to338 is committed to protecting your privacy and personal data. This policy explains how we collect, use, store, and safeguard your information in compliance with international data protection standards.
Last Updated: January 15, 2026
Welcome to the to338 Privacy Policy. This document explains how to338 ("we," "us," or "our") collects, uses, discloses, and protects personal information from users ("you" or "your") of our online gaming platform accessible at to338.cam and related services. We are committed to maintaining the highest standards of data privacy and security, treating your personal information with the utmost care and transparency.
By creating an account with to338, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our privacy practices, you should not use our services. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.
to338 acts as the data controller for all personal information collected through our platform. We are responsible for determining the purposes and means of processing your personal data. Our operations are governed by international data protection regulations, and we maintain strict compliance with applicable privacy laws in the jurisdictions where we operate and serve customers, including Indonesia.
For all privacy-related inquiries, data subject access requests, or concerns about how your personal information is handled, you may contact our Data Protection Officer at [email protected].
to338 collects various types of personal information to provide, maintain, and improve our services. The categories of information we collect include:
When you register for a to338 account, you voluntarily provide us with personal information including:
When you access or use to338 services, we automatically collect certain technical and usage information:
We may receive information about you from third-party sources including:
to338 processes your personal information for the following purposes, each based on a lawful basis under applicable data protection laws:
We use your information to create and maintain your to338 account, authenticate your identity, process your registrations, manage your account settings and preferences, and provide customer support. This processing is necessary for the performance of our contract with you (our Terms & Conditions).
We process financial information to facilitate deposits, process withdrawals to your designated Indonesian bank account (BCA, BRI, BNI, Mandiri) or e-wallet (OVO, DANA, GoPay, ShopeePay), manage your account balance, record transaction history, and issue transaction confirmations. This processing is necessary to fulfill our contractual obligations to you.
We use your information to verify your age (ensuring you meet the 21+ requirement), confirm your identity through KYC processes, comply with anti-money laundering (AML) regulations, detect and prevent fraud, verify your location to ensure compliance with geographic restrictions, and fulfill our legal obligations under Indonesian and international gaming regulations.
We process gameplay data to provide access to sports betting markets (including BRI Liga 1, EPL, La Liga, and other leagues), slots, live casino games, and lottery products (including togel), calculate and pay out winnings, track betting history, manage bonus offers and promotions, implement responsible gaming limits (deposit limits, loss limits, session time limits), and detect unusual betting patterns or potential problem gambling behavior.
With your consent, we may use your contact information to send promotional emails about new games, bonus offers, VIP program updates, and special promotions, deliver SMS notifications about account activity, deposits, withdrawals, and security alerts, and provide updates about platform features, maintenance schedules, and policy changes. You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting customer support.
We use aggregated and anonymized data to analyze platform performance, understand user behavior and preferences, improve game selection and user experience, develop new features and services, conduct market research, and optimize our website and mobile experience. This processing is based on our legitimate interest in improving our services.
We process personal information to detect and prevent fraudulent activities, unauthorized access, multiple account creation, bonus abuse, collusion between players, money laundering, and other prohibited activities. We maintain security logs, monitor suspicious transactions, and implement risk management measures. This processing is necessary to protect our legitimate business interests and comply with legal obligations.
to338 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of third parties for legitimate business purposes:
We share information with trusted service providers who assist us in operating our platform, including payment processors (Indonesian banks and e-wallet providers), game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe), KYC verification services, customer support platforms, cloud hosting providers (for secure data storage), email service providers, and security and fraud prevention services. These service providers are contractually obligated to handle your data securely and only use it for the purposes we specify.
We may disclose your information to law enforcement agencies, regulatory bodies, tax authorities, or other governmental entities when required by law, court order, or legal process, to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, to respond to legal claims or investigations, or to protect the rights, property, or safety of to338, our users, or the public.
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving to338, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.
We may share information with companies within our corporate group for internal administration, technical support, data analytics, and consolidated reporting purposes. All affiliated companies are required to handle your data in accordance with this Privacy Policy.
to338 takes the security of your personal information extremely seriously. We implement comprehensive technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction:
All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL (Secure Socket Layer) encryption. Sensitive data stored in our databases, including passwords and financial information, is encrypted at rest using advanced encryption algorithms. Payment card information (if provided) is tokenized and never stored in plain text.
We employ strict access controls ensuring that only authorized personnel with a legitimate business need can access your personal information. All employees and contractors with access to personal data are bound by confidentiality agreements. We use multi-factor authentication, role-based access permissions, and audit logging to monitor data access.
Our infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems (IDS/IPS), regular security audits and penetration testing conducted by independent cybersecurity firms, and DDoS (Distributed Denial of Service) protection to ensure platform availability.
We maintain regular encrypted backups of all data stored in geographically distributed secure facilities with tested disaster recovery procedures to ensure business continuity and data integrity in the event of a system failure.
Despite our best efforts, no security system is impenetrable. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 72 hours as required by applicable data protection regulations and report the incident to relevant supervisory authorities.
to338 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.
While your account remains active, we retain all personal information, transaction records, gameplay history, and communications to provide ongoing services and support.
After you close your account, we retain certain information for legal compliance purposes including identity verification documents (retained for 5 years to comply with anti-money laundering regulations), transaction records (retained for 7 years for tax and financial audit purposes), and gameplay history (retained for 5 years for dispute resolution and regulatory compliance). Personal information not required for legal purposes is deleted or anonymized within 90 days of account closure.
If you opt out of marketing communications, we will retain minimal information (email address, opt-out preference) to ensure we do not contact you again.
Your personal information is stored on secure servers located in data centers that meet international security standards. We use reputable cloud service providers with robust physical and digital security measures.
Under applicable data protection laws, you have the following rights regarding your personal information:
You have the right to request a copy of the personal information we hold about you. You can access most of your account information by logging into your to338 account. For a comprehensive data export, contact [email protected]. We will provide the requested information within 30 days.
If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings or contact customer support for assistance.
You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes it was collected, you withdraw consent (where processing is based on consent), or you object to processing based on legitimate interests. Note that we may be required to retain certain information for legal compliance purposes even after you request deletion.
You have the right to request that we limit how we use your personal information in certain situations, such as when you contest the accuracy of the data, object to processing, or when processing is unlawful but you prefer restriction over deletion.
You have the right to receive your personal information in a structured, commonly used, and machine-readable format (such as CSV or JSON) and transmit it to another service provider where technically feasible.
You have the right to object to processing of your personal information based on legitimate interests, including profiling and direct marketing. If you object to marketing, we will immediately cease such processing. For objections to other processing activities, we will assess your request and cease processing unless we have compelling legitimate grounds that override your interests.
Where we process your personal information based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
If you believe your privacy rights have been violated, you have the right to lodge a complaint with a supervisory data protection authority in your jurisdiction.
To exercise any of these rights, please contact us at [email protected] with your request. We may ask for proof of identity to verify your request and prevent unauthorized access to your personal information.
to338 uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content.
Cookies are small text files stored on your device when you visit our website. They help us recognize your browser, remember your preferences, and provide a seamless user experience.
Most web browsers allow you to control cookies through settings. You can block or delete cookies, but this may impact your ability to use certain features of the to338 platform. For more information on managing cookies, visit your browser's help section.
to338 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.
to338 services are strictly intended for individuals aged 21 years and above. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from someone under 21, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided personal information to to338 should contact us immediately at [email protected].
to338 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date and, where appropriate, sending an email notification to your registered email address. We encourage you to review this Privacy Policy periodically. Your continued use of to338 services after changes are posted constitutes your acceptance of the revised policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or how to338 handles your personal information, please contact us:
Data Protection Officer Email: [email protected]
Customer Support: Available 24/7 via live chat on the to338 website
WhatsApp Support: +62 812 3456 7890
We aim to respond to all privacy-related inquiries within 5 business days.
All personal and financial data is protected with 256-bit SSL encryption, the same standard used by Indonesian banks like BCA, BRI, and BNI.
Full transparency and control over your personal information with rights to access, correct, delete, and export your data at any time.
We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data belongs to you.
Full compliance with international data protection standards, anti-money laundering regulations, and responsible gaming requirements.
Data stored on enterprise-grade secure servers with regular backups, encryption at rest, and 24/7 monitoring for threats.
In the unlikely event of a data breach, affected users will be notified within 72 hours in accordance with data protection laws.
Our Data Protection team is available 24/7 to address your privacy concerns, handle data requests, or clarify any aspect of this policy.
View FAQ Terms & Conditions