Privacy Policy — idn68

idn68 is the operator of the online betting and gaming platform accessible at idn68.pro. For the purposes of this Privacy Policy, idn68 acts as the data controller — meaning we are the entity that determines the purposes and means by which your personal data is processed.

idn68 operates as an internationally licensed gaming platform. While our primary player base is located in Indonesia, our data processing operations are conducted in compliance with internationally recognized data protection principles, including purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

If you have any questions about how idn68 handles your personal data, you may contact our Data Protection team at any time via the details set out in Section 14 of this policy.

idn68 collects the minimum personal data necessary to operate a secure, compliant, and high-quality online betting platform. The categories of data we may collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification — idn68 enforces a strict 21+ minimum age requirement)
• Residential address in Indonesia (city, province, postal code)
• Email address used for account correspondence
• Contact telephone number (optional, used for account recovery and two-factor authentication)

2.2 Financial & Transaction Data

• Bank account name and number for withdrawal verification (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal transaction history, including amounts in IDR and timestamps
• Payment method type used for each transaction

2.3 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued identity documents (KTP, passport, or driver's license)
• Selfie or liveness verification images submitted during the KYC process
• Proof of payment method ownership documents where requested

2.4 Betting & Gaming Activity Data

• Full betting and wagering history across all product verticals — sportsbook, live casino, slots, togel, and esports betting
• Game session durations, bet amounts, and outcomes
• Bonus and promotion uptake history
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

2.5 Technical & Device Data

• IP address at login and at the time of each significant account action
• Device type, operating system, and browser version
• Cookie identifiers and session tokens (see Section 7)
• Geolocation data at the country and city level derived from your IP address
• Platform access logs including timestamps of login, logout, and key account events

2.6 Communications Data

• Records of all support interactions via live chat, email, and in-app messaging
• Feedback, complaints, and dispute correspondence
• Marketing preference settings and opt-in/opt-out records for promotional communications

idn68 collects personal data through the following channels:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, initiating deposits or withdrawals, or contacting customer support.
• Automated collection: Technical and device data collected automatically when you access the Platform, via server logs, cookies, and similar tracking technologies described in Section 7.
• Third-party verification providers: Identity verification results from KYC processing partners when you submit identity documents for verification.
• Payment processors: Transaction status confirmations and payment method details from our local payment processing partners handling IDR transactions.
• Game providers: Session and outcome data from third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) whose games are hosted on the Platform.

idn68 uses the personal data we collect exclusively for the purposes described in the table below. We do not use your data for purposes incompatible with those listed, and we do not sell, rent, or trade your personal data to any third party for their own commercial use.

idn68 processes your personal data on one or more of the following legal grounds, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfill our obligations under the idn68 Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering, fraud prevention, age verification, and know-your-customer obligations.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics, where our legitimate interest does not override your fundamental data protection rights.
• Consent: Processing for optional marketing communications, where you have explicitly opted in to receiving promotional emails or messages from idn68. You may withdraw this consent at any time by updating your communication preferences in your Account settings.

idn68 does not sell, rent, or license your personal data to third parties for marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: We share relevant financial and identity data with our Indonesian payment processing partners to facilitate deposits and withdrawals via local banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners are contractually bound to process your data only for the purpose of completing the relevant transaction.
• KYC verification providers: Identity documents submitted during the verification process are shared with our contracted identity verification partners. These partners operate under strict data processing agreements and are not permitted to retain your documents beyond the verification workflow.
• Game providers: Session identifiers and bet amounts may be shared with third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to operate game sessions. These studios do not receive your full identity data.
• Fraud and risk platforms: Anonymized or pseudonymized behavioral signals may be shared with fraud prevention networks to detect multi-account abuse, bonus exploitation, and money laundering patterns across the industry.
• Legal and regulatory authorities: idn68 will disclose personal data to law enforcement, regulators, or courts when required by a valid legal order, warrant, or statutory obligation. We will notify you of such disclosure where we are legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of all or part of idn68's business, player account data may be transferred to the acquiring entity, subject to equivalent privacy protections.

idn68 uses cookies and similar browser-based technologies to operate the Platform effectively, maintain session security, and improve user experience. The types of cookies we use are described below:

• Essential cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in during a browsing session, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as your preferred language setting, display preferences, and responsible gaming tool configurations so that these persist between sessions.
• Analytics cookies: Collect anonymized data about how players navigate the Platform — which pages are visited most, how long sessions last, and where users exit. This data is used to improve Platform design and performance. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and multi-account registrations by analyzing device fingerprint consistency across sessions.

idn68 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your Account's active status, plus a minimum of five years after Account closure, to comply with AML and fraud prevention obligations.
• KYC documents: Retained for a minimum of five years from the date of verification, in accordance with internationally recognized anti-money laundering standards.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• Betting and gaming history: Retained for a minimum of three years from the date of each wager, for responsible gaming monitoring and dispute resolution purposes.
• Support communications: Retained for three years from the date of the last interaction in a given support thread.
• Technical and device logs: Retained for 12 months on a rolling basis, unless a specific log is flagged as relevant to an ongoing security investigation or dispute.
• Marketing consent records: Retained for the duration of your consent plus three years after withdrawal of consent, to evidence compliance.

Upon expiry of the applicable retention period, data is securely deleted or anonymized so that it can no longer be associated with you as an individual.

idn68 applies a layered set of technical and organizational security controls to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and the idn68 Platform, including login, deposit, and withdrawal flows.
• Encrypted data storage — sensitive fields including passwords, KTP numbers, and bank account details are stored using industry-standard encryption at rest.
• Access controls — internal access to player personal data is restricted on a strict need-to-know basis. Staff access is logged, audited, and subject to regular review.
• Two-factor authentication (2FA) available to all players as an additional layer of Account login security.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures — idn68 maintains documented data breach response protocols. In the event of a breach that is likely to result in a risk to your rights, we will notify affected players promptly and take all reasonable steps to contain the incident.

As a player whose personal data is processed by idn68, you hold the following rights with respect to your information. To exercise any of these rights, please contact our Data Protection team using the details in Section 14.

• Right of access: You may request a copy of all personal data idn68 holds about you, along with information about how it is being used. idn68 will respond to verified access requests within 30 days.
• Right to rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or supplemented.
• Right to erasure: You may request that idn68 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records for AML and regulatory compliance purposes.
• Right to restriction: You may request that idn68 restrict the processing of your personal data in specific circumstances, such as while a dispute about accuracy is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to idn68, which you may then transfer to another service provider.
• Right to object: You may object to idn68's processing of your data on the basis of legitimate interests, or withdraw consent to marketing communications at any time by updating your Account preferences.
• Right not to be subject to automated decision-making: idn68 uses automated systems for fraud detection and responsible gaming monitoring. Where such a system results in a significant decision affecting your Account (such as a suspension), you have the right to request human review of that decision.

idn68 will not charge a fee for exercising these rights in ordinary circumstances. We may request identity verification before acting on a rights request to ensure that data is not disclosed or modified as a result of an unauthorized request.

During the KYC verification process, idn68 actively cross-checks submitted identity documents against the stated date of birth to verify that the account holder meets the 21+ minimum age requirement. Any Account found to have been registered by or on behalf of a minor will be permanently closed and all funds returned via the original deposit method, minus any bonuses claimed.

The idn68 Platform may reference third-party brands, game studios, or payment providers by name. idn68 does not operate outbound hyperlinks to external websites from within the Platform's main content areas. However, game interfaces provided by third-party studios such as Pragmatic Play, Evolution Gaming, and Spribe operate within embedded frames and are governed by those providers' own data processing practices with respect to in-game session data.

idn68 is not responsible for the privacy practices of third-party game studios or payment processors beyond the contractual obligations described in Section 6. Players who wish to understand how a specific game provider processes their data should refer to that provider's published privacy documentation.

idn68 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes — that is, changes that meaningfully affect how your data is used or the rights you hold — we will notify you via the email address associated with your Account and display a prominent notice on the Platform for a minimum of 30 days before the revised policy takes effect.

The "Last Updated" date at the top of this page indicates when the current version was published. We encourage you to review this policy periodically so that you remain informed about how idn68 protects your data. Your continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how idn68 has handled your personal data, please contact our Data Protection team through one of the following channels. Email addresses and contact details are provided as plain text only and are not clickable links.

• Data Protection Email: [email protected] — include "Privacy Request" in the subject line
• Live Chat: Available 24/7 via the in-platform chat widget — request to speak with a Data Protection representative
• Business Hours Response: 08:00 – 22:00 WIB (Western Indonesia Time, UTC+7)

idn68 commits to acknowledging all privacy-related inquiries within two business hours and to providing a substantive response within 30 calendar days of receiving a verified request. For complex requests, we will notify you if additional time is required, up to a maximum extension of 60 days.

If you are not satisfied with idn68's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.