits, and currency conversions
• Gaming Activity: Detailed logs of your betting and gaming behavior, including game selections, bet amounts, betting patterns, game outcomes, tournament participation, and VIP tier progression

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Verification of transaction success or failure, fraud risk assessments, and payment method validation from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay)
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party KYC/AML service providers
• Marketing Partners: If you arrive at our website through an affiliate or marketing campaign, we may receive information about the referral source

3. How We Use Your Information

to238 uses your personal information for the following purposes:

3.1 Account Management and Service Provision

• Create, maintain, and manage your user account
• Verify your identity, age (21+ requirement), and eligibility to use the Service
• Process your registration and account verification (KYC) requests
• Authenticate your login and maintain account security
• Enable you to place bets, play games, and access all features of the Service
• Process deposits, withdrawals, and other financial transactions
• Calculate, track, and award bonuses, cashback, VIP tier benefits, and promotional rewards

3.2 Customer Support and Communication

• Respond to your inquiries, complaints, and support requests via live chat, email, WhatsApp, or in-app messaging
• Send you important account notifications, including deposit confirmations, withdrawal processing updates, bonus credits, and security alerts
• Provide Indonesian-language customer support tailored to your needs
• Notify you of changes to our Terms and Conditions, Privacy Policy, or other important policies

3.3 Security and Fraud Prevention

• Monitor account activity for suspicious patterns, unauthorized access, or fraudulent behavior
• Detect and prevent money laundering, bonus abuse, collusion, multi-accounting, and other prohibited activities
• Comply with anti-money laundering (AML) regulations and Know Your Customer (KYC) requirements
• Investigate and resolve disputes, including bet settlement issues and payment discrepancies
• Protect the integrity of our games and betting markets
• Enforce our Terms and Conditions and take action against users who violate our policies

3.4 Marketing and Promotions (With Your Consent)

• Send you promotional emails, SMS messages, or in-app notifications about bonuses, special offers, tournaments, and new games (only if you have opted in to receive marketing communications)
• Personalize marketing content based on your gaming preferences, betting history, and VIP tier status
• Conduct surveys and research to understand user preferences and improve our services

3.5 Legal and Regulatory Compliance

• Comply with applicable laws, regulations, and legal obligations in Indonesia and international jurisdictions where we are licensed
• Respond to lawful requests from government authorities, law enforcement agencies, or courts
• Maintain records as required by gaming regulators and financial authorities
• Enforce our Responsible Gaming policies, including implementing self-exclusion requests, deposit limits, and cooling-off periods

3.6 Platform Improvement and Analytics

• Analyze user behavior, preferences, and trends to improve our website design, game selection, and user experience
• Test new features, optimize performance, and fix technical issues
• Generate aggregated, anonymized statistics and reports for internal business purposes

4. How We Share Your Information

to238 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients in limited circumstances:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) process deposits and withdrawals on our behalf
• Game Providers: Third-party gaming studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe) host games and may collect limited gameplay data
• Identity Verification Services: KYC/AML compliance providers verify your identity, age, and payment methods
• Customer Support Tools: Live chat platforms and support ticketing systems store communication records
• Cloud Hosting Providers: Secure data centers host our website infrastructure and databases
• Analytics Providers: Web analytics tools help us understand user behavior and improve our services

All service providers are contractually obligated to protect your information, use it only for the purposes we specify, and comply with applicable data protection laws.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulators, or courts when:

• Required by law, court order, subpoena, or other legal process
• Necessary to comply with gaming licenses, financial regulations, or tax obligations
• Responding to lawful requests for information from Indonesian authorities or international regulators
• Investigating suspected criminal activity, fraud, or money laundering

4.3 Business Transfers

In the event that to238 undergoes a merger, acquisition, reorganization, sale of assets, or similar corporate transaction, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal data.

4.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so, such as when you participate in co-branded promotions or refer-a-friend programs.

5. Data Security Measures

to238 takes data security seriously and implements industry-standard technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology—the same encryption standard used by major Indonesian banks like BCA, BRI, and Mandiri
• Secure Data Storage: Personal information is stored in encrypted databases hosted in secure, access-controlled data centers with 24/7 monitoring, redundant backups, and disaster recovery protocols
• Access Controls: We restrict access to personal information to authorized employees and service providers who need the information to perform their job functions. All personnel with access to sensitive data sign confidentiality agreements
• Multi-Factor Authentication: Our internal systems require multi-factor authentication for administrative access to user data
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans performed by independent third-party security firms
• Fraud Detection Systems: Automated monitoring tools detect suspicious login attempts, unusual betting patterns, and potential account compromise
• Password Security: User passwords are hashed and salted using industry-standard cryptographic algorithms. We do not store passwords in plain text

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. You acknowledge that you provide your personal information at your own risk. We strongly encourage you to use a strong, unique password for your to238 account and never share your login credentials with anyone.

6. Data Retention

to238 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our data retention practices are as follows:

• Active Accounts: While your account remains active, we retain all personal information, transaction history, and gaming activity to provide ongoing services
• Closed Accounts: If you close your account or request account deletion, we will delete or anonymize your personal information within 90 days, except where retention is required for legal, regulatory, or security purposes
• Financial Records: Transaction records, including deposits, withdrawals, and betting history, are retained for a minimum of 7 years to comply with Indonesian financial regulations and anti-money laundering requirements
• KYC Documents: Identity verification documents (KTP copies, proof of address) are retained for 5 years after account closure as required by Know Your Customer regulations
• Communication Records: Customer support transcripts, emails, and chat logs are retained for 3 years for quality assurance and dispute resolution purposes
• Legal Holds: If your account is involved in a legal dispute, investigation, or regulatory inquiry, we will retain relevant information until the matter is resolved

After the applicable retention period expires, we will securely delete or anonymize your personal information so that it can no longer be associated with you.

7. Your Privacy Rights

As a to238 user, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To access your data, log in to your account dashboard where you can view your profile information, transaction history, betting activity, and communication records. For a comprehensive data export, contact our customer support team.

7.2 Right to Rectification

If any of your personal information is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. You can update most account information directly through your account settings. For changes to verified information (name, date of birth), you may need to submit updated identification documents.

7.3 Right to Deletion

You have the right to request deletion of your personal information, subject to certain exceptions. We will honor deletion requests unless we are required to retain the information for legal, regulatory, or security reasons (e.g., financial records, KYC documents, dispute resolution). To request account deletion, contact our customer support team.

7.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal information in certain circumstances, such as while we investigate a complaint or dispute about the accuracy of your data.

7.5 Right to Object

You have the right to object to certain types of data processing, particularly marketing communications. You can opt out of promotional emails and SMS messages at any time by clicking the "Unsubscribe" link in our emails or by adjusting your communication preferences in your account settings.

7.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days. Some requests may require identity verification to protect your privacy and security.

8. Cookies and Tracking Technologies

to238 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, analyze website traffic, and deliver personalized content. Cookies are small text files stored on your device that help us remember your preferences, keep you logged in, and understand how you interact with our platform.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly. These cookies enable core features like account login, secure transactions, and navigation. You cannot disable essential cookies
• Performance Cookies: Collect anonymous information about how users interact with our website, including pages visited, time spent on each page, and error messages. This data helps us optimize performance and user experience
• Functionality Cookies: Remember your preferences such as language selection, currency settings, and display options to personalize your experience
• Marketing Cookies: Track your browsing activity to deliver targeted advertisements and measure the effectiveness of marketing campaigns. You can opt out of marketing cookies through your browser settings

8.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may affect your ability to use certain features of the to238 platform. To manage cookies, consult your browser's help documentation (Chrome, Firefox, Safari, Edge).

9. Third-Party Links and Services

The to238 website may contain links to third-party websites, services, or game providers (e.g., Pragmatic Play, Evolution Gaming) that are not controlled or operated by us. This Privacy Policy applies only to information collected by to238. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

The to238 Service is intended exclusively for users who are at least 21 years of age. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected information from a minor, we will immediately delete such information and close the associated account. Parents or guardians who believe their child has provided personal information to to238 should contact us immediately at [email protected].

11. International Data Transfers

Your personal information may be transferred to, stored, and processed in jurisdictions outside of Indonesia, including countries where to238 operates data centers or engages service providers. While data protection laws in these jurisdictions may differ from Indonesian law, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable legal requirements.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated Privacy Policy on this page with a new "Last Updated" date. For significant changes that materially affect your rights, we may also notify you via email or in-app notification.

Your continued use of the to238 Service after any changes to this Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your privacy.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 through your account dashboard
• WhatsApp: +62 812-3456-7890

Our Indonesian-speaking customer support team is available 24 hours a day, 7 days a week to assist you with privacy-related inquiries. We aim to respond to all privacy requests within 30 days.