Privacy Policy

1. Introduction

asia28 ("we," "us," "our," or "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect the personal data of users ("you," "your," or "Player") who access our online sports betting and casino gaming services at asia28.cam and through our mobile applications (collectively, the "Service").

This Privacy Policy applies to all Indonesian residents and visitors who use the asia28 platform. By creating an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately discontinue use of the Service.

We process your personal data in accordance with applicable international data protection standards, including principles derived from the General Data Protection Regulation (GDPR) and other recognized privacy frameworks. While asia28 operates under an international gaming license and is hosted on offshore servers, we respect and uphold fundamental privacy rights for all users, including Indonesian players.

2. Data Controller and Contact Information

asia28 is the data controller responsible for processing your personal information in connection with the Service. For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on our website
• WhatsApp: +62 812 3456 7890 (08:00 - 02:00 WIB)

We aim to respond to all privacy-related inquiries within 7 business days.

3. Information We Collect

3.1 Personal Information You Provide

When you create an account and use the asia28 Service, we collect the following categories of personal information directly from you:

• Identity Information: Full legal name as it appears on your KTP (Kartu Tanda Penduduk - Indonesian National Identity Card), date of birth, gender, nationality, and KTP number.
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code), and preferred language.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay account identifiers), payment card information (for deposit methods where applicable, processed through secure third-party payment gateways), and transaction history.
• Identity Verification Documents: Copies of your KTP, proof of address documents (utility bills, bank statements), selfie photographs holding your KTP, and any additional documentation required for KYC (Know Your Customer) verification.
• Betting and Gaming Data: Betting history, game play records, wagers placed, winnings and losses, favorite sports and markets, preferred casino games, and account balance information.
• Communications: Content of messages, emails, live chat transcripts, WhatsApp conversations, and phone call recordings (where permitted by law) between you and asia28 customer support.

3.2 Information We Collect Automatically

When you access and use the asia28 platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, Android ID, IDFA), and mobile network information.
• Connection Information: IP address, geolocation data (country, city, coordinates), internet service provider, connection type, and time zone.
• Usage Data: Pages visited, features accessed, time spent on pages, click patterns, navigation paths, search queries, date and time of access, referring/exit pages, and session duration.
• Performance Data: Application performance metrics, error logs, crash reports, loading times, and system diagnostics.

3.3 Information from Third-Party Sources

In certain circumstances, we may collect information about you from third-party sources to verify your identity, prevent fraud, or comply with legal obligations:

• Payment Processors: Transaction confirmation, payment verification, and fraud screening results from banks, e-wallet providers, and payment gateways.
• Identity Verification Services: Results from third-party identity verification, document authentication, and fraud detection services.
• Public Databases: Information from publicly accessible databases for compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.

4. How We Use Your Information

4.1 Service Provision

We use your personal information to provide, maintain, and improve the asia28 Service, including:

• Creating and managing your player account.
• Processing deposits, withdrawals, and financial transactions.
• Enabling you to place bets on sports events and play casino games.
• Calculating odds, settling bets, and paying out winnings.
• Maintaining accurate account balances and transaction records.
• Providing customer support and responding to your inquiries.
• Personalizing your gaming experience based on your preferences and play history.

4.2 Security and Fraud Prevention

We process your data to protect the security and integrity of our platform:

• Verifying your identity through KYC procedures to prevent underage gambling and identity theft.
• Detecting and preventing fraudulent activity, money laundering, and collusion.
• Monitoring betting patterns and gaming behavior to identify suspicious activity.
• Protecting against unauthorized access, data breaches, and cyber attacks.
• Enforcing our Terms and Conditions and investigating violations.

4.3 Legal Compliance

We use your information to comply with legal and regulatory obligations:

• Meeting KYC and AML requirements under international gaming regulations.
• Responding to lawful requests from government authorities, regulators, and law enforcement.
• Maintaining records required by our gaming license and applicable laws.
• Reporting suspicious transactions as required by anti-money laundering laws.

4.4 Marketing and Communications

With your consent, we may use your contact information to send you promotional communications:

• Bonus offers, free bet promotions, and reload bonuses tailored to your gaming preferences.
• Announcements about new games, features, and platform updates.
• Invitations to VIP programs, tournaments, and special events.
• Newsletters, betting tips, and sports news related to Indonesian and international leagues.

You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails, adjusting your account preferences, or contacting customer support. Opting out will not affect transactional communications necessary for account operation.

4.5 Analytics and Improvement

We analyze usage data to improve our Service:

• Understanding how players use our platform and which features are most popular.
• Identifying technical issues, bugs, and areas for performance optimization.
• Developing new games, betting markets, and features based on player preferences.
• Conducting research and analytics to enhance user experience.

5. Legal Basis for Processing (GDPR Principles)

Although asia28 operates under an international license, we apply GDPR-aligned privacy principles. We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., providing betting and gaming services under our Terms and Conditions).
• Legal Obligation: Processing is required to comply with legal obligations such as KYC, AML, age verification, and regulatory reporting.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, service improvement, and business analytics, provided these interests do not override your fundamental rights.
• Consent: Processing is based on your explicit consent, such as for marketing communications or optional data collection. You may withdraw consent at any time.

6. How We Share Your Information

6.1 Service Providers and Business Partners

We share your personal information with trusted third-party service providers who assist us in operating the asia28 platform:

• Payment Processors: Banks, e-wallet providers (OVO, DANA, GoPay), payment gateways, and financial institutions that process deposits and withdrawals on your behalf.
• Game Providers: Casino game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) whose games you play on our platform. These providers may collect gameplay data directly through their embedded game clients.
• Identity Verification Services: Third-party KYC and document verification providers that authenticate your identity documents and screen for fraud.
• Cloud Hosting Providers: Secure cloud infrastructure providers that host our servers, databases, and application files.
• Customer Support Tools: Live chat platforms, ticketing systems, and communication tools used to provide customer service.
• Analytics Providers: Web analytics services that help us understand platform usage and performance.

All third-party service providers are contractually obligated to protect your data, use it only for specified purposes, and maintain confidentiality. We do not allow service providers to use your personal information for their own marketing purposes.

6.2 Legal and Regulatory Disclosure

We may disclose your personal information when required by law or to protect our legal rights:

• In response to lawful requests from government authorities, courts, regulators, or law enforcement agencies.
• To comply with subpoenas, court orders, or legal processes.
• To report suspicious activity to financial intelligence units or anti-money laundering authorities.
• To enforce our Terms and Conditions or investigate violations.
• To protect the rights, property, and safety of asia28, our players, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

6.4 We Do Not Sell Your Data

asia28 does not sell, rent, or trade your personal information to third-party marketers, data brokers, or advertisers. Your data is used solely to provide our services, ensure platform security, and comply with legal obligations.

7. Data Security Measures

asia28 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All sensitive data transmitted between your device and our servers is encrypted using SSL/TLS (Secure Sockets Layer / Transport Layer Security) protocols. Passwords are stored using bcrypt hashing with salt.
• Access Controls: Personal information is accessible only to authorized employees, contractors, and service providers who require access to perform their duties. Access is granted on a need-to-know basis and protected by multi-factor authentication.
• Network Security: Our servers are protected by firewalls, intrusion detection systems, and DDoS (Distributed Denial of Service) mitigation technologies.
• Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses.
• Data Minimization: We collect and retain only the personal information necessary for legitimate purposes and delete data when no longer needed.
• Secure Payment Processing: Financial transactions are processed through PCI DSS (Payment Card Industry Data Security Standard) compliant payment gateways. asia28 does not store complete credit card numbers or CVV codes.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. You acknowledge that you provide personal information at your own risk and agree to take reasonable precautions to protect your account credentials.

8. Data Retention

asia28 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Personal information is retained for the duration of your account's active status and for a reasonable period thereafter to comply with legal retention requirements.
• Transaction Records: Financial transaction data, betting history, and KYC documents are retained for a minimum of 5 years from the date of your last transaction to comply with anti-money laundering and gaming regulations.
• Marketing Communications: Contact information collected for marketing purposes is retained until you unsubscribe or request deletion, whichever comes first.
• Closed Accounts: When you close your account, we retain certain information (identity data, transaction history) to prevent fraud, comply with legal obligations, and address any disputes or claims that may arise.

After the retention period expires, we securely delete or anonymize your personal information so that it cannot be associated with you.

9. Your Privacy Rights

As an asia28 player, you have the following rights regarding your personal data:

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To exercise this right, contact customer support with a detailed description of the information you wish to access. We will provide the requested data in a structured, commonly used format within 30 days.

9.2 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most account information directly through your account settings or by contacting customer support.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information in the following circumstances:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent and there is no other legal basis for processing.
• You object to processing based on legitimate interests and there are no overriding legitimate grounds.
• Your data has been unlawfully processed.

Please note that we may retain certain information to comply with legal obligations, resolve disputes, or enforce our Terms and Conditions even after you request deletion.

9.4 Right to Restriction

You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider where technically feasible.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to marketing, we will cease sending promotional communications immediately.

9.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We may require verification of your identity before processing your request. We will respond within 30 days of receiving a valid request.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They enable the website to recognize your device, remember your preferences, and provide personalized features.

10.2 How asia28 Uses Cookies

We use the following types of cookies on our platform:

Cookie Type	Purpose	Duration
Strictly Necessary Cookies	Enable core functionality such as login authentication, account security, and transaction processing. These cookies are essential for the Service to function.	Session / Up to 1 year
Performance Cookies	Collect anonymous information about how visitors use our website, including pages visited, error messages, and loading times. Helps us improve platform performance.	Up to 2 years
Functionality Cookies	Remember your preferences (language, currency, favorite sports) to provide a personalized experience.	Up to 1 year
Targeting/Advertising Cookies	Track your browsing activity to deliver relevant promotional offers and measure effectiveness of marketing campaigns.	Up to 1 year

10.3 Managing Cookies

You can control and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the asia28 platform and limit your ability to use some features. Most browsers automatically accept cookies, but you can modify your settings to decline cookies or alert you when a cookie is being sent.

11. Third-Party Links and Services

The asia28 platform may contain links to third-party websites, services, or applications (e.g., payment processors, game providers, social media platforms). We are not responsible for the privacy practices or content of these third-party sites. This Privacy Policy applies only to information collected by asia28. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

12. Children's Privacy

asia28 does not knowingly collect or solicit personal information from individuals under 21 years of age. Our Service is intended solely for adults who have reached the legal gambling age in Indonesia (21+). If we become aware that we have collected personal information from a person under 21, we will immediately delete the account and all associated data. Parents or guardians who believe their child has provided personal information to asia28 should contact us immediately at [email protected].

13. International Data Transfers

asia28 operates internationally and may transfer your personal information to servers located outside Indonesia for processing and storage. These countries may have data protection laws that differ from Indonesian regulations. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities.
• Ensuring the receiving country provides an adequate level of data protection.
• Obtaining your explicit consent for the transfer where required.

By using the asia28 Service, you consent to the transfer of your personal information to countries outside Indonesia for the purposes described in this Privacy Policy.

14. Changes to This Privacy Policy

asia28 reserves the right to modify, update, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

We will notify you of material changes by email or prominent notice on our website at least 30 days before the changes take effect. Continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you must discontinue use of the Service and may request deletion of your account.

15. Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, or wish to exercise your privacy rights, please contact us:

• Email: [email protected] (Subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 on asia28.cam
• WhatsApp: +62 812 3456 7890

We take all privacy concerns seriously and will investigate and respond to your inquiry within 7 business days. If you are not satisfied with our response, you may have the right to lodge a complaint with a data protection authority in your jurisdiction.