au238 is committed to handling your personal information with transparency, care, and respect. This Privacy Policy explains precisely what data we collect when you use the au238 platform, why we collect it, how we protect it, and the rights you hold over it at all times.
This Privacy Policy applies to all personal data processed by au238 in connection with the operation of the au238 online gaming and sports betting platform available at au238.club. It covers data collected through the website, through account registration and management, through payment processing, through customer support interactions, and through your gameplay and betting activity on the platform.
By registering an account on au238 or by continuing to use the au238 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must discontinue use of the au238 platform and may request account closure in accordance with the au238 Terms & Conditions.
This Policy should be read alongside the au238 Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall take precedence.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify you as a natural person, whether directly (e.g., your full name) or indirectly (e.g., your device IP address combined with account metadata). |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, archiving, or deletion. |
| "Controller" | au238 — the entity that determines the purposes and means of processing your Personal Data. |
| "Processor" | A third-party service provider that processes Personal Data on au238's behalf and under au238's instructions, such as a KYC verification provider or payment gateway. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose. |
| "Cookie" | A small text file placed on your device by the au238 website to store session information, preferences, or analytics data, as further described in Section 10. |
au238 collects the following categories of personal data. We collect only what is necessary for the specific purpose described and do not collect data beyond what this Policy discloses.
When you create an au238 account, we collect:
To comply with our KYC obligations and to process withdrawals, we collect:
au238 collects personal data through the following means:
au238 processes your personal data for the following specific, explicit, and legitimate purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, device data |
| Identity verification (KYC) and age confirmation (21+) | KYC data, registration data |
| Processing deposits and withdrawals | Financial transaction data, KYC data |
| Delivering gaming and sportsbook services | Gaming activity data, registration data |
| Administering bonuses and promotions | Registration data, gaming activity data, financial data |
| Fraud prevention and platform security | All categories, with emphasis on technical and financial data |
| Responsible gaming monitoring and tool activation | Gaming activity data, registration data, support data |
| Customer support and dispute resolution | Support data, registration data, financial data |
| Legal and regulatory compliance | All categories as required |
| Service improvement and analytics | Technical data, gaming activity data (aggregated and anonymized where possible) |
| Sending transactional notifications | Registration data (email, phone) |
| Sending promotional communications (where consent given) | Registration data, gaming activity data |
au238 does not process your personal data for any purpose not listed above without first providing notice and, where required, obtaining your consent.
au238 relies on the following legal bases when processing your personal data:
au238 shares personal data only in the circumstances described below. We do not sell, rent, or trade your data to third parties for their own independent marketing or commercial use under any circumstances.
au238 engages third-party processors who handle data strictly on our behalf and under our documented instructions, bound by contractual data-processing agreements that prohibit any use of your data beyond the scope of the services they provide to au238. These include:
au238 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, by a valid legal process (such as a court order or official regulatory request), or where disclosure is necessary to protect the rights, property, or safety of au238, its players, or the public. au238 will, where legally permissible, notify you of any such disclosure.
In the event of a merger, acquisition, asset sale, or corporate restructuring involving au238 or its parent entity, personal data held by au238 may be transferred to the successor entity as part of the transaction. In such circumstances, au238 will provide advance notice via email and will ensure that the successor entity is bound by privacy obligations at least as protective as those in this Policy before any transfer occurs.
au238 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following default retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure |
| KYC identity documents | Duration of account plus 5 years after closure |
| Financial transaction records | 7 years from transaction date (statutory minimum) |
| Gaming and betting activity logs | 5 years from the date of each session or wager |
| Customer support correspondence | 3 years from the date of the final interaction in a support case |
| Technical and device logs | 13 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 2 years thereafter |
| Self-exclusion and responsible gaming records | Duration of exclusion period plus 7 years |
Where data is no longer required, au238 will securely delete or anonymize it in accordance with our internal data disposal procedures. Data held solely for analytics purposes is anonymized at the earliest practicable opportunity.
au238 implements a layered technical and organizational security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key measures include:
While au238 applies industry-leading security standards, no system is entirely immune to risk. You play an important role in your account's security — use a strong, unique password, do not share your login credentials with anyone, and contact support immediately at [email protected] if you suspect unauthorized access to your account.
au238 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, prevent fraud, and understand how players interact with the site. The following cookie categories are used:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Essential | Maintain your authenticated session, enable core platform functions, prevent CSRF attacks. Cannot be disabled without breaking the site. | Session / up to 30 days |
| Functional | Remember your display preferences, language settings, and game lobby filters between visits. | Up to 12 months |
| Analytics | Collect aggregated, anonymized data on page views, navigation paths, and feature usage to help au238 improve the platform experience. | Up to 13 months |
| Fraud & Security | Identify and block automated bots, detect anomalous login patterns, and flag potentially fraudulent transaction behavior. | Up to 12 months |
au238 does not use advertising cookies or share cookie data with advertising networks. You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent the au238 platform from functioning correctly.
As a data subject, you hold the following rights with respect to your personal data held by au238. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request." au238 will acknowledge your request within 72 hours and complete the action within 30 days, subject to identity verification.
You have the right to request a copy of all personal data au238 holds about you, together with information about how it is used and with whom it is shared.
You have the right to request correction of any inaccurate or incomplete personal data. For certain data fields (name, date of birth), correction requires submission of supporting documentary evidence.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to overriding legal retention obligations — financial transaction records, for example, must be retained for 7 years.
You may request that au238 restrict active processing of your data — for example, while the accuracy of data is being contested or while you await a response to an objection.
Where processing is based on consent or contractual necessity, you may request that au238 provide your personal data in a structured, commonly used, machine-readable format (JSON or CSV) so that you can transfer it to another service.
You may object to processing carried out on the basis of au238's legitimate interests. au238 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
If au238 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and any real-money balance will be returned to the originating payment method after deducting any bonus-derived amounts in accordance with the Terms & Conditions. If you believe that a minor has accessed or registered on au238, please notify us immediately at [email protected].
The au238 platform may from time to time display references to third-party brands, leagues, or game studios in informational content. au238 does not include clickable links to external third-party websites in its platform content, and this Privacy Policy does not apply to any third-party websites that you may navigate to independently. au238 accepts no responsibility for the privacy practices, data security standards, or content of any third-party websites or services.
As a platform that operates internationally and engages service providers located in multiple countries, au238 may transfer your personal data to jurisdictions outside Indonesia. Such transfers occur, for example, when game content is delivered by studios whose servers are located outside Indonesia, or when KYC verification is performed by a provider with data centers in another country.
In all cases where personal data is transferred internationally, au238 ensures that the transfer is protected by appropriate safeguards, including contractual data-processing agreements that impose data protection obligations equivalent to those described in this Privacy Policy. au238 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.
au238 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, in the services we offer, or in applicable legal requirements. When material changes are made, au238 will notify you by email to your registered address and will post a prominent notice on the au238 website at least 14 days before the updated Policy takes effect. The "Effective Date" displayed at the top of this page will be updated accordingly.
Your continued use of the au238 platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not accept the revised Policy, you must cease use of the platform and may request account closure in accordance with the Terms & Conditions.
For any privacy-related enquiry, data rights request, or complaint regarding au238's handling of your personal data, please contact our support team using the details below:
These six principles summarize the practical commitments behind the legal text above — what you can concretely expect from au238 every time you use the platform.
Every byte of data moving between your device and the au238 servers is protected by 256-bit TLS encryption. Sensitive data stored at rest — including your identity documents and financial records — is encrypted using AES-256, the same standard used by major international financial institutions.
au238 collects only the data required to deliver the service, fulfill legal obligations, and protect the platform's integrity. We do not build marketing profiles, we do not sell data to advertisers, and we do not retain data beyond the periods disclosed in Section 8 of this Policy.
Every service provider that handles au238 player data — from KYC verification firms to payment processors — is bound by contractual data-processing agreements that restrict their use of your data strictly to the service they provide. No partner may use your data for their own independent purposes.
Your data rights are real and actionable. Access requests, correction requests, erasure requests, and portability requests are all handled within 30 days via a dedicated privacy email channel. There is no bureaucratic runaround — submit your request with your account username and au238 will act on it promptly.
au238 engages independent third-party security specialists to conduct regular penetration testing and vulnerability assessments of the platform infrastructure. Identified weaknesses are remediated under a strict priority schedule, and critical findings are addressed within 24 hours of discovery.
When this Privacy Policy changes in a material way, au238 notifies you by email at least 14 days before the changes take effect. There are no silent retroactive amendments. The effective date and version number at the top of this page always reflect the current governing version of the Policy.
Now that you know exactly how au238 handles your data, explore the full platform with confidence. Login to your account, check our FAQ for common questions, or browse the sportsbook and casino lobby. Adults 21+ only.