xo368 Privacy Policy

This page describes what we collect when you use xo368 and how we keep that data protected. When you register an account, log in, deposit funds, or place a game on our platform, we gather information needed to operate the service, verify your identity, process payments, and respond to support requests. We take your privacy seriously and do not share your data with third parties except where necessary for payment processing or as required by law.

Our privacy commitments apply whether you access xo368 via Android APK, iOS browser, or desktop. We use industry-standard encryption to protect data in transit and at rest. Your account is accessible only to you (via your password) and to our customer support team when you contact us. We review this policy regularly and post updates on xo368.app — continued use means you accept any changes.

If you have questions about how we handle your data, or if you want to request access to, correct, or delete your personal information, contact our support team via live chat, email, or the contact form on xo368.app. Our team across Jakarta, Surabaya, Bandung, and Medan responds during standard business hours.

What Data We Collect on xo368

We collect information in two broad categories: information you provide directly, and information gathered automatically when you use our platform.

Information you provide: When you register on xo368, we collect your email address, phone number, and a password of your choice. During identity verification (KYC), we collect your name, date of birth, and a photo of your Indonesian KTP (both front and back). We also collect your payment details when you request a deposit or withdrawal — but we do not store your full card numbers or e-wallet passwords. Payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) handle those credentials directly.

Information gathered automatically: When you log in to xo368, we record the timestamp, your IP address, and your device type (Android, iOS, or desktop). When you play a game, we log the game ID, your stake, the result, and the settlement amount. We track your deposits and withdrawals, including the method, amount, and date. We also use cookies and similar technologies to remember your login session and track how you navigate our platform.

We Never Ask for Your Password via Email

Our support team will never request your xo368 password by email or chat. If someone claims to represent xo368 and asks for your password, it is fraudulent — report it to us immediately.

How We Use Your Data on xo368

We use the information we collect for specific purposes:

Account management: We use your email, phone, and password to let you log in, reset your password, and manage your account settings on xo368.
Identity verification: We use your KTP image and personal details to verify your identity, comply with anti-money-laundering (AML) requirements, and prevent fraud.
Payment processing: We share payment information with payment processors (mobile banking, local payment, online payment, etc.) only to the extent needed to complete your deposit or withdrawal.
Game settlement: We use game logs to settle your bets instantly and maintain your account balance on xo368.
Customer support: When you contact our team, we use your account data and message history to resolve your issue.
Fraud prevention: We analyse patterns in your account activity to detect and prevent fraud, hacking, or money laundering.
Legal compliance: We may use your data to comply with court orders, regulatory requests, or applicable law.

We do not use your data for marketing unless you explicitly opt in. We do not sell your personal information to advertisers or data brokers. We do not share your game history or betting patterns with third parties except as required by law or to prevent fraud.

Third-Party Data Processors

We use third-party service providers to operate xo368. These include payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, and banks like mobile banking, local payment, online payment, e-wallet), cloud-hosting providers, and customer-support platforms. Each of these processors has access only to the data needed to perform their function — for example, payment processors see your payment method and transaction amount, but not your KTP image.

Our servers may be located outside Indonesia. By using xo368, you consent to your data being stored or processed in data centres in other countries, which may have different privacy laws. We use standard contractual clauses and encryption to protect your data during such transfers.

Note: We require all third-party processors to sign data-protection agreements committing them to confidentiality and security standards equivalent to our own.

Cookies and Tracking Technologies

xo368 uses cookies (small text files stored on your device) to remember your login session and keep you signed in. Without these cookies, you would need to enter your credentials every time you refresh the page. We also use cookies to analyse how you navigate xo368 — for example, which games you visit most often — so we can improve the platform.

You can configure your browser or app settings to disable cookies, but doing so may limit xo368's functionality. Some cookies are essential for security and cannot be disabled. We do not use third-party tracking pixels or advertising cookies on xo368.

Your Rights Regarding Your Data

You have rights over your personal data on xo368:

Access: You can request a copy of all data we hold about you. We provide this within a reasonable timeframe.
Correction: If your data is inaccurate, you can request that we correct it — for example, if your registered email is wrong.
Deletion: You can request that we delete your data, subject to legal obligations. If you delete your account, we retain transaction records for compliance but remove personal details within a reasonable period.
Portability: You can request your data in a portable format (e.g., CSV) so you can transfer it elsewhere.
Withdrawal of consent: If you consented to optional data collection (e.g., marketing emails), you can withdraw that consent at any time.

To exercise any of these rights, contact our support team with clear instructions. We will respond within a reasonable timeframe and may ask for additional identity verification to ensure we are acting on a legitimate request.

How Long We Keep Your Data

We retain your personal data as long as your xo368 account is active. If you close your account, we keep transaction records (game history, deposits, withdrawals) for a minimum of five years to comply with financial and anti-money-laundering regulations. Personal details (your name, KTP image, email) are deleted or anonymised within one year of account closure, unless we are legally required to retain them longer.

Security of Your Data on xo368

We use industry-standard encryption (TLS/SSL) to protect your data in transit between your device and our servers. Passwords are hashed using strong cryptographic algorithms — we do not store your password in plain text. Access to your account on xo368 is restricted to you (via your password) and to our authorized staff when troubleshooting issues.

While we employ robust security practices, no system is completely immune to breaches. If we discover unauthorized access to your account or a data breach affecting xo368, we will notify you promptly and take steps to limit damage. We encourage you to use a unique, strong password and to enable any two-factor authentication features we offer.

Changes to This Privacy Policy

We review and update this privacy policy periodically to reflect changes in technology, law, or our practices. We post updates on xo368.app, and the date of the latest revision appears at the top of this page. By continuing to use xo368 after we post changes, you accept the updated policy. If a change materially affects how we use your data, we will notify you via email or a prominent notice on the platform.

Legal