Privacy Policy

1 Overview & Scope

deg288 (referred to in this document as "deg288", "we", "us", or "the Company") operates the online gaming and sports betting platform accessible at deg288.pro. As the data controller for personal information collected via this platform, deg288 is committed to handling your data responsibly, transparently, and in accordance with internationally recognised data protection principles.

This Privacy Policy applies to all personal data collected through the deg288 website, mobile browser interface, customer support interactions (including live chat and email correspondence), and any other channel through which you interact with deg288. It does not apply to third-party websites that may be linked from the platform — please review the privacy policies of those sites independently.

This Policy is designed to be read alongside deg288's Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions that interact with how your personal data is processed.

2 Data We Collect

deg288 collects personal data in a targeted and proportionate manner. We do not collect more data than is reasonably necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name (as it appears on your Indonesian national identity card or passport)
• Date of birth
• Residential address in Indonesia (street address, city, province, postal code)
• Email address
• Mobile phone number
• Indonesian National Identity Card number (KTP — Kartu Tanda Penduduk) or passport number, collected as part of KYC (Know Your Customer) verification

2.2 Account & Transaction Data

• deg288 username and encrypted password hash
• Account registration date and last login timestamp
• Full transaction history: deposits, withdrawals, bonuses credited, and wagering activity
• Payment method details: bank account name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP), or e-wallet account identifier (OVO , DANA, GoPay, ShopeePay, LinkAja)
• Currency denomination (Indonesian Rupiah — IDR)
• Bonus claim history and wagering requirement progress

2.3 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Screen resolution and language settings
• Session duration, pages visited, and click-path data
• Referring URL (the page from which you navigated to deg288.pro)

2.4 Communications Data

• Records of live chat conversations with deg288 customer support agents
• Email correspondence sent to or received from [email protected]
• Feedback, complaints, or dispute records submitted through any support channel

2.5 Responsible Gaming Data

• Deposit limits, loss limits, and session time-out settings you have configured
• Self-exclusion status and exclusion period (if applicable)
• Responsible gaming tool usage history

3 How We Collect Data

deg288 collects personal data through the following channels:

Collection Method	Description
Direct Registration	Data you provide when creating a deg288 account, completing KYC verification, or updating your profile settings.
Platform Activity	Data generated automatically as you browse, bet, play, deposit, and withdraw on the deg288 platform.
Customer Support	Data you share when contacting deg288 via live chat, email, or any other support channel.
Cookies & Tracking Technologies	Behavioural and session data collected automatically via cookies, web beacons, and local storage (see Section 7).
Payment Processors	Transaction confirmation data received from Indonesian banking partners and e-wallet providers (BCA, BRI, OVO, DANA, GoPay, etc.) to verify deposits and withdrawals.
KYC / Identity Verification	Identity document images and verification decisions provided by deg288's identity verification process or third-party KYC service providers.
Fraud & Risk Systems	Automated risk-scoring data generated by deg288's internal fraud detection systems, including device fingerprinting and behavioural analytics.

4 Purposes of Processing

deg288 processes your personal data for clearly defined and legitimate purposes. We do not use your data for any purpose that is incompatible with those stated below:

• Account Management: Creating, maintaining, verifying, and administering your deg288 player account, including processing deposits, withdrawals, and bonus allocations.
• Identity Verification (KYC): Verifying that you are at least 21 years of age and confirming your identity to comply with responsible gaming obligations and prevent fraud.
• Service Delivery: Enabling you to place bets, play casino games, access slots, and use all other features of the deg288 platform.
• Customer Support: Responding to your enquiries, complaints, and disputes, and providing Indonesian-speaking support assistance 24/7.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited activities.
• Responsible Gaming: Monitoring player behaviour to identify potential problem gambling indicators and proactively offering responsible gaming tools and resources.
• Legal & Regulatory Compliance: Meeting obligations imposed by applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records as required.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game offerings.
• Marketing Communications: Sending you promotional offers, bonus notifications, and relevant content by email — only where you have consented and subject to your right to opt out at any time.

5 Legal Basis for Processing

deg288 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

Legal Basis	When We Rely on It
Contract Performance	Processing necessary to provide the services you have contracted for when registering a deg288 account — account management, payment processing, and service delivery.
Legal Obligation	Processing required to comply with applicable laws — including KYC/AML obligations, responsible gaming requirements, and responses to lawful authority requests.
Legitimate Interests	Processing for fraud prevention, platform security, abuse detection, and internal analytics — where our legitimate business interests are not overridden by your rights and freedoms.
Consent	Marketing communications and non-essential cookies — where we have obtained your explicit consent and you may withdraw that consent at any time.

6 Sharing Your Data

deg288 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your data only in the following limited and controlled circumstances:

6.1 Service Providers

deg288 engages carefully vetted third-party service providers who process personal data on our behalf and under our instructions. These include payment processing partners (Indonesian banks and e-wallet providers), identity verification providers, customer support platform operators, cloud hosting providers, and fraud detection technology vendors. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service to deg288.

6.2 Game Studios

When you play games supplied by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — limited technical data (such as a pseudonymous player session token) may be shared with the relevant studio to facilitate gameplay. These studios do not receive your full identity data and are bound by contractual data protection obligations.

6.3 Legal & Regulatory Authorities

deg288 may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or a lawful regulatory request. deg288 will, where legally permitted, notify affected players of any such disclosure.

6.4 Business Transfers

In the event that deg288 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and of any material change to the Privacy Policy that results from it.

7 Cookies & Tracking Technologies

deg288 uses cookies and similar tracking technologies on deg288.pro to deliver a functional, personalised, and secure platform experience. The types of cookies we use are as follows:

Cookie Type	Purpose	Consent Required
Strictly Necessary	Essential for the platform to function — session management, authentication, security tokens, and load balancing. Cannot be disabled without breaking core functionality.	No
Functional	Remember your preferences such as language, currency display (IDR), and responsible gaming settings across sessions.	No
Analytics	Aggregate, anonymised data on page views, session duration, and navigation paths — used to improve platform design and performance.	Yes
Marketing / Retargeting	Track your engagement with deg288 promotional content to deliver relevant offers. Only used where you have provided explicit consent.	Yes

You may manage your cookie preferences at any time through your browser settings. Please note that disabling non-essential cookies will not affect your ability to access or use the core deg288 gaming and betting services.

8 Data Retention

deg288 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your account relationship with deg288, plus a minimum of 5 years following account closure, to satisfy anti-money laundering (AML) record-keeping requirements.
• KYC / Identity Documents: Retained for a minimum of 5 years from the date of verification, or for the duration of the account relationship plus 5 years — whichever is longer.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Customer Support Records: Retained for 3 years from the date of the last interaction, unless the record relates to an unresolved dispute or ongoing legal matter.
• Marketing Consent Records: Retained for the duration of your consent, plus 2 years following withdrawal of consent or account closure.
• Analytics Data: Aggregated and anonymised within 12 months of collection; anonymised data is retained indefinitely for platform improvement purposes and does not constitute personal data once anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with deg288's internal data disposal procedures.

9 Data Security

deg288 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and deg288.pro is encrypted using 256-bit SSL/TLS — the same standard used by Indonesia's major banking institutions including BCA and Mandiri.
• Password Hashing: Account passwords are never stored in plain text. deg288 uses industry-standard cryptographic hashing algorithms to store password data securely.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their deg288 accounts for an additional layer of login security.
• Access Controls: Access to personal data within deg288's systems is strictly limited to authorised personnel on a need-to-know basis. All internal access is logged and audited.
• Penetration Testing: deg288's platform and infrastructure are subject to regular third-party security assessments and penetration testing to identify and remediate vulnerabilities proactively.
• Data Breach Response: deg288 maintains an incident response plan for personal data breaches. In the event of a breach that poses a risk to affected players, deg288 will notify those players within a reasonable timeframe and take all steps necessary to contain and remediate the breach.

10 Your Rights

As a deg288 player and a data subject, you hold the following rights in relation to your personal data. deg288 is committed to honouring these rights promptly and without undue barrier:

To exercise any of the above rights, please contact deg288's Data Protection contact (see Section 14). We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. In complex cases this period may be extended by up to a further 60 days, in which case we will notify you of the extension and the reason for it.

11 Minors

The deg288 platform is strictly intended for adults aged 21 years and over. deg288 does not knowingly collect or process the personal data of individuals under the age of 21. If deg288 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

If you believe that a person under the age of 21 has registered a deg288 account, please contact our customer support team immediately at [email protected] so that the matter can be investigated and resolved without delay. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms.

12 International Data Transfers

deg288 is an international platform and your personal data may be transferred to, stored, and processed in countries other than Indonesia — including countries where deg288's infrastructure, game servers, or third-party service providers are located. When transferring personal data internationally, deg288 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) approved under applicable data protection frameworks, incorporated into contracts with all third-party processors located outside Indonesia.
• Data processing agreements with all service providers that require them to implement data protection standards equivalent to those applied by deg288.
• Transfer only to jurisdictions that deg288 has assessed as providing an adequate level of data protection, or where adequate supplementary measures have been applied.

By using the deg288 platform, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia in accordance with the safeguards described above.

13 Changes to This Privacy Policy

deg288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When material changes are made, we will notify registered players by email and/or a prominent notice on deg288.pro at least 7 days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the deg288 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically so that you are always informed about how your data is being handled.

14 Contact & Data Protection

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by deg288, please contact our customer support team using the details below. All privacy-related enquiries are handled by deg288's designated data protection function.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the deg288 platform after logging in to your account
• Subject Line: When emailing a privacy request, please include "Privacy Request" in the subject line to ensure prompt routing to the correct team
• Response Time: Email privacy requests acknowledged within 5 business days and resolved within 30 calendar days (WIB business hours)

For responsible gaming related data requests — such as confirming your self-exclusion status or reviewing your deposit limit history — please visit the Responsible Gaming page or raise the request directly with our support team.