Privacy Policy

At se238, we are committed to protecting the privacy and security of your personal information. This Privacy Policy (hereinafter referred to as "Policy") explains how se238 (the "Company," "we," "us," or "our") collects, uses, stores, shares, and protects personal data provided by users (the "User," "you," or "your") of our online gaming platform, website, mobile applications, and associated services (collectively referred to as the "Platform" or "Services"). By creating an account, accessing our Platform, or using any of our Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

This Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your relationship with se238. We recognize that trust is fundamental to our relationship with Indonesian players, and we have implemented comprehensive measures to ensure your personal information is handled with the utmost care, confidentiality, and in accordance with applicable data protection laws and regulations.

1. Information We Collect

1.1 Personal Information You Provide

When you register an account with se238, we collect personal information that you voluntarily provide to us, including but not limited to:

• Identity Information: Full legal name as it appears on your Indonesian National Identity Card (KTP), date of birth, place of birth, nationality, and government-issued identification number.
• Contact Information: Residential address (street, city, province, postal code), email address, mobile phone number, and alternative contact details.
• Financial Information: Bank account details (bank name such as BCA, BRI, BNI, or Mandiri; account number; account holder name), e-wallet information (OVO, DANA, GoPay account identifiers), transaction history, deposit and withdrawal records, and payment method preferences.
• Verification Documents: Copies of government-issued identification documents (KTP), proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and any other documents required for Know Your Customer (KYC) compliance.
• Account Credentials: Username, password (stored in encrypted format), security questions and answers, and authentication tokens.

1.2 Information Automatically Collected

When you access and use our Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers (IP address, MAC address), and mobile network information.
• Usage Information: Pages visited, features accessed, games played, betting patterns, session duration, clickstream data, referring and exit pages, search queries, and interaction with promotional content.
• Location Information: Approximate geographic location derived from IP address to verify compliance with territorial restrictions and to provide localized content relevant to Indonesian players.
• Communication Records: Records of your communications with our customer support team via live chat, email, WhatsApp, or other channels, including timestamps, content of messages, and resolution outcomes.

1.3 Information from Third Parties

We may receive information about you from third-party service providers who assist us in delivering our Services, including payment processors (Indonesian banks and e-wallet providers), identity verification services, fraud prevention agencies, and game providers. This information is used to verify your identity, process transactions, prevent fraud, and ensure platform security.

2. How We Use Your Information

se238 uses your personal information for the following legitimate business purposes:

2.1 Account Management and Service Provision

• Creating and managing your player account
• Verifying your identity and age to ensure compliance with our 21+ requirement
• Processing deposits and withdrawals to and from your account
• Providing access to casino games, live dealer experiences, sports betting markets, and other gaming products
• Maintaining accurate records of your gaming activity and transaction history
• Communicating with you regarding account status, transactions, and service-related matters

2.2 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other forms of misconduct
• Monitoring gameplay patterns to identify collusion, use of automated systems, or other violations of fair play principles
• Conducting security audits and implementing protective measures against unauthorized access
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Investigating disputes, complaints, and suspected breaches of our Terms and Conditions

2.3 Marketing and Communications

• Sending promotional offers, bonuses, and special promotions relevant to Indonesian players via email, SMS, or push notifications (with your consent)
• Personalizing marketing content based on your gaming preferences and activity history
• Conducting market research and customer satisfaction surveys
• Informing you about new games, features, and platform improvements
• Providing customer support and responding to your inquiries

2.4 Legal and Regulatory Compliance

• Complying with applicable laws, regulations, and licensing requirements
• Responding to legal requests from law enforcement agencies or regulatory authorities
• Enforcing our Terms and Conditions and other policies
• Protecting our legal rights and interests in disputes or litigation
• Maintaining records as required by financial transaction reporting obligations

2.5 Platform Improvement and Analytics

• Analyzing platform usage to improve user experience and interface design
• Testing new features and conducting A/B testing
• Generating statistical reports and business intelligence insights
• Optimizing platform performance, loading speeds, and technical functionality
• Developing new products and services tailored to Indonesian player preferences

3. How We Protect Your Information

se238 implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

3.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same standard used by financial institutions.
• Secure Data Storage: Personal information is stored on secure servers located in access-controlled data centers with 24/7 monitoring, fire suppression systems, and redundant power supplies.
• Encrypted Databases: Sensitive data including passwords, financial information, and identification documents are encrypted at rest using AES-256 encryption algorithms.
• Firewall Protection: Multi-layered firewall systems protect our infrastructure from external attacks and unauthorized access attempts.
• Regular Security Audits: We conduct regular penetration testing, vulnerability assessments, and security audits performed by independent third-party security firms.

3.2 Organizational Security Measures

• Access Controls: Personal information is accessible only to authorized personnel who require access to perform their job functions, subject to strict confidentiality obligations.
• Employee Training: All staff members receive regular training on data protection principles, security protocols, and privacy best practices.
• Incident Response Plan: We maintain a comprehensive incident response plan to address any data breaches promptly and in accordance with applicable notification requirements.
• Vendor Management: Third-party service providers who process personal information on our behalf are subject to contractual data protection obligations and security audits.

4. Information Sharing and Disclosure

se238 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

4.1 Service Providers

We share personal information with trusted third-party service providers who assist us in operating our Platform and delivering our Services, including:

• Payment processors (Indonesian banks including BCA, BRI, BNI, Mandiri, and e-wallet providers including OVO, DANA, GoPay) to process deposits and withdrawals
• Identity verification services to conduct KYC checks and age verification
• Game providers to deliver casino games, live dealer experiences, and sports betting markets
• Customer support platforms to manage communications and resolve inquiries
• Cloud hosting providers to store and process data securely
• Analytics services to understand platform usage and improve user experience

These service providers are contractually obligated to use your information solely for the purposes specified by se238 and to maintain appropriate security measures.

4.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid requests by public authorities, including to:

• Comply with legal obligations, court orders, or subpoenas
• Cooperate with law enforcement agencies investigating criminal activity
• Respond to regulatory inquiries or audits
• Protect the rights, property, or safety of se238, our users, or the public
• Enforce our Terms and Conditions or other policies

4.3 Business Transfers

In the event that se238 undergoes a business transition such as a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction, subject to the same privacy protections outlined in this Policy.

5. Your Privacy Rights

As a se238 user, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure: You may request deletion of your personal information, subject to our legal obligations to retain certain records.
• Right to Restriction: You may request that we restrict processing of your personal information in certain circumstances.
• Right to Data Portability: You may request transfer of your personal information to another service provider in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal information for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 9 below.

6. Cookies and Tracking Technologies

se238 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and provide personalized content. We use the following types of cookies:

• Essential Cookies: Necessary for the Platform to function properly, including authentication and security features.
• Performance Cookies: Collect anonymous information about how visitors use our Platform to help us improve performance.
• Functional Cookies: Remember your preferences and settings to provide enhanced, personalized features.
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness.

You can manage cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of our Platform and limit your access to some features.

7. Data Retention

se238 retains your personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus seven years after account closure to comply with financial record-keeping obligations.
• Transaction Records: Retained for seven years to comply with anti-money laundering regulations and tax reporting requirements.
• Verification Documents: Retained for seven years after account closure for regulatory compliance purposes.
• Marketing Communications: Retained until you unsubscribe or object to receiving such communications.
• Technical Logs: Retained for up to 12 months for security and troubleshooting purposes.

After the applicable retention period expires, personal information is securely deleted or anonymized in accordance with our data disposal procedures.

8. Children's Privacy

se238 Services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete such information and close the associated account. Parents or guardians who believe their child has provided personal information to se238 should contact us immediately.

9. Changes to This Privacy Policy

se238 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to you via email to your registered email address and through prominent notice on our Platform. The "Last Updated" date at the top of this Policy indicates when the most recent revisions were made. Your continued use of se238 Services following notification of changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Privacy Inquiry - Data Protection
• Live Chat: Available 24/7 through our Platform (select "Privacy & Data Protection" topic)
• WhatsApp: +62 812-3456-7890 (08:00 - 23:00 WIB)

We will respond to all legitimate requests within 30 days of receipt. For complex requests, we may extend this period by an additional 30 days with notification.