At atm228, your privacy is not an afterthought — it is a core obligation. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is processed and stored, and the rights you hold over your own information as a member of the atm228 platform.
Overview: This Privacy Policy ("Policy") applies to all personal data collected and processed by atm228 ("We", "Us", "Our") in connection with the operation of https://atm228.cam (the "Platform"). By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy in full. If you do not agree to the terms set out here, please do not use the Platform.
This Policy covers all personal data that atm228 collects about registered members, prospective members who browse the Platform without completing registration, and any individuals who contact atm228 through official support channels. It applies regardless of the device or network used to access the Platform.
atm228 acts as the data controller in respect of personal data collected through the Platform. As data controller, atm228 determines the purposes for which your personal data is processed and is responsible for ensuring that processing complies with applicable data protection standards.
This Policy applies exclusively to data processed through the atm228 Platform. It does not apply to data processed by third-party payment providers, game studios, or other service partners who operate their own independent privacy frameworks — members are encouraged to review those parties' policies where relevant.
atm228 collects only the personal data that is necessary for the lawful and efficient operation of the Platform. The categories of data we collect are as follows:
Note on Special Categories: atm228 does not intentionally collect special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you voluntarily disclose such information in a support communication, it will be processed solely to the extent necessary to address your query and will not be stored beyond the resolution of that interaction.
atm228 collects personal data through the following means:
The table below summarises the primary purposes for which atm228 processes your personal data:
| Purpose | Data Categories Used | Retention Period |
|---|---|---|
| Account registration and authentication | Identity, Contact, Technical | Duration of membership + 5 years post-closure |
| KYC identity and age verification | Identity, Contact | 5 years from date of verification |
| Processing deposits and withdrawals | Financial, Identity | 7 years (financial records obligation) |
| Wagering, game play, and bet settlement | Transactional & Gaming | 5 years from transaction date |
| Fraud prevention and AML screening | Identity, Financial, Technical | 7 years from last suspicious activity flag |
| Responsible gaming monitoring | Transactional & Gaming, Contact | Duration of membership + 2 years |
| Customer support and complaints handling | Communications, Identity | 3 years from case closure |
| Marketing communications (if consented) | Contact, Transactional & Gaming | Until consent withdrawn |
| Platform analytics and performance improvement | Technical (anonymised where possible) | 26 months (standard analytics window) |
atm228 processes personal data on the following legal grounds, depending on the purpose of processing:
atm228 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:
No Sale of Data: atm228 will never sell, lease, or auction your personal data to advertisers, data brokers, or any other commercial third party for their own independent use.
atm228 primarily stores and processes member data on servers located in secure data centres within the Asia-Pacific region. Where it is necessary to transfer personal data to service providers or infrastructure partners located outside this region, atm228 ensures that appropriate safeguards are in place prior to any such transfer. These safeguards may include:
By using the atm228 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia. atm228 will always ensure that cross-border transfers are conducted in a manner that respects your privacy rights.
atm228 retains personal data for only as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The specific retention periods applicable to each data category are set out in the table in Clause 4.
When the applicable retention period expires, personal data is either securely deleted from atm228's systems or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and business-performance analysis.
Where an account has been closed following a fraud investigation, atm228 may retain relevant data beyond standard retention periods as may be required for ongoing legal proceedings or regulatory reporting obligations.
atm228 applies a layered, defence-in-depth approach to the security of personal data. Key measures in place include:
Your Responsibility: While atm228 maintains robust technical safeguards, the security of your account also depends on your own practices. Use a strong, unique password for your atm228 account, enable 2FA, and never share your login credentials with any other person. If you suspect your account has been compromised, contact support immediately.
The atm228 Platform uses cookies and similar tracking technologies to ensure core platform functionality, improve performance, and — where you have consented — deliver relevant promotional communications. The categories of cookies in use are as follows:
These cookies are essential for the Platform to function and cannot be disabled without breaking core features such as login session management, account security tokens, and the shopping cart equivalent for bet slip functionality. They do not collect personal data for marketing purposes. No consent is required for strictly necessary cookies.
These cookies collect anonymised data about how members navigate the Platform — which pages are visited most, where users drop off, and how long sessions last. This information is used solely to improve Platform performance and usability. These cookies are set only with your consent.
Functional cookies remember your preferences — such as your preferred language display setting and any responsible gaming tool configurations — to personalise your experience on return visits. These cookies are set with your consent.
Where you have given explicit consent, atm228 may use cookies to track your interaction with promotional content and to serve you relevant bonus offers. These cookies are set only after you provide active consent and may be withdrawn at any time through your account settings.
You may withdraw your consent to non-essential cookies at any time by adjusting your browser settings or through the cookie preference centre available in your account dashboard. Withdrawing consent for non-essential cookies will not affect your ability to use the Platform's core features.
As a member of the atm228 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact atm228 using the details set out in Clause 16.
atm228 respects and upholds your rights as a data subject. Here is a summary of what you are entitled to request at any time.
Request a copy of all personal data atm228 holds about you. We will provide this within 30 days of your verified request.
Request correction of any inaccurate or incomplete personal data held on your account. Identity changes require supporting documentation.
Request deletion of your personal data where it is no longer necessary for its original purpose, subject to atm228's legal retention obligations.
Request that atm228 restricts processing of your data to storage only, pending resolution of an accuracy dispute or objection.
Receive a structured, machine-readable copy of personal data you provided to atm228, to transfer to another service provider if you choose.
Object to processing based on legitimate interests or for direct marketing purposes. Marketing objections are honoured immediately upon receipt.
The atm228 Platform is strictly intended for adults aged 21 years or older. atm228 does not knowingly collect or process personal data belonging to persons under 21. If atm228 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be permanently closed, and any deposited funds will be returned to the originating payment source.
If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on atm228, please contact our support team immediately so that corrective action can be taken without delay.
The atm228 Platform may, in certain contexts, reference or display content from third-party game providers or payment partners. atm228 is not responsible for the privacy practices of any third-party website, platform, or service. This Policy applies solely to data processed through the atm228 Platform at https://atm228.cam. We recommend that you review the privacy policies of any third-party services you interact with independently of atm228.
atm228 may send you promotional communications — including bonus offers, seasonal promotions tied to events such as Idul Fitri, Nyepi, or Indonesian Independence Day (17 August), and new product announcements — via email and SMS, provided you have given explicit consent to receive such communications at the time of registration or subsequently through your account settings.
You may withdraw your consent to marketing communications at any time by:
Withdrawal of marketing consent will be processed within 5 business days. Please note that even after opting out of marketing communications, atm228 will continue to send you transactional and account-related messages (such as deposit confirmations, withdrawal updates, and security alerts) as these are necessary for the operation of your account and do not require separate consent.
atm228 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. Where changes are material — meaning they significantly affect how your data is collected, used, or shared — atm228 will notify all registered members by email and will publish a prominent notice on the Platform homepage at least 14 days before the updated Policy takes effect.
The "Last Updated" date at the top of this Policy will be revised each time a new version is published. Your continued use of the Platform following the effective date of any update constitutes your acknowledgement and acceptance of the revised Policy. If you do not agree to a material change, you should close your account before the effective date of the revision.
All previous versions of this Privacy Policy are archived and can be made available to members upon written request to support.
If you have questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a privacy-related concern, please contact the atm228 Data Protection team using the following details:
Email: [email protected] (plain text — not a clickable link)
Subject Line: Please use "Privacy Request" or "Data Subject Rights" for faster routing to the relevant team.
Response Time: atm228 aims to acknowledge all privacy-related requests within 24 hours and to resolve them fully within 30 calendar days. Complex requests may take up to 60 days; we will notify you if an extension is required.
Identity Verification: To protect your data, atm228 will verify your identity before actioning any data subject rights request. You may be asked to confirm your registered email address, date of birth, and account username.
If you are not satisfied with atm228's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. atm228 is committed to cooperating in good faith with any such regulatory review.
Six principles that guide how atm228 handles your personal data — every day, on every transaction.
atm228 collects only the personal data that is strictly necessary to deliver and secure its services. We do not collect data speculatively or beyond what is needed for a defined, documented purpose.
Every byte of data exchanged between your device and the atm228 Platform is protected by TLS encryption. Sensitive data at rest — including KTP scans and bank details — is encrypted at the database layer using AES-256.
atm228 will never sell, lease, or trade your personal data to advertisers or data brokers. Your information exists to power your account — not to generate revenue for third parties.
Every category of personal data atm228 holds is subject to a defined retention schedule. When the applicable period expires, data is securely deleted or irreversibly anonymised — no unnecessary accumulation.
atm228 maintains a clear, accessible record of every purpose for which your data is processed, the legal basis for that processing, and the parties with whom it may be shared. No hidden uses, no surprises.
atm228 commits to acknowledging all data subject rights requests within 24 hours and to resolving them fully within 30 calendar days — with Indonesian-speaking support agents available around the clock.
Our support team is available 24/7 to assist with any privacy-related queries. You can also review our full Terms & Conditions or visit the FAQ for quick answers about your account.