too388 takes your privacy seriously. This Policy explains exactly what personal data we collect, why we collect it, how it is used and stored, and what rights you hold over your information as a Member of our platform.
Last Updated: 1 January 2026too388 operates the online betting and gaming platform accessible at https://too388.cam (the "Platform"). We are committed to protecting the personal data of every individual who interacts with our Platform, whether as a registered Member, a visitor browsing our pages, or a prospective customer evaluating our services.
This Privacy Policy ("Policy") sets out, in clear and plain English, the categories of personal data we collect, the purposes for which that data is processed, the lawful basis on which processing rests, how long we retain records, and the full set of rights available to you under applicable international data-protection frameworks.
By registering an Account on too388 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read, understood, and agreed to the data-handling practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request Account closure by contacting our support team.
This Policy applies to all personal data collected and processed by too388 in connection with the Platform, regardless of the device or method used to access it — including desktop browsers, mobile browsers, and any native application too388 may release in future.
too388 serves English-preference players primarily located in Indonesia. Where this Policy references local context — such as Indonesian payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) or local identity documents — it does so to give you a clear picture of how your specific data is handled within the Indonesian operating environment.
Throughout this Privacy Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including names, identification numbers, location data, email addresses, financial account details, and online identifiers such as IP addresses. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Controller" | too388, as the entity that determines the purposes and means of processing your Personal Data. |
| "Processor" | A third party that processes Personal Data on behalf of too388 under a contractual data-processing agreement (e.g., a payment gateway or KYC verification provider). |
| "Member" | Any natural person who has successfully registered an Account on the too388 Platform. |
| "KYC" | Know Your Customer — the identity and age-verification process required by anti-money-laundering obligations and our responsible gaming commitments. |
| "Cookies" | Small text files placed on your device by the Platform or its third-party technology partners to enable functionality, remember preferences, and collect analytics data. |
| "WIB" | Western Indonesia Time (UTC+7) — the default time zone used for all timestamps referenced in this Policy. |
too388 collects only the Personal Data that is necessary and proportionate for the purposes described in this Policy. The categories of data we collect are as follows:
3.1 Registration Data. When you open an Account, we collect your full legal name, date of birth, residential address (including city and province within Indonesia), email address, and a username and password of your choosing. This information is mandatory — without it, we cannot create or maintain your Account.
3.2 Identity Verification (KYC) Data. To satisfy age-verification and anti-money-laundering obligations, we collect copies of government-issued photo identification (national ID card / KTP, passport, or driver's license / SIM), proof of residential address (utility bill or bank statement no older than three months), and, in certain cases, a live selfie or video for biometric comparison. All KYC documents are processed through a certified third-party verification provider operating under strict data-security standards.
3.3 Financial Data. We record deposit and withdrawal transaction histories, the payment methods used (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in IDR, and any bank account or e-wallet identifiers submitted for withdrawal processing. too388 does not store full card numbers or full bank account numbers directly — these are tokenized by the relevant payment provider.
3.4 Gaming & Wagering Data. We maintain a detailed record of all bets placed, games played, session durations, win and loss outcomes, bonus claims, and wagering-requirement progress. This data is essential for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
3.5 Technical & Device Data. When you access the Platform, we automatically collect your IP address, browser type and version, operating system, screen resolution, referring URL, device identifiers, and session timestamps in WIB. This data is used for security monitoring, fraud detection, and service improvement.
3.6 Communications Data. If you contact our support team via live chat, email, or any other channel, we retain records of those communications — including the content of messages, timestamps, and the resolution outcome — to ensure quality of service and for compliance purposes.
3.7 Voluntary Data. You may voluntarily provide additional information — for example, in response to a survey, feedback form, or promotion — that is not strictly required for Account operation. Such data is processed solely for the purpose for which it was provided and is not combined with your mandatory Account data without your consent.
too388 collects Personal Data through the following means:
too388 does not purchase Personal Data from data brokers or third-party marketing lists. All Personal Data we hold was provided directly by you or generated by your use of the Platform.
too388 processes your Personal Data for the following specific, documented purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, KYC data, financial data |
| Identity and age verification (21+ compliance) | KYC data, registration data |
| Processing deposits and withdrawals | Financial data, KYC data |
| Administering bets, games, and togel draws | Gaming & wagering data, financial data |
| Fraud prevention and security monitoring | Technical data, financial data, communications data |
| Anti-money-laundering (AML) compliance | Financial data, KYC data, gaming data |
| Responsible gaming monitoring and intervention | Gaming & wagering data, communications data |
| Customer support and dispute resolution | All categories as relevant to the specific inquiry |
| Sending transactional and account notifications | Registration data, financial data |
| Marketing communications (where consent given) | Registration data, gaming data (for personalization) |
| Platform analytics and product improvement | Technical data, gaming data (anonymized/aggregated) |
| Legal obligations and regulatory reporting | All categories as required by applicable law |
too388 does not use your Personal Data for any purpose not listed above without first obtaining your explicit consent or being required to do so by law. We do not sell your Personal Data to third parties for their own marketing purposes under any circumstances.
too388 processes your Personal Data on one or more of the following lawful bases, depending on the specific purpose:
too388 does not sell, rent, or trade your Personal Data. We share your data only in the following limited and controlled circumstances:
7.1 Payment Processors. To process your deposits and withdrawals, we share the minimum necessary financial data with our partner payment providers — including local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as data Processors under contractual data-processing agreements that require them to protect your data in accordance with applicable standards.
7.2 KYC and Identity Verification Providers. Your identity documents and biometric data are shared with certified third-party KYC verification partners solely for the purpose of verifying your identity and age. These partners are contractually prohibited from using your data for any other purpose.
7.3 Game Providers. When you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — certain technical session data (player ID, stake, and game-round outcome) may be exchanged with the relevant provider to enable game delivery and RNG certification. No directly identifying personal information (such as your full name or email) is shared with game studios.
7.4 Fraud and Security Partners. Aggregated or pseudonymized data may be shared with fraud-detection platforms and cybersecurity service providers to identify and prevent unauthorized access, money laundering, and other security threats.
7.5 Legal and Regulatory Disclosure. too388 will disclose Personal Data to law enforcement agencies, regulatory authorities, or other competent bodies when required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosure where legally permitted to do so.
7.6 Corporate Transactions. In the event of a merger, acquisition, restructuring, or sale of assets involving too388, your Personal Data may be transferred to the successor entity. You will be notified in advance of any such transfer and of any changes to this Policy that result from it.
too388 requires all third-party Processors to implement appropriate technical and organizational security measures. We conduct due diligence on all new Processors before engaging them and review compliance periodically.
too388 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by law. The following retention schedule applies:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of Account plus 5 years after closure |
| KYC identity documents | Duration of Account plus 5 years after closure (AML requirement) |
| Financial transaction records | Minimum 5 years from the date of each transaction |
| Gaming and wagering history | Duration of Account plus 3 years after closure |
| Customer support communications | 3 years from the date of the last interaction |
| Technical and device logs | 13 months from date of capture |
| Marketing consent records | Until consent is withdrawn, plus 3 years thereafter |
| Self-exclusion records | Minimum 7 years to prevent re-registration |
At the end of each applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where data cannot be deleted immediately due to technical constraints, it is quarantined and marked for deletion at the earliest practicable opportunity.
As a data subject, you hold the following rights in respect of the Personal Data too388 holds about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and respond substantively within 30 days.
Request a copy of all Personal Data too388 holds about you, along with information on how it is processed.
Request correction of any inaccurate or incomplete Personal Data we hold. Account profile details can also be updated directly via your Account settings.
Request deletion of your Personal Data where processing is no longer necessary, where consent has been withdrawn, or where data has been processed unlawfully.
Request that we limit how we use your data — for example, while a rectification request is being assessed — without requiring full deletion.
Receive a structured, machine-readable copy of the Personal Data you provided to too388, for transfer to another service provider.
Object to processing based on our legitimate interests — including direct marketing — at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds.
Request human review of any decision made about you solely by automated means — including automated Account risk scoring — that produces a significant legal or financial effect.
Withdraw any consent you have given to too388 at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Please note that some rights are subject to limitations — for example, the right to erasure does not override too388's legal obligation to retain KYC and financial records for a minimum period under AML regulations. Where a request cannot be fully honored, we will explain the specific legal basis for any limitation.
too388 uses cookies and similar technologies to deliver the Platform's core functionality, improve user experience, and gather anonymized usage statistics. The following categories of cookies may be active on the Platform:
You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to log in and use core Platform features. Blocking analytics or functional cookies will not prevent you from accessing the Platform but may reduce the quality of your experience.
too388 does not use third-party advertising cookies or cross-site tracking cookies that follow you across the wider internet. Cookies on this Platform relate only to your experience within too388.cam.
too388 implements a comprehensive suite of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Key measures include:
While too388 takes all reasonable steps to protect your data, no internet transmission or storage system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your Account credentials. If you suspect unauthorized access to your Account, please contact [email protected] immediately.
The too388 Platform is strictly for adults aged 21 and above. We do not knowingly collect Personal Data from any individual under the age of 21. Our KYC process is specifically designed to verify that every Account holder meets this age requirement before any wagering activity is permitted.
21+ Only. If too388 becomes aware — through KYC checks, parental notification, or any other means — that an Account is being operated by a person under 21 years of age, that Account will be immediately suspended, all pending withdrawals cancelled, and any winnings forfeited in line with our Terms & Conditions and responsible gaming obligations.
If you are a parent or guardian and believe your child has created an Account on too388, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and act promptly. Any Personal Data collected in relation to an Account subsequently confirmed as belonging to a minor will be permanently deleted.
too388 recommends that parents and guardians make use of internet filtering software to prevent minors from accessing online gambling platforms. Organizations such as Net Nanny, Bark, and Qustodio offer parental control tools that can restrict access at the device or network level.
too388 reviews this Privacy Policy periodically and will update it when our data-handling practices change, when required by new legal obligations, or when we introduce new services that affect how Personal Data is processed.
When material changes are made, we will post the updated Policy on this page with a revised "Last Updated" date and, where the change is significant, send a notification to the email address registered on your Account at least 14 days before the change takes effect. Minor editorial corrections that do not alter the substance of the Policy may be made without advance notice.
Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not accept the updated Policy, you may close your Account by contacting our support team before the change takes effect.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to raise a privacy concern, please contact the too388 Data Support team through the following channel:
Email: [email protected] — available 24/7. Please use the subject line "Privacy Request" or "Data Rights Request" for fastest routing. Our team responds within 72 hours on all privacy-related matters and will provide a substantive response within 30 days.
Our support team includes native Indonesian-speaking agents available around the clock (WIB, UTC+7) who can assist with privacy inquiries in either English or Bahasa Indonesia. All formal privacy complaints are logged, acknowledged within 24 hours, and escalated to our data-protection lead where necessary.
For responsible gaming concerns — including self-exclusion requests, deposit limit adjustments, or account cooling-off periods — please visit our Responsible Gaming page or contact support directly. You may also review our FAQ for answers to common privacy questions.
Our Commitment to You
too388 approaches data protection as a core responsibility — not a checkbox. Here is what that means in practice.
Every byte of data transmitted between your device and the too388 Platform travels over a 256-bit SSL/TLS encrypted connection — the same standard used by major international financial institutions.
Our certified Know Your Customer process verifies every Member's identity and age before wagering is permitted — protecting the platform from fraud and ensuring full compliance with our 21+ policy.
Sensitive Personal Data — including KYC documents, financial identifiers, and account credentials — is encrypted in storage. Even in the unlikely event of a system compromise, raw data cannot be read.
too388 does not sell, rent, or trade your Personal Data to any third party for marketing purposes — ever. Your data exists only to deliver, secure, and improve the services you have requested.
We do not hold your data indefinitely. Every data category has a documented maximum retention period. Once that period expires, records are securely deleted or irreversibly anonymized.
You hold eight distinct rights over your Personal Data — from access and rectification to erasure and portability. Submit a request to [email protected] and we will respond within 30 days.
Browse our FAQ for quick answers to common privacy and account questions, review our Terms & Conditions for the full legal framework, or head back to the homepage to explore everything too388 has to offer.