Reference

Privacy Policy at big368

We collect personal information to set up your account, process your deposits via DANA, OVO, GoPay and QRIS, and handle your withdrawals.

Account setup and verificationPayment and withdrawal handlingData access and deletion rights
big368 Privacy Policy at big368
REACH OUR TEAM

How to Contact Us About Your Privacy

If you have questions about how we use your data, want to request access to your information, or need to report a privacy concern, our support team is available to help.

Live Chat Available during our support hours. Open the chat widget in the bottom-right corner of the site or app to connect with an agent who can answer privacy questions or submit a data request.
Email Support Send privacy enquiries, data access requests or deletion requests to our support email address. We respond within five working days and may ask you to verify your account ownership before processing.
In-App Settings In your account settings under Privacy, you can review what data we hold, request an export of your personal information, or submit a deletion request directly from your account dashboard.
HOW WE PROTECT IT

Data Security and Retention Practices

big368 encrypts all personal data in transit and at rest using industry-standard protocols. Your payment details are never stored on our main servers; instead, they're processed through secure third-party payment gateways that…

Data Encryption

All personal information and payment details are encrypted using TLS 1.3 protocols. Data transfers between your device and our servers are secured, and stored records are protected by industry-standard encryption at rest.

Account Security

Passwords are hashed and salted. We offer optional two-factor authentication via email or SMS to add a second layer of protection to your account login.

Payment Processing

DANA, OVO, GoPay and QRIS transactions are processed through certified payment gateways. We never store your full payment credentials; only transaction records and masked references are logged in your account.

Data Retention

Active account data is kept for the duration of your membership. After account closure, we retain minimal records for regulatory compliance for up to three years, then securely delete them.

Access and Correction

You can request a full export of your personal data, request corrections to any inaccurate information, or ask for deletion of your account records where local law permits.

Contact Data Officer

For privacy inquiries that require specialist attention, you can reach our data protection officer via email or submit a formal request through your account settings for a response within five working days.

Privacy Policy Frequently Asked Questions

Here are answers to the questions we hear most often from players in Denpasar, Yogyakarta and across Indonesia about how we handle personal data and privacy at big368.

We collect your full name, email address, phone number, date of birth and country of residence for account verification. During your first deposit via DANA, OVO, GoPay or QRIS, we also ask for your banking details and verify your identity using a photo ID.

After account closure, we retain essential records for regulatory compliance for up to three years, then securely delete them. During that time, your data is encrypted and isolated from active player systems.

Yes. Go to your account settings, select Privacy, and choose Export Data. We will prepare a complete copy of your personal information and send it to your registered email within five working days.

No. We do not sell or share your personal data with advertisers or unrelated third parties. We only share data with payment processors (for DANA, OVO, GoPay, QRIS transactions) and compliance partners where local law requires it.

Payment details are sent directly to certified payment gateways and never stored on our servers. We only keep encrypted transaction records and masked references. DANA, OVO, GoPay and QRIS transactions are processed with the security standards set by each provider.

You can request account deletion through your settings under Privacy. We will delete your active profile immediately, though regulatory records may be retained for three years as encrypted, segregated archives, depending on local law.

If we detect a data breach affecting your privacy, we notify you by email within 72 hours and advise you of the steps we are taking to secure your information. We also report the incident to relevant authorities where local law requires it.