Last Updated: January 1, 2026 | Effective Date: January 1, 2026

Our Commitment to Your Privacy

At cmd389, we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your data when you use our online gaming platform. By creating an account or using cmd389 services, you consent to the data practices described in this policy. We encourage you to read this document carefully to understand how your information is handled.

1. Information We Collect

cmd389 collects various types of information to provide you with secure, personalized, and compliant gaming services. The information we collect falls into the following categories:

1.1 Personal Identification Information

When you register an account on cmd389, we collect the following personal details:

  • Full Name: Your legal name as it appears on your government-issued identification.
  • Date of Birth: To verify that you meet the minimum age requirement of 21 years.
  • Email Address: For account verification, communication, and password recovery.
  • Phone Number: For account security, two-factor authentication, and customer support.
  • Residential Address: Your physical address in Indonesia, required for identity verification and compliance with legal requirements.
  • Government-Issued ID: Copy of your KTP (Indonesian National Identity Card), passport, or driver's license for KYC (Know Your Customer) verification purposes.
  • Proof of Address: Utility bills, bank statements, or government correspondence dated within the last three months to confirm your residential address.

1.2 Financial Information

To process deposits and withdrawals, we collect payment-related information including:

  • Bank Account Details: Bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), account number, and account holder name.
  • E-Wallet Information: Registered phone numbers or account IDs for OVO, DANA, GoPay, ShopeePay, and LinkAja.
  • Transaction History: Records of all deposits, withdrawals, bets placed, and winnings received.

We do not store complete credit card numbers or CVV codes. Payment processing is handled through secure third-party payment gateways that comply with PCI-DSS (Payment Card Industry Data Security Standard).

1.3 Technical and Usage Data

When you access cmd389, we automatically collect technical information to improve platform performance, security, and user experience:

  • IP Address: Your Internet Protocol address and geolocation data to verify you are accessing the platform from Indonesia.
  • Device Information: Type of device (mobile, tablet, desktop), operating system, browser type and version, screen resolution.
  • Usage Data: Pages visited, games played, bet history, time spent on the platform, click patterns, and navigation paths.
  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to remember your preferences, authenticate your session, and analyze platform usage.
  • Communication Records: Transcripts of live chat sessions, email correspondence, and customer support interactions for quality assurance and dispute resolution.

2. How We Use Your Information

cmd389 uses your personal information for the following purposes:

2.1 Account Management and Service Delivery

  • To create, maintain, and manage your player account.
  • To verify your identity and ensure you meet eligibility requirements (21+ years of age, Indonesian residency).
  • To process deposits, withdrawals, and financial transactions securely and efficiently.
  • To provide customer support and respond to your inquiries in Bahasa Indonesia or English.
  • To deliver personalized gaming experiences, game recommendations, and VIP rewards based on your preferences and activity.

2.2 Legal Compliance and Security

  • To comply with Indonesian and international regulatory requirements, including anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
  • To conduct Know Your Customer (KYC) verification and ongoing due diligence as required by licensing authorities.
  • To detect, prevent, and investigate fraud, cheating, bonus abuse, underage gambling, and other prohibited activities.
  • To enforce our Terms and Conditions and protect the rights, property, and safety of cmd389, our players, and third parties.
  • To respond to legal requests, court orders, and government inquiries.

2.3 Marketing and Communications

  • To send you promotional offers, bonus notifications, tournament announcements, and personalized marketing communications via email, SMS, or push notifications (with your consent).
  • To conduct surveys, gather feedback, and improve our services based on your input.
  • To notify you of important account updates, security alerts, policy changes, and platform maintenance schedules.

You may opt out of marketing communications at any time by adjusting your account settings or clicking the unsubscribe link in our emails. Please note that you cannot opt out of essential account-related communications such as withdrawal confirmations or security alerts.

2.4 Platform Improvement and Analytics

  • To analyze user behavior, game performance, and platform usage patterns to improve functionality, design, and user experience.
  • To conduct A/B testing and optimize features based on data-driven insights.
  • To monitor platform performance, identify technical issues, and ensure system stability.
Data Type Purpose Legal Basis
Name, Date of Birth, ID Identity verification, age verification, KYC compliance Legal obligation, contract fulfillment
Email, Phone Number Communication, account security, support Contract fulfillment, legitimate interest
Bank Account, E-Wallet Payment processing, withdrawals, AML compliance Contract fulfillment, legal obligation
IP Address, Device Info Security, fraud prevention, geolocation verification Legitimate interest, legal obligation
Betting History, Gameplay Service delivery, responsible gaming monitoring Contract fulfillment, legitimate interest

3. How We Protect Your Information

cmd389 employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

3.1 Technical Security Measures

  • SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks.
  • Secure Data Storage: Personal information is stored on secure servers with restricted access, protected by firewalls, intrusion detection systems, and regular security audits.
  • Two-Factor Authentication (2FA): We offer optional 2FA to add an extra layer of security to your account login.
  • Password Protection: Passwords are hashed and salted using advanced cryptographic algorithms. We never store passwords in plain text.
  • Regular Security Audits: Our systems undergo regular penetration testing, vulnerability assessments, and third-party security audits to identify and address potential risks.

3.2 Organizational Security Measures

  • Access Control: Only authorized personnel with legitimate business needs have access to personal information. All employees sign confidentiality agreements.
  • Employee Training: Our staff receives regular training on data protection, privacy regulations, and security best practices.
  • Incident Response Plan: We have established procedures to detect, respond to, and mitigate data breaches or security incidents promptly.
  • Data Minimization: We collect only the information necessary to provide our services and comply with legal obligations.

Your Role in Security

While we implement robust security measures, your cooperation is essential. Please keep your login credentials confidential, use strong passwords, enable two-factor authentication, avoid accessing your account on public Wi-Fi networks, and report any suspicious activity immediately to our customer support team.

4. Data Sharing and Disclosure

cmd389 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

4.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our platform, including:

  • Payment Processors: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft, and other licensed studios that supply games on our platform.
  • Identity Verification Services: Third-party KYC providers that verify your identity documents and conduct anti-fraud checks.
  • Customer Support Tools: Live chat software, email service providers, and CRM systems used to deliver customer support.
  • Analytics and Marketing Services: Platforms that help us analyze user behavior, optimize performance, and deliver targeted marketing communications.

All third-party service providers are contractually obligated to maintain the confidentiality and security of your information and may use it only for the specific purposes we authorize.

4.2 Legal and Regulatory Obligations

We may disclose your personal information when required by law, including:

  • To comply with court orders, subpoenas, or other legal processes.
  • To respond to requests from government authorities, regulatory bodies, or law enforcement agencies.
  • To fulfill anti-money laundering (AML) and counter-terrorism financing (CTF) reporting obligations.
  • To protect the rights, property, or safety of cmd389, our players, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.

5. Data Retention

cmd389 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

  • Account Information: Retained for the duration of your active account and for a period of 7 years after account closure, as required by Indonesian financial regulations and licensing requirements.
  • Transaction Records: Retained for a minimum of 7 years to comply with tax, accounting, and anti-money laundering regulations.
  • Identity Verification Documents: Retained for 7 years after the termination of the business relationship, as required by KYC regulations.
  • Marketing Communications: Retained until you withdraw consent or for a reasonable period if you do not engage with our communications.
  • Technical and Usage Data: Aggregated and anonymized usage data may be retained indefinitely for analytical purposes.

After the retention period expires, we securely delete or anonymize your personal information to prevent unauthorized access or use.

6. Your Privacy Rights

As a cmd389 user, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. Contact our customer support team to submit an access request.

6.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your account settings.

6.3 Right to Erasure

You may request deletion of your personal information, subject to legal and regulatory retention requirements. Please note that we cannot delete information required for compliance with legal obligations or to resolve disputes.

6.4 Right to Restrict Processing

You may request that we limit how we use your information in certain circumstances, such as while we verify the accuracy of data or assess a legal claim.

6.5 Right to Data Portability

You have the right to receive your personal information in a structured, machine-readable format and to transmit it to another service provider where technically feasible.

6.6 Right to Object

You may object to the processing of your personal information for direct marketing purposes at any time by adjusting your account settings or contacting customer support.

6.7 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing conducted before your withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

cmd389 uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use:

  • Essential Cookies: Required for the platform to function properly. These cookies enable core features such as account login, security, and payment processing.
  • Functional Cookies: Remember your preferences, language settings, and customization options to provide a more personalized experience.
  • Performance Cookies: Collect anonymous data about how you use the platform, helping us improve functionality and user experience.
  • Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure the effectiveness of our marketing campaigns.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may limit your ability to use certain features of the cmd389 platform.

8. International Data Transfers

cmd389 primarily serves Indonesian players and stores data on servers located within secure jurisdictions. However, some of our third-party service providers may process data outside of Indonesia. When we transfer personal information internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses, data processing agreements, and compliance with applicable data protection regulations.

9. Children's Privacy

cmd389 services are strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected information from someone under the legal age, we will immediately delete that information and close the associated account. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

10. Changes to This Privacy Policy

cmd389 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date at the top of this document. For significant changes that affect your rights, we may also send an email notification. Your continued use of cmd389 services after changes are posted constitutes your acceptance of the revised Privacy Policy.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Our Indonesian-speaking support team is available around the clock to assist you with privacy-related inquiries and requests.

Your Trust is Our Priority

At cmd389, we understand that trust is earned through consistent transparency and action. We are committed to safeguarding your privacy, protecting your personal information, and giving you control over your data. Thank you for trusting cmd389 as your online gaming platform.

256-Bit SSL Encryption

Bank-level encryption protects all data transmitted between your device and our servers.

Secure Data Storage

Personal information stored on protected servers with restricted access and regular security audits.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes.

Compliance & KYC

Full compliance with Indonesian regulations, AML requirements, and international data protection standards.

Your Data Rights

Access, correct, delete, or export your personal information at any time through account settings or support.

Privacy Support

Dedicated support team available 24/7 to answer privacy questions and handle data requests.

Questions About Your Privacy?

Our team is here to help you understand how we protect your data and exercise your privacy rights. Contact us anytime for assistance.