aj328 Privacy Policy

1. Introduction

aj328 operates an online gaming platform serving Indonesian players with sports betting, live casino games, slot games, and related entertainment services. We recognize that privacy is fundamental to building trust with our members. This Privacy Policy applies to all personal information collected through the aj328 website (https://aj328.cam), mobile applications, customer support channels, and any related services.

This policy complies with applicable data protection regulations and follows international best practices for online gaming operators. We are committed to transparency about our data practices and to giving you control over your personal information.

2. Information We Collect

aj328 collects several categories of personal information to provide, maintain, and improve our services. The types of information we collect include:

2.1 Information You Provide Directly

When you register for an aj328 account or use our services, you voluntarily provide:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (KTP number, passport number).
• Contact Information: Email address, phone number, residential address, postal code, and preferred communication language.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account IDs), payment card details (for supported payment methods), and transaction history.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers, and two-factor authentication settings.
• Verification Documents: Copies of government-issued ID (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs for facial verification, and proof of payment method ownership.
• Communication Content: Messages you send to our customer support team via live chat, email, WhatsApp, or other channels, including attachments and screenshots you provide.

2.2 Information Collected Automatically

When you access and use the aj328 platform, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, device identifiers (IMEI, MAC address, advertising ID), screen resolution, and device settings.
• Usage Data: Pages visited, features used, games played, bets placed, login times, session duration, navigation paths, search queries, and interaction patterns.
• Location Data: IP address, approximate geographic location derived from IP address, and GPS location data (if you grant permission on mobile devices).
• Gaming Activity: Games played, bet amounts, win/loss records, bonus claims, withdrawal requests, deposit amounts and frequencies, and responsible gaming tool usage.
• Technical Logs: Server logs, error reports, crash data, performance metrics, and security incident records.

2.3 Information from Third Parties

In certain circumstances, aj328 may receive information about you from external sources:

• Payment Processors: Transaction status updates, payment verification results, and fraud detection signals from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers.
• Identity Verification Services: Age verification results, identity authentication outcomes, and document validation status from third-party KYC providers.
• Affiliate Partners: Referral source information and marketing campaign attribution data (if you register through an affiliate link).
• Game Providers: Game outcome data, RNG seed values, and gameplay statistics from third-party software providers like Pragmatic Play, Evolution Gaming, and others.

3. How We Use Your Information

aj328 uses the collected information for legitimate business purposes in operating and improving our gaming platform:

3.1 Service Provision

• Create and manage your aj328 account.
• Process deposits, withdrawals, and other financial transactions.
• Enable you to place bets, play games, and participate in promotions.
• Provide customer support and respond to your inquiries.
• Deliver notifications about your account activity, transaction status, and important platform updates.

3.2 Verification and Security

• Verify your identity and age to comply with legal requirements (21+ age restriction in Indonesia).
• Authenticate your account credentials and prevent unauthorized access.
• Detect and prevent fraud, money laundering, and other illegal activities.
• Investigate suspicious transactions or betting patterns.
• Enforce our Terms & Conditions and protect the integrity of our platform.

3.3 Compliance and Legal Obligations

• Comply with applicable laws, regulations, and licensing requirements.
• Maintain records for tax reporting and financial auditing purposes.
• Respond to lawful requests from government authorities, regulators, and law enforcement agencies.
• Implement anti-money laundering (AML) and know-your-customer (KYC) procedures.
• Report suspicious activities as required by law.

3.4 Marketing and Communications

• Send promotional offers, bonus announcements, and special event notifications (with your consent).
• Personalize marketing content based on your gaming preferences and activity history.
• Conduct customer satisfaction surveys and gather feedback.
• Inform you about new features, games, and platform improvements.

3.5 Platform Improvement

• Analyze user behavior to optimize website performance and user experience.
• Identify technical issues and improve platform stability.
• Test new features and measure their effectiveness.
• Generate anonymized statistics and insights about platform usage patterns.

3.6 Responsible Gaming

• Monitor your gaming activity for signs of problem gambling.
• Implement deposit limits, loss limits, and session time limits you have set.
• Enforce self-exclusion requests and prevent excluded individuals from accessing the platform.
• Provide responsible gaming tools and resources tailored to your needs.

4. Information Sharing and Disclosure

aj328 does not sell your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Software developers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe) who supply gaming content.
• Identity Verification Services: KYC providers that verify your age, identity, and address.
• Customer Support Tools: Live chat platforms, email services, and ticketing systems.
• Cloud Hosting Providers: Infrastructure services that host our platform and store data securely.
• Analytics Services: Tools that help us understand user behavior and improve the platform.

All service providers are bound by strict confidentiality obligations and are only permitted to use your information to perform services for aj328, not for their own purposes.

4.2 Legal Requirements

We may disclose your information when required by law or to protect our legal rights:

• In response to valid legal processes such as subpoenas, court orders, or regulatory inquiries.
• To comply with anti-money laundering regulations and report suspicious activities to authorities.
• To protect the safety, rights, or property of aj328, our users, or the public.
• To investigate and prevent fraud, security breaches, or illegal activities.
• To enforce our Terms & Conditions and other policies.

4.3 Business Transfers

If aj328 undergoes a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email and/or a prominent notice on our platform before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, for example when participating in joint promotions with partners or when you authorize sharing for specific purposes.

5. Data Security Measures

aj328 implements robust technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption—the same standard used by banks and financial institutions.
• Secure Storage: Personal information stored on our servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Strict access controls limit who can view or modify personal information. Only authorized personnel with a legitimate business need can access sensitive data.
• Authentication: Two-factor authentication (2FA) is available for account login to add an extra layer of security.
• Firewalls and Intrusion Detection: Network-level security measures protect our infrastructure from external attacks.
• Regular Security Audits: Independent security experts conduct periodic audits and penetration testing to identify and address vulnerabilities.

5.2 Organizational Measures

• Employee Training: All aj328 staff receive regular training on data protection principles and security best practices.
• Confidentiality Agreements: Employees with access to personal information are bound by strict confidentiality obligations.
• Incident Response Plan: We maintain a comprehensive incident response plan to quickly detect, contain, and remedy security breaches.
• Data Minimization: We collect and retain only the personal information necessary for the purposes described in this policy.

5.3 Your Role in Security

While we implement strong security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with anyone.
• Enable two-factor authentication (2FA) on your account.
• Log out of your account after each session, especially on shared devices.
• Be cautious of phishing emails or messages claiming to be from aj328—we will never ask for your password via email.
• Keep your contact information up-to-date so we can reach you about security issues.
• Report any suspicious account activity to our support team immediately.

6. Data Retention

aj328 retains your personal information only as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, and business requirements:

• Active Accounts: Personal information for active accounts is retained as long as your account remains open and for a reasonable period afterward to comply with legal obligations.
• Closed Accounts: After you close your account, we retain certain information (identity data, transaction history) for up to 7 years to comply with financial record-keeping regulations and to resolve disputes.
• Marketing Data: If you opt out of marketing communications, we retain your contact information on a suppression list to ensure we don't contact you again.
• Legal Holds: Information subject to legal proceedings, investigations, or regulatory inquiries is retained until the matter is resolved.

When personal information is no longer needed, we securely delete or anonymize it so it can no longer be associated with you.

7. Your Privacy Rights

You have the following rights regarding your personal information held by aj328:

7.1 Access and Portability

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Data Portability: You may request your personal information in a structured, commonly used, machine-readable format.

7.2 Correction and Deletion

• Right to Rectification: You may request correction of inaccurate or incomplete personal information. You can also update certain information directly in your account settings.
• Right to Erasure: You may request deletion of your personal information, subject to our legal obligations to retain certain data (e.g., for tax purposes, dispute resolution, or regulatory compliance).

7.3 Restriction and Objection

• Right to Restriction: You may request that we limit how we use your personal information in certain circumstances.
• Right to Object: You may object to processing of your personal information for marketing purposes at any time by opting out of marketing communications.

7.4 Withdrawing Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before the withdrawal.

7.5 Exercising Your Rights

To exercise any of these rights, please contact our privacy team at [email protected]. We will respond to your request within 30 days. You may be required to verify your identity before we fulfill your request.

8. Cookies and Tracking Technologies

aj328 uses cookies and similar tracking technologies to enhance your experience on our platform:

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve functionality.

8.2 Types of Cookies We Use

8.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can set your browser to block or delete cookies, but this may impact your ability to use certain features on the aj328 platform.

9. Third-Party Services

The aj328 platform integrates with third-party services and may contain links to external websites. This Privacy Policy applies only to aj328. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any external sites you visit.

10. Children's Privacy

aj328 strictly prohibits use of our platform by individuals under 21 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from someone under 21, we will delete it immediately. If you believe a minor has provided information to aj328, please contact us at [email protected].

11. Changes to This Policy

aj328 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new "Last Updated" date.
• Sending an email notification to your registered email address.
• Displaying a prominent notice on the aj328 platform.

We encourage you to review this Privacy Policy periodically. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how aj328 handles your personal information, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on the aj328 platform
• WhatsApp: +62 812 3456 7890