Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by idr88 through our website (https://idr88.cam), mobile applications, customer support channels, and any other services we provide. This policy covers all Indonesian residents and international players who access idr88 services, explaining your rights under applicable data protection regulations and our obligations as a data controller.

idr88 operates an online gaming platform offering casino games, sports betting (including bandar bola, Indonesian football betting), live dealer tables, and lottery games such as togel (Indonesia's traditional numbers lottery). Processing personal data is essential for us to provide these services, verify your identity, comply with legal obligations, prevent fraud, and ensure responsible gaming practices.

By creating an account on idr88, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with our data practices, you must not use idr88 services. For users under 21 years of age, access to idr88 is strictly prohibited, and we do not knowingly collect data from minors.

2. Data Controller Information

idr88 is the data controller responsible for your personal information collected and processed through our platform. As the data controller, we determine the purposes and means of processing your personal data and are accountable for compliance with applicable data protection laws.

Contact Information:

• Platform Name: idr88
• Website: https://idr88.cam
• Email: [email protected] (Data Protection Officer)
• Customer Support Email: [email protected]
• WhatsApp Support: +62 812-3456-7890

For all privacy-related inquiries, data access requests, or complaints regarding how we handle your personal information, please contact our Data Protection Officer at [email protected]. We aim to respond to all privacy requests within 14 business days.

3. Information We Collect

3.1 Information You Provide to Us

When you register an account and use idr88 services, we collect the following personal information directly from you:

• Account Registration Data: Full name, date of birth, gender, email address, phone number, residential address, username, and password.
• Identity Verification Documents (KYC): Government-issued photo ID (Indonesian National ID / KTP, passport, or driver's license), proof of address (utility bill, bank statement), and selfie photographs for identity confirmation.
• Payment Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay), transaction history, deposit amounts, withdrawal requests, and payment method preferences.
• Communication Data: Customer support inquiries, live chat transcripts, email correspondence, feedback, complaints, and any other communications you send to idr88.
• Marketing Preferences: Your consent choices for receiving promotional emails, SMS messages, and push notifications.

3.2 Information We Collect Automatically

When you access and use idr88 services, we automatically collect certain technical and usage data:

• Device Information: IP address, device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows), browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, bet amounts, win/loss records, session duration, login/logout times, clickstream data, referral sources, and navigation patterns on the platform.
• Location Data: Approximate geographic location derived from your IP address to verify that you are accessing idr88 from a permitted jurisdiction.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies to enhance user experience, remember preferences, and analyze platform usage. See Section 10 for detailed cookie information.

3.3 Information from Third Parties

We may receive limited information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment status, and fraud risk assessments from BCA, BRI, BNI, Mandiri, and e-wallet providers.
• Identity Verification Services: Age verification, address validation, and identity fraud detection results from third-party KYC providers.
• Game Providers: Game session data, RTP (Return to Player) statistics, and gameplay patterns from Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and other licensed game suppliers.

4. How We Use Your Information

idr88 processes your personal data for the following purposes:

4.1 Account Management and Service Provision

• Creating and maintaining your player account.
• Authenticating your identity when you log in.
• Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported payment methods.
• Providing access to casino games, sports betting markets, live dealer tables, and togel lottery draws.
• Recording game results, bet history, and account balance transactions.
• Managing bonus claims, wagering requirements, and promotional offers.

4.2 Legal Compliance and Regulatory Obligations

• Verifying that you are at least 21 years of age and eligible to use idr88 services.
• Conducting KYC (Know Your Customer) identity verification to prevent fraud and comply with anti-money laundering regulations.
• Monitoring transactions for suspicious activity, money laundering, terrorist financing, and other financial crimes.
• Complying with legal requests from law enforcement, regulatory authorities, and courts.
• Maintaining records required by gaming licensing authorities and financial regulators.

4.3 Fraud Prevention and Platform Security

• Detecting and preventing fraudulent activity, bonus abuse, multiple account creation, and unauthorized access.
• Protecting against cyberattacks, hacking attempts, and data breaches.
• Identifying collusion, chip dumping, match fixing, and other forms of cheating.
• Enforcing our Terms & Conditions and investigating violations.

4.4 Customer Support

• Responding to your inquiries via live chat, email, and WhatsApp.
• Resolving account issues, payment disputes, and technical problems.
• Providing guidance on game rules, bonus terms, and responsible gaming tools.
• Processing complaints and conducting internal investigations.

4.5 Marketing and Communications

• Sending promotional offers, bonus announcements, and VIP loyalty program updates (only if you have consented to receive marketing communications).
• Notifying you about new games, tournaments, and platform features.
• Conducting customer satisfaction surveys and collecting feedback.
• Personalizing your experience on idr88 based on your gaming preferences and activity history.

4.6 Responsible Gaming

• Monitoring your gaming behavior for signs of problem gambling.
• Enforcing deposit limits, loss limits, and session time restrictions you set on your account.
• Processing self-exclusion requests and account closure for responsible gaming reasons.
• Providing access to responsible gaming resources and support organizations.

4.7 Platform Improvement and Analytics

• Analyzing usage patterns to improve website navigation, game selection, and user interface design.
• Conducting A/B testing to optimize promotional campaigns and platform features.
• Generating aggregate statistical reports on player demographics, popular games, and betting trends (all aggregated data is anonymized and does not identify individual users).

5. Legal Basis for Processing

Under applicable data protection laws, we rely on the following legal grounds to process your personal information:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (i.e., providing gaming services, processing payments, managing your account as outlined in our Terms & Conditions).
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including age verification, KYC requirements, anti-money laundering laws, and licensing conditions.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, customer support, and service improvement, provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and certain optional data processing activities, we rely on your explicit consent, which you may withdraw at any time through your account settings or by contacting us.

6. Data Sharing and Disclosure

idr88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients for the purposes described in this policy:

6.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) that process your deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, and other licensed game suppliers that deliver casino games, live dealer tables, and sports betting platforms.
• Identity Verification Services: Third-party KYC and age verification providers that help us confirm your identity and eligibility.
• Cloud Hosting Providers: Secure server and database hosting services that store your data in encrypted form.
• Customer Support Tools: Live chat software, email service providers, and customer relationship management (CRM) systems.
• Analytics Providers: Web analytics platforms that help us understand how users interact with idr88 (all analytics data is anonymized).

All third-party service providers are contractually obligated to protect your personal data, use it only for the specified purposes, and comply with applicable data protection laws.

6.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, courts, and government agencies when:

• Required by law, court order, or legal process.
• Necessary to comply with gaming licensing conditions and regulatory reporting obligations.
• Investigating suspected fraud, money laundering, or other criminal activity.
• Protecting the rights, property, or safety of idr88, our players, or the public.

6.3 Business Transfers

If idr88 is involved in a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the acquiring entity. We will notify you via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy.

7. Data Security and Protection

idr88 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and idr88 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same standard used by banks and financial institutions.
• Secure Storage: Personal data is stored on secure servers with restricted access controls. Sensitive information such as passwords and payment details are encrypted at rest.
• Access Controls: Only authorized idr88 personnel who require access to perform their job functions can view your personal data. All employees undergo background checks and sign confidentiality agreements.
• Regular Security Audits: We conduct periodic vulnerability assessments, penetration testing, and security audits to identify and address potential weaknesses.
• Fraud Detection Systems: Automated monitoring tools detect suspicious login attempts, unusual transaction patterns, and other indicators of fraud or unauthorized access.

While we implement robust security measures, no system is completely immune to cyber threats. You are responsible for maintaining the confidentiality of your account credentials. If you suspect unauthorized access to your account, contact us immediately at [email protected].

8. Data Retention

idr88 retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and contractual obligations:

• Active Accounts: While your account remains active, we retain your personal information to provide services, maintain your transaction history, and support your gaming activity.
• Account Closure: If you close your account or request deletion, we will retain certain data for a period of 7 years (or longer if required by law) to comply with financial record-keeping obligations, prevent fraud, resolve disputes, and enforce our Terms & Conditions.
• Regulatory Requirements: Gaming licenses and anti-money laundering regulations require us to retain identity verification documents, transaction records, and betting history for specified periods, typically 5-10 years depending on jurisdiction.
• Anonymized Data: After the retention period expires, we may convert your data into anonymized, aggregated form for statistical analysis and platform improvement. Anonymized data cannot be traced back to individual users and is not considered personal data.

9. Your Privacy Rights

Under applicable data protection regulations, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.
• Right to Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data, subject to legal and regulatory retention obligations. Note that we may be required to retain certain records even after account closure.
• Right to Restriction of Processing: You can request that we limit how we use your personal data in certain circumstances, such as while we investigate a dispute or accuracy concern.
• Right to Data Portability: You may request a copy of your personal data in a portable format to transfer to another service provider.
• Right to Object: You can object to processing of your personal data for direct marketing purposes at any time. For other processing based on legitimate interests, you may object if you have compelling grounds relating to your particular situation.
• Right to Withdraw Consent: Where we rely on your consent (e.g., for marketing communications), you may withdraw consent at any time through your account settings or by contacting us. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request and proof of identity. We will respond within 14 business days and may request additional information to verify your identity before processing certain requests.

10. Cookies and Tracking Technologies

idr88 uses cookies and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly, including session management, login authentication, and security features. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect anonymous information about how you use idr88, such as which pages are visited most frequently and where error messages occur. This helps us improve platform performance.
• Functionality Cookies: Remember your preferences (language, currency, game favorites) to provide a more personalized experience.
• Advertising Cookies: Track your browsing activity to deliver targeted promotional content and measure the effectiveness of marketing campaigns (only used with your consent).

10.2 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect your ability to use certain idr88 features. For more information on managing cookies, consult your browser's help documentation.

11. International Data Transfers

idr88 primarily serves Indonesian residents, but some of our service providers and data processing infrastructure may be located outside Indonesia. When we transfer your personal data internationally, we ensure appropriate safeguards are in place:

• Standard contractual clauses approved by data protection authorities.
• Data processing agreements requiring recipients to provide equivalent protection to that required under Indonesian law.
• Encryption and secure transmission protocols for all cross-border data transfers.

By using idr88 services, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia where necessary to provide our services.

12. Changes to This Policy

idr88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Post the updated policy on this page with a revised "Last Updated" date.
• Send an email notification to your registered email address.
• Display a prominent notice on the idr88 website for 30 days following the change.

Continued use of idr88 services after notification of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Contact and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or how idr88 handles your personal data, please contact us:

• Data Protection Officer Email: [email protected]
• Customer Support Email: [email protected]
• WhatsApp Support: +62 812-3456-7890
• Live Chat: Available 24/7 on the idr88 website

We take privacy concerns seriously and will investigate all complaints promptly. We aim to resolve issues within 14 business days of receiving your complaint. If you remain unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.