Privacy Policy

1. Information We Collect

idr678 collects various types of personal information necessary to provide our online casino and sports betting services to Indonesian players, ensure account security, comply with legal obligations, and improve your user experience. The information we collect falls into the following categories:

1.1 Personal Identification Information

When you create an account with idr678, we collect personal identification data including your full legal name as it appears on your Indonesian national identity card (KTP Nasional), date of birth (to verify you are at least 21 years of age), residential address in Indonesia (including city, province, and postal code — Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, or other Indonesian cities), email address, mobile phone number with country code, and chosen username and password. This information is essential for account creation, identity verification, and communication.

1.2 Verification Documents (KYC)

To comply with Know Your Customer (KYC) regulations and anti-money laundering laws, we collect copies of official identification documents during the account verification process. These documents include a clear photograph or scan of your Indonesian national identity card (KTP Nasional) showing your photo, full name, date of birth, address, and signature; proof of residential address such as a recent utility bill (electricity, water, gas), bank statement, or government correspondence dated within the last three months showing your name and residential address; and a selfie photograph of you holding your KTP Nasional for identity confirmation. These documents are stored securely and used solely for verification and compliance purposes.

1.3 Financial & Transaction Information

We collect financial data necessary to process deposits, withdrawals, and transactions. This includes your bank account details (bank name such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, or Bank Permata; account number; account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account details), transaction history (dates, amounts in Indonesian Rupiah or IDR, payment methods), deposit and withdrawal records, and bonus claims and usage. We do not store your full credit card numbers or CVV codes if credit card payments are used. Payment processing is handled by secure third-party payment gateways compliant with international security standards.

1.4 Gameplay & Betting Information

To provide gaming services and ensure fair play, we collect data related to your gaming activity including game history (casino games, slots, live dealer tables played), betting records (sports bets on BRI Liga 1, English Premier League, La Liga, Champions League, badminton, e-sports; bandar bola or football betting; mix parlay or accumulator bets), togel (numbers lottery) entries, sabung ayam (cockfighting) bets, win/loss records, active session information, and responsible gaming settings (deposit limits, self-exclusion status, session time preferences). This data helps us provide personalized experiences, detect fraud, prevent problem gambling, and comply with gaming regulations.

1.5 Technical & Device Information

When you access the idr678 Platform, we automatically collect technical information including your IP address, device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version (Chrome, Firefox, Safari, Edge), screen resolution, language preferences, time zone (WIB, WITA, WIT — Western, Central, or Eastern Indonesia Time), cookies and tracking technologies, referring website URLs, and pages visited on our Platform. This information is used for security monitoring, fraud prevention, platform optimization, and analytics.

1.6 Communication Records

We retain records of all communications between you and idr678, including customer support inquiries via live chat, email correspondence, WhatsApp and Telegram messages, phone call records (if applicable), and feedback or complaint submissions. Communication records help us improve customer service quality, resolve disputes, and maintain regulatory compliance.

2. How We Use Your Information

idr678 uses your personal information for the following purposes, all of which are necessary to provide our services, comply with legal obligations, and protect the interests of our players:

Purpose	Description
Account Management	Creating, maintaining, and managing your idr678 account. Verifying your identity and age (21+ requirement). Authenticating login attempts and account access.
Transaction Processing	Processing deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other Indonesian payment methods. Processing withdrawal requests to your verified bank account or e-wallet. Monitoring transactions for fraud, money laundering, and suspicious activity.
Service Delivery	Providing access to casino games, sports betting, togel, sabung ayam, and other gaming products. Settling bets and crediting winnings. Managing bonuses, promotions, and VIP rewards programs.
Security & Fraud Prevention	Detecting and preventing fraudulent activity, bonus abuse, and collusion. Monitoring for underage gambling attempts. Protecting against unauthorized account access and cyber attacks. Complying with anti-money laundering (AML) regulations.
Customer Support	Responding to your inquiries via live chat, email, WhatsApp, and Telegram. Resolving disputes and technical issues. Providing personalized assistance in Indonesian language.
Responsible Gaming	Monitoring gameplay patterns for signs of problem gambling. Enforcing deposit limits, self-exclusion requests, and cooling-off periods. Providing access to responsible gaming tools and support resources.
Legal Compliance	Meeting our obligations under gaming licenses and regulations. Responding to lawful requests from government authorities, regulators, and law enforcement. Maintaining records as required by law.
Platform Improvement	Analyzing user behavior and preferences to improve our services. Testing new features and game offerings. Optimizing website performance and mobile experience for Indonesian users.
Marketing & Communication	Sending promotional offers, bonus announcements, and platform updates (only with your consent). Notifying you of important account changes, terms updates, or security alerts.

We do not sell, rent, or share your personal information with third parties for their marketing purposes. Your data is used exclusively for the purposes outlined in this Privacy Policy.

3. Data Sharing & Third-Party Disclosure

idr678 takes your privacy seriously and limits data sharing to essential circumstances only. We may disclose your personal information to the following categories of third parties under strict confidentiality agreements:

3.1 Payment Processors

We share necessary financial information with secure payment processors and gateways to facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors are bound by strict data protection agreements and comply with international payment security standards (PCI DSS).

3.2 Game Providers & Software Vendors

We work with licensed game providers and software vendors to deliver casino games, live dealer tables, sports betting platforms, and other gaming products. These partners may receive limited technical data (username, game session ID, bet history) necessary to provide services, but they do not receive your full personal identification or financial information.

3.3 Identity Verification Services

We use third-party KYC (Know Your Customer) verification services to authenticate your Indonesian national identity card (KTP Nasional) and confirm your identity during the account verification process. These services operate under strict data protection regulations and retain your information only for the duration necessary to complete verification.

3.4 Legal & Regulatory Authorities

We may disclose your information to gaming regulators, law enforcement agencies, government authorities, and courts when legally required to do so, including to comply with valid legal processes (subpoenas, court orders, regulatory investigations), cooperate with law enforcement in criminal investigations, protect our legal rights and property, prevent fraud or illegal activity, and enforce our Terms & Conditions.

3.5 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving idr678, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy. You will be notified of any such change in ownership or control of your personal data.

4. Data Security & Protection Measures

idr678 employs industry-leading security technologies and best practices to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our comprehensive security measures include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is protected by 256-bit Secure Socket Layer (SSL) or Transport Layer Security (TLS) encryption, the same standard used by major Indonesian banks like BCA, BRI, and Mandiri.
• Secure Data Storage: Personal information is stored on secure servers located in protected data centers with physical security controls, including access restrictions, video surveillance, and 24/7 monitoring.
• Firewall Protection: Our network infrastructure is protected by enterprise-grade firewalls that block unauthorized access attempts and prevent cyber attacks.
• Access Controls: Employee access to personal data is strictly limited on a need-to-know basis. Only authorized personnel with legitimate business reasons can access your information, and all access is logged and audited.
• Two-Factor Authentication: We offer optional two-factor authentication (2FA) for enhanced account security, requiring both your password and a verification code sent to your mobile phone.
• Regular Security Audits: We conduct regular security assessments, vulnerability scans, and penetration tests performed by independent third-party security firms to identify and address potential vulnerabilities.
• Data Minimization: We collect only the personal information necessary to provide our services and comply with legal obligations. We do not retain data longer than required.
• Employee Training: All idr678 employees undergo regular training on data protection, privacy best practices, and security protocols to ensure they handle your information responsibly.

Despite our robust security measures, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for all activity that occurs under your account. If you suspect unauthorized access to your account, contact our support team immediately via live chat, email, or WhatsApp.

5. Data Retention

idr678 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on data type and regulatory requirements:

• Account Information: Retained for the duration of your active account plus a minimum of 5 years after account closure to comply with gaming regulations and anti-money laundering laws.
• Transaction Records: Financial transaction data (deposits, withdrawals, bet history) is retained for a minimum of 7 years as required by Indonesian financial regulations and international gaming standards.
• Identity Documents: KYC verification documents (KTP Nasional, proof of address, selfie photos) are retained for 7 years after account closure or as required by law.
• Communication Records: Customer support interactions, email correspondence, and chat logs are retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Preferences: If you opt out of marketing communications, your opt-out preference is retained indefinitely to respect your choice.
• Self-Exclusion Records: If you self-exclude due to problem gambling, your self-exclusion record is retained permanently to prevent you from creating new accounts in the future, protecting your wellbeing.

After the applicable retention period expires, we securely delete or anonymize your personal information so it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and platform improvement purposes.

6. Your Privacy Rights

As an idr678 user, you have the following rights regarding your personal information. You may exercise these rights by contacting our customer support team:

6.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your data in a structured, commonly used, and machine-readable format within 30 days of your request.

6.2 Right to Rectification

If any of your personal information is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most account information directly through your account settings dashboard, or contact support for assistance.

6.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, you withdraw consent (where processing was based on consent), or you object to processing and there are no overriding legitimate grounds. Please note that we may be legally required to retain certain data (e.g., transaction records, KYC documents) for regulatory compliance even after you request deletion.

6.4 Right to Restrict Processing

You may request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store your data but not use it except with your consent or for legal claims.

6.5 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider, where technically feasible.

6.6 Right to Object

You may object to the processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications by clicking the "unsubscribe" link in our emails or adjusting your preferences in your account settings.

6.7 Right to Withdraw Consent

Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, contact our support team at [email protected] or via live chat. We will respond to your request within 30 days. We may require you to verify your identity before processing your request to protect your privacy and security.

7. Cookies & Tracking Technologies

idr678 uses cookies and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Essential Cookies: Necessary for the website to function properly. These cookies enable core functionality such as security, network management, and accessibility. They cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use the idr678 Platform, such as which pages are most frequently visited and whether users encounter error messages. This data helps us improve website performance.
• Functional Cookies: Remember your preferences (language, currency, time zone - WIB/WITA/WIT, game favorites) to provide a more personalized experience.
• Targeting/Advertising Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies track your browsing activity across websites.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of the idr678 Platform. For more information on managing cookies, consult your browser's help documentation.

8. Children's Privacy

idr678 services are strictly intended for adults 21 years of age or older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will delete that information immediately. If you believe we have collected information from someone under 21, please contact us immediately at [email protected].

9. Changes to This Privacy Policy

idr678 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the Privacy Policy was last revised. Material changes will be communicated to you via email or prominent notice on the Platform. Your continued use of idr678 services after changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy, our data practices, or your privacy rights, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 on the idr678 Platform
• WhatsApp & Telegram: Available through your account dashboard

Our Indonesian-speaking support agents are available around the clock to assist you across all time zones (WIB, WITA, WIT). We will respond to your privacy inquiry within 48 hours and work diligently to resolve any concerns.