Privacy Policy — idn66

1. Introduction

idn66 ("we", "us", "the Company", or "the Platform") operates the online betting and casino service accessible at https://idn66.vip. As part of delivering our services to Members across Indonesia — including in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and all other provinces — we collect and process personal data in accordance with this Privacy Policy.

This Privacy Policy applies to all personal data collected through your use of the idn66 website, mobile browser interface, customer support channels, and any other touchpoint through which you interact with idn66 as a registered Member or prospective Member. It should be read alongside the idn66 Terms & Conditions, which govern the overall legal relationship between you and the Company.

By registering an idn66 Account or by continuing to use the Platform after any update to this Privacy Policy, you acknowledge that you have read, understood, and accepted the practices described herein. If you do not agree with any part of this Privacy Policy, you must cease using the Platform and contact our support team to request account closure.

2. Definitions

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, idn66.
• "Processor" means any third-party entity that processes Personal Data on behalf of idn66, subject to a binding data-processing agreement.
• "Member" means any individual who has completed the idn66 registration process and holds an active Account on the Platform.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, religious beliefs, health data, biometric data, or financial account details beyond standard payment identifiers.
• "Cookie" means a small text file placed on your device by the idn66 Platform for the purposes of session management, analytics, and personalisation.
• "KYC" means Know Your Customer identity verification, a mandatory compliance process used to confirm the identity and eligibility of Members.

3. Personal Data We Collect

idn66 collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include:

idn66 does not collect Sensitive Data beyond the financial identifiers listed above, which are required solely for payment processing and fraud prevention purposes. We do not collect health data, political opinions, biometric data, or data revealing religious beliefs except where a Member voluntarily discloses such information in a support communication, in which case it is used only to resolve that specific inquiry.

4. How We Collect Your Data

idn66 collects personal data through the following channels:

• Direct submission: Data you provide when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automated collection: Technical and behavioural data collected automatically when you access the idn66 platform via cookies, web beacons, server logs, and similar tracking technologies. This data is collected from the moment you load the idn66 website, regardless of whether you are logged in.
• Payment providers: Financial data received from your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) as part of processing a deposit or withdrawal transaction.
• Identity verification partners: Data returned by our third-party KYC and anti-fraud service providers as part of the identity verification process, including document authenticity scores and watchlist screening results.
• Publicly available sources: In limited circumstances, idn66 may supplement your profile with data from publicly available sources — such as government sanctions lists or court records — as required by our anti-money-laundering (AML) compliance obligations.

5. Purposes of Processing

idn66 processes your personal data for the following specific, documented purposes:

1. Account management: Creating, maintaining, and administering your idn66 Account, including authenticating your identity at login, managing your Balance, and processing your transaction history.
2. Service delivery: Enabling you to place bets on the idn66 sportsbook, play casino games, access live dealer tables, and use all other products available on the Platform.
3. Payment processing: Executing deposit and withdrawal transactions via local Indonesian banks and e-wallets, verifying payment method ownership, and preventing payment fraud.
4. Identity verification (KYC): Confirming that you meet the eligibility criteria set out in the idn66 Terms & Conditions, including age verification (21+) and residency checks.
5. Legal and regulatory compliance: Meeting our obligations under applicable international anti-money-laundering (AML), counter-terrorism financing (CTF), and data protection laws, including retaining records for the periods required by regulation.
6. Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeovers, collusion, bonus abuse, and other conduct prohibited under the idn66 Terms & Conditions.
7. Responsible gaming: Monitoring betting patterns to identify signs of problem gambling behaviour, administering self-exclusion requests, and enforcing deposit and session limits set by Members.
8. Customer support: Responding to your inquiries, resolving disputes, and processing formal complaints through idn66's 24/7 Indonesian-speaking support team.
9. Platform improvement: Analysing aggregated usage data to improve product design, fix bugs, optimise performance, and develop new features — all in anonymised or pseudonymised form where possible.
10. Marketing communications: Sending you personalised promotions, bonus offers, and platform updates by email or in-platform notification, where you have provided explicit consent or where we have a legitimate interest based on your existing membership. You may opt out at any time.

6. Legal Basis for Processing

idn66 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and idn66 — primarily Account registration, service delivery, and payment processing. Without this processing, we cannot provide the Platform to you.
• Legal obligation: Processing required to comply with applicable law, including KYC verification, AML record-keeping, and responses to lawful requests from government authorities or law enforcement agencies.
• Legitimate interests: Processing that serves idn66's legitimate business interests — such as fraud prevention, platform security, and internal analytics — where those interests are not overridden by your privacy rights. We conduct a balancing assessment before relying on this basis.
• Consent: Where idn66 relies on your consent as the legal basis — for example, for marketing communications or the placement of non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

7. Data Sharing & Disclosure

idn66 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality and data-processing obligations:

• Payment processors and banks: Your financial data is shared with the relevant payment provider (BCA, BRI, BNI, Mandiri, OVO, GoPay, etc.) solely to process your requested transaction. idn66 does not store full bank account numbers beyond what is necessary for transaction matching.
• KYC and identity verification partners: Your identity documents and personal details are shared with certified third-party KYC providers to verify your age, identity, and eligibility in accordance with our compliance obligations.
• Fraud prevention and AML screening services: Transaction data and identity data may be shared with anti-fraud and AML screening platforms to detect suspicious activity, match against watchlists, and prevent financial crime.
• Game content providers: Aggregated, pseudonymised gameplay data (not personally identifiable information) may be shared with licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft for the purpose of game performance analytics and RTP auditing.
• IT infrastructure and hosting providers: idn66's platform is hosted on secure third-party cloud infrastructure. Hosting providers process personal data only on idn66's instructions under strict data-processing agreements.
• Legal and regulatory authorities: idn66 is required to disclose personal data to government bodies, law enforcement agencies, or courts of competent jurisdiction when compelled to do so by applicable law, court order, or regulatory directive. idn66 will notify affected Members of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of the Company or its assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Members will be notified of any such transfer before it takes effect.

idn66 does not share personal data with any third party for that party's own marketing or advertising purposes. All third-party Processors are contractually bound to process your data only as instructed by idn66 and to maintain appropriate technical and organisational security measures.

8. International Data Transfers

As an internationally operated platform, idn66 may transfer your personal data to Processors or infrastructure providers located outside of Indonesia. Where such transfers occur, idn66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under this Privacy Policy, including:

• Binding contractual clauses that obligate the recipient to process your data in accordance with internationally recognised privacy standards.
• Transfers to jurisdictions that maintain an adequate level of data protection as recognised by applicable international standards.
• Technical safeguards including end-to-end encryption in transit and at rest to protect data from unauthorised access during and after transfer.

9. Data Retention

idn66 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, idn66 will securely delete or irreversibly anonymise your personal data in accordance with our internal data-destruction procedures. Anonymised data that can no longer be linked to any individual may be retained indefinitely for aggregate statistical purposes.

10. Security Measures

idn66 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the idn66 platform, ensuring that your credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at rest for all personally identifiable data stored on idn66's servers, using AES-256 or equivalent standards.
• Access controls and role-based permissions that restrict internal access to personal data to only those employees and contractors who require it for their specific job function.
• Multi-factor authentication (MFA) requirements for all idn66 staff with access to production systems containing Member data.
• Regular security audits and penetration testing conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection and monitoring systems that operate 24/7 to detect and respond to suspicious access patterns or data anomalies in real time.
• Staff training on data protection best practices, phishing awareness, and incident response procedures, conducted at onboarding and refreshed annually.

While idn66 employs industry-leading security measures, no system connected to the internet can be guaranteed to be completely secure. Members are responsible for maintaining the confidentiality of their own Account credentials and for ensuring that their devices are protected with up-to-date security software. If you suspect that your Account has been compromised, contact our support team immediately through the idn66 platform.

11. Cookies & Tracking Technologies

idn66 uses cookies and similar tracking technologies to operate the Platform effectively, improve your experience, and gather analytics data that helps us understand how the Platform is being used. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences — such as your preferred language or interface settings — so that you do not need to re-enter them on each visit. These are non-essential but enhance your experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how Members use the idn66 Platform — such as which pages are most visited and how long sessions last — allowing us to identify areas for improvement.
• Marketing and personalisation cookies: Used to deliver promotional content and bonus offers that are relevant to your interests and betting history. These cookies are only placed with your consent.

You may manage or withdraw your consent to non-essential cookies at any time by adjusting your browser settings or through the idn66 cookie preference panel. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are required for core service delivery.

12. Your Privacy Rights

As a Member of idn66, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to our Data Protection Officer using the contact details in Section 15.

• Right of access: You may request a copy of the personal data idn66 holds about you, together with information about how it is being processed.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data we hold about you. For certain data categories, you can update your information directly through your Account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations that require idn66 to retain data for specified periods.
• Right to restriction: You may request that idn66 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending a legitimate-interest assessment.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that idn66 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on idn66's legitimate interests, and we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing that took place before withdrawal.

idn66 will respond to all valid privacy rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you promptly and explain the reason for the delay. All requests are handled free of charge unless they are manifestly unfounded or excessive.

13. Protection of Minors

The idn66 platform is strictly intended for adults aged 21 years and older. idn66 does not knowingly collect or process personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage access, and our KYC procedures are used to confirm the age of all Members prior to the approval of financial transactions.

If idn66 discovers or is notified that personal data has been collected from an individual under the age of 21, we will take immediate steps to close the associated Account, forfeit any balance in accordance with the idn66 Terms & Conditions, and securely delete all personal data collected from that individual. If you are a parent or guardian and believe that a minor in your care has registered an idn66 Account without authorisation, please contact our support team immediately at the contact details provided in Section 15.

14. Policy Amendments

idn66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business operations, or the technologies we use. When material changes are made, the Company will publish the revised Privacy Policy on this page with an updated "Last updated" date and will notify all registered Members by email or in-platform notification prior to the changes taking effect.

Your continued use of the idn66 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you must cease using the Platform and contact our Data Protection Officer to request account closure and data erasure in accordance with Section 12.

We recommend that you review this Privacy Policy periodically — particularly before making any significant transaction on the Platform — to ensure you remain fully informed of how your personal data is handled.

15. Contact & Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or concerns about how idn66 handles your personal data, please contact our dedicated Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for rights requests: Please use the format "Privacy Rights Request — [Your Username]" to ensure your inquiry is routed directly to the DPO team.
• Live Chat: Available 24 hours a day, 7 days a week through the idn66 platform. Our support agents include native Indonesian-speaking staff operating in Western Indonesia Time (WIB, UTC+7).
• Response time: The DPO team will acknowledge receipt of all privacy inquiries within 48 hours and will provide a substantive response within 30 calendar days, as required by applicable data protection standards.

idn66 takes all privacy concerns seriously. If you are not satisfied with our response to your inquiry or believe that we have processed your personal data in a manner inconsistent with this Privacy Policy, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.