Privacy Policy — deg288

In this Privacy Policy, the following terms have the meanings set out below:

• "deg288", "we", "us", "our" — refers to the deg288 platform and its operating entity, the internationally licensed gaming company operating https://deg288.cam.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, residential address, email address, phone number, payment details, and betting history.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data; deg288 acts as Data Controller for member data.
• "Data Processor" — a third party that processes Personal Data on behalf of deg288 under a contractual data processing agreement.
• "Member", "you", "your" — a registered user of the deg288 platform.
• "Platform" — the deg288 website and all associated services accessible at https://deg288.cam.
• "KYC" — Know Your Customer; the identity verification process required for AML compliance and licensing obligations.
• "Cookie" — a small text file placed on your device by the Platform to support functionality, analytics, and security.

2.1 The Data Controller responsible for your Personal Data is the licensed entity operating the deg288 platform. deg288 holds an international gaming licence and processes member data in accordance with the data protection obligations attached to that licence.

2.2 deg288 is the sole Data Controller for data collected directly through member registration, platform use, KYC submission, and customer support interactions. For data processed by third-party service providers (see Section 7), those providers act as Data Processors under binding contractual agreements and do not independently control your data.

2.3 For any questions about how deg288 handles your Personal Data, or to exercise any of the rights described in Section 11, please contact our Data Privacy team using the details provided in Section 16.

3.1 deg288 collects the following categories of Personal Data in the course of providing our services to members in Indonesia and other permitted jurisdictions:

3.2 We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, biometric data for identification purposes, or data concerning sexual orientation, except where strictly required for identity verification (facial matching in selfie KYC) and disclosed at the point of collection.

4.1 deg288 collects Personal Data through the following channels and methods:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or updating your profile.
• Automated technologies: Technical and activity data collected automatically as you interact with the Platform, including through cookies, server logs, and session tracking tools (see Section 10).
• Third-party verification providers: Identity and address verification data obtained from KYC processing partners during the verification workflow, which operates on data you have already submitted to deg288.
• Payment providers: Transaction confirmation data received from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and other payment partners following deposit and withdrawal transactions.
• Fraud and AML monitoring systems: Risk signals generated by our automated compliance infrastructure based on transaction patterns and account behaviour.

5.1 deg288 processes Personal Data under one or more of the following lawful bases, depending on the processing activity in question:

• Contractual necessity: Processing required to perform the service agreement between deg288 and the Member — including account management, payment processing, and game service delivery.
• Legal obligation: Processing required to comply with our AML, KYC, and licensing obligations under applicable law — including identity verification, transaction monitoring, and regulatory reporting.
• Legitimate interests: Processing necessary for deg288's legitimate business interests where those interests are not overridden by the Member's fundamental rights — including fraud prevention, security monitoring, product improvement, and responsible gaming programme delivery.
• Consent: For processing activities where the above bases do not apply and where we rely on your explicit, informed consent — in particular for optional marketing communications. Consent may be withdrawn at any time by contacting our support team or updating your account preferences.

5.2 Where processing is based on legitimate interests, deg288 has conducted a balancing assessment to confirm that our interests do not outweigh the rights and freedoms of Members. Documentation of these assessments is maintained internally and available to the relevant supervisory authority on request.

6.1 deg288 uses your Personal Data for the following specific purposes:

• Account management: Creating, maintaining, and managing your deg288 account; processing login authentication; managing account security settings.
• Service delivery: Processing bets, settling football wagers (BRI Liga 1, EPL, Champions League, etc.), delivering togel lottery results, operating live casino sessions, and crediting winnings to your account.
• Payment processing: Processing deposits and withdrawals via your registered bank accounts (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay); reconciling financial transactions; issuing receipts.
• Identity and compliance verification: Conducting KYC checks, verifying your age (21+ policy enforcement), monitoring transactions for AML compliance, and generating regulatory reports where required.
• Customer support: Responding to support queries, investigating complaints, resolving disputes, and maintaining records of communications.
• Security and fraud prevention: Monitoring for unauthorised access, detecting bonus abuse, identifying suspicious transaction patterns, and protecting the integrity of the platform and our members.
• Responsible gaming: Implementing and monitoring your responsible gaming settings; identifying patterns that may indicate problem gambling; facilitating self-exclusion and cooling-off periods.
• Platform improvement: Analysing aggregated, anonymised usage data to identify product improvements, optimise platform performance, and develop new features.
• Marketing communications: Where you have provided explicit consent, sending you promotional communications about deg288 bonuses, new features, and relevant offers. You may opt out of marketing at any time.

6.2 deg288 does not use Personal Data for automated decision-making that produces significant legal effects on Members, except as required for AML compliance monitoring where our obligations under applicable law require it.

7.1 deg288 does not sell, rent, or trade your Personal Data. We share data with third parties only where strictly necessary and under the following controlled conditions:

• Payment service providers: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and other payment partners receive the minimum data necessary (account reference, amount, currency) to process your financial transactions.
• KYC and identity verification providers: Our contracted KYC partner receives identity documents and selfie images solely for the purpose of verifying your identity. Data is not retained by the provider beyond the verification workflow duration stated in their own privacy notice.
• Game content providers: Game studios providing software for live casino, slots, and other games receive anonymised session identifiers and bet amounts necessary to run game mechanics. No directly identifiable personal data is transmitted to game studios.
• Fraud and security vendors: Anti-fraud and security platforms receive Technical Data (IP address, device fingerprint) to detect and prevent malicious activity, account takeover, and bot activity.
• Legal and regulatory authorities: Where required by law, court order, or regulatory directive, deg288 may disclose Personal Data to the relevant government authority, law enforcement body, or our licensing regulator. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and compliance consultants may access Personal Data on a strictly need-to-know basis, subject to professional confidentiality obligations.

8.1 As an internationally licensed platform serving members in Indonesia and other jurisdictions, deg288 may transfer Personal Data to, and process it in, countries outside Indonesia, including the country where our primary data centres and licensing jurisdiction are located.

8.2 Where Personal Data is transferred internationally, deg288 ensures that appropriate safeguards are in place, which may include:

• Contractual clauses that impose equivalent data protection obligations on the receiving party;
• Transfers to countries that have been assessed as providing an adequate level of data protection;
• Binding corporate rules or equivalent mechanisms where applicable.

8.3 By registering an account with deg288 and submitting your Personal Data, you acknowledge that your data may be transferred, stored, and processed in countries with differing data protection standards, and that deg288 will apply the safeguards described above regardless of the transfer destination.

9.1 deg288 retains Personal Data for as long as is necessary for the purpose for which it was collected, or as required by our legal and licensing obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the lifetime of the active account, plus a minimum of 5 years following account closure, as required by AML and licensing regulations.
• Financial Transaction Data: Retained for a minimum of 5 years from the date of each transaction, as required by financial record-keeping obligations.
• KYC Documents: Retained for the duration of the account relationship plus 5 years from account closure, or longer if required by a regulatory investigation or court order.
• Support Communications: Retained for 3 years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Technical and Activity Logs: Retained for 12 months, except where specific logs are flagged as relevant to an active investigation or dispute.
• Marketing Consent Records: Retained for the duration of the consent, plus 2 years following withdrawal of consent as evidence of compliance.

9.2 Following the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregated analytics purposes.

10.1 deg288 uses cookies and similar tracking technologies to support platform functionality, improve the member experience, and monitor security. By using the Platform, you consent to the use of cookies as described in this section.

10.2 We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login session management, security tokens, and fraud detection. These cookies cannot be disabled without disrupting core platform functionality.
• Functional Cookies: Enable personalised features such as language preferences, responsible gaming settings, and display preferences. Disabling these cookies may affect your experience but will not prevent access to core services.
• Analytics Cookies: Allow us to measure Platform usage — such as pages visited, session duration, and feature engagement — using aggregated, anonymised data. We use this information to improve the Platform.
• Security Cookies: Support our fraud detection and bot-prevention systems by monitoring unusual access patterns and device fingerprinting.

10.3 deg288 does not use third-party advertising or retargeting cookies. We do not operate cross-site tracking programmes and do not share cookie data with advertising networks.

10.4 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may impair your ability to log in or use the Platform safely.

11.1 Subject to applicable law and our legitimate obligations as a licensed gaming operator, you hold the following rights with respect to your Personal Data held by deg288:

11.2 To exercise any of the rights above, please submit a written request to our support team via live chat or email (see Section 16). We will respond within 30 calendar days of receiving a valid, authenticated request. We may need to verify your identity before processing a rights request to prevent unauthorised disclosure of Personal Data.

12.1 deg288 implements a layered technical and organisational security programme designed to protect Personal Data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• Transport Layer Security: All data transmitted between your device and deg288 is encrypted using TLS 1.3 (256-bit). HTTPS is enforced across all platform pages with HSTS headers.
• Data-at-rest encryption: Personal Data stored on our servers is encrypted using AES-256. Encryption keys are managed under strict access control and rotation policies.
• Access controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis, governed by role-based access control and multi-factor authentication for all administrative systems.
• Network security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular independent penetration testing.
• KYC document handling: Identity documents uploaded during KYC verification are stored in isolated, encrypted storage with access limited to the compliance team.
• Security audits: deg288 conducts regular internal and third-party security reviews of our data handling practices and infrastructure.

12.2 While deg288 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. In the event of a security incident affecting your Personal Data, we will take immediate remediation steps and notify you in accordance with our breach notification obligations.

13.1 The deg288 platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from any person under the age of 21. Our registration system includes age verification steps and our KYC programme is designed to confirm that all verified members meet the minimum age requirement.

13.2 If deg288 becomes aware that Personal Data has been collected from a person under 21 years of age, we will immediately close the associated account, return any Real Money Funds to the originating payment method, delete all Personal Data associated with that account, and — where required — report the matter to the appropriate authorities.

13.3 If you are a parent or guardian and believe your child has registered with deg288, please contact our support team immediately using the details in Section 16. We will take prompt action upon receiving a verified report.

14.1 As part of our responsible gaming programme, deg288 processes Activity Data — including session frequency, betting patterns, and deposit behaviour — to identify potential indicators of problem gambling. This processing is carried out in the legitimate interest of player welfare and is a requirement of our gaming licence.

14.2 Where our responsible gaming monitoring identifies a member who may be exhibiting at-risk behaviour, our team may contact that member proactively to offer information about available support tools (deposit limits, cooling-off periods, self-exclusion) and external counselling resources. This contact is conducted with care and discretion.

14.3 Responsible gaming settings you apply to your account — including deposit limits, self-exclusion status, and time-out periods — are permanently logged and cannot be overridden by any deg288 employee. Self-exclusion data is retained beyond account closure to prevent re-registration during the exclusion period.

14.4 For comprehensive information on the responsible gaming tools available to you and how to access support, please visit our Responsible Gaming page.

15.1 deg288 may update this Privacy Policy from time to time to reflect changes in our data practices, service offerings, or applicable law. The "Effective date" displayed at the top of this page indicates when the current version came into force.

15.2 Where changes are material — meaning they affect how we collect, use, or share your Personal Data in a way that may be adverse to your interests — we will notify you by email to your registered address and via an in-platform notification at least 14 days before the new version takes effect.

15.3 For non-material changes (such as clarifications of existing language or contact detail updates), we will update the page without individual notification. We encourage you to review this Policy periodically.

15.4 Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using the Platform and request account closure before the effective date.

16.1 For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by deg288, please contact us through the following channels:

• 24/7 Live Chat: The fastest channel — connect directly with a support agent via the Platform. Average response under 1 minute.
• Email: support@deg288.cam (plain text — not a clickable link). For privacy-specific requests, please include "Privacy Request" in the subject line. Response within 2–6 hours.
• In-Platform Messaging: Accessible from your account dashboard. Full message history retained for your records.

16.2 All privacy-related requests submitted in writing will be acknowledged within 2 business days (WIB, UTC+7) and resolved within 30 calendar days of receipt of a complete, authenticated request.

16.3 Complaints: If you are dissatisfied with how deg288 has handled your Personal Data or responded to a rights request, you may escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. deg288 will cooperate fully with any regulatory inquiry or investigation.