At klx388, protecting your personal data is a core responsibility, not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and store it, and the rights you hold over your own data as a player on our platform.
Last Updated: 1 January 2026This Privacy Policy applies to all services offered by klx388 through the website at https://klx388.cam and any associated mobile-optimised interfaces (collectively, the "Platform"). It governs the collection, processing, storage, and disclosure of personal data submitted by or generated in relation to players, prospective players, and visitors to the Platform.
klx388 is committed to handling your personal data with integrity and in compliance with internationally recognised data protection principles. We collect only what is necessary, retain it only for as long as required, and never sell your information to advertisers or unrelated third parties.
By registering an account on the Platform or continuing to use the Platform after this Policy has been published, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to request Account closure.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together form the complete framework governing your relationship with klx388.
For the purposes of this Privacy Policy, klx388 — the operator of the Platform — acts as the Data Controller, meaning we determine the purposes for which and the means by which your personal data is processed. We are responsible for ensuring that all processing activities comply with our obligations under applicable data protection law.
Our Platform is designed and operated primarily to serve players residing in Indonesia, and we apply data handling standards appropriate to that context. Where you have questions about how your data is processed or wish to exercise any of your rights, the contact details in Section 14 of this Policy should be used.
Note on Third-Party Processors: Some data processing is carried out on our behalf by vetted third-party service providers (payment processors, game studios, fraud prevention services). These providers act as Data Processors under our instruction and are subject to contractual obligations that mirror our own data protection commitments. See Section 6 for further details.
klx388 collects two broad categories of personal data: information you provide directly, and information generated automatically as a result of your use of the Platform.
klx388 does not intentionally collect sensitive special-category personal data (such as health information, religious beliefs, or political views). If you voluntarily disclose such information during a customer support interaction — for example, indicating a health-related reason for requesting self-exclusion — we will handle it with heightened confidentiality and use it only to fulfil your request.
klx388 collects personal data through the following channels:
The table below outlines the primary purposes for which klx388 processes your personal data and the legal basis on which each processing activity rests:
| Purpose | Data Categories | Legal Basis |
|---|---|---|
| Account registration and authentication | Identity, contact, technical data | Contract performance |
| Processing deposits and withdrawals (IDR via BCA, BRI, BNI, Mandiri, etc.) | Financial, identity data | Contract performance |
| KYC identity verification before first withdrawal | Identity, KYC documents | Legal obligation / contract performance |
| Anti-money laundering (AML) monitoring | Financial, betting, identity data | Legal obligation |
| Fraud detection and prevention | Technical, usage, financial data | Legitimate interests |
| Responsible gaming tools and self-exclusion enforcement | Responsible gaming preferences, identity data | Legal obligation / legitimate interests |
| Customer support and complaint handling | Identity, contact, communications data | Contract performance / legitimate interests |
| Personalised promotions and bonus offers | Usage, betting, contact data | Consent (where required) / legitimate interests |
| Platform analytics and performance optimisation | Usage, technical, session data | Legitimate interests |
| Regulatory reporting and licence compliance | Identity, financial, betting data | Legal obligation |
klx388 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.
To facilitate deposits and withdrawals in IDR, we share your name, bank account details, and transaction amounts with our partner payment processors and the relevant Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon). These processors are contractually bound to use your data solely to complete the payment instruction.
Third-party game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive anonymised or pseudonymised session tokens to authenticate your game sessions. These providers do not receive your full name, bank details, or contact information unless required for dispute resolution purposes.
We work with specialist KYC and fraud prevention agencies to verify the identity of players and detect suspicious account activity. These agencies may receive your identity documents, date of birth, and address for cross-referencing against their databases. Any match or flag returned is handled confidentially within our compliance team.
klx388 will disclose personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by law, court order, or our licensing authority. We will notify you of any such disclosure where we are legally permitted to do so.
In the event that klx388 undergoes a merger, acquisition, or sale of all or a substantial part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.
Our Commitment: Every third party that receives your personal data is subject to a data processing agreement requiring them to maintain confidentiality, apply appropriate security measures, and process data only for the specific purpose authorised by klx388.
klx388 operates globally, and some of our service providers — including cloud hosting infrastructure and game studio platforms — are located outside Indonesia. As a result, your personal data may be transferred to and processed in countries other than Indonesia, including jurisdictions that may have different data protection laws.
When such transfers occur, klx388 ensures that appropriate safeguards are in place, including:
By using the Platform and submitting your personal data, you acknowledge and consent to the transfer of your data to servers located outside Indonesia where necessary for the provision of our services.
klx388 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following standard retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | 5 years after account closure | Regulatory / AML compliance |
| KYC identity documents | 5 years after account closure | Legal obligation |
| Financial transaction records | 5 years after account closure | AML / financial regulation |
| Betting and gaming history | 5 years after account closure | Dispute resolution / regulation |
| Customer support communications | 3 years after last interaction | Complaint management / legitimate interests |
| Marketing preferences and consents | Until consent is withdrawn | Consent-based processing |
| Self-exclusion records | Indefinitely (permanent exclusions) | Responsible gaming obligation |
| Website analytics and log data | 13 months on a rolling basis | Platform performance / security |
Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.
The klx388 Platform uses cookies and similar tracking technologies to provide core functionality, improve user experience, and analyse Platform performance. A cookie is a small text file placed on your device when you visit a website; it allows the site to recognise your device on subsequent visits.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, store authentication tokens, remember your language preference and responsible gaming settings | Session |
| Functional | Remember your preferred sports markets (e.g., BRI Liga 1, EPL), game lobby filters, and display preferences | Up to 12 months |
| Analytics | Collect aggregated data on page visits, click paths, and feature usage to help us improve the Platform | Up to 13 months |
| Fraud Prevention | Detect unusual login patterns, multiple-account attempts, and bot activity | Up to 12 months |
You can control and manage cookies through your browser settings at any time. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the Platform. Disabling functional cookies may affect personalisation features. Analytics and fraud prevention cookies can be disabled without affecting core functionality, though doing so may result in a less optimised experience.
klx388 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements on external websites.
As a data subject, you hold a number of rights with respect to the personal data klx388 holds about you. These rights are outlined below. To exercise any of them, please contact our Data Protection team at the email address provided in Section 14.
Request a copy of all personal data we hold about you, along with information on how it is being processed.
Request correction of inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where we no longer have a legal basis to retain it — subject to our regulatory retention obligations.
Request that we limit how we use your data while a dispute about accuracy or legal basis is resolved.
Receive your personal data in a structured, machine-readable format and transmit it to another controller where technically feasible.
Object to processing carried out on the basis of legitimate interests, including profiling for personalised promotions.
Where processing relies on your consent, withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Request human review of any significant decision made about you solely by automated means, such as an automated account suspension.
klx388 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
klx388 implements a layered approach to data security, combining technical, organisational, and procedural measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction.
While klx388 takes all reasonable steps to protect your data, account security is a shared responsibility. You are responsible for keeping your login credentials confidential, enabling 2FA on your account, and notifying us immediately at [email protected] if you suspect any unauthorised access to your account.
The klx388 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. Age verification checks are performed during the account registration process, and additional document-based age verification may be required at any point as part of our KYC obligations.
If klx388 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete all related personal data, and — where required by law — report the matter to relevant authorities. Parents and guardians who believe that a minor may have registered an account on the Platform are encouraged to contact us immediately at [email protected].
We strongly encourage parents and guardians to use parental control software to restrict minors' access to online gambling websites. A list of recommended tools is available on our Responsible Gaming page.
klx388 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will:
Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, you should discontinue use and request Account closure before the changes take effect.
We recommend revisiting this Privacy Policy periodically. Minor clarifications or administrative updates that do not affect your rights may be made without prior notice, but will always be reflected in an updated "Last Updated" date.
If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a data-related complaint, please contact our Data Protection team using the details below. All enquiries are handled by native Indonesian-speaking staff available around the clock.
We aim to acknowledge all data rights requests and privacy complaints within 48 hours and to provide a full substantive response within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to our licensing authority's data oversight function, details of which will be provided upon request.
Six practical commitments that define how we handle every piece of personal data entrusted to us by Indonesian players.
Every byte of data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Your bank details and KYC documents are encrypted at rest and never stored in plaintext.
klx388 does not sell, rent, or trade your personal data to advertisers, data brokers, or unrelated third parties under any circumstances. Your data is used only to operate and improve your gaming experience.
Identity documents submitted for KYC verification — including your Indonesian KTP or passport — are stored in an encrypted vault accessible only to our compliance team and are never shared with game studios or marketing partners.
You can access, correct, restrict, or request deletion of your personal data at any time. Our support team processes all data rights requests within 30 days and acknowledges receipt within 48 hours.
We do not hold your data indefinitely. Standard account data is deleted 5 years after account closure, with shorter periods for analytics logs and communications. Retention schedules are published transparently in this Policy.
All data processing at klx388 is conducted in accordance with our international gaming licence obligations, AML requirements, and globally recognised data protection standards. We cooperate fully with regulatory oversight.
Our support team is on hand 24/7 to answer any privacy-related queries. You can also review our Terms & Conditions for the full framework governing your account, or visit our FAQ for quick answers.