1. Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "isd388" — the online gaming and sports betting platform accessible at https://isd388.cam and all associated sub-domains, mobile experiences, and services.
- "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, identification number, contact details, financial data, and online identifiers.
- "User" / "You" — any individual who visits, registers on, or otherwise interacts with the isd388 Platform.
- "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
- "Controller" — isd388, as the entity that determines the purposes and means of Processing Personal Data.
- "Processor" — any third party that processes Personal Data on behalf of isd388, including payment gateways, identity verification providers, and analytics services.
- "Cookies" — small text files placed on your device by the Platform to enable functionality, measure performance, and personalize your experience.
- "KYC" — Know Your Customer, the identity and residency verification process required under isd388's operating obligations.
2. Scope of This Policy
This Privacy Policy applies to all Personal Data collected by isd388 from individuals who access or use the Platform, whether through a desktop browser, mobile browser, or any other interface made available by isd388. It covers data collected at registration, during account use, via customer support interactions, and through automated technical means such as server logs and cookies.
This Policy does not apply to third-party websites or services that may be referenced or linked to from the Platform. isd388 has no responsibility for the privacy practices of any third-party operator and encourages users to review the privacy policies of any external service they access independently.
Indonesia Context: isd388 primarily serves players based in Indonesia, including residents of Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and other regions across the archipelago. All data processing activities described in this Policy are conducted with the privacy expectations of Indonesian users in mind.
3. Data We Collect
isd388 collects Personal Data in the following categories, depending on how you interact with the Platform:
3.1 Identity & Registration Data
- Full legal name as appearing on your government-issued identification.
- Date of birth (to verify you are at least 21 years of age).
- Indonesian ID card number (Nomor Induk Kependudukan / KTP) or passport number.
- Residential address within Indonesia.
- Nationality and country of residence.
3.2 Contact Data
- Email address (used for account communications and security alerts).
- Mobile phone number (used for two-factor authentication and WhatsApp support).
3.3 Financial Data
- Bank account details for deposit and withdrawal processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon).
- E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
- Transaction history including deposit amounts, withdrawal requests, and wager records, all denominated in Indonesian Rupiah (IDR).
3.4 Technical & Usage Data
- IP address and approximate geographic location.
- Device type, operating system, and browser version.
- Session timestamps, pages visited, and features used on the Platform.
- Login and logout records for security audit purposes.
3.5 Communications Data
- Records of live chat, email, and WhatsApp interactions with our customer support team.
- Feedback, complaints, and survey responses submitted voluntarily.
| Category |
Examples |
Required? |
| Identity |
Name, KTP number, date of birth |
Yes — mandatory for registration |
| Contact |
Email, mobile number |
Yes — mandatory for account access |
| Financial |
Bank account, e-wallet ID, transaction records |
Yes — mandatory for transactions |
| Technical |
IP address, device info, session logs |
Automatic — collected by default |
| Communications |
Chat transcripts, emails |
Situational — when support is used |
4. How We Collect Data
isd388 collects Personal Data through the following methods:
- Direct collection: Information you provide when registering an account, submitting KYC documents, making deposits or withdrawal requests, or contacting customer support.
- Automated collection: Technical data gathered automatically as you navigate the Platform, including via server logs, cookies, and similar tracking technologies.
- Third-party sources: Identity verification results from our licensed KYC providers; fraud screening signals from risk management partners; payment confirmation data from banking and e-wallet processors.
5. Purpose of Data Use
isd388 processes your Personal Data for the following purposes:
- Account management: Creating, maintaining, and securing your account; verifying your identity and age (21+); enabling login and authentication.
- Transaction processing: Facilitating deposits and withdrawals in IDR via local banks and e-wallets; maintaining accurate financial records.
- KYC & compliance: Fulfilling anti-money laundering (AML) and know-your-customer obligations; preventing fraud and unauthorized account activity.
- Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance through live chat, email, and WhatsApp.
- Platform improvement: Analyzing aggregate usage patterns to improve Platform performance, identify bugs, and develop new features.
- Personalization: Displaying relevant promotions, bonus offers, and game recommendations based on your activity and preferences.
- Security monitoring: Detecting and preventing fraudulent activity, unauthorized access, and breaches of our Terms & Conditions.
- Legal compliance: Meeting obligations imposed by applicable international gaming regulations and licensing requirements.
6. Legal Basis for Processing
isd388 processes your Personal Data on one or more of the following legal bases:
- Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to at registration — including account creation, transaction processing, and KYC verification.
- Legitimate interests: Processing necessary for isd388's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your fundamental rights.
- Legal obligation: Processing required to comply with applicable laws, regulatory mandates, or lawful requests from competent authorities.
- Consent: For non-essential processing activities such as marketing communications, where we rely on your explicit and freely given consent. You may withdraw consent at any time by contacting our support team.
7. Data Sharing & Disclosure
isd388 does not sell or rent your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis:
7.1 Service Providers (Processors)
Licensed third-party providers that process data on our behalf under binding data processing agreements, including:
- Payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) — for transaction execution.
- Identity verification and KYC service providers — for document authentication and fraud screening.
- Cloud hosting and infrastructure providers — for secure data storage and platform operation.
- Customer support platform providers — for managing live chat and ticket systems.
7.2 Legal & Regulatory Disclosure
isd388 may disclose Personal Data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, a court order, or a binding regulatory instruction. We will notify you of such disclosures where legally permitted to do so.
7.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of isd388's business, Personal Data held by isd388 may be transferred to the acquiring entity. In such circumstances, we will provide advance notice and ensure the receiving entity agrees to honor this Privacy Policy.
No Marketing Sales: Under no circumstances does isd388 sell, license, or transfer your Personal Data to third-party marketers, data brokers, or advertising networks. Your data will never be used for purposes beyond those explicitly stated in this Policy without your prior consent.
8. Cookies & Tracking Technologies
isd388 uses cookies and similar technologies to operate and improve the Platform. These technologies help us remember your preferences, maintain your session, detect fraudulent activity, and understand how users navigate our site.
8.1 Types of Cookies We Use
- Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled without impairing your ability to use core features such as logging in and completing transactions.
- Functional cookies: Remember your preferences (e.g., language settings, preferred payment method) to enhance your experience across sessions.
- Analytics cookies: Collect aggregate, anonymized data about how users interact with the Platform. This helps us identify performance issues and prioritize i
mprovements.
- Security cookies: Used to detect and prevent fraudulent login attempts, account takeover, and other malicious activity on the Platform.
8.2 Managing Cookies
Most web browsers allow you to control cookies through their settings. You may choose to block or delete cookies at any time; however, doing so may affect the functionality of certain features on the Platform, including persistent login sessions and saved preferences. Please consult your browser's help documentation for instructions on managing cookie preferences.
Note: isd388 does not use cookies to serve third-party advertising or to track your browsing activity outside of the Platform. Our use of tracking technologies is limited strictly to operational and security purposes.
9. Data Security
isd388 applies a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:
- 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
- AES-256 encryption for sensitive data stored in our databases, including financial records and identity documents.
- Multi-factor authentication (MFA) available for all user accounts and mandatory for administrative access to our internal systems.
- Firewalls and intrusion detection systems that monitor network traffic in real time and automatically block suspicious activity.
- Regular penetration testing and vulnerability assessments conducted by independent cybersecurity professionals.
- Role-based access controls ensuring that isd388 staff can only access Personal Data necessary for their specific job functions.
- Incident response procedures that activate immediately upon detection of a potential data breach, including user notification protocols where required.
While isd388 takes all reasonable steps to protect your data, no transmission over the internet or method of electronic storage is completely infallible. In the unlikely event of a security incident affecting your Personal Data, we will notify you promptly and take all necessary remediation steps.
10. Data Retention
isd388 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention guidelines apply:
| Data Category |
Retention Period |
Reason |
| Account & Identity Data |
Duration of account + 5 years after closure |
Regulatory and AML compliance |
| Financial Transaction Records |
7 years from transaction date |
Financial audit and legal obligations |
| KYC Documents |
5 years from account closure |
Anti-money laundering regulations |
| Customer Support Logs |
3 years from last interaction |
Dispute resolution and quality assurance |
| Technical & Usage Logs |
12 months from collection |
Security monitoring and platform analytics |
| Marketing Consent Records |
Until consent is withdrawn + 1 year |
Proof of consent compliance |
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymized so that it can no longer be associated with any individual user.
11. Your Rights
As a user of the isd388 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our Data Support team using the details in Section 15.
- Right of access: You may request a copy of the Personal Data isd388 holds about you, along with information about how it is being processed.
- Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
- Right to erasure: Under certain circumstances, you may request the deletion of your Personal Data. Note that this right may be limited where retention is required by law or for the establishment, exercise, or defense of legal claims.
- Right to restriction: You may request that we restrict the processing of your Personal Data in certain situations — for example, while the accuracy of the data is being contested.
- Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
- Right to object: You may object to the processing of your Personal Data where that processing is based on our legitimate interests, including profiling for direct marketing purposes.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
isd388 will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will inform you of the extension and the reasons for it.
Identity Verification for Rights Requests: To protect your privacy and prevent unauthorized access to your data, isd388 is required to verify your identity before processing any data rights request. You may be asked to provide a copy of your KTP or other acceptable proof of identity.
12. Children's Privacy
The isd388 Platform is strictly intended for adults. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. All users are required to confirm they are at least 21 years of age during the registration process, and age verification is a mandatory component of our KYC procedure.
If isd388 becomes aware that Personal Data has been collected from a person under 21 without verified parental consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately via the details in Section 15.
13. Cross-Border Data Transfers
isd388 operates infrastructure and engages service providers that may be located in jurisdictions outside Indonesia. Where your Personal Data is transferred to, stored in, or processed in a country other than Indonesia, isd388 ensures that appropriate safeguards are in place to protect your data to the same standard as required under this Privacy Policy.
Safeguards for cross-border transfers may include:
- Standard contractual clauses approved by applicable data protection authorities, incorporated into agreements with receiving entities.
- Data processing agreements with third-party providers that impose equivalent privacy and security obligations.
- Transfers exclusively to jurisdictions that provide an adequate level of data protection as recognized by international standards.
By using the isd388 Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia, subject to the safeguards described above.
14. Policy Amendments
isd388 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, provide you with advance notice via your registered email address or a prominent in-platform notification.
Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. We encourage you to review this Policy periodically to stay informed about how isd388 protects your personal information.
15. Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a suspected privacy concern, please reach out to the isd388 Privacy and Data Support team through any of the following channels:
- Email:
- WhatsApp:
- Live Chat: Available 24/7 directly on the Platform.
Our support team is available around the clock and includes native Indonesian-speaking agents to assist players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and all regions of Indonesia. We aim to respond to all privacy-related inquiries within two (2) business days.
Related Policies: This Privacy Policy should be read alongside our
Terms & Conditions and our
Responsible Gaming guidelines, which together govern your full relationship with isd388.