cmd389 Casino & Sportsbook Data Care
When you install the cmd389 Android app or access our platform via iOS browser, you create an account using your email and password. This page describes what we collect when you use cmd389 and how we keep that data protected during registration, account verification, deposits, withdrawals, and gameplay.
We at cmd389 take data security seriously. We encrypt your personal information in transit and at rest, and we limit access to your data to employees who need it for account management, fraud prevention, or regulatory compliance. We do not sell or share your data with marketers or advertisers.
This privacy policy applies to all users who access cmd389 from any device—Android app, iOS browser, or desktop—across all our services: sportsbook (Liga 1, Piala Indonesia, Piala AFF, Champions League, Premier League, MotoGP, badminton), live casino (blackjack, roulette, baccarat, Dragon Tiger), slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports (Mobile Legends, Free Fire, PUBG Mobile).
What We Collect and How We Use It
Data We Collect During Registration
We collect your email address when you create a cmd389 account. We use this to send you account verification codes, password resets, and notifications about your account activity (large deposits, withdrawals, login attempts, KYC status). We also collect your chosen password, which we encrypt before storage.
During registration, you may optionally provide your mobile phone number. If you do, we use it to send SMS verification codes (for two-factor authentication) and account alerts. You may disable SMS notifications in your account settings at any time.
Know Your Customer (KYC) Data
Before your first withdrawal, we require Know Your Customer verification. You upload a government-issued ID (passport, national ID, or driver's license), proof of residential address (utility bill or bank statement dated within three months), and confirm your date of birth. We use this data to verify your identity, confirm you meet the legal requirements of your jurisdiction, and prevent money laundering and fraud.
Your KYC documents are encrypted and stored in a separate, secure database isolated from your gaming activity. We retain KYC data for the duration of your account and for a retention period afterward as required by financial regulations in your region. If you request account deletion, we will delete personal identifiable information after the retention period expires, though transaction records may be retained for auditing purposes.
Payment and Transaction Data
When you deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we collect the amount, date, and time of transaction. We also receive confirmation from your payment provider that the transfer was successful. We use this data to credit your account balance, detect fraud, and comply with anti-money-laundering regulations.
We do not store your full bank account or mobile wallet credentials. Instead, we store a tokenized reference to your account that allows us to process withdrawals to the same method. This token is encrypted and cannot be used to access your account without additional authentication.
Gameplay and Account Activity
We log your account login times, device type (Android, iOS, desktop), and IP address. We track your predictions, bets, and game activity—match selections, stake amounts, outcomes, and balance changes. We use this data to settle predictions, calculate your account balance, detect fraudulent activity (such as account takeover or bonus abuse), and respond to disputes.
We also collect data on how you interact with our app: which sections you view, how long you spend on each page, and which payment methods you use. We use this to improve user experience and identify technical issues.
Cookies and Tracking Technologies
When you access cmd389 via browser (iOS or desktop), we use cookies to maintain your login session, remember your preferences, and track your activity. Session cookies are deleted when you close your browser. Persistent cookies remain for up to one year and allow us to recognise you on future visits.
We use both first-party cookies (set by cmd389) and third-party cookies (set by analytics providers) to understand how you use our platform. You may disable cookies in your browser settings, though this may affect functionality. We do not use cookies to track you across other websites.
We at cmd389 keep your data protected by encrypting it in transit and at rest, limiting employee access, and never selling your information to third parties.
Our cmd389 Data Handling Practices and Your Rights
Third-Party Processors and Data Sharing
We share data with third-party service providers who help us operate cmd389. Payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive your name, account identifier, and transaction amount to process deposits and withdrawals. These partners have their own privacy policies and are responsible for their data-handling practices.
We use third-party KYC verification services to confirm your identity. These services receive a copy of your ID and address information, verify it against government databases, and return a confirmation to us. We then delete the image copy they store.
We may share data with law enforcement, regulators, or courts if required by law or legal process. We will inform you of such requests unless legally prohibited from doing so. We do not share data with marketing partners, data brokers, or advertisers without your explicit consent.
Data Storage and Location
Our servers are located in multiple geographic regions. Your data may be stored in Jakarta, Singapore, or other locations outside your jurisdiction. By using cmd389, you consent to your data being stored and processed in these locations, subject to encryption and access controls.
Your Rights and Data Access
You may request access to your personal data by contacting us at the address in our Legal noticeWe will provide you with a copy of the data we hold about you within 30 days (or as required by local law). You may also request correction of inaccurate data or deletion of your account and associated data. Deletion is subject to legal retention requirements; we may retain transaction records for auditing and regulatory purposes even after account deletion.
Data Breaches and Security Incidents
We maintain security measures to protect your data from unauthorised access, alteration, or disclosure. However, no system is completely secure. If we detect a data breach that affects your personal information, we will notify you and relevant authorities as required by law. We will also take steps to prevent further unauthorised access.
Policy Updates
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or in-app notification. Your continued use of cmd389 after such changes constitutes acceptance of the updated policy.
Contact and Dispute Resolution
If you have questions about our data practices or wish to exercise your data rights, contact our privacy team at the address listed in our Legal noticeWe respond to data access requests within 30 days. For disputes about data handling that we cannot resolve, you may lodge a complaint with your local data protection authority or gaming regulator.
Our services are available only where local law permits. If you have jurisdictional questions or concerns about how your data is used in your specific location, see our About cmd389 page or contact our legal team for clarification.
We Do Protect
- Encrypt data in transit and at rest
- Limit employee access to personal data
- Keep KYC data separate from gaming records
- Respond to data breaches within legal timeframes
We Do Not
- Sell data to marketers or advertisers
- Share bank details with third parties
- Track you across other websites
- Retain KYC data after deletion requests
Service availability
We at cmd389 offer our services only in jurisdictions where online gaming, sportsbook betting, live casino, and related activities are explicitly permitted by applicable local law. We do not operate in regions where such activities are prohibited, and we make reasonable efforts to prevent access from restricted territories through geolocation technology and user verification. However, no geolocation system is foolproof, and we rely on users to be honest about their location during registration and Know Your Customer verification.
The legality of online gaming varies significantly across countries, regions, and sometimes municipalities. Some jurisdictions permit gaming freely under general licensing; others restrict it to state-operated entities; still others prohibit it entirely. We do not maintain a public list of legal versus prohibited jurisdictions because regulations change frequently and legal interpretation differs by jurisdiction. Instead, we assess each user's location during registration and KYC using address information and geolocation data.
If we determine that your account is accessing cmd389 from a jurisdiction where we cannot legally offer services, we will suspend your account and process a refund of your balance according to our standard procedures. We reserve the right to report suspicious activity to regulators or law enforcement if required by law.
Account eligibility
Users who access cmd389 must meet the minimum age requirement established by the law of their own jurisdiction. Most jurisdictions set this at 18 years; some set it higher (21 years in certain regions). We do not impose a global minimum age; instead, we rely on government ID verification during Know Your Customer review to confirm that your age complies with your jurisdiction's legal requirement. When you submit your ID during KYC, our team verifies your date of birth against applicable law.
Beyond age, you must not be subject to any legal restriction that prohibits you from accessing gaming services. This includes court orders, regulatory sanctions, criminal convictions related to financial crime or fraud in your jurisdiction, or designation on any government or international sanctions list. During KYC, we perform compliance checks to identify these restrictions. If detected, your account will be closed and funds returned according to our procedures.
You are also ineligible if you hold a position that creates a conflict of interest with cmd389—such as being an employee of cmd389, an official of a gaming regulator, or a close family member of either. If you provide false information during registration or KYC, including false age or identity, your account will be permanently closed and all funds forfeited. We may report such fraud to relevant authorities.
Local-law responsibility
You are solely responsible for ensuring that your access to and use of cmd389 comply with the laws and regulations of your own jurisdiction. We provide information about our platform and policies, but we do not provide legal advice. If you are uncertain whether online gaming, sportsbook betting, live casino play, or specific market types are legal in your location, you must consult a qualified legal professional before accessing or depositing.
Regulatory frameworks differ widely. Some jurisdictions prohibit all online gaming; others permit it but tax winnings at specific rates; still others restrict certain game types or markets. cmd389 offers the same services globally without jurisdiction-specific customisation. It is your responsibility to determine which services are legal for you and to comply with all local law, including tax obligations, licensing requirements, or reporting duties.
If you access cmd389 from a jurisdiction where such activities are prohibited and later face legal consequences, cmd389 bears no liability, will not provide legal representation, and will not reimburse penalties or legal fees. Use of VPNs, proxies, or circumvention tools to mask your location violates our terms and may violate local law. If detected, your account will be closed permanently and funds forfeited.
Data and privacy scope
During registration, we collect your email address and password to create your account. We use these to authenticate your login and send you account notifications. During Know Your Customer verification, we collect your full legal name, date of birth, government ID number and copy, residential address, and proof of address. We use this data exclusively for identity verification, fraud prevention, regulatory compliance, and anti-money-laundering reporting.
We do not sell, lease, or share your personal data with third-party marketers, data brokers, or advertisers without your explicit written consent. We may share data with payment processors (DANA, OVO, GoPay, ShopeePay, LinkAja, QRIS, BCA, Mandiri, BRI, BNI) to process deposits and withdrawals; with KYC verification services to confirm your identity; with compliance and fraud-prevention vendors; and with law enforcement or regulators if required by court order or legal mandate. These partners have their own privacy policies and are responsible for their data practices.
Your data is encrypted in transit (via TLS/SSL) and at rest in our databases. We retain data for as long as your account is active and for a retention period afterward as required by financial services and anti-money-laundering regulations. You may request access to, correction of, or deletion of your personal data according to applicable privacy laws. For full details on data retention, your rights, and our compliance with privacy regulations, see our Privacy policy or contact our privacy team.
Contact for legal inquiries
If you have legal, regulatory, or compliance questions about cmd389—such as questions about your jurisdiction's gaming laws, how we handle data, your privacy rights, our compliance with specific regulations, or concerns about our practices—you may contact our legal and compliance team. The email address for legal inquiries is listed in our Legal noticeWe aim to respond to non-urgent legal inquiries within 5 to 7 working days.
For urgent matters (account suspension due to jurisdiction concerns, emergency data requests, suspected fraud, or complaints about account closure), include "URGENT" in the subject line. Urgent matters are reviewed and responded to within 24 hours to the extent possible. If you file a formal complaint with a gaming regulator, financial authority, or government agency in your jurisdiction, we will cooperate fully with any official inquiry and provide documentation as required by law.
For non-legal support (help with deposits, withdrawal delays, game disputes, account recovery, KYC questions), use in-app Help or contact our general support team via email. The support contact is listed in our FAQGeneral support inquiries are answered within 24 hours. We do not currently offer phone support, but email and in-app messaging are available during extended hours.