Last Updated: January 15, 2026 | Effective Date: January 15, 2026

Your Privacy Matters to au328

At au328, we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights regarding your personal information. By using au328 services, you consent to the data practices described in this policy.

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by au328 through our website at https://au328.cam, mobile-optimized platforms, and any other digital services we provide (collectively, "the Platform"). This policy covers Indonesian residents who access or use au328 services for online sports betting, live casino games, slot machines, togel (traditional Indonesian lottery), sabung ayam (cockfighting) streams, and related gambling activities.

au328 operates as an international online betting platform serving Indonesian players. We are committed to compliance with applicable data protection regulations, including principles aligned with the General Data Protection Regulation (GDPR) and international best practices for personal data handling. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of au328 services.

2. Information We Collect

au328 collects several categories of personal information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and deliver a personalized betting experience.

2.1 Information You Provide Directly

When you register for an au328 account or use our services, you voluntarily provide the following information:

  • Account Registration Data: Full legal name (as shown on government-issued ID), email address, mobile phone number, date of birth, residential address in Indonesia, chosen username and password, preferred language, and currency preference (IDR).
  • Identity Verification Documents: Government-issued photo identification (Indonesian KTP, passport, or driving license), proof of residential address (utility bill, bank statement, or government correspondence dated within 3 months), and bank account verification documents (bank statement or bank book showing your name and account number).
  • Financial Information: Bank account details for deposits and withdrawals (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay account numbers), transaction history records, and deposit/withdrawal amounts.
  • Communication Records: Live chat transcripts, email correspondence with customer support, WhatsApp messages, feedback and survey responses, and customer service call recordings (with prior notice and consent).

2.2 Information Collected Automatically

When you access and use the au328 Platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

  • Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, iOS, Android), browser type and version (Chrome, Safari, Firefox), screen resolution, and device identifiers.
  • Usage Data: Pages visited, features accessed, time spent on each page, click patterns, betting activity (games played, bet amounts, win/loss records), login timestamps, session duration, and navigation paths through the Platform.
  • Location Data: IP address, approximate geographic location based on IP (city and region level, not precise GPS coordinates), and time zone (WIB, WITA, or WIT).
  • Cookies and Tracking Technologies: Session cookies (essential for platform functionality), preference cookies (remember your settings), analytics cookies (understand how users interact with the Platform), and security cookies (detect fraudulent activity and enhance security).

2.3 Information from Third Parties

We may receive information about you from third-party sources to verify your identity, prevent fraud, and comply with regulatory requirements:

  • Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to verify deposits and process withdrawals.
  • Identity Verification Services: Age verification confirmation and identity authentication data from third-party verification providers to ensure compliance with our 21+ age requirement.
  • Fraud Prevention Services: Risk assessment scores and fraud detection indicators from security partners to protect both you and au328 from fraudulent activities.

3. How We Use Your Information

au328 uses your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

  • Create, maintain, and manage your au328 account
  • Process deposits, withdrawals, and financial transactions
  • Enable you to place bets and play games on the Platform
  • Track betting history and calculate winnings/losses
  • Apply bonus terms and promotional offers
  • Provide customer support and respond to inquiries

3.2 Security and Fraud Prevention

  • Verify your identity and age (21+ requirement) to prevent underage gambling
  • Detect and prevent fraudulent transactions, account takeovers, and suspicious activities
  • Monitor betting patterns to identify potential bonus abuse or terms violations
  • Protect the integrity of games and ensure fair play
  • Comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations

3.3 Platform Improvement and Analytics

  • Analyze user behavior to improve Platform functionality and user experience
  • Conduct A/B testing to optimize features and design
  • Generate aggregate statistics and reports (anonymized data that does not identify individual users)
  • Identify and fix technical issues, bugs, and performance problems
  • Develop new features, games, and services based on user preferences

3.4 Marketing and Communications

  • Send promotional emails about bonuses, tournaments, and special offers (with your consent)
  • Deliver personalized betting recommendations based on your activity
  • Notify you of account updates, security alerts, and important policy changes
  • Conduct customer satisfaction surveys to gather feedback

3.5 Legal and Regulatory Compliance

  • Comply with Indonesian and international gambling regulations
  • Respond to legal requests, court orders, and regulatory inquiries
  • Maintain records for tax reporting and financial auditing purposes
  • Enforce our Terms & Conditions and resolve disputes

4. How We Protect Your Information

au328 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

4.1 Technical Security Measures

  • 128-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Secure Sockets Layer (SSL) technology—the same encryption used by major Indonesian banks.
  • Firewall Protection: Advanced firewall systems protect our servers from external attacks and unauthorized intrusion attempts.
  • Secure Data Storage: Personal information is stored on secure servers with restricted access, encrypted databases, and regular security audits.
  • Two-Factor Authentication (2FA): Optional 2FA available for account logins to add an extra layer of security beyond username and password.
  • Regular Security Updates: We apply security patches and software updates promptly to protect against newly discovered vulnerabilities.

4.2 Administrative Security Measures

  • Access Controls: Personal data is accessible only to authorized au328 employees and contractors who need it to perform their job functions. Access is granted on a need-to-know basis.
  • Employee Training: All staff members receive training on data protection principles, security protocols, and privacy best practices.
  • Confidentiality Agreements: Employees and third-party service providers sign strict confidentiality agreements prohibiting unauthorized disclosure of user data.
  • Incident Response Plan: We maintain a comprehensive data breach response plan to quickly address any security incidents and notify affected users as required by law.

4.3 Physical Security Measures

  • Servers are housed in secure data centers with 24/7 surveillance, biometric access controls, and environmental protections (fire suppression, climate control, backup power).
  • Regular physical security audits ensure continued protection of hardware infrastructure.

Important Security Notice

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials. Never share your password with anyone, and log out of your account when using shared or public devices.

5. Information Sharing and Disclosure

au328 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating the Platform and delivering services:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other casino/slot suppliers to deliver game content (these providers may collect limited usage data for their own analytics).
  • Identity Verification Services: Third-party KYC/AML verification providers to confirm your age, identity, and address.
  • Customer Support Tools: Live chat software, email service providers, and CRM systems to manage customer communications.
  • Analytics Providers: Web analytics services to understand Platform usage (we use tools that anonymize IP addresses and respect user privacy).

All service providers are contractually required to protect your data, use it only for the specified purposes, and comply with applicable data protection laws.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required by law or in response to valid legal processes, including:

  • Court orders, subpoenas, or legal requests from government authorities
  • Regulatory inquiries from gambling licensing authorities or financial regulators
  • Law enforcement investigations related to fraud, money laundering, or other criminal activities
  • Protection of our legal rights, property, or safety, or that of our users or the public

5.3 Business Transfers

If au328 undergoes a merger, acquisition, sale of assets, or other business transaction, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

6. Your Privacy Rights

As an au328 user, you have the following rights regarding your personal information:

6.1 Access and Data Portability

You have the right to request a copy of the personal information we hold about you. You can download your betting history, transaction records, and account details directly from your account dashboard. For a comprehensive data export, contact our customer support team.

6.2 Correction and Update

You can update your profile information (email, phone number, address) at any time through your account settings. For changes to your legal name or date of birth, contact customer support with appropriate documentation.

6.3 Deletion and Account Closure

You may request deletion of your account and personal data by contacting customer support. Please note that we may retain certain information as required by law for tax, legal, and regulatory compliance purposes (typically 7 years for financial records). Pending withdrawals, unresolved disputes, or ongoing investigations may delay account deletion.

6.4 Marketing Opt-Out

You can unsubscribe from promotional emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email, or by adjusting your communication preferences in your account settings. Note that you will still receive essential account-related emails (withdrawal confirmations, security alerts, policy updates) even if you opt out of marketing communications.

6.5 Cookie Management

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may impact Platform functionality and prevent you from using certain features. Analytics and marketing cookies can be disabled without affecting core Platform functionality.

7. Data Retention

au328 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

  • Account Information: Retained for the duration of your active account, plus 7 years after account closure (for regulatory compliance).
  • Transaction Records: Retained for 7 years after the transaction date (for tax and financial auditing purposes).
  • Identity Documents: Retained for 7 years after account closure (for anti-money laundering compliance).
  • Communication Records: Retained for 3 years after the communication date (for dispute resolution and customer service quality assurance).
  • Usage Logs: Retained for 12 months (for security monitoring and technical troubleshooting).

After the retention period expires, personal information is securely deleted or anonymized so that it can no longer be associated with you.

8. Children's Privacy

au328 is an adult-only platform. We do not knowingly collect personal information from individuals under 21 years of age. Our Terms & Conditions explicitly prohibit underage use of the Platform. If we discover that we have inadvertently collected information from a person under 21, we will immediately delete that information and close the associated account. If you believe a minor has created an account on au328, please contact us immediately at [email protected].

9. International Data Transfers

au328 operates as an international betting platform. While primarily serving Indonesian users, your personal information may be transferred to and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have data protection laws that differ from Indonesian regulations. When we transfer data internationally, we implement appropriate safeguards including standard contractual clauses, encryption in transit, and ensuring that recipient countries provide adequate data protection standards.

10. Changes to This Privacy Policy

au328 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email (to the address associated with your account) and/or by posting a prominent notice on the Platform with the updated "Last Updated" date at the top of this page. Your continued use of au328 services after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

11. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

  • Email: [email protected] (use subject line "Privacy Inquiry" for faster routing)
  • Live Chat: Available 24/7 through the Platform—request to speak with a Data Protection specialist
  • WhatsApp: +62 812-3456-7890 (available 08:00-02:00 WIB)

We will respond to all privacy-related inquiries within 7 business days. For complex requests requiring investigation or document retrieval, we may require up to 30 days to provide a complete response.

How au328 Protects Your Privacy

128-bit SSL Encryption

All data transmitted between your device and our servers is encrypted using bank-grade SSL technology, ensuring your information cannot be intercepted by third parties.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used solely to provide and improve au328 services.

Secure Data Centers

Your personal information is stored on secure servers in protected data centers with 24/7 monitoring, biometric access controls, and regular security audits.

Access Controls

Only authorized au328 employees with legitimate business needs can access your personal data. All access is logged and monitored for security purposes.

GDPR-Aligned Practices

Our data protection practices align with international standards including GDPR principles, giving you control over your personal information.

Breach Notification

In the unlikely event of a data breach affecting your information, we will notify you promptly and take immediate action to mitigate any harm.

Questions About Your Privacy?

Our Data Protection team is available 24/7 to address your privacy concerns

Read Our FAQ Terms & Conditions Back to Home