xtraslot Platform Privacy Notice

This page describes what we collect when you use xtraslot and how we keep that data protected. We collect personal information only to operate our platform, process your deposits and withdrawals, verify your identity, and comply with applicable law. We do not sell your data to marketers or advertisers. We do not share your information with third parties except where required by law or to process your payments and account verification.

Our servers may sit outside your jurisdiction. Data transfers are encrypted using TLS 1.2 or higher. We conduct regular security audits and maintain industry-standard protections. You have the right to access, correct, or request deletion of your personal data. This notice applies to all users of xtraslot, regardless of location. Our services are available only where local law permits.

If you have questions about how we handle your data, contact our support team via the email address listed at the end of this notice. We will respond within 7 business days.

What Data We Collect on xtraslot

We collect your email address, phone number, and full name when you register an account on xtraslot. We collect your national ID number (KTP), date of birth, and residential address during account verification. We collect payment information (bank account number, digital-wallet ID) when you deposit or withdraw. We collect your IP address, browser type, and device information automatically when you access our platform.

We collect transaction data: every deposit, withdrawal, wager, and cashback claim is logged with a timestamp. We collect game history: which games you play, your stakes, your outcomes, and your account balance at each step. We collect promotion data: which offers you claim, when you claim them, and whether you meet the wagering requirements. We do not collect your credit-card number or PIN code; payment gateways handle that data separately and do not share it with xtraslot.

How We Use Your Data

We use your email and phone number to send account notifications (login alerts, promotion updates, withdrawal confirmations). We use your name, ID, and address to verify your identity and comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations. We use your payment information to process deposits and withdrawals. We use your IP address and device information to detect fraud and prevent unauthorized access.

We use your transaction and game history to calculate your account tier, determine your cashback rate, and verify promotion eligibility. We use this data to generate your account statements and transaction recaps. We do not use your data for marketing purposes without your explicit consent. We do not profile you based on your gaming behavior or sell behavioral data to third parties.

Third-Party Processors and Data Sharing

We share your payment information with certified payment gateways (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) to process your deposits and withdrawals. These processors are bound by confidentiality agreements and may not use your data for their own marketing. We share your identity information with our compliance and AML team to verify your account and meet regulatory requirements. We do not share your data with any other third parties.

If we are required by law to disclose your data (e.g., a court order or government request), we will comply. We will notify you of such disclosure unless prohibited by law. Our servers are hosted by a third-party cloud provider; your data is encrypted at rest and in transit. The cloud provider has access to encrypted data only and is contractually prohibited from using it for any purpose other than hosting our platform.

We protect your data through encryption, regular audits, and strict access controls. We do not sell your information. You control your data and can request access, correction, or deletion at any time.

Cookies and Tracking Technologies

We use cookies to store your session ID, language preference, and login status. These cookies are essential for the platform to function; you cannot use xtraslot without accepting them. We do not use cookies for tracking or profiling. We do not use third-party analytics cookies or advertising pixels. Your browser can delete cookies at any time; doing so will log you out of xtraslot.

We do not use local storage, service workers, or other persistent tracking technologies beyond cookies. We do not track your activity across other websites. We do not use fingerprinting or device identification beyond what is necessary to detect fraud and prevent unauthorized access to your account.

Your Rights and Data Access

You have the right to access all personal data we hold about you. You can request a data export via your account dashboard or by contacting our support team. We will provide your data in a machine-readable format (CSV or JSON) within 7 business days. You have the right to correct inaccurate data; you can update your profile information directly in your account settings.

You have the right to request deletion of your account and all associated data. We will delete your account within 7 business days of your request. We may retain transaction records for up to 7 years to comply with financial regulations and AML requirements. You have the right to object to data processing; contact our support team to discuss your concerns. We will respond to all data-access requests within 7 business days.

Data Retention and Security

We retain your personal data for as long as your account is active. If you delete your account, we retain transaction records for up to 7 years to comply with financial regulations. We retain identity-verification documents (KTP, proof of address) for up to 3 years after account closure. We encrypt all data at rest using AES-256 encryption. Data in transit is encrypted using TLS 1.2 or higher.

We conduct security audits quarterly and penetration testing annually. We maintain a firewall, intrusion-detection system, and regular backup procedures. We limit access to personal data to employees and contractors who need it to perform their job. All staff sign confidentiality agreements. We do not store passwords in plain text; all passwords are hashed using bcrypt or equivalent. If we discover a data breach, we will notify affected users within 72 hours.

International Data Transfers

Our servers are located outside Indonesia. When you use xtraslot, your data is transferred to and stored on servers in other jurisdictions. These transfers are encrypted and comply with applicable data-protection laws. We have data-processing agreements in place with our cloud provider to ensure your data is protected to the same standard as if it were stored locally.

By using xtraslot, you consent to the transfer of your data to servers outside your jurisdiction. If you do not consent to international data transfer, you should not use our platform. Our services are available only where local law permits such transfers.

Policy Updates and Contact

We may update this privacy notice from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or by posting a notice on our platform. Your continued use of xtraslot after such notice constitutes your acceptance of the updated policy. We encourage you to review this notice periodically to stay informed of how we protect your data.

If you have questions about this privacy notice, how we collect or use your data, or your rights, contact our support team. We will respond within 7 business days. You can also request a data-access report, correction, or deletion via your account dashboard. Our commitment is to handle your data transparently and securely. We do not sell your information, and we do not use it for purposes beyond operating xtraslot and complying with applicable law.

This privacy notice applies to all users of xtraslot, regardless of location. Our services are available only where local law permits. Users are responsible for verifying that their use of xtraslot complies with their own jurisdiction's data-protection and gaming laws. If you have concerns about data protection in your jurisdiction, consult your local data-protection authority or legal advisor.

Related policies