Last Updated: January 2026

Bank-Grade Encryption

All personal and financial data is protected using 256-bit SSL encryption, the same standard used by major financial institutions worldwide.

No Data Selling

We never sell, rent, or share your personal information with third parties for marketing purposes. Your data remains confidential.

Secure Storage

Your data is stored on secure servers with restricted access, regular security audits, and compliance with international data protection standards.

Your Rights Protected

You have the right to access, correct, or delete your personal data at any time. We respect your privacy rights and respond promptly to requests.

1. Introduction

This Privacy Policy describes how ong368 ("we," "us," or "our") collects, uses, stores, and protects personal information provided by users ("you" or "your") of our online gaming platform accessible at ong368.click. We are committed to protecting your privacy and ensuring the security of your personal data in accordance with international data protection standards and best practices applicable to the online gaming industry.

By creating an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our data handling practices, you should not use ong368 services. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of our platform.

We recognize the importance of privacy, particularly in the context of online gaming where financial transactions and personal identity verification are integral to service delivery. ong368 operates under international licensing that requires strict adherence to Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations, which necessitate the collection and verification of certain personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the measures we take to keep it secure.

Privacy Commitment

ong368 is committed to transparency in data handling. We collect only the information necessary to provide our services, comply with legal obligations, and protect both our users and our platform from fraud and abuse. We never sell your personal information to third parties.

2. Information We Collect

ong368 collects various categories of personal information necessary to provide our gaming services, verify user identity, process transactions, and comply with legal and regulatory requirements. The information we collect falls into the following categories:

2.1 Account Registration Information

When you create an account with ong368, we collect basic identification and contact information including your full legal name as it appears on government-issued identification, date of birth to verify that you meet the minimum age requirement of 21 years, residential address in Indonesia, email address for account communication and verification, mobile phone number for account security and customer support, and username and password for account access. This information is mandatory for account creation and is used to establish and maintain your user profile.

2.2 Identity Verification (KYC) Documents

To comply with international gaming licensing requirements and Indonesian KYC regulations, we collect government-issued identification documents including your Indonesian KTP (Kartu Tanda Penduduk) or other valid identity documents showing your photograph, full name, date of birth, and identity number. We also collect proof of address such as recent utility bills, bank statements, or government correspondence dated within the last three months, and selfie photographs holding your identification document to confirm that you are the rightful owner of the submitted identification. These documents are encrypted and stored securely and are reviewed only by authorized personnel for verification purposes.

2.3 Financial and Transaction Information

To process deposits and withdrawals, we collect financial information including bank account details (bank name, account number, account holder name) for Indonesian banks such as BCA, BRI, BNI, Mandiri, and others, e-wallet account information for OVO, DANA, GoPay, ShopeePay, and similar services, transaction history including deposit amounts, withdrawal amounts, dates, and payment methods used, and betting and gaming activity including wagers placed, games played, winnings, and losses. This information is necessary to process your financial transactions and maintain accurate account records.

2.4 Technical and Usage Data

We automatically collect certain technical information when you access ong368, including IP address and general location information (city level, not precise GPS coordinates), device information such as device type, operating system, browser type and version, screen resolution, language settings, and device identifiers, website usage data including pages visited, time spent on pages, click patterns, and navigation paths, game play data including games played, session duration, bet patterns, and gameplay statistics, and login history including dates, times, and locations of account access. This data is collected primarily for security purposes, fraud prevention, platform optimization, and service improvement.

2.5 Communication Records

We retain records of communications between you and ong368, including customer support inquiries submitted via email, live chat, or other communication channels, responses provided by our support team, feedback and survey responses you provide, and any other correspondence related to your use of our services. These records help us improve service quality, resolve disputes, and maintain a history of account-related interactions.

3. How We Use Your Information

ong368 uses collected personal information for specific, legitimate purposes related to providing and improving our gaming services. We do not use your information for purposes beyond those described below without obtaining your explicit consent.

3.1 Service Provision and Account Management

We use your information to create and maintain your user account, authenticate your identity when you log in, process your deposits and withdrawals in Indonesian Rupiah (IDR), provide access to sports betting, casino games, live dealer games, and other gaming services offered on our platform, maintain accurate records of your gaming activity and transaction history, and communicate important account-related information such as transaction confirmations, account updates, and policy changes. This represents the core contractual purpose for which we collect your data.

3.2 Legal and Regulatory Compliance

As a licensed online gaming operator, ong368 is required to collect and process certain personal information to comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) regulations, verify that users meet the minimum age requirement of 21 years and are legal residents of Indonesia, detect and prevent fraud, money laundering, and other illegal activities, respond to lawful requests from regulatory authorities, law enforcement, or courts, maintain required records for audit purposes, and fulfill reporting obligations under our international gaming license. These legal obligations constitute a lawful basis for data processing independent of user consent.

3.3 Security and Fraud Prevention

We analyze user behavior and transaction patterns to detect suspicious activity, identify potential security threats, prevent account takeover and unauthorized access, detect bonus abuse and violation of terms and conditions, protect the integrity of our gaming platform and ensure fair play for all users, and investigate and resolve disputes or complaints. Security is a paramount concern in online gaming, and robust data analysis is essential to maintaining a safe environment.

3.4 Service Improvement and Personalization

With your consent where required, we may use aggregated and anonymized data to analyze platform performance and identify technical issues, understand user preferences and gaming behavior to improve our game selection and features, customize your user experience based on your gaming preferences and history, develop new features and services, and conduct market research to better serve the Indonesian gaming community. You may opt out of certain personalization features through your account settings.

3.5 Marketing and Promotional Communications

If you have opted in to receive marketing communications, we may use your email address or phone number to send promotional offers, bonus opportunities, information about new games and features, and newsletters about ong368 services. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in emails or adjusting your communication preferences in your account settings. Please note that even if you opt out of marketing communications, we will still send you essential service-related communications regarding your account and transactions.

4. Data Sharing and Disclosure

ong368 does not sell, rent, or trade your personal information to third parties. However, we may share your information with specific third parties under limited circumstances as described below.

4.1 Payment Processors

We share necessary financial information with payment service providers and Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet services (OVO, DANA, GoPay, ShopeePay, etc.) to process your deposits and withdrawals. These partners are bound by confidentiality agreements and are permitted to use your information only for the purpose of processing transactions on behalf of ong368.

4.2 Service Providers and Vendors

We work with trusted third-party service providers who perform functions on our behalf, including identity verification and KYC service providers who verify the authenticity of submitted documents, cloud hosting and data storage providers who maintain our secure servers, customer support software providers, fraud detection and prevention services, payment gateway and processing services, and marketing and analytics platforms that help us understand and improve our services. These service providers have access only to the information necessary to perform their specific functions and are contractually obligated to maintain confidentiality and security.

4.3 Legal and Regulatory Authorities

We may disclose your personal information to legal authorities, regulators, or law enforcement agencies when required by law or legal process, to comply with court orders, subpoenas, or other legal proceedings, to respond to government requests or regulatory inquiries, to investigate suspected illegal activity, fraud, or violations of our Terms and Conditions, to protect the rights, property, or safety of ong368, our users, or the public, or to enforce our legal rights or defend against legal claims. We will notify you of such disclosures when legally permitted to do so.

4.4 Business Transfers

In the event that ong368 undergoes a business transition such as a merger, acquisition, sale of assets, or bankruptcy, your personal information may be among the assets transferred. In such cases, we will provide notice before your information is transferred and becomes subject to a different privacy policy. The acquiring entity will be required to continue protecting your information in accordance with this Privacy Policy or provide you with notice and choice regarding any changes.

5. Security Measures

ong368 implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our multi-layered security approach includes:

5.1 Encryption Technologies

All data transmitted between your device and our servers is encrypted using 256-bit Secure Socket Layer (SSL) technology, the industry standard for secure online transactions. This encryption ensures that your login credentials, financial information, and personal data cannot be intercepted during transmission. Sensitive data stored on our servers is also encrypted at rest using advanced encryption algorithms.

5.2 Access Controls

Access to personal information is restricted to authorized ong368 employees and contractors who require access to perform their job functions. We implement role-based access controls, ensuring that individuals can access only the specific data necessary for their responsibilities. All personnel with access to personal data undergo background checks and are bound by strict confidentiality obligations.

5.3 Security Monitoring and Auditing

Our systems are continuously monitored for suspicious activity, unauthorized access attempts, and potential security vulnerabilities. We conduct regular security audits, penetration testing, and vulnerability assessments performed by independent security experts. Security logs are maintained to track access to sensitive data and detect anomalies.

5.4 Secure Infrastructure

Our servers are hosted in secure data centers with physical security measures including 24/7 surveillance, restricted access, fire suppression systems, and redundant power supplies. We implement firewall protection, intrusion detection and prevention systems, and anti-malware solutions to protect against external threats. Regular backups are performed to ensure data can be recovered in the event of a technical failure.

5.5 Account Security Features

We provide users with security tools to protect their accounts, including strong password requirements that enforce minimum length and complexity, account login notifications to alert you of access from new devices or locations, the ability to review recent login history in your account dashboard, and session timeouts that automatically log you out after periods of inactivity. We recommend that you never share your password, use a unique password for your ong368 account, and contact us immediately if you suspect unauthorized access.

Your Security Responsibility

While we implement robust security measures, you also play a critical role in protecting your account. Never share your login credentials, be cautious of phishing attempts, keep your contact information up to date, and log out of your account when using shared devices.

6. Data Retention

ong368 retains personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our Terms and Conditions.

6.1 Active Account Data

While your account remains active, we retain all account information, transaction history, and gaming records to provide continuous service and maintain accurate account balances. You can access and review your data at any time through your account dashboard.

6.2 Closed Account Data

When you close your account, we retain certain information for a period of seven (7) years from the account closure date to comply with financial record-keeping requirements under international gaming regulations and Indonesian financial laws. This includes your identity verification documents, transaction history, and records required for tax reporting and anti-money laundering compliance. After the retention period expires, we securely delete or anonymize this information unless longer retention is required by law.

6.3 Legal Hold

If your account is involved in an active dispute, investigation, legal proceeding, or regulatory inquiry, we may retain relevant data beyond normal retention periods until the matter is resolved. We will notify you if your data is subject to such a legal hold.

7. Your Privacy Rights

As a user of ong368, you have certain rights regarding your personal information. We respect these rights and provide mechanisms for you to exercise them.

Your Data Rights

Right to Access

You have the right to request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.

Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request corrections. You can update most account information directly through your account settings.

Right to Deletion

You may request deletion of your personal data, subject to legal retention requirements. We will delete data no longer required for legal or business purposes within 30 days of your request.

Right to Object

You have the right to object to processing of your data for direct marketing purposes. You can opt out of marketing communications at any time through your account settings or by clicking unsubscribe links.

Right to Restriction

You may request that we restrict processing of your data in certain circumstances, such as when you contest the accuracy of data or object to processing while we verify your request.

Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.

To exercise any of these rights, please contact our customer support team at [email protected] with your request. We will respond within 30 days and may require verification of your identity before processing your request to protect your information from unauthorized disclosure.

8. Cookies and Tracking Technologies

ong368 uses cookies and similar tracking technologies to enhance your user experience, maintain security, and improve our services. Cookies are small text files stored on your device that allow us to recognize your browser and remember certain information.

8.1 Types of Cookies We Use

Essential Cookies: These cookies are necessary for the operation of our platform. They enable core functionality such as account login, security features, and transaction processing. You cannot opt out of essential cookies as they are required for the platform to function.

Performance and Analytics Cookies: These cookies collect information about how you use our website, such as which pages you visit most often and any error messages you receive. This helps us improve website performance and user experience. These cookies do not collect personally identifiable information.

Functional Cookies: These cookies allow our website to remember choices you make (such as language preferences or region) and provide enhanced, personalized features.

8.2 Managing Cookie Preferences

You can control cookie settings through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, please note that disabling essential cookies may impact the functionality of our platform and prevent you from accessing certain features. Disabling analytics cookies will not affect your ability to use our services.

9. International Data Transfers

ong368 operates under international licensing and may transfer personal data outside of Indonesia to servers and service providers located in other jurisdictions. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include Standard Contractual Clauses approved by regulatory authorities, Privacy Shield certification where applicable, or other legally recognized transfer mechanisms. Data transferred internationally remains subject to the security and confidentiality protections described in this Privacy Policy.

10. Children's Privacy

ong368 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from individuals under the age of 21. If we discover that we have inadvertently collected information from a person under 21, we will immediately delete that information and terminate the associated account. Parents or guardians who believe their child has provided personal information to ong368 should contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

ong368 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational needs. When we make material changes to this Policy, we will notify you by posting a notice on our website and updating the "Last Updated" date at the top of this document. For significant changes that materially affect your rights, we may also notify you via email to the address associated with your account. Your continued use of ong368 services following any changes to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us through the following channels:

  • Email: [email protected] (preferred method for privacy-related inquiries)
  • Live Chat: Available 24/7 through the ong368 website
  • Response Time: We aim to respond to all privacy inquiries within 30 days

When contacting us regarding privacy matters, please provide sufficient detail to allow us to understand and address your concern. If your inquiry relates to a specific data subject request (access, deletion, correction, etc.), we may require verification of your identity before processing your request to protect your information from unauthorized disclosure.

Your Privacy Matters

ong368 takes your privacy seriously and is committed to protecting your personal information. By using transparent data practices, implementing robust security measures, and respecting your privacy rights, we strive to earn and maintain your trust. If you have any concerns about how your data is handled, please do not hesitate to contact us.

Have Questions About Privacy?

Review our other legal documents or contact our support team for clarification on any privacy matters.