Privacy Policy

The following terms carry these meanings throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes names, identification numbers, location data, online identifiers, and data specific to a person's financial, cultural, or social identity.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, or deletion.
• "Data Controller" means idn178, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of idn178, under contract and in accordance with idn178's instructions.
• "Member" or "You" means any individual who has registered an account with idn178 and whose Personal Data is processed under this policy.
• "Platform" means the idn178 website at https://idn178.cam and any associated mobile applications or services.
• "KYC" means Know Your Customer — the identity and address verification process required by idn178's internal compliance standards.

idn178 collects the minimum Personal Data necessary to operate a secure, compliant, and high-quality online gaming platform. The categories of data we collect are set out in the table below:

idn178 does not collect sensitive special-category data (such as racial or ethnic origin, religious beliefs, health data, or biometric data for identification purposes) unless this is required for responsible gaming assessments or legally mandated compliance checks, in which case you will be informed separately.

idn178 collects Personal Data through the following channels:

• Direct submissions: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or update your account settings.
• Automated technical collection: Data gathered automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, and session logs. This collection occurs regardless of whether you are logged in.
• Transaction systems: Financial data transmitted by your bank or e-wallet provider when you initiate a deposit or withdrawal through our integrated payment gateways.
• Third-party verification providers: Identity and address data returned by KYC service providers when we submit your verification documents for automated or manual review.
• Cookies and tracking technologies: Behavioural and preference data collected through cookies, web beacons, and similar technologies as described in Clause 10 of this policy.

idn178 processes your Personal Data only for defined, legitimate purposes. The table below maps each processing activity to its purpose:

idn178 will not process your Personal Data for any purpose incompatible with those listed above without first providing you with notice and, where required, obtaining your consent.

idn178 relies on one or more of the following legal bases when processing your Personal Data:

• Contractual necessity: Processing required to perform the idn178 Member agreement, including account management, payment processing, and KYC verification. Without this processing, we cannot provide our services to you.
• Legitimate interests: Processing carried out for idn178's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests do not override your fundamental privacy rights.
• Legal obligation: Processing required to comply with applicable laws, regulations, or lawful orders from competent authorities, including requirements imposed by our international gaming licence.
• Consent: Processing for marketing communications and non-essential cookies, which we conduct only where you have given clear, informed, and freely withdrawable consent. You may withdraw consent at any time by updating your account marketing preferences or contacting support.

idn178 does not sell your Personal Data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment service providers: Your financial data is shared with the relevant Indonesian bank or e-wallet operator (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process deposits and withdrawals on your behalf. These providers act as independent data controllers for their own transaction records.
• KYC and identity verification providers: Your identity documents and verification data are shared with contracted third-party KYC service providers for the sole purpose of verifying your identity and age. These providers are bound by strict data processing agreements.
• Fraud detection and security vendors: Technical and behavioural data may be shared with contracted security vendors for the purpose of detecting and preventing fraudulent activity on the Platform.
• Game content providers: Where you play games provided by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), your game session data is transmitted to those studios' systems to facilitate gameplay. These providers do not receive your financial or identity data.
• Regulatory and law enforcement authorities: idn178 may disclose Personal Data to competent authorities where required to do so by law, court order, or in connection with the exercise of official authority. We will notify you of any such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of idn178's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

All third parties with whom idn178 shares Personal Data are required to maintain the confidentiality and security of that data and to use it only for the purposes for which it was disclosed.

idn178 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, as set out in this policy, and in compliance with our legal and regulatory obligations. Our standard retention periods are:

When the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be linked to any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical purposes.

idn178 employs a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our core security controls include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the idn178 Platform.
• Encryption at rest for sensitive Personal Data stored in our database infrastructure, including financial records and identity documents.
• Access controls and role-based permissions ensuring that only authorised idn178 personnel can access Personal Data, and only to the extent required by their role.
• Multi-factor authentication for all administrative access to idn178's internal systems.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• 24/7 security monitoring with automated alerting for anomalous access patterns or data exfiltration attempts.
• Staff training on data protection obligations and incident response procedures for all personnel who handle Personal Data.

While idn178 takes all reasonable precautions, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, idn178 will notify affected Members and relevant authorities in accordance with applicable data protection requirements.

As a Member of idn178, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond fully within 30 days.

idn178 uses cookies and similar tracking technologies on the Platform to ensure functionality, improve your experience, and support our security and analytics operations. Cookies are small text files stored on your device when you visit the Platform.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without disrupting your use of the Platform.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and display options to personalise your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how Members use the Platform, including pages visited, session duration, and navigation paths. This data helps idn178 improve the Platform experience for all users across Jakarta, Surabaya, Bandung, Bali, Medan, and other Indonesian cities.
• Marketing cookies: Used only where you have opted in to receive promotional communications. These cookies help idn178 measure the effectiveness of marketing campaigns and personalise promotional offers.

You can manage your cookie preferences through your browser settings. Note that disabling functional or analytics cookies may affect certain features of the Platform. Strictly necessary cookies cannot be disabled via browser settings while you remain logged in.

The idn178 Platform is strictly intended for individuals who are 21 years of age or older. idn178 does not knowingly collect Personal Data from anyone under the age of 21. Age is verified during the KYC process, and accounts found to belong to individuals under 21 will be suspended immediately with all associated data deleted or retained only as required by law to document the breach.

If you have reason to believe that a minor has registered an account on the idn178 Platform, please notify us immediately at [email protected] so that we can take prompt action.

idn178 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify active Members by email to the address registered on their account and display a prominent notice on the Platform for a minimum of 14 days prior to the changes taking effect.

Continued use of the idn178 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must discontinue use of the Platform and may request account closure as described in our Terms & Conditions.

The date at the top of this page reflects when the current version of this Privacy Policy was last reviewed and updated. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a concern about how idn178 handles your Personal Data, please contact us through the following channels:

• Email: [email protected] — mark the subject line "Privacy Inquiry" or "Data Rights Request" for faster routing to our data protection team.
• Live Chat: Available 24/7 through the Platform, staffed by Indonesian-speaking agents who can escalate data-related queries to the appropriate team.
• Response commitment: All privacy-related inquiries are acknowledged within 5 business days (WIB) and resolved within 30 days. Complex requests may take longer, in which case we will notify you of the extended timeframe.