idn789 Privacy Policy

idn789 is Indonesia's premier online betting platform, serving millions of players across Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Yogyakarta, Makassar, and beyond. Our product suite includes sports betting across BRI Liga 1, the EPL, Champions League, and international tournaments; live casino games powered by Evolution Gaming; togel online (Indonesia's traditional numbers lottery); poker rooms; and hundreds of slot titles from Pragmatic Play, Microgaming, and Pocket Games Soft.

In the course of providing these services, idn789 necessarily collects and processes personal data. We are committed to handling that data responsibly, transparently, and in accordance with internationally recognised data-protection principles. This Policy sets out in plain terms exactly what we collect, why, and how you can exercise control over your own information.

This Policy applies to all personal data processed by idn789 in connection with the Platform, regardless of whether data is collected online via the Platform website, through our customer-support channels, or through third-party payment processors acting on idn789's behalf.

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, national ID number, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, idn789.
• "Processor" means a third party that processes Personal Data on behalf of idn789 under a data-processing agreement (e.g., payment processors, KYC verification providers).
• "KYC" means Know Your Customer — the identity verification process required before a Player may withdraw funds from the Platform.
• "Cookies" means small data files stored on your device by your web browser when you visit the Platform.
• "Sensitive Data" means Personal Data that warrants heightened protection, including national identity card (KTP) numbers, passport numbers, and financial account data.
• "WIB" means Western Indonesia Time (UTC+7), idn789's default operational time zone.

idn789 collects the following categories of Personal Data. We collect only the minimum data necessary for each specific purpose in accordance with the principle of data minimisation.

idn789 collects Personal Data through the following channels and mechanisms:

• Direct submission: You provide data directly when you register an account, complete the KYC process, make a deposit or withdrawal request, contact customer support, or respond to a promotion.
• Automated collection: Technical and Usage Data are collected automatically when you access the Platform through server logs, cookies, web beacons, and similar tracking technologies. See Section 10 for full details.
• Third-party sources: idn789 may receive data from identity verification providers (for KYC), payment processors (to confirm transaction status), and fraud-prevention services. We only receive the minimum data necessary from these sources.
• Publicly available sources: In limited circumstances relating to fraud investigation or KYC enhancement, idn789 may supplement your profile with data from publicly available government or commercial databases.

idn789 processes your Personal Data for the following specific, legitimate purposes:

• Account management: To create, maintain, and authenticate your player account; to verify your eligibility to use the Platform (21+ age and jurisdiction checks); and to manage your account preferences.
• Service delivery: To process your bets, calculate winnings, execute deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja, and to provide the full range of Platform features.
• Identity verification (KYC): To verify your identity and age in compliance with anti-money-laundering (AML) obligations and to prevent fraud, underage gambling, and multi-accounting.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, collusion, money laundering, match-fixing, and other prohibited activities as defined in the Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and audit purposes.
• Responsible gaming: To monitor betting patterns for signs of problem gambling, to implement deposit limits and self-exclusion requests, and to fulfil idn789's responsible gaming obligations. See our Responsible Gaming page for full details.
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and maintain records as required by law.
• Platform improvement: To analyse aggregate, anonymised usage data to improve Platform performance, user experience, and product offering — for example, optimising load times for players in Jakarta and Surabaya, or improving the togel online draw interface.
• Marketing communications: To send you promotional emails, SMS notifications, and in-platform messages about bonuses, new game releases, and seasonal promotions (e.g., Idul Fitri, Ramadhan, Indonesian Independence Day offers) — only where you have opted in to receive such communications. You may opt out at any time.

idn789 processes your Personal Data under one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and idn789 (i.e., the Terms & Conditions) — including account creation, payment processing, and bet settlement.
• Legal obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC, AML reporting, and retention of financial records.
• Legitimate interests: Processing carried out in idn789's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, security monitoring, and platform analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

idn789 does not sell, rent, or trade your Personal Data to any third party. We share data only in the limited circumstances described below, and only with parties who are contractually bound to protect your data to standards no less rigorous than those described in this Policy.

• Payment processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party providers used to verify the authenticity of your identity documents and to perform age and liveness checks during the KYC process.
• Fraud prevention and AML services: Specialist screening services used to check player identities against sanctions lists, politically exposed person (PEP) databases, and fraud watchlists.
• Game studio providers: To the extent required to provide game services, Technical Data (such as session tokens and bet records) may be shared with licensed game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft. These studios operate under strict data processing agreements.
• Legal and regulatory authorities: idn789 may disclose Personal Data to competent government authorities, law enforcement bodies, or courts where required to do so by law, court order, or regulatory directive.
• Corporate transactions: In the event of a merger, acquisition, asset sale, or restructuring of idn789, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

idn789 retains Personal Data for the minimum period necessary to fulfil each processing purpose, after which data is securely deleted or anonymised. The following retention periods apply as standard:

Where data is retained beyond account closure for legal compliance purposes, access to that data is restricted to authorised personnel only and the data is not used for any operational or marketing purpose.

idn789 implements a comprehensive, multi-layered security programme to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and idn789's servers is encrypted using 256-bit SSL/TLS protocols. The Platform enforces HTTPS with HTTP Strict Transport Security (HSTS) headers.
• Encryption at rest: Sensitive personal data and financial records stored in idn789's databases are encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing Personal Data is strictly limited to authorised personnel on a need-to-know basis, enforced through role-based access controls (RBAC), multi-factor authentication (MFA), and privileged access management (PAM) protocols.
• Network security: idn789's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), distributed denial-of-service (DDoS) mitigation, and continuous 24/7 security monitoring.
• Vulnerability management: idn789 conducts regular penetration testing and vulnerability assessments on its Platform infrastructure. Critical vulnerabilities are patched on an emergency basis; non-critical issues are resolved within 30 days of identification.
• Incident response: idn789 maintains a documented security incident response plan. In the event of a data breach that affects your rights and freedoms, idn789 will notify affected players without undue delay and in accordance with applicable regulatory requirements.

idn789 uses cookies and similar technologies (web beacons, pixel tags, local storage) to operate the Platform effectively and to understand how players use it. The following categories of cookies are used:

idn789 does not use third-party advertising or retargeting cookies. You can manage or withdraw your consent to non-essential cookies at any time through your browser settings. Note that disabling strictly necessary cookies may prevent some features of the Platform from functioning correctly.

Subject to applicable law and idn789's legal retention obligations, you have the following rights in relation to your Personal Data held by idn789. To exercise any of these rights, contact idn789's support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the Personal Data idn789 holds about you, along with information about how it is processed.
• Right of rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held by idn789.
• Right of erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to idn789's legal retention obligations (e.g., AML retention requirements).
• Right to restriction: You have the right to request that idn789 restrict processing of your Personal Data while a rectification or erasure request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on idn789's legitimate interests, including profiling for fraud detection and marketing purposes. idn789 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time by clicking the unsubscribe link in any marketing communication or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

The idn789 Platform is strictly for adults. idn789 enforces a minimum age of 21 years across all jurisdictions we serve, including Indonesia. We do not knowingly collect Personal Data from individuals under the age of 21.

If idn789 becomes aware that Personal Data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, forfeit any associated balances in accordance with our Terms & Conditions, and securely delete the minor's Personal Data without undue delay. Parents or guardians who believe their child has registered an account on the Platform should contact us immediately at [email protected].

idn789 operates internationally and may transfer your Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, idn789 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries recognised as providing an adequate level of data protection.
• Data processing agreements incorporating standard contractual clauses with all international Processors.
• Binding corporate rules where applicable within idn789's corporate group.

idn789's primary data infrastructure is hosted on servers using reputable cloud providers with data centre locations in Asia-Pacific regions, chosen to minimise latency for Indonesian players and to maintain data residency within the region where possible.

idn789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, idn789 will notify registered players by email or via an in-platform notification at least 7 days before the amended Policy takes effect.

The "Last Revised" date at the top of this Policy will be updated each time a change is made. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you must cease using the Platform and may request account closure by contacting our support team.

idn789 recommends that you review this Policy periodically to remain informed about how we protect your data. Archived versions of prior Privacy Policies are available on request.

If you have any questions, concerns, or complaints regarding this Privacy Policy or idn789's data practices, or if you wish to exercise any of your data rights as described in Section 11, please contact idn789's support and data protection team using the details below. All privacy-related requests receive priority handling and will be acknowledged within 2 business days (WIB).

idn789 takes all privacy complaints seriously. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant supervisory or regulatory authority in your jurisdiction.