Table of Contents
1. Introduction
Welcome to xo36's Privacy Policy. At xo36, we are committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, share, and protect your personal data when you access or use our online gaming platform at https://xo36.cam.
By creating an account on xo36, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must not use xo36 services.
This Privacy Policy applies to all users of xo36, including residents of Indonesia and other jurisdictions where our services are accessed. We process personal data in accordance with applicable data protection laws and international best practices for online gaming platforms.
Our Commitment to Your Privacy
xo36 employs industry-leading security measures to protect your personal information. We never sell, rent, or trade your personal data to third parties for marketing purposes. Your information is used exclusively to provide you with secure, fair, and enjoyable gaming services.
2. Information We Collect
To provide xo36 gaming services, we collect several types of information from and about our users. The categories of information we collect include:
2.1 Information You Provide Directly
When you register for an xo36 account, you provide us with personal information including:
- Identity Information: Full legal name, date of birth, gender, and government-issued identification number (such as Indonesian KTP number) for age verification and compliance purposes.
- Contact Information: Email address, mobile phone number, residential address, and postal code.
- Financial Information: Bank account details for deposits and withdrawals, e-wallet account information (OVO, DANA, GoPay), payment transaction history, and deposit/withdrawal amounts.
- Account Credentials: Username, password (stored in encrypted form), and security questions for account protection.
- Verification Documents: Copies of government-issued identification (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and bank account verification documents when required for KYC (Know Your Customer) compliance.
- Communication Data: Content of messages you send to our customer support team via live chat, email, or WhatsApp, including support tickets and correspondence.
2.2 Information Collected Automatically
When you access and use xo36 services, we automatically collect certain technical and usage information, including:
- Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages visited, features used, time spent on platform, games played, bets placed, wagering history, deposit and withdrawal activity, and interaction patterns.
- Technical Data: IP address, location data (country, region, city based on IP), language preferences, time zone settings, and connection timestamps.
- Gameplay Information: Betting patterns, game preferences, win/loss records, bonus usage, and account balance changes for responsible gaming monitoring and fraud prevention.
- Cookie Data: Information stored in cookies and similar tracking technologies as described in Section 6 of this Privacy Policy.
2.3 Information from Third-Party Sources
In certain circumstances, we may receive information about you from third-party sources, including payment processors and banking partners who process your deposits and withdrawals, identity verification services that confirm your age and identity, fraud prevention services that screen for suspicious activity, and marketing partners if you arrived at xo36 through an affiliate or promotional channel.
3. How We Use Your Information
xo36 collects and processes your personal information for the following legitimate business purposes:
3.1 Service Provision
- Creating and managing your xo36 account, including authentication and access control.
- Processing deposits, withdrawals, and payment transactions securely through Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay).
- Enabling you to place bets on slots, live casino games, sports betting markets, and other gaming products offered by xo36.
- Tracking your account balance, transaction history, and gameplay records.
- Awarding bonuses, processing bonus wagering requirements, and managing promotional campaigns.
3.2 Verification and Compliance
- Verifying your identity and age to ensure you meet the 21+ age requirement for online gambling in Indonesia.
- Conducting KYC (Know Your Customer) checks as required by gaming regulations and anti-money laundering laws.
- Preventing fraud, money laundering, underage gambling, and other illegal activities on our platform.
- Complying with legal obligations, regulatory requirements, and government requests for information.
3.3 Customer Support
- Responding to your inquiries, support requests, and complaints via live chat, email, WhatsApp, or in-app messaging.
- Troubleshooting technical issues, resolving account problems, and providing assistance with deposits, withdrawals, and gameplay.
- Communicating important account notifications, policy updates, and service announcements.
3.4 Platform Improvement
- Analyzing user behavior and preferences to improve xo36's website design, mobile experience, and overall usability.
- Testing new features, games, and services to enhance the gaming experience.
- Identifying and fixing bugs, errors, and performance issues on our platform.
- Conducting research and analytics to understand Indonesian player preferences and gaming trends.
3.5 Marketing and Personalization
- Sending you promotional offers, bonus notifications, and marketing communications about xo36 services (you can opt out at any time).
- Personalizing your xo36 experience by recommending games and features based on your preferences and playing history.
- Informing you about new games, features, payment methods, and platform improvements.
3.6 Responsible Gaming
- Monitoring gameplay patterns to identify signs of problem gambling and providing responsible gaming support.
- Implementing deposit limits, session time limits, and self-exclusion features as requested by users.
- Providing access to responsible gaming resources and support organizations when needed.
4. Data Sharing and Disclosure
xo36 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:
4.1 Service Providers
We work with trusted third-party service providers who assist us in operating xo36's platform and delivering our services. These providers have access to your personal information only to the extent necessary to perform their specific functions and are contractually obligated to protect your data. Service providers include payment processors and banking partners who handle deposits and withdrawals, identity verification services that conduct KYC checks, fraud prevention and security services, cloud hosting providers who store our data securely, customer support platforms, and email service providers for communications.
4.2 Game Providers
When you play games on xo36, certain information may be shared with game providers and software developers to enable gameplay, track betting activity, and ensure fair outcomes through certified Random Number Generators (RNG). This information is limited to what is necessary for game operation and does not include sensitive financial or identification data.
4.3 Legal and Regulatory Authorities
We may disclose your personal information to government authorities, regulators, law enforcement agencies, or courts when required by law, when necessary to comply with legal obligations, to respond to valid legal processes such as subpoenas or court orders, to investigate suspected fraud, money laundering, or other illegal activities, to protect xo36's legal rights and property, or to ensure the safety and security of our users and platform.
4.4 Business Transfers
In the event that xo36 is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and prominent notice on our website before your information becomes subject to a different privacy policy.
Data Sharing Principles
All third parties with whom we share your data are required to maintain appropriate security measures and use your information only for the specified purposes. We conduct due diligence on our service providers to ensure they meet our privacy and security standards.
5. Data Security
xo36 takes the security of your personal information extremely seriously. We employ industry-leading technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:
- Encryption: All data transmitted between your device and xo36 servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same standard used by major financial institutions. Sensitive information such as passwords and payment details are encrypted at rest using advanced cryptographic algorithms.
- Secure Infrastructure: xo36's platform is hosted on secure cloud servers with multiple layers of protection including firewalls, intrusion detection systems, and regular security updates. We maintain redundant backups to prevent data loss.
- Access Controls: Access to personal information is restricted to authorized xo36 employees and service providers who require access to perform their job functions. All personnel with data access are bound by strict confidentiality obligations.
- Regular Security Audits: We conduct periodic security assessments, vulnerability testing, and penetration testing to identify and address potential security weaknesses.
- Fraud Detection: Advanced fraud detection systems monitor account activity for suspicious patterns, unusual betting behavior, and potential security breaches in real-time.
- Account Security Features: Users are encouraged to enable strong passwords, change passwords regularly, and never share account credentials. We offer two-factor authentication options for enhanced account protection.
While we implement robust security measures, no online platform can guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials and should notify xo36 immediately if they suspect unauthorized access to their account.
6. Cookies and Tracking Technologies
xo36 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you when you return to xo36.
6.1 Types of Cookies We Use
- Essential Cookies: These cookies are necessary for xo36's core functionality, including user authentication, session management, and security features. Essential cookies cannot be disabled without affecting platform performance.
- Performance Cookies: These cookies collect anonymous usage data to help us understand how users interact with xo36, which pages are most popular, and where technical issues occur. This information is used to improve platform performance.
- Functionality Cookies: These cookies remember your preferences such as language settings, currency choices, and game favorites to provide a personalized experience.
- Marketing Cookies: These cookies track your browsing activity to deliver relevant promotional offers and measure the effectiveness of our marketing campaigns. You can opt out of marketing cookies without affecting essential platform functionality.
6.2 Managing Cookies
Most web browsers allow you to control cookies through browser settings. You can configure your browser to reject all cookies, accept only certain cookies, or notify you when a cookie is set. However, disabling essential cookies may prevent you from accessing certain xo36 features and services. Please note that opting out of marketing cookies does not mean you will no longer receive promotional communications; it means that such communications will not be tailored based on your browsing behavior.
7. Data Retention
xo36 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our data retention practices are as follows:
- Active Accounts: Personal information for active accounts is retained for the duration of your relationship with xo36 and as long as your account remains open.
- Closed Accounts: After you close your account, we retain certain information for up to seven years to comply with legal, regulatory, and tax obligations, including anti-money laundering regulations and financial record-keeping requirements.
- Transaction Records: Financial transaction data, including deposits, withdrawals, and betting history, is retained for seven years from the date of the transaction as required by Indonesian financial regulations.
- Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you again.
- Support Communications: Customer support correspondence is retained for three years to provide continuity of service and resolve recurring issues.
Once the retention period expires, we securely delete or anonymize your personal information so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and platform improvement purposes.
8. Your Privacy Rights
As an xo36 user, you have certain rights regarding your personal information. We are committed to facilitating the exercise of these rights in accordance with applicable data protection laws. Your privacy rights include:
8.1 Right to Access
You have the right to request access to the personal information we hold about you. This includes the categories of data we collect, the purposes for which we process your data, and the recipients with whom we share your information. You can request a copy of your personal data by contacting our customer support team.
8.2 Right to Correction
If any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most account information directly through your xo36 account settings. For other corrections, please contact customer support.
8.3 Right to Deletion
You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, when you withdraw consent (where consent was the legal basis for processing), or when you object to processing and there are no overriding legitimate grounds for continued processing. Please note that we may be required to retain certain information to comply with legal obligations even after a deletion request.
8.4 Right to Data Portability
You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format. You may also request that we transfer your data directly to another service provider where technically feasible.
8.5 Right to Opt-Out of Marketing
You can opt out of receiving promotional emails, SMS messages, and marketing communications from xo36 at any time by clicking the unsubscribe link in our emails, adjusting your account notification preferences, or contacting customer support. Please note that even if you opt out of marketing communications, we will still send you essential account notifications such as transaction confirmations, security alerts, and policy updates.
8.6 Right to Object
You have the right to object to certain types of data processing, including processing for direct marketing purposes and processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
To exercise any of these rights, please contact xo36 customer support at with your request. We will respond within 30 days of receiving your request. Identity verification may be required before we fulfill your request to protect your privacy and security.
9. Third-Party Services
The xo36 platform may contain links to third-party websites, services, or applications that are not operated or controlled by xo36. This Privacy Policy applies only to information collected by xo36 and does not cover information collected by third-party services.
When you access third-party links or use third-party payment processors, you are subject to those third parties' privacy policies and terms of service. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.
xo36 is not responsible for the privacy practices, content, or security of third-party websites and services. We do not endorse or make representations about third-party services, and we are not liable for any loss or damage caused by your use of such services.
10. Children's Privacy
xo36 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. Online gambling is illegal for minors in Indonesia, and we take age verification extremely seriously.
During account registration, users must confirm they are at least 21 years old. We may request government-issued identification at any time to verify age. If we discover that we have inadvertently collected personal information from an individual under 21, we will immediately delete the account, erase all associated data, and forfeit any funds in the account as required by law.
Parents and guardians are encouraged to monitor their children's online activity and use parental control software to prevent minors from accessing gambling websites. If you believe that xo36 has collected information from a minor, please contact us immediately at so we can take appropriate action.
11. Changes to Privacy Policy
xo36 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by email to the address associated with your account and by posting a prominent notice on our website.
The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.
Your continued use of xo36 services after we post or send notice of changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the revised Privacy Policy, you must stop using xo36 services and close your account.
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or xo36's data protection practices, please contact us through the following channels:
- Email: — For privacy-related inquiries, please include "Privacy Request" in the subject line. We respond to all privacy inquiries within 5 business days.
- 24/7 Live Chat: Available directly on the xo36 website for immediate assistance from our Indonesian-speaking support team.
- WhatsApp: Available daily from 8 AM to midnight WIB for quick privacy-related questions.
For data protection rights requests (access, correction, deletion, portability), please provide your full name, account email address, and specific details about your request. Identity verification will be required before we process your request to protect your privacy and security.
Our Privacy Principles
Core values that guide xo36's data protection practices
Data Minimization
We collect only the personal information necessary to provide xo36 services and comply with legal obligations. No unnecessary data is requested or stored.
Security First
Bank-grade encryption, secure infrastructure, and regular security audits protect your data from unauthorized access, breaches, and cyber threats.
No Data Selling
xo36 never sells, rents, or trades your personal information to third parties for marketing purposes. Your data is yours alone.
Transparency
We clearly explain what data we collect, why we collect it, and how we use it. No hidden practices or unclear terms.
User Control
You have the right to access, correct, delete, and download your personal data. We make exercising these rights simple and straightforward.
Legal Compliance
xo36 complies with international data protection standards, gaming regulations, and Indonesian privacy laws to safeguard your rights.
Questions About Your Privacy?
Our customer support team is ready to assist with any privacy-related questions or concerns. Review our other policies and resources to learn more about xo36's commitment to user protection.