Privacy Policy

1. Introduction

Welcome to the Privacy Policy of idn88, an online sports betting, live casino, and gaming platform serving players in Indonesia. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use our services.

idn88 ("we", "us", "our", "the Platform") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy applies to all users ("you", "your", "Player") who access our website, create an account, or engage with our services. By using idn88, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

2. Information We Collect

idn88 collects several categories of information to provide, maintain, and improve our services, comply with legal obligations, and ensure platform security.

2.1 Information You Provide Directly

When you register an account on idn88, you voluntarily provide the following personal information:

• Identity Information: Full legal name (as it appears on government-issued ID), date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, and residential address in Indonesia.
• Account Credentials: Username, password (encrypted and stored securely), and security questions/answers.
• KYC Verification Documents: Copies of government-issued photo identification (Indonesian KTP, passport, or driver's license), proof of address documents (utility bills, bank statements dated within 3 months), and selfie photos for identity verification purposes.
• Financial Information: Bank account details (account holder name, bank name, account number, branch information), e-wallet account details (OVO, DANA, GoPay account identifiers), and payment transaction history.
• Communication Data: Messages sent to our customer support team via live chat, email, or WhatsApp, including inquiry content, support tickets, complaints, and feedback.

2.2 Information Automatically Collected

When you access idn88, certain technical information is automatically collected through cookies, web beacons, and server logs:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and device identifiers.
• Connection Information: IP address, internet service provider (ISP), geographic location (city/region level based on IP address), and connection timestamp.
• Usage Information: Pages visited, time spent on each page, clickstream data, navigation paths, referring URL (the page you came from), exit pages, and search queries entered on the platform.
• Gameplay Data: Games played, bets placed (amount, type, timestamp), game outcomes (wins/losses), session duration, betting patterns, and RTP interaction data.
• Marketing Interaction: Email open rates, link clicks in promotional emails, banner ad interactions, and bonus claim activity.

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data, payment status updates, and fraud detection alerts from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Verification results from third-party KYC/AML service providers used to confirm the authenticity of submitted identity documents.
• Responsible Gaming Organizations: Self-exclusion lists and problem gambling registers (if you have registered with such organizations).

3. How We Use Your Information

idn88 uses collected information for the following purposes:

3.1 Service Provision and Account Management

• Create, maintain, and secure your player account.
• Process deposits, withdrawals, and internal fund transfers.
• Enable you to place bets, play casino games, and access all platform features.
• Process bonus claims and track wagering requirement completion.
• Provide customer support and respond to your inquiries.
• Send transactional notifications (deposit confirmations, withdrawal updates, account security alerts).

3.2 Legal and Regulatory Compliance

• Verify your identity and age (21+ requirement) through KYC procedures.
• Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
• Detect and prevent fraud, collusion, bonus abuse, and other prohibited activities.
• Maintain records required by our gaming license and applicable laws.
• Respond to lawful requests from government authorities, regulators, and law enforcement agencies.

3.3 Platform Security and Fraud Prevention

• Monitor account activity for suspicious patterns indicative of unauthorized access or fraudulent behavior.
• Implement security measures to protect against hacking, data breaches, and cyberattacks.
• Analyze gameplay data to detect patterns of cheating, collusion, or use of automated betting software.
• Verify that deposits originate from accounts in your own name (not third-party deposits).

3.4 Service Improvement and Analytics

• Analyze user behavior and preferences to improve platform usability and user experience.
• Conduct A/B testing on new features, layouts, and game offerings.
• Monitor platform performance, server uptime, and page load speeds.
• Identify and fix technical bugs, glitches, and errors.
• Generate aggregated, anonymized statistics for internal reporting and business analysis.

3.5 Marketing and Promotional Communications (With Your Consent)

• Send promotional emails about new games, special bonuses, tournaments, and seasonal offers.
• Display personalized banner advertisements based on your gameplay preferences.
• Offer VIP program benefits and tier upgrade notifications.
• Provide cashback offers and loyalty rewards tailored to your betting activity.

Note: You can opt out of marketing communications at any time by clicking "Unsubscribe" in promotional emails or adjusting your communication preferences in your account settings. Transactional emails (deposit confirmations, withdrawal updates, security alerts) cannot be opted out of as they are essential for service provision.

4. Legal Basis for Processing (For Indonesian Users)

Under applicable data protection principles, idn88 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms and Conditions you agreed to when creating your account (e.g., processing deposits, enabling gameplay, handling withdrawals).
• Legal Obligation: Processing is required to comply with legal and regulatory requirements, including KYC/AML regulations, tax reporting obligations, and gaming license conditions.
• Legitimate Interests: Processing serves our legitimate business interests in fraud prevention, platform security, service improvement, and operational efficiency, provided these interests do not override your fundamental rights.
• Consent: For marketing communications and certain cookies, we obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. How We Share Your Information

idn88 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information in the following limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf. These providers have access to personal information only to the extent necessary to perform their services and are contractually obligated to maintain confidentiality:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process deposits and withdrawals.
• KYC/AML Verification Services: Specialized identity verification companies verify the authenticity of submitted documents and perform background checks.
• Game Providers: Licensed casino game studios (e.g., Evolution Gaming, Pragmatic Play, NetEnt) provide live dealer tables and slot games integrated into our platform. They may receive gameplay session data but not your full identity details.
• Customer Support Tools: Live chat software providers facilitate real-time communication with our support team.
• Cloud Hosting Services: Secure server infrastructure providers host our platform and databases.
• Analytics Providers: Web analytics tools help us understand user behavior and improve platform performance.

5.2 Legal and Regulatory Authorities

We may disclose your information when required by law or in response to valid legal processes:

• Compliance with court orders, subpoenas, or lawful requests from law enforcement agencies.
• Reporting suspicious transactions to financial intelligence units as required by AML regulations.
• Cooperation with gaming regulators and licensing authorities conducting audits or investigations.
• Protection of idn88's legal rights, enforcement of our Terms and Conditions, or defense against legal claims.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the business transaction. We will notify affected users and provide options where legally required.

5.4 With Your Consent

We may share your information with third parties not listed above if we obtain your explicit, informed consent for such sharing.

6. Data Security Measures

idn88 implements robust technical, administrative, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Safeguards

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Secure Socket Layer (SSL) technology.
• Encrypted Data Storage: Personal information stored in our databases is encrypted at rest using AES-256 encryption.
• Secure Password Hashing: Passwords are hashed using bcrypt algorithms with salting, making them irreversible even in the event of a database breach.
• Firewalls and Intrusion Detection: Multi-layer firewall protection and real-time intrusion detection systems monitor for malicious activity.
• Regular Security Audits: Independent cybersecurity firms conduct penetration testing and vulnerability assessments quarterly.

6.2 Administrative Safeguards

• Access Controls: Personal information is accessible only to authorized employees who require it to perform their job functions. Access is logged and monitored.
• Employee Training: All staff members receive regular training on data protection, privacy regulations, and security best practices.
• Confidentiality Agreements: Employees and contractors sign non-disclosure agreements prohibiting unauthorized use or disclosure of personal information.
• Incident Response Plan: We maintain a documented data breach response plan to quickly contain, assess, and mitigate security incidents.

6.3 Physical Safeguards

• Secure Data Centers: Our servers are housed in certified data centers with 24/7 physical security, surveillance, and access control systems.
• Backup Systems: Encrypted backups are stored in geographically separate locations to ensure business continuity and data recovery capability.

7. Data Retention and Deletion

idn88 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Retention Periods

Data Category	Retention Period	Reason
Account Information (Active Accounts)	Duration of account activity + 5 years after closure	Legal compliance (AML, tax reporting)
Transaction History	10 years from transaction date	Financial record-keeping requirements
KYC Documents	5 years after account closure	Regulatory compliance
Gameplay History	3 years from gameplay date	Dispute resolution, analytics
Customer Support Records	3 years from interaction date	Quality assurance, dispute resolution
Marketing Preferences	Until consent withdrawn	Ongoing communication management
Server Logs and IP Addresses	90 days	Security monitoring, technical troubleshooting

7.2 Account Deletion

You may request deletion of your account and associated personal information by contacting our customer support team at [email protected]. Upon receiving a deletion request:

1. We will verify your identity to ensure the request is legitimate.
2. If your account has outstanding balances, withdrawals, or bonus wagering requirements, these must be resolved first.
3. We will anonymize or delete your personal information within 30 days, except where retention is required by law.
4. Certain records (transaction history, KYC documents) will be retained in secure, access-restricted archives for the legally mandated periods outlined above.

8. Cookies and Tracking Technologies

idn88 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content.

8.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality (login sessions, secure checkout, language preferences). These cannot be disabled without impairing basic services.
• Performance Cookies: Collect anonymous data on page load times, error rates, and user navigation patterns to help us optimize platform performance.
• Functional Cookies: Remember your preferences (display settings, game favorites, recently played games) to provide a personalized experience.
• Marketing Cookies: Track your interactions with promotional content and display ads to measure campaign effectiveness and deliver relevant offers. These require your consent.

8.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies may impair platform functionality. For marketing cookies, you can opt out via your account settings or by declining cookie consent on your first visit.

9. Your Privacy Rights

As a user of idn88, you have certain rights regarding your personal information:

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To exercise this right, contact [email protected] with your request. We will provide the information in a structured, commonly used electronic format within 30 days.

9.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance.

9.3 Right to Deletion

You may request deletion of your personal information, subject to legal retention requirements outlined in Section 7. Deletion requests will be processed within 30 days.

9.4 Right to Restrict Processing

You may request that we limit how we use your personal information in certain circumstances (e.g., while we verify data accuracy). Note that restricting processing may affect service provision.

9.5 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider, where technically feasible.

9.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time by unsubscribing from promotional emails or adjusting account settings.

9.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your request. We will respond within 30 days.

10. International Data Transfers

Your personal information may be transferred to, stored on, and processed by servers located outside Indonesia, including in jurisdictions where data protection laws may differ from those in Indonesia. When we transfer data internationally, we ensure adequate safeguards are in place through:

• Contractual data protection clauses with third-party service providers.
• Selection of service providers certified under recognized data protection frameworks.
• Implementation of technical and organizational security measures equivalent to those described in Section 6.

11. Children's Privacy

idn88 services are intended exclusively for adults aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will immediately delete such information and terminate the associated account.

Parents and guardians are encouraged to monitor their children's internet usage and use parental control software to block access to gambling websites.

12. Changes to This Privacy Policy

idn88 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email notification or prominent platform notice at least 30 days before taking effect.

Your continued use of idn88 services after changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree with any changes, you must discontinue use of the platform and request account deletion.

13. Contact Information and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact:

• Data Protection Officer: [email protected]
• Customer Support: Available 24/7 via live chat on the platform
• WhatsApp: +62 xxx xxx xxxx (08:00-24:00 WIB)
• Mailing Address: idn88 Data Protection Department (address provided upon request)

We aim to address all privacy inquiries within 48 hours. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.