Privacy Policy

1. Introduction

idr888 ("we", "us", "our", or "the Platform") is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, share, and protect information about you when you use our online betting platform, website, and related services. By registering an account or using idr888, you consent to the data practices described in this policy.

We operate under international data protection standards and gaming regulations that require us to handle personal information responsibly. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of idr888 services.

2. Information We Collect

To provide our services, comply with legal obligations, and improve your gaming experience, idr888 collects several categories of personal information:

2.1 Information You Provide Directly

• Registration Information: When you create an account, we collect your full name, date of birth, email address, phone number, residential address, and username.
• Identity Verification (KYC) Documents: To comply with international gaming regulations and prevent fraud, we require government-issued identification (KTP, passport, or driver's license) and proof of address documents. These documents are processed securely and stored encrypted.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals. We do not store full credit/debit card numbers; payment processing is handled by PCI-DSS compliant third-party processors.
• Communication Data: Records of your communications with our customer support team via live chat, email, or WhatsApp, including any attachments or documents you send.
• Preferences and Settings: Language preferences, deposit limits, self-exclusion settings, notification preferences, and other account customization choices.

2.2 Information Collected Automatically

• Gameplay Data: Betting history, game selections, wager amounts, wins and losses, bonus usage, and session duration. This data helps us detect fraud, ensure fair play, and improve game offerings.
• Technical Information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and referring website. This information is used for security monitoring and platform optimization.
• Cookies and Tracking: We use cookies, web beacons, and similar technologies to remember your login status, track your preferences, analyze usage patterns, and deliver personalized content. See Section 6 for detailed cookie information.
• Location Data: Approximate geographic location based on IP address to verify you are accessing idr888 from a permitted jurisdiction and to provide localized content.

2.3 Information from Third Parties

• Payment Processors: Transaction confirmation, payment status, and fraud risk assessments from our banking partners (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Third-party KYC providers may supplement your verification documents with additional identity checks against public databases to prevent identity fraud.
• Game Providers: Technical gameplay data and RNG results from our partner studios (Pragmatic Play, Evolution Gaming, Microgaming, etc.) to ensure game integrity and resolve disputes.

3. How We Use Your Information

idr888 processes your personal data for the following purposes, all of which are necessary to provide our services and comply with legal obligations:

4. How We Share Your Information

idr888 does not sell your personal data to third parties. We only share your information in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party service providers who process data on our behalf under strict confidentiality agreements:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process your financial transactions. They receive only the minimum data necessary to complete payments.
• Game Providers: Studios like Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt host the games on idr888. They receive anonymized gameplay data and bet information but do not have access to your identity or financial details.
• Identity Verification Services: Third-party KYC providers verify the authenticity of your documents and check against fraud databases. They operate under their own privacy policies and data protection obligations.
• Cloud Hosting: Our platform infrastructure is hosted on secure cloud servers with enterprise-grade encryption and access controls.
• Customer Support Tools: Live chat and ticketing systems store communication records to provide consistent support across channels.

4.2 Legal Requirements

We may disclose your information to law enforcement, regulators, or courts when required by law, including:

• Responding to valid subpoenas, court orders, or legal processes
• Reporting suspicious transactions under anti-money laundering (AML) regulations
• Cooperating with gaming authority investigations or audits
• Protecting the rights, property, or safety of idr888, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change via email and prominent notice on our website.

4.4 With Your Consent

We may share your information with other third parties when you explicitly consent, such as sharing your username in leaderboards or tournament rankings (you can opt out of public leaderboards in your account settings).

5. Data Security and Retention

5.1 Security Measures

idr888 employs industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the same technology banks use for online transactions.
• Secure Data Storage: Personal information is stored on encrypted databases with restricted access. Financial data and KYC documents are encrypted at rest.
• Access Controls: Only authorized personnel with a legitimate business need can access your data. All access is logged and monitored.
• Two-Factor Authentication: Optional 2FA adds an extra layer of security to your account login.
• Regular Security Audits: We conduct quarterly security assessments and penetration testing to identify and address vulnerabilities.
• Employee Training: All staff undergo data protection training and are bound by confidentiality agreements.

5.2 Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: Data is retained for the duration of your account's active status.
• Closed Accounts: After account closure, we retain certain data for 7 years to comply with financial record-keeping and AML regulations.
• KYC Documents: Identity verification documents are retained for 7 years after account closure per regulatory requirements.
• Marketing Data: If you withdraw consent for marketing, your contact details are suppressed from marketing lists but retained to honor your opt-out preference.
• Anonymized Data: After required retention periods, we may anonymize data for statistical analysis. Anonymized data cannot be linked back to you and is not considered personal data.

6. Cookies and Tracking Technologies

idr888 uses cookies, web beacons, and similar technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps websites remember your preferences and track your activity.

6.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function. These cookies enable login authentication, session management, and security features. They cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymized data about how you use idr888, such as which pages you visit and how long you spend on each page. This helps us identify and fix technical issues.
• Functionality Cookies: Remember your preferences (language, timezone, display settings) to provide a personalized experience across sessions.
• Marketing Cookies: Track your browsing activity to deliver relevant promotional offers and measure the effectiveness of our marketing campaigns. These cookies are set only with your consent.

6.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may prevent you from using certain features of idr888. Instructions for managing cookies:

• Chrome: Settings > Privacy and Security > Cookies and other site data
• Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions

7. Your Privacy Rights

Under international data protection standards, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you. We will provide this in a structured, machine-readable format within 30 days.
• Right to Correction: Request correction of inaccurate or incomplete data. You can update most information directly in your account settings.
• Right to Deletion: Request deletion of your data, subject to legal retention requirements. Account deletion is permanent and cannot be reversed.
• Right to Restriction: Request that we limit how we process your data in certain circumstances (e.g., while verifying data accuracy).
• Right to Data Portability: Request a copy of your data in a portable format to transfer to another service provider.
• Right to Object: Object to processing based on legitimate interests, including marketing communications.
• Right to Withdraw Consent: Withdraw consent for any processing based on consent (e.g., marketing emails) at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

idr888 is not intended for individuals under 21 years of age. We do not knowingly collect personal information from minors. Our registration process requires users to confirm they are at least 21, and we conduct age verification through KYC document checks.

If we discover that we have inadvertently collected data from someone under 21, we will immediately delete the account, remove all associated data, and forfeit any deposits or winnings. If you believe a minor has accessed idr888, please contact us immediately at [email protected] so we can investigate and take appropriate action.

9. International Data Transfers

idr888 primarily serves the Indonesian market, and your data is processed within secure data centers that may be located internationally. When we transfer data outside Indonesia, we ensure appropriate safeguards are in place, including:

• Using service providers that comply with international data protection standards
• Implementing standard contractual clauses approved by data protection authorities
• Ensuring adequate security measures protect data in transit and at rest

10. Changes to This Privacy Policy

idr888 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated via:

• Email notification to your registered email address
• Prominent banner on our website for 30 days following the change
• In-app notification upon your next login

The "Last Updated" date at the top of this policy indicates when the most recent changes took effect. We encourage you to review this Privacy Policy periodically. Continued use of idr888 after changes have been posted constitutes your acceptance of the updated policy.

11. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection team:

• Email: [email protected] (subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 via the chat icon on any page
• WhatsApp: +62 812-3456-7890 (09:00-21:00 WIB)

We aim to respond to all privacy-related inquiries within 48 hours and resolve requests within 30 days as required by data protection regulations.