indo78 Privacy Policy

1.1  indo78 is committed to safeguarding the privacy and security of our players. This Policy sets out the types of personal data we collect, the purposes for which we use it, how we protect it, and your rights in relation to your personal information.

1.2  This Policy applies to all users of the indo78 platform, including visitors, registered players, and former account holders. It covers all personal data collected through our website, mobile-optimized platform, customer support channels, and any other touchpoint where you interact with indo78.

1.3  This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete set of rules governing your relationship with indo78.

2.1  Account Registration Data. When you create an account with indo78, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Telephone number (Indonesian mobile number)
• Residential address (street address, city, province, postal code)
• Username and password (password is stored in encrypted form only)
• Preferred language and currency (defaults to English and Indonesian Rupiah)

2.2  Know Your Customer (KYC) Verification Data. To comply with international anti-money-laundering (AML) standards and age verification requirements, we collect identity documents including:

• Government-issued photo ID (Indonesian National Identity Card / KTP, Passport, or Driver's License)
• Proof of address documents (utility bill, bank statement, or official government correspondence dated within the last 3 months)
• Proof of payment method ownership (screenshot or photo of bank account or e-wallet account showing your name and account number)
• Selfie photograph holding your ID document (to prevent identity fraud)

2.3  Financial Transaction Data. When you make deposits or withdrawals, we collect:

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, and other supported banks
• E-wallet account details for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history (date, time, amount, payment method, transaction status)
• Device and IP address information associated with each transaction (for fraud detection purposes)

2.4  Gaming Activity Data. We automatically collect data related to your use of our platform, including:

• Bets placed (sport, league, event, market, selection, stake, odds, timestamp)
• Casino games played (game title, provider, bet sizes, win/loss outcomes, session duration)
• Account balance changes (deposits, withdrawals, bets, wins, bonuses credited, bonuses forfeited)
• Bonus participation and wagering progress
• Loyalty program tier and points earned

2.5  Technical and Device Data. When you access the indo78 platform, we automatically collect:

• IP address and approximate geolocation (city-level, derived from IP)
• Device type, operating system, browser type and version
• Screen resolution, device language settings, time zone
• Pages visited, features used, links clicked, time spent on each page
• Referral source (how you arrived at our site — direct, search engine, referring website)
• Cookies and similar tracking technologies (see Clause 6)

2.6  Communications Data. When you contact our customer support team or interact with us via email, live chat, WhatsApp, or telephone, we collect and store the content of those communications, including:

• Support tickets and chat transcripts
• Email correspondence
• Phone call recordings (for quality assurance and training purposes — you will be informed when a call is being recorded)
• Survey responses and feedback

3.1  indo78 uses your personal data for the following purposes:

4.1  indo78 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and indo78 (i.e., to provide our betting and gaming services as outlined in the Terms & Conditions).
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including age verification, AML compliance, and anti-fraud measures.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, ensuring platform security, and conducting marketing activities, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, we obtain your explicit consent before processing certain types of data (e.g., marketing communications, non-essential cookies). You may withdraw consent at any time.

5.1  indo78 does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality agreements:

5.2  Service Providers. We engage trusted third-party service providers to perform specific functions on our behalf, including:

• Payment processors and banking partners (to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment channels)
• Game and software providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Pocket Games Soft, and others whose games appear on our platform)
• Identity verification and KYC service providers (to authenticate your documents and prevent identity fraud)
• Cloud hosting and data storage providers (to securely store your account information)
• Customer support platform providers (for live chat, ticketing, and email management)
• Analytics and fraud detection services (to monitor platform usage and identify suspicious activity)

These service providers are contractually bound to use your data only for the specific services they provide to indo78 and are prohibited from using it for their own purposes.

5.3  Legal and Regulatory Authorities. We may disclose your personal data to government authorities, law enforcement agencies, courts, or regulators when required by law, court order, subpoena, or regulatory investigation. This includes cooperation with AML and counter-terrorism financing investigations.

5.4  Business Transfers. In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

5.5  With Your Consent. We may share your data with other third parties where you have given explicit consent for us to do so.

6.1  indo78 uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content.

6.2  What Are Cookies? Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to remember your preferences, keep you logged in, and track your activity across sessions.

6.3  Types of Cookies We Use:

• Essential Cookies: Required for the platform to function properly (e.g., maintaining your login session, processing transactions). These cookies cannot be disabled.
• Performance Cookies: Collect anonymous data about how users interact with our site (e.g., pages visited, features used) to help us improve platform performance.
• Functional Cookies: Remember your preferences (e.g., language, currency, display settings) to personalize your experience.
• Marketing Cookies: Track your activity to deliver targeted promotions and measure the effectiveness of our marketing campaigns. You can opt out of these cookies.

6.4  Managing Cookies. Most web browsers allow you to control cookies through their settings. You can configure your browser to reject all cookies, accept only certain cookies, or notify you when a cookie is set. However, disabling essential cookies may impair your ability to use certain features of the indo78 platform.

6.5  In addition to cookies, we may use web beacons, pixel tags, and similar technologies to track email open rates and user engagement.

7.1  indo78 employs industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology, the same encryption standard used by major banks worldwide.
• Encrypted Data Storage: Sensitive personal information, including passwords and payment details, is encrypted at rest using advanced cryptographic algorithms.
• Secure Servers: Personal data is stored on secure servers located in certified data centers with 24/7 physical security, biometric access controls, and redundant power and network infrastructure.
• Firewalls and Intrusion Detection: Our network perimeter is protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration tests to identify and remediate potential weaknesses.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis, and all access is logged and monitored.
• Employee Training: Our staff undergo regular training on data protection best practices and are bound by strict confidentiality agreements.

7.2  While we take all reasonable precautions to safeguard your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account. If you suspect unauthorized access, change your password immediately and contact our support team.

8.1  indo78 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

8.2  Active Accounts. Personal data associated with active accounts (accounts that have been logged into within the past 12 months) is retained indefinitely for as long as the account remains active.

8.3  Inactive Accounts. If you do not log in to your account for a continuous period of 12 months or more, your account will be classified as inactive. Inactive accounts are subject to periodic review and may be closed. Upon account closure, personal data is retained for an additional period to comply with legal obligations (typically 5 to 7 years for financial transaction records under AML regulations).

8.4  Closed Accounts. If you voluntarily close your account or we close your account for breach of our Terms & Conditions, your personal data will be retained for the minimum period required by law (typically 5 to 7 years for financial and gaming transaction records), after which it will be securely deleted or anonymized.

8.5  Marketing Data. If you opt out of marketing communications, we will retain only the minimum information necessary to honor your opt-out request (e.g., email address) and will not send you further promotional messages.

9.1  You have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most information directly via your Account settings.
• Right to Erasure (Right to Be Forgotten): You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. Please note that we may be required to retain certain data for legal or regulatory reasons even after a deletion request.
• Right to Restriction of Processing: You have the right to request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing activities.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to certain types of processing, including processing for direct marketing purposes. You can opt out of marketing emails by clicking the "Unsubscribe" link in any promotional email or by contacting our support team.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you have the right to lodge a complaint with a supervisory data protection authority in your jurisdiction.

9.2  To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Privacy Request." We will respond to your request within 30 days. You may be required to verify your identity before we process your request.

10.1  indo78 operates internationally and may transfer your personal data to countries outside of Indonesia for processing and storage. This includes transfers to jurisdictions where our service providers, payment processors, and game suppliers are located.

10.2  When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with this Policy. These safeguards may include:

• Contractual agreements with third parties that require them to protect your data to the same standard as this Policy
• Use of certified data centers that comply with international security standards
• Data processing agreements that incorporate standard contractual clauses approved by relevant data protection authorities

11.1  indo78 is an adults-only platform. Our services are available exclusively to individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21.

11.2  If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and permanently close the associated account. Any funds deposited by an underage user will be returned to the originating payment source.

11.3  Parents or guardians who believe their child has registered an account on indo78 should contact us immediately at [email protected] so we can take appropriate action.

12.1  indo78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any changes will be effective immediately upon posting to the indo78 platform.

12.2  The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how we protect your data.

12.3  Material changes to this Policy will be communicated to registered players via email or Account notification. Your continued use of the indo78 platform after any amendment constitutes acceptance of the revised Policy.

13.1  If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection and Customer Support team:

13.2  We are committed to resolving privacy-related inquiries promptly and professionally. Our support team is fluent in both English and Bahasa Indonesia and is here to assist you with any concerns.