1. Introduction

Welcome to idr168. We respect your privacy and are committed to protecting your personal data. This Privacy Policy will inform you about how we handle your personal information when you visit our website at https://idr168.cam (the "Platform"), use our services, and tell you about your privacy rights and how the law protects you.

idr168 operates an online gaming platform offering sports betting, live casino games, slot games, and other gaming products to users primarily located in Indonesia. This Privacy Policy applies to all users who register for an Account, access the Platform, or interact with our services in any capacity.

By using the idr168 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with the terms of this Privacy Policy, please discontinue use of the Platform immediately.

Key Principle

idr168 collects only the personal information necessary to provide our gaming services, comply with legal obligations, and ensure platform security. We never sell your personal data to third parties for marketing purposes.

2. Information We Collect

We collect various types of information in connection with the services we provide, including:

2.1 Information You Provide to Us

When you register for an Account or use our services, you directly provide us with certain personal information, including:

  • Account Registration Data: Full legal name, date of birth, gender, email address, phone number, residential address, and username/password.
  • Identity Verification Documents: Government-issued identification (Indonesian KTP, passport, driver's license), proof of address (utility bills, bank statements), selfie photographs holding identification documents, and payment method verification documents.
  • Payment Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account details), transaction history, deposit and withdrawal records.
  • Communication Data: Content of messages sent to customer support, live chat transcripts, email correspondence, feedback and survey responses.
  • Optional Information: Marketing preferences, preferred language, preferred currency, notification settings.

2.2 Information We Collect Automatically

When you access and use the idr168 Platform, we automatically collect certain information about your device and usage patterns:

  • Device Information: IP address, device type and model, operating system, browser type and version, device identifiers, screen resolution.
  • Usage Data: Pages visited, features used, time spent on pages, navigation paths, clickstream data, referral sources, search queries.
  • Gaming Activity: Games played, bets placed, bet amounts, win/loss records, gameplay patterns, session duration, favorite games.
  • Location Data: Approximate geographic location based on IP address (we do not collect precise GPS location data).
  • Technical Data: Log files, error reports, performance data, timestamps of activities.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Payment Processors: Verification of payment method validity, transaction status, anti-fraud checks.
  • Identity Verification Services: Confirmation of identity document authenticity, address verification, age verification.
  • Game Providers: Game session data, bet outcomes, RNG results (all data is anonymous at the provider level but associated with your Account on our Platform).
  • Affiliate Partners: If you arrive at idr168 through an affiliate link, we may receive referral information (but not your personal details until you register).

3. How We Use Your Information

idr168 uses your personal information for the following purposes, all of which are necessary to provide our gaming services and comply with legal obligations:

3.1 Account Management and Service Provision

  • Create, maintain, and secure your user Account
  • Verify your identity and age (21+ requirement)
  • Process deposits and withdrawals in Indonesian Rupiah (IDR)
  • Enable gameplay on sports betting, live casino, slots, and other gaming products
  • Track betting history and account balance
  • Provide personalized gaming recommendations based on your preferences
  • Manage bonuses, promotions, and loyalty rewards

3.2 Legal and Regulatory Compliance

  • Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
  • Prevent underage gambling (strict 21+ age verification)
  • Detect and prevent fraud, money laundering, and other illegal activities
  • Enforce our Terms and Conditions
  • Respond to legal requests and court orders
  • Maintain required records for regulatory audits

3.3 Customer Support

  • Respond to your inquiries via live chat, email, WhatsApp, or Telegram
  • Troubleshoot technical issues and Account problems
  • Provide Indonesian-speaking support during WIB timezone business hours
  • Handle complaints and dispute resolution
  • Conduct customer satisfaction surveys

3.4 Platform Security and Integrity

  • Monitor for suspicious activity, collusion, and cheating
  • Detect and prevent multiple Account creation
  • Identify and block automated bots and scripts
  • Protect against cyber attacks, hacking attempts, and data breaches
  • Investigate Terms violations and take appropriate action

3.5 Marketing and Communications (With Your Consent)

  • Send promotional emails about new games, bonuses, and special offers
  • Deliver personalized marketing based on your gaming preferences
  • Notify you of tournaments, jackpots, and special events
  • Provide updates about platform improvements and new features

Note: You can opt out of marketing communications at any time through your Account settings or by contacting customer support. Opting out will not affect transactional communications (deposit confirmations, withdrawal notifications, security alerts) which are necessary for service provision.

3.6 Analytics and Platform Improvement

  • Analyze user behavior to improve website navigation and game selection
  • Test new features and optimize existing ones
  • Generate anonymized statistical reports on platform usage
  • Understand which games are most popular among Indonesian players
  • Improve mobile responsiveness and loading speeds

4. Data Sharing and Disclosure

idr168 does not sell your personal information to third parties. We share your data only in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers to help us operate the Platform and provide services to you. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose. Service providers include:

  • Payment Processors: To process deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja)
  • Identity Verification Services: To verify KYC documents and prevent identity fraud
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and others who power our gaming library
  • Cloud Hosting and Data Storage: To securely store data and ensure platform availability
  • Customer Support Tools: To manage live chat, email, and communication channels
  • Analytics Providers: To understand usage patterns and improve user experience (data is anonymized where possible)
  • Fraud Prevention Services: To detect and prevent fraudulent transactions and Account abuse

4.2 Legal Obligations

We may disclose your personal information if required by law or in good faith belief that such action is necessary to:

  • Comply with legal processes such as court orders, subpoenas, or government requests
  • Enforce our Terms and Conditions
  • Investigate potential Terms violations or illegal activities
  • Protect the rights, property, or safety of idr168, our users, or the public
  • Cooperate with law enforcement agencies investigating crimes

4.3 Business Transfers

In the event that idr168 undergoes a business transition such as a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. You will be notified via email and/or prominent notice on the Platform of any such change in ownership or control of your personal information.

4.4 With Your Consent

We may share your information with third parties when you have given explicit consent to do so, such as participating in third-party promotions or integrations.

Important: We Never Sell Your Data

idr168 does not and will never sell, rent, or trade your personal information to data brokers, marketers, or any third party for their commercial purposes. Your data is shared only as described in this section and always with strict contractual protections requiring confidentiality and data security.

5. Data Security

idr168 takes data security seriously and employs industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5.1 Security Measures

  • 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology, the same standard used by banks and financial institutions.
  • Secure Data Storage: Personal information is stored on secure servers with restricted access. Data at rest is encrypted using advanced encryption algorithms.
  • Firewalls and Intrusion Detection: Our systems are protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity 24/7.
  • Access Controls: Access to personal data is limited to authorized personnel who require it to perform their job functions. All staff undergo security training and are bound by confidentiality agreements.
  • Regular Security Audits: We conduct regular security assessments and penetration testing to identify and address vulnerabilities.
  • Two-Factor Authentication (2FA): We strongly recommend enabling 2FA on your Account for an additional layer of security.
  • PCI DSS Compliance: Our payment processing partners are Payment Card Industry Data Security Standard (PCI DSS) compliant, ensuring credit and debit card information (when applicable) is handled securely.

5.2 Your Role in Security

While we implement robust security measures, you also play a crucial role in protecting your Account:

  • Use a strong, unique password and change it regularly
  • Never share your login credentials with anyone
  • Log out after each session, especially on shared devices
  • Be cautious of phishing emails or messages claiming to be from idr168 (we will never ask for your password via email)
  • Contact us immediately if you suspect unauthorized access to your Account

5.3 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will notify you within 72 hours via email and/or prominent notice on the Platform, detailing the nature of the breach, the data affected, and the steps we are taking to address the situation. We will also notify relevant regulatory authorities as required by law.

6. Cookies and Tracking Technologies

idr168 uses cookies and similar tracking technologies to enhance your experience on our Platform. This section explains what cookies are, how we use them, and how you can control them.

6.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and to provide information to site owners. Cookies can be "persistent" (remain on your device until deleted or expired) or "session" (deleted when you close your browser).

6.2 How We Use Cookies

We use cookies for the following purposes:

  • Essential Cookies (Required): These cookies are necessary for the Platform to function. They enable core features like user authentication, security, network management, and access to secure areas. The Platform cannot function properly without these cookies.
  • Functional Cookies: These cookies remember your preferences (language, currency, username) so you don't have to re-enter information each time you visit. They enhance your user experience but the Platform can function without them.
  • Analytics Cookies: We use analytics cookies to understand how visitors interact with the Platform – which pages are most popular, where users spend the most time, and what features are used most frequently. This helps us improve the Platform. Data collected is typically anonymized.
  • Marketing Cookies: These cookies track your browsing habits to deliver personalized advertisements and promotions relevant to your interests. They also measure the effectiveness of advertising campaigns.

6.3 Third-Party Cookies

Some cookies on our Platform are placed by third-party services we use (such as game providers, analytics services, and payment processors). These third parties may collect information about your online activities over time and across different websites. We do not control these third-party cookies and encourage you to review their privacy policies.

6.4 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may affect the functionality of the idr168 Platform, and some features may not work properly.

To manage cookies, access your browser's settings menu. Instructions for popular browsers can be found on their respective support pages. You can also use tools like the Network Advertising Initiative opt-out page to control advertising cookies.

7. Data Retention

idr168 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Active Accounts

For active user Accounts, we retain personal data for the duration of your relationship with idr168. Your Account information, transaction history, and gaming activity are kept to provide ongoing services, comply with legal obligations, and resolve disputes.

7.2 Closed Accounts

When you close your Account (either voluntarily or through suspension/termination by idr168), we retain certain information to comply with legal obligations, prevent fraud, resolve disputes, enforce our Terms, and maintain security. Specifically:

  • Financial Records: Retained for 7 years to comply with tax and accounting regulations
  • Identity Verification Documents: Retained for 5 years to comply with AML and KYC regulations
  • Gaming Activity Logs: Retained for 5 years for audit and dispute resolution purposes
  • Communication Records: Retained for 3 years for quality assurance and dispute resolution

7.3 Dormant Accounts

If your Account remains inactive (no login or gaming activity) for 12 consecutive months, it is classified as dormant. We may delete non-essential data from dormant Accounts while retaining core Account information for legal and security purposes. You will be notified via email before any data deletion occurs.

7.4 Marketing Data

If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to ensure we do not contact you in the future.

8. Your Privacy Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information. idr168 respects these rights and provides mechanisms to exercise them.

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. This includes your Account details, transaction history, gaming activity, and communication records. To request your data, contact our customer support team. We will provide the information in a commonly used electronic format within 30 days of your request.

8.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your Account settings. For information that cannot be self-edited, contact customer support.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if you withdraw consent. However, this right is not absolute – we may retain data when required by law, to comply with legal obligations, resolve disputes, or enforce our Terms. When you request erasure, we will inform you what data can be deleted and what must be retained.

8.4 Right to Restrict Processing

You may request that we restrict processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store your data but not actively use it except with your consent or for legal claims.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider. This right applies to data you provided to us with consent or for performance of a contract.

8.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications through your Account settings or by clicking the unsubscribe link in any marketing email. You may also object to processing based on legitimate interests; we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

8.7 Right to Withdraw Consent

Where we rely on your consent to process personal information (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] or through live chat. We may request additional information to verify your identity before processing your request. We will respond to all requests within 30 days.

9. International Data Transfers

idr168 operates internationally and may transfer your personal information to countries outside of Indonesia for processing and storage. These countries may have different data protection laws than Indonesia. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Specifically, we require all third-party service providers to implement adequate data protection measures through standard contractual clauses, certification schemes (such as Privacy Shield successors), or other legally recognized transfer mechanisms. Your personal data will always be treated securely and in accordance with this Privacy Policy regardless of where it is processed.

10. Children's Privacy

idr168 is strictly an adult-only platform. Our services are not intended for individuals under the age of 21, in accordance with Indonesian social norms and international gaming regulations. We do not knowingly collect personal information from anyone under 21 years of age.

If we become aware that we have inadvertently collected personal data from someone under 21, we will take immediate steps to delete that information from our servers and terminate the associated Account. All deposits will be refunded, and any winnings will be forfeited.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

idr168 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes to this Policy, we will notify you by:

  • Posting the updated Privacy Policy on this page with a new "Last Updated" date
  • Sending an email notification to the address associated with your Account
  • Displaying a prominent notice on the Platform homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform after any modifications indicates your acceptance of the updated Privacy Policy.

If you do not agree with any changes to the Privacy Policy, you must stop using the Platform and close your Account by contacting customer support.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24/7 on the idr168 Platform
  • Customer Support Hours: 24 hours a day, 7 days a week (WIB timezone support available)

We aim to respond to all privacy-related inquiries within 72 hours. For urgent Account security matters, please use live chat for immediate assistance.

For information about our Terms and Conditions, please visit our Terms & Conditions page.

For information about responsible gaming tools and resources, please visit our Responsible Gaming page.

Your Privacy Matters

At idr168, we are committed to maintaining the trust you place in us by protecting your personal information. We continuously review and improve our data protection practices to ensure your privacy is safeguarded at all times. Thank you for choosing idr168 as your gaming platform.

How We Protect Your Privacy

256-bit SSL Encryption

All data transmitted between your device and idr168 servers is protected with bank-grade encryption, ensuring your information remains private and secure.

KYC & AML Compliance

Strict Know Your Customer and Anti-Money Laundering protocols ensure your identity is verified securely while preventing fraud and illegal activities.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data is yours, and we keep it that way.

Access Control

Only authorized idr168 personnel with legitimate business needs can access your personal data, and all staff are bound by strict confidentiality agreements.

Data Retention Limits

We retain your information only as long as necessary to provide services and comply with legal obligations, then securely delete or anonymize it.

Your Privacy Rights

You have the right to access, correct, delete, or port your data. Contact us anytime to exercise your privacy rights – we respond within 30 days.

Have Privacy Questions?

Our support team is available 24/7 to answer questions about how we handle your personal information.

View FAQ Back to Home