Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how idn98 ("we", "us", "our") collects, uses, stores, protects, and shares your personal information when you access or use our online gambling platform at https://idn98.cam (the "Website") and related services (collectively, the "Services").

We are committed to protecting your privacy and handling your personal data in accordance with international data protection standards and best practices. This Privacy Policy applies to all users of idn98 Services, including residents of Indonesia and other jurisdictions where our Services are accessible.

By creating an account, accessing the Website, or using our Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you must immediately cease using our Services.

2. Data Controller Information

For the purposes of applicable data protection laws, idn98 acts as the data controller for the personal information we collect through our Services. This means we determine the purposes and means of processing your personal data.

Contact Information:
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact our Data Protection Officer at:

• Email: [email protected] (text only, no clickable links as per site policy)
• Response Time: We aim to respond to all privacy-related inquiries within 30 days

3. Information We Collect

idn98 collects several categories of personal information to provide, maintain, and improve our Services. The information we collect includes:

3.1 Account and Identity Information

When you register for an idn98 account, we collect:

• Personal Identifiers: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address in Indonesia
• Account Credentials: Username, encrypted password, security questions and answers
• Verification Documents: Government-issued identification (KTP / Indonesian National Identity Card, passport, or driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity verification

3.2 Financial and Transaction Information

To process deposits, withdrawals, and wagers, we collect:

• Payment Information: Bank account details (account holder name, bank name, account number), transaction reference numbers
• Transaction History: Records of all deposits, withdrawals, wagers placed, game outcomes, bonuses claimed, and account balance changes
• Financial Verification: Bank statements or screenshots to verify payment method ownership

Important: idn98 does not directly store your bank account passwords or PIN codes. All financial transactions are processed through secure banking partners who maintain their own separate security protocols.

3.3 Technical and Usage Information

When you access idn98 Services, we automatically collect certain technical data:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution
• Connection Data: IP address, internet service provider (ISP), approximate geographic location (city-level, not precise GPS coordinates), connection timestamps
• Usage Data: Pages visited, games played, bet amounts and types, session duration, clickstream data, search queries within the Website
• Performance Data: Website load times, error messages, technical issues encountered

3.4 Communications and Customer Support

When you contact idn98 customer support or communicate with us, we collect:

• Live chat transcripts and messages
• Email correspondence
• WhatsApp messages (if you contact us via WhatsApp)
• Survey responses and feedback
• Complaint records and resolution details

3.5 Responsible Gaming Information

To support responsible gambling practices, we may collect:

• Deposit limits and self-imposed restrictions
• Self-exclusion requests and timeframes
• Gambling behavior patterns and session time data
• Reality check acknowledgments

4. How We Collect Your Information

idn98 collects personal information through several methods:

4.1 Information You Provide Directly

• When you register for an account and complete the signup form
• When you upload verification documents during the KYC process
• When you make deposits or request withdrawals
• When you contact customer support via live chat, email, or WhatsApp
• When you opt into promotional communications or newsletters
• When you participate in surveys or provide feedback

4.2 Information Collected Automatically

• Through cookies and similar tracking technologies when you browse our Website (see Section 11 for details)
• Through server logs that record your interactions with idn98 Services
• Through game software that tracks wagers, outcomes, and gameplay sessions
• Through security monitoring systems that detect unusual or suspicious activity

4.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Confirmation of successful transactions, chargeback notifications
• Fraud Prevention Services: Risk assessment data to prevent identity theft and financial fraud
• Game Providers: Gameplay data from third-party casino game studios integrated into our platform
• Regulatory Authorities: Information provided in response to legal requests or compliance audits

5. How We Use Your Information

idn98 uses your personal information for the following purposes:

5.1 Service Provision and Account Management

• Creating and maintaining your idn98 account
• Verifying your identity and age (21+ requirement for Indonesia)
• Processing deposits, withdrawals, and payment transactions
• Enabling you to place wagers and play games
• Calculating and crediting winnings to your account
• Managing bonuses, promotions, and loyalty rewards
• Maintaining accurate account balance records

5.2 Customer Support and Communication

• Responding to your inquiries, questions, and support requests
• Sending transactional notifications (deposit confirmations, withdrawal status updates, bonus credits)
• Providing technical assistance and troubleshooting
• Resolving disputes and investigating complaints
• Sending service announcements and platform updates

5.3 Security, Fraud Prevention, and Compliance

• Detecting and preventing fraud, money laundering, identity theft, and unauthorized access
• Monitoring for suspicious betting patterns or account activity
• Enforcing our Terms and Conditions and preventing prohibited activities
• Complying with legal obligations, including anti-money laundering (AML) and Know Your Customer (KYC) regulations
• Responding to lawful requests from law enforcement or regulatory authorities
• Protecting idn98, our users, and our business partners from legal liability

5.4 Platform Improvement and Analytics

• Analyzing usage patterns to understand how users interact with our Services
• Improving Website performance, functionality, and user experience
• Testing new features and conducting A/B testing
• Identifying and fixing technical issues and bugs
• Developing new products, services, and game offerings

5.5 Marketing and Promotions (With Your Consent)

• Sending promotional offers, bonus announcements, and special events (only if you have opted in)
• Personalizing marketing communications based on your gaming preferences
• Notifying you about tournaments, jackpot wins, and new game releases

Note: You can opt out of marketing communications at any time by contacting customer support or using the unsubscribe link in promotional emails. Opting out of marketing does not affect transactional notifications, which are essential to providing our Services.

5.6 Responsible Gaming Support

• Monitoring gambling behavior to identify potential problem gambling indicators
• Enforcing deposit limits, session time limits, and self-exclusion requests
• Providing access to responsible gaming tools and resources
• Sending reality check reminders during extended gaming sessions

6. Legal Basis for Processing

idn98 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., providing gambling services as outlined in our Terms and Conditions). This includes account creation, payment processing, and game provision.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC verification, AML compliance, age verification, and responding to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and customer support, provided these interests are not overridden by your privacy rights.
• Consent: For marketing communications and certain optional data processing activities, we rely on your explicit consent, which you can withdraw at any time.

7. Data Sharing and Third-Party Disclosures

idn98 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients for legitimate business reasons:

7.1 Payment Service Providers

We share necessary financial information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and payment processors to facilitate deposits and withdrawals. These partners process transactions on our behalf and are contractually obligated to protect your data.

7.2 Game Providers and Platform Partners

When you play casino games from third-party providers (e.g., Evolution Gaming, Pragmatic Play), we share limited information (username, session data, bet amounts) with those providers to enable gameplay. These providers operate under their own privacy policies and data protection obligations.

7.3 Security and Fraud Prevention Services

We work with specialized fraud detection and risk assessment services to identify suspicious activity, verify identities, and prevent money laundering. These services receive only the data necessary to perform their security functions.

7.4 Customer Support and Communication Tools

Our customer support team uses live chat software, email systems, and WhatsApp to communicate with users. These tools may temporarily store conversation data on their servers, but they are bound by strict confidentiality agreements.

7.5 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, or courts when required by law, legal process, or to protect our rights, property, and safety or those of others. This includes responding to subpoenas, court orders, or government investigations.

7.6 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and the new entity will be bound by this Privacy Policy unless you consent to a new policy.

8. Data Security Measures

idn98 implements robust technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

8.1 Encryption and Secure Transmission

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols, the same technology used by banks.
• Encrypted Data Storage: Sensitive personal information (passwords, financial data, identification documents) is encrypted at rest using AES-256 encryption.
• Secure Password Hashing: Passwords are hashed using bcrypt or similar one-way hashing algorithms and never stored in plain text.

8.2 Access Controls and Authentication

• Multi-factor authentication (MFA) for administrative access to systems
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular access reviews and immediate revocation of access for terminated employees
• Strong password requirements for user accounts

8.3 Network and Infrastructure Security

• Firewalls and intrusion detection systems (IDS) to prevent unauthorized network access
• Regular security audits and penetration testing by independent third parties
• DDoS protection to ensure service availability during attacks
• Secure, redundant data centers with physical security controls

8.4 Monitoring and Incident Response

• 24/7 security monitoring for unusual activity or potential breaches
• Automated alerts for suspicious login attempts or account activity
• Incident response plan for data breaches, including user notification procedures
• Regular security training for all employees handling personal data

Important: While we implement comprehensive security measures, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately if you suspect unauthorized access.

9. Data Retention and Storage

idn98 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law:

9.1 Active Account Data

While your account remains active, we retain all account information, transaction history, and communications to provide ongoing Services and support.

9.2 Closed Account Data

After you close your account, we retain your personal information for a minimum of 6 years to comply with financial regulations, tax laws, and anti-money laundering requirements. This includes:

• Identity verification documents (KTP, passport, proof of address)
• Complete transaction history (deposits, withdrawals, wagers)
• Account activity logs and communications

9.3 Legal Hold and Dispute Data

If your account is subject to a legal dispute, investigation, or outstanding balance, we retain all relevant data until the matter is fully resolved, regardless of standard retention periods.

9.4 Anonymized Data

After the retention period expires, we may retain anonymized or aggregated data (stripped of personal identifiers) indefinitely for analytics, research, and platform improvement purposes.

10. Your Privacy Rights

Subject to applicable data protection laws, you have the following rights regarding your personal information:

10.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To exercise this right, contact our customer support team. We will provide your data in a commonly used electronic format within 30 days of your request.

10.2 Right to Rectification

You can update or correct inaccurate personal information at any time through your account settings or by contacting customer support. Note that certain information (e.g., date of birth, legal name) cannot be changed after verification to prevent fraud.

10.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal information under certain circumstances. However, this right is limited by our legal obligations to retain data for regulatory compliance (KYC, AML, tax reporting) for a minimum of 6 years. We will delete your data as soon as legally permitted.

10.4 Right to Restrict Processing

You can request that we restrict processing of your personal information if you believe the data is inaccurate, our processing is unlawful, or you have objected to processing pending verification of our legitimate grounds.

10.5 Right to Data Portability

You have the right to receive your personal information in a structured, machine-readable format and to transmit that data to another service provider where technically feasible.

10.6 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time. You can also object to processing based on legitimate interests, though we may continue processing if we have compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where we rely on your consent to process personal information (e.g., marketing communications), you can withdraw consent at any time by contacting customer support. Withdrawal does not affect the lawfulness of processing before withdrawal.

10.8 How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] (text only). We will respond within 30 days and may request additional information to verify your identity before fulfilling your request.

11. Cookies and Tracking Technologies

idn98 uses cookies and similar tracking technologies to enhance your browsing experience, analyze usage patterns, and deliver personalized content.

11.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit websites. They allow the website to recognize your device on return visits and remember your preferences.

11.2 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, including login sessions, account authentication, and security. These cannot be disabled without breaking core Services.
• Functionality Cookies: Remember your preferences (language settings, username display) to provide a personalized experience.
• Analytics Cookies: Collect anonymous usage statistics to help us understand how visitors interact with our Website and identify areas for improvement.
• Performance Cookies: Monitor website speed, load times, and technical performance to optimize user experience.

11.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can block all cookies, accept only first-party cookies, or receive notifications before cookies are set. Note that disabling essential cookies may prevent you from using certain features of idn98 Services.

12. Changes to This Privacy Policy

idn98 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email or prominent notice on the Website
• For significant changes affecting your rights, request your consent where required by law

Continued use of idn98 Services after changes take effect constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: [email protected] (text only, no clickable links)
• Live Chat: Available 24/7 through the Website
• Response Time: Privacy inquiries are prioritized and typically answered within 48 hours

For responsible gaming concerns or to request self-exclusion, please visit our Responsible Gaming page.