cmd368Privacy Policy
This page describes what we collect when you use cmd368 and how we keep that data protected. We take privacy seriously. When you register an account, deposit via DANA, e-wallet, mobile banking, local payment, or bank transfer, and play our sportsbook, live-dealer, or slot offerings, we collect certain information to operate our platform securely and comply with local regulations.
Our cmd368 privacy practices reflect Indonesia's data protection standards and the requirements of jurisdictions where we operate. We do not sell your personal data to third parties. We use it only to run your account, process payments, verify identity, prevent fraud, and improve our service.
Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.
What data we collect on cmd368
We collect data in three categories: account informationtransaction dataand usage data
Account information
When you register on cmd368, we require your email address, a password you create, your full name, date of birth, address, and a government-issued ID number. We ask for this information to verify your identity (KYC) and prevent underage access. We store these details in encrypted form on our servers.
Transaction data
When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we record the amount, the payment method, the timestamp, and the transaction status. We do not store your e-wallet password or your bank account password—payment partners (mobile banking, your bank) handle authentication. We only see the confirmation that the transfer succeeded.
Usage data
We log when you log in, which games you play, how long you play, and from which device (mobile, desktop, app, browser). We use this data to detect suspicious activity, prevent fraud, and understand how you use cmd368 so we can improve the platform.
How we use your data
We use your data for five main purposes: account operationpayment processingregulatory compliancefraud preventionand service improvement
- Account operation: We use your email to send login confirmations, password resets, and account notifications. We use your name and address to confirm your identity.
- Payment processing: We verify your deposit amount, match it to your cmd368 account, and credit your balance. For withdrawals, we reverse funds to your original payment method.
- Regulatory compliance: Indonesian law requires us to verify user identity and detect money laundering. We retain transaction records for compliance audits.
- Fraud prevention: We monitor for suspicious login patterns, unusual betting behavior, and account takeover attempts. If we detect risk, we may freeze your account pending verification.
- Service improvement: We analyze aggregate usage data (not individual bets) to understand which games and payment methods are most popular, and where our cmd368 platform can improve.
Third parties who access your data
Our cmd368 platform relies on third-party service providers. We share your data only as necessary for them to serve us:
- Payment processors: local payment, online payment, e-wallet, mobile banking, local payment, online payment, and our bank partners (e-wallet, mobile banking, local payment, online payment) receive your deposit and withdrawal requests. They do not share your bank credentials with us.
- Cloud hosting: Our servers may sit outside Indonesia—possibly in Singapore, the Philippines, or other regions. Your data is encrypted in transit and at rest.
- KYC/ID verification services: We may use third-party ID verification platforms to validate your government ID. These services do not retain your data longer than needed for verification.
- Fraud detection services: We use automated fraud-detection tools to flag suspicious activity. These tools analyze transaction patterns but do not make final decisions—our team reviews flagged accounts.
- Legal / law enforcement: If required by law, we may disclose your data to Indonesian authorities or law enforcement. We notify you of such disclosures where possible, unless we are legally prohibited from doing so.
How long we keep your data
We retain your account data (name, email, address, ID) as long as your cmd368 account is active. If you close your account, we keep minimal data for legal/tax purposes for up to seven years, as required by Indonesian law. Transaction records (deposits, withdrawals, bets) are retained for a minimum of three years to comply with anti-money-laundering regulations.
Usage logs (login timestamps, game sessions) are retained for one year and then deleted. Cookies and tracking data are cleared per your browser settings or when you log out.
Your rights on cmd368
We recognize your rights to access, correct, and delete your data, subject to legal obligations. Here is what you can do:
- Access your data
- Log in to cmd368 and view your account details, transaction history, and login activity. You can request a full data export by contacting support.
- Correct your data
- Update your email, address, or phone number in Account Settings. Some fields (name, ID number) may require verification before changes.
- Delete your account
- Request account closure via support. We retain minimal legal records but delete most personal data within 30 days of closure.
- Opt out of marketing
- Unsubscribe from marketing emails via the link in any email, or disable marketing notifications in Account Settings.
Cookies and tracking on cmd368
We use cookies to remember your login, store your language preference, and analyze how you navigate cmd368. Essential cookies are required to keep you logged in. Analytics cookies help us understand which pages you visit and how long you stay—we use this to improve cmd368 performance and user experience.
You can disable cookies in your browser settings, but doing so may affect cmd368 functionality (you may be logged out on each visit). Third-party analytics services (Google Analytics, for example) may also set cookies to track your activity across websites; you can opt out of such tracking via your browser or the service's privacy page.
How we protect your data
We use multiple security layers to protect your cmd368 data. All communication between your device and our servers is encrypted using SSL/TLS (the same standard banks use). Your password is hashed—we do not store it in plain text, so even our staff cannot see it. You can enable optional two-factor authentication (2FA) to add an extra layer of protection.
Our servers run firewalls, intrusion detection, and regular security audits. We comply with PCI-DSS standards for payment card handling (though most users fund via e-wallet, which bypasses card storage). We train our staff on data protection and limit access to personal data to those who need it to do their jobs.
International data transfers
Our cmd368 servers may sit in countries outside Indonesia—such as Singapore, the Philippines, or other regions in Asia. When your data leaves Indonesia, it remains encrypted and is subject to the same privacy standards we apply locally. We do not transfer data to countries with weaker privacy laws unless strictly necessary for platform operations.
By using cmd368, you consent to your data being processed internationally where required. If you have concerns about international data transfer, contact our support team before registering an account.
Updates to our cmd368 privacy policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or by posting a notice on cmd368. Your continued use of the platform after changes become effective constitutes acceptance of the updated policy.
Contact us about privacy
If you have questions about this privacy policy, want to exercise your data rights, or suspect a privacy breach, contact our support team via live chat, email, or phone. Our team operates across major cities—Jakarta, Surabaya, Bandung, Medan—and can assist you in English or local languages. For data requests, we aim to respond within 14 days.
Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law. If you have privacy concerns or believe we have violated your data rights, you may also lodge a complaint with Indonesia's personal data protection authority or your local regulator.