At a Glance
Our Privacy Commitments
256-Bit SSL Encryption
Every data transmission between your device and isb388's servers is protected by industry-standard 256-bit SSL encryption. Your personal and financial information is never transmitted in plain text.
No Data Selling
isb388 does not sell, rent, or trade your personal data to third-party marketers. Your information is used solely to operate your account, process payments, and improve your experience on our platform.
KYC Data Security
Identity documents submitted for KYC verification — including your Indonesian KTP — are stored in an encrypted, access-controlled environment and are processed only by authorized compliance personnel.
Your Data Rights
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 calendar days.
Transparent Cookie Use
isb388 uses cookies and similar tracking technologies only for session management, analytics, and platform performance optimization. We do not use cookies to build third-party advertising profiles.
Defined Retention Periods
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Account data is deleted within 90 days of verified account closure.
Introduction
This Privacy Policy ("Policy") describes how isb388 ("we", "us", "our") — the operator of the online betting and gaming platform accessible at isb388.cam — collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Member", "User") who register for and use our services.
isb388 serves Indonesia's English-preference online gaming community, providing sports betting, live casino games, premium slots, togel (Indonesia's traditional numbers lottery), and related services to registered adult members across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and beyond. Given the personal and financial nature of these services, we treat data protection as a foundational obligation.
By registering an account on isb388, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue your use of the Platform immediately.
Personal Data We Collect
We collect personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the site, and in limited circumstances from trusted third-party service providers. The categories of personal data we collect include:
| Category | Data Points Collected | Collection Method |
|---|---|---|
| Identity Data | Legal full name, date of birth, gender, Indonesian KTP number, nationality | Registration form, KYC submission |
| Contact Data | Email address, Indonesian mobile phone number, residential address (city, province) | Registration form, account settings |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR | Cashier / deposit-withdrawal flows |
| Identity Verification Documents | Scanned or photographed copy of Indonesian KTP, selfie-with-ID image, supporting bank statement (where requested) | KYC verification portal |
| Technical Data | IP address, device type and operating system, browser type and version, time zone (WIB/WITA/WIT), session duration and activity logs | Automatically via cookies and server logs |
| Gaming & Betting Data | Betting history, game session records, deposit and withdrawal amounts, bonus claim history, VIP tier progression, responsible gaming limit settings | Platform activity tracking |
| Communications Data | Records of customer support interactions (email, live chat transcripts), complaint and dispute records | Support channels |
We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the photographic KTP/selfie submitted for age and identity verification purposes.
How We Use Your Personal Data
isb388 processes your personal data on one or more of the following legal bases: contractual necessity (to deliver the services you have signed up for), legitimate interests (to operate our platform securely and responsibly), legal obligation (to comply with applicable AML and KYC regulations), and your consent (for marketing communications and non-essential cookies, which you may withdraw at any time).
- Account Management: Creating, maintaining, and administering your isb388 account, including processing your deposits and withdrawals in IDR through local Indonesian banking and e-wallet channels.
- Identity Verification (KYC): Verifying your identity and age (21+) as required before processing withdrawal requests, in accordance with international AML compliance obligations.
- Service Delivery: Enabling access to sports betting markets (BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, UEFA Champions League), live casino games, premium slots, and togel products.
- Fraud Prevention and Security: Detecting and preventing unauthorized account access, fraudulent transactions, bonus abuse, collusion, and other prohibited activities as defined in our Terms & Conditions.
- Responsible Gaming: Monitoring betting patterns to identify potential problem-gambling behaviors, applying your self-imposed deposit limits and cool-off periods, and facilitating self-exclusion requests.
- Customer Support: Responding to your enquiries, complaints, and dispute escalations through our 24/7 Indonesian-speaking and English-speaking support team.
- Platform Improvement: Analyzing aggregated, anonymized usage data to improve site performance, game selection, and user experience for our Members across Indonesia.
- Legal Compliance: Retaining transaction and identity records as required by applicable international regulatory frameworks governing online gaming operators.
- Marketing Communications: Sending you promotional offers, VIP event invitations, and platform updates via email or SMS, where you have opted in to receive such communications. You may unsubscribe at any time.
Cookies and Tracking Technologies
isb388 uses cookies — small text files stored on your device — and similar tracking technologies (local storage, session storage, pixel tags) to support the functional operation of the Platform, analyze performance, and enhance your experience as a Member. The cookies we deploy fall into the following categories:
Strictly Necessary Cookies
Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and language preference settings. These cookies cannot be disabled without disrupting core site functionality.
Analytics Cookies
Used to collect aggregated, anonymized data on how Members navigate isb388 — pages visited, session durations, error events — allowing us to improve site performance and identify technical issues.
Functional Cookies< /h5>
Used to remember your preferences and settings — such as your default odds format, display time zone (WIB), and saved payment method preferences — so that returning visits feel seamless across your sessions.
We do not use advertising cookies, cross-site tracking pixels, or any third-party behavioral advertising technology on isb388. We do not permit any of our partners to use cookies to build advertising profiles based on your activity on our Platform. For session management, cookies may be set to a maximum duration of 12 months from your last visit, after which they will automatically expire.
How We Share Your Data
isb388 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We share your personal data only in the limited circumstances described below, always under strict confidentiality and data-protection obligations:
- Payment Processors: We share your transaction data with licensed Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate the processing of your deposits and withdrawals in IDR. These parties receive only the minimum data required to complete the transaction.
- KYC and Compliance Service Providers: We may share identity verification data with trusted third-party compliance partners who assist with age verification, identity checks, and anti-money-laundering (AML) screening. These providers are contractually bound to process your data solely on our instruction.
- Game and Software Providers: To enable live casino and slot gameplay — including content from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe — we may share limited account event data (but never your personal identity data) with these licensed studios for game auditing and fair-play certification purposes.
- IT and Hosting Providers: We engage cloud hosting, data-storage, and cybersecurity vendors that process personal data on our behalf. All such vendors operate under data-processing agreements and may not use your data for their own purposes.
- Legal and Regulatory Authorities: We may disclose personal data where required by applicable law, regulation, court order, or governmental request, or where disclosure is necessary to protect the rights, property, or safety of isb388, our Members, or others.
- Corporate Transactions: In the event of a merger, acquisition, or reorganization affecting isb388, your personal data may be transferred to the successor entity, subject to that entity honoring this Policy.
International Data Transfers
isb388 is an internationally operated platform, and our servers and data-processing facilities are located outside of Indonesia. Consequently, your personal data may be transferred to and processed in jurisdictions other than Indonesia. Whenever we transfer personal data across borders, we ensure that appropriate safeguards are in place — including, where applicable, the use of standard contractual clauses and equivalent data-protection measures — to preserve the security and confidentiality of your data.
Please note that data-protection laws in some jurisdictions, including the jurisdiction where our processing facilities are located, may differ from those in Indonesia. In all cases, isb388 remains responsible for the protection of your personal data regardless of where it is processed.
Data Security Measures
We implement layered, industry-standard technical and organizational measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- 256-Bit SSL Encryption: TLS encryption protects all traffic between your browser and our servers during login, deposit, withdrawal, and account-management activity.
- Multi-Factor Authentication (MFA): Two-factor authentication is available on all isb388 accounts and is strongly recommended for Members who choose to enable it from their account dashboard.
- Encrypted Storage: Personal data and identity-verification documents (including your Indonesian KTP) are stored on encrypted databases with restricted, role-based access controls.
- Access Controls: Access to personal data within isb388 is limited to authorized personnel who require it to perform their duties. Access is logged and periodically audited.
- Fraud Monitoring: Automated monitoring systems detect and flag suspicious login attempts, unusual transaction patterns, and potential account-takeover activity in real time.
- Regular Audits: Our security posture is reviewed on an ongoing basis against recognized international standards for online gaming operators.
Your Rights as a Data Subject
isb388 respects your data-subject rights. Subject to applicable law and reasonable verification requirements, you may exercise the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data, subject to legal retention obligations.
Right to Restriction
Request that we limit how your personal data is processed.
Right to Portability
Request a machine-readable copy of your data for transfer.
Right to Object
Object to certain processing, including direct marketing.
To exercise any of these rights, please contact our support team at [email protected]. We will respond to all data-subject requests within 30 calendar days. Where a request is complex or involves multiple datasets, we may extend this period by a further 30 days and will notify you in writing of any such extension.
Data Retention
isb388 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account Profile Data | Inactive accounts are archived after 12 months of inactivity and permanently deleted 90 days after verified account closure. |
| Transaction & Betting Records | Retained for a minimum of 5 years for financial and AML compliance purposes, in accordance with internationally accepted gaming regulations. |
| KYC / Identity Documents | Retained for as long as your account remains active and for 5 years thereafter for legal and regulatory compliance. |
| Support & Dispute Records | Retained for a period of 2 years from the date of final resolution. |
| Marketing Consent Records | Retained until you withdraw your consent or unsubscribe, whichever occurs first. |
| Technical / Session Logs | Retained for a maximum of 12 months, after which they are aggregated and anonymized. |
When personal data is no longer required, it is securely deleted or irrevocably anonymized so that it can no longer be associated with you as an individual.
Children's Privacy
isb388 is a strictly adults-only platform. The minimum age to register and play is 21 years. We do not knowingly collect, solicit, or use personal data from individuals under the age of 21. If we become aware that a registered account belongs to an individual under the age of 21, we will immediately suspend the account and delete all associated personal data without delay.
Parents, guardians, and anyone who believes that an individual under 21 years of age has registered on isb388 are encouraged to contact us at [email protected] so that we can take the appropriate action.
Keeping Your Data Accurate
We rely on the personal data you provide to us to operate your account, process transactions, and verify your identity. It is therefore important that the data you hold with us remains accurate and up to date. Please inform us promptly of any change to your contact details, address, or banking information.
Once you complete the KYC verification process, any change to your registered legal name, bank account, or e-wallet will require re-verification before the new details become active. This is to protect you against unauthorized changes to your account and to comply with our AML obligations. You may update your non-critical contact details at any time from your account dashboard.
Third-Party Links
The isb388 Platform does not contain external advertorial links to third-party websites. Where any such link is present in the future, it will be clearly identified. isb388 is not responsible for the privacy practices, content, or data-collection practices of any third-party website and disclaims all liability arising from your use of such sites.
We encourage you to review the privacy policy of any third-party platform or service you access should you choose to do so. The terms of this Policy apply solely to the isb388 Platform.
Changes to This Privacy Policy
isb388 reserves the right to update, amend, or replace this Privacy Policy at any time, without prior notice. Any changes will take effect immediately upon publication of the revised version on this page. Where a material change is made, we will take reasonable steps to bring it to your attention — including, where appropriate, displaying an in-platform notification at your next login.
Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically so that you remain informed of how we protect your data.
Summary of Recent Revisions
January 2026 — Full Policy revision. Clarified international data transfer safeguards, expanded KYC retention-period disclosures, and added explicit detail regarding the rights of data subjects and the platform's children's-privacy position. For questions about specific changes, please contact our Data Protection contact.
Contact Us About Your Privacy
If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or how isb388 handles your personal data, please contact our dedicated support team. We are committed to resolving all privacy-related enquiries promptly and transparently.
Data Privacy Enquiries
Email: [email protected]
Customer support hours: 24/7, all year round (WIB, UTC+7 default)
Language support: English and Indonesian — native Indonesian-speaking agents available.
Expected response time: Within 48 hours for general enquiries; within 30 calendar days for formal data-subject requests.
This Privacy Policy was last updated in January 2026 and supersedes all prior versions. isb388 is an internationally operated platform and does not claim authorization from any specific Indonesian government regulatory body. Users are responsible for ensuring that online gambling is permitted in their jurisdiction before registering.