Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, either directly or indirectly. This includes name, identification number, location data, online identifier, or factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
• "Processing" refers to any operation or set of operations performed on Personal Data, whether or not by automated means. This includes collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means ids368 as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any entity that processes Personal Data on behalf of ids368, including payment processors, identity verification providers, and analytics partners.
• "Cookies" means small text files placed on your device by the Platform to store preferences, session tokens, and analytics information.
• "Account" means a registered User profile on the ids368 Platform, including all associated transaction records, game history, and communication logs.
• "Indonesian Rupiah" (IDR / Rp) means the official currency of Indonesia, used for all financial transactions on the Platform.

2. Information We Collect

ids368 collects several categories of Personal Data to provide and continuously improve our gaming services. The categories we collect are detailed below.

2.1 Information You Provide Directly

When you register an account, verify your identity, make deposits, or contact our support team, you may provide:

• Identity Information: Full legal name, date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number (including Indonesian mobile numbers with +62 country code), and residential address (including city — Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, or other Indonesian cities).
• Identification Documents: Government-issued ID (KTP, passport, SIM), proof of address (utility bills, bank statements), and selfie photographs for KYC (Know Your Customer) identity verification.
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata account numbers), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit history, and withdrawal records in IDR.
• Communication Records: Messages sent to our support team via live chat, WhatsApp, or email, including the content of those communications.

2.2 Information Collected Automatically

When you access the ids368 Platform, we automatically collect certain technical information:

• Device and Browser Information: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited, time spent on each page, click-stream data, referring URLs, search queries within the Platform, and feature interactions.
• Gaming Activity: Game history, wagers placed, bet amounts in Rp, win/loss records, game types accessed (slots, live casino, sports betting, togel), and session duration.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS-level location data unless you explicitly grant permission.
• Session Tokens and Authentication Data: Login timestamps, session identifiers, two-factor authentication events, and device fingerprints used for fraud prevention.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Identity verification providers (for KYC compliance checks).
• Payment processors and banking partners (transaction confirmation and fraud screening).
• Anti-fraud and anti-money-laundering screening databases.
• Marketing and analytics partners (aggregated, anonymised audience data).

3. How We Use Your Information

ids368 uses collected Personal Data for the following purposes. We process your data only where we have a legitimate legal basis to do so.

We do not use your Personal Data for automated decision-making that produces significant legal effects without human oversight. Where profiling is used — for example, to personalise bonus offers or identify problem-gambling patterns — a member of our team reviews flagged cases before any account-level action is taken.

4. Legal Basis for Processing

ids368 processes your Personal Data on the following legal grounds:

• Contract Performance: Processing is necessary to perform the contract between you and ids368 — specifically, to create and maintain your account, process financial transactions, and deliver gaming services.
• Legal Obligation: We are required by law and regulatory standards to collect, verify, and retain certain data, including identity documents for KYC compliance and transaction records for AML purposes.
• Legitimate Interests: We process certain data to pursue our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, to send promotional communications about new games or seasonal offers during Idul Fitri, Ramadhan, or Indonesian Independence Day — you may withdraw that consent at any time by contacting our support team or updating your account notification preferences.

5. Cookies and Tracking Technologies

ids368 uses cookies, web beacons, pixel tags, and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse user behaviour. The cookies we use fall into the following categories:

5.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They include session authentication tokens, security identifiers, and load-balancing cookies. You cannot opt out of strictly necessary cookies without disabling the Platform entirely.

5.2 Functional Cookies

Functional cookies remember your preferences, such as your preferred language, display settings, and last-visited game category. They improve your experience but are not essential for the Platform to operate. You may disable these in your browser settings, though some features may become unavailable.

5.3 Analytics Cookies

We use analytics cookies to understand how users interact with the Platform — which pages receive the most traffic, how long users spend in each section, and where users encounter difficulties. This data is aggregated and anonymised where possible. Analytics data helps us prioritise feature development and improve overall user experience.

5.4 Marketing Cookies

With your consent, marketing cookies may be used to deliver relevant promotional content, track the effectiveness of advertising campaigns, and build anonymised audience segments. You may withdraw consent for marketing cookies at any time.

6. Data Sharing and Third Parties

ids368 does not sell, rent, or trade your Personal Data to third parties for their own independent marketing purposes. We share your data only in the circumstances described below, and only to the extent necessary.

6.1 Service Providers and Data Processors

We engage trusted third-party service providers who process data on our behalf under strict contractual obligations. These include:

• Payment processors and banking partners (including integration partners for BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) to facilitate deposits and withdrawals.
• Identity verification providers to perform KYC checks and validate government-issued identity documents.
• Fraud prevention and AML screening services to identify and block potentially illegal financial activity.
• Game software providers (including Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, Habanero, and Spribe) who may receive anonymised session data to resolve game disputes or technical issues.
• Cloud hosting and infrastructure providers who store Platform data in secure data centres.
• Analytics and customer-support platforms used to measure performance and manage live-chat interactions.

All third-party processors are bound by data processing agreements that require them to handle your Personal Data securely and only for the specified purpose.

6.2 Legal and Regulatory Disclosures

ids368 may disclose your Personal Data to law enforcement agencies, regulatory authorities, courts, or other government bodies when required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosures where legally permissible.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or change of ownership, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

6.4 Aggregate and Anonymised Data

We may share aggregated, anonymised, or de-identified data that cannot reasonably be used to identify any individual with partners, researchers, or the public for purposes such as industry reporting, platform benchmarking, or responsible-gaming research.

7. Data Retention

ids368 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory standards. The general retention periods we apply are:

When retention periods expire, Personal Data is securely deleted, anonymised, or archived in a manner that prevents further identification. If you request account closure before the end of a retention period, we will restrict active processing of your data but may retain it in archive form to meet legal obligations.

8. Data Security

ids368 takes the security of your Personal Data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit using industry-standard TLS 1.2 or TLS 1.3 protocols.
• Encryption at Rest: Sensitive data stored in our databases — including identity documents, financial information, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Employees with access to sensitive data undergo background screening and receive regular data-protection training.
• Two-Factor Authentication (2FA): We offer 2FA for all User accounts and enforce it for all internal administrative systems.
• Intrusion Detection and Prevention Systems (IDPS): Automated systems continuously monitor network traffic and application activity for anomalous patterns indicative of cyberattacks or data-breach attempts.
• Regular Security Audits: Our infrastructure undergoes periodic penetration testing and independent security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: In the event of a data breach that poses a risk to your rights and freedoms, ids368 will notify affected Users and relevant authorities within 72 hours of becoming aware of the breach.

9. Your Rights and Choices

As a User of ids368, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team at [email protected].

• Right of Access: You may request a copy of all Personal Data we hold about you. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly through your account settings page.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where we no longer have a legal basis to retain it. Note that we cannot erase data we are legally required to retain (e.g., KYC documents and transaction records subject to AML retention obligations).
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict how we process your data — for example, while an inaccuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your Personal Data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

We will respond to all rights requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will inform you of the extension and the reasons for it. There is no charge for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

10. Children's Privacy

ids368 is strictly an adults-only platform. Our services are not directed at, and must not be used by, individuals under the age of 21. We do not knowingly collect Personal Data from anyone under 21 years of age. If we become aware that a minor has registered an account or provided Personal Data without verifiable parental or guardian consent, we will immediately suspend the account, delete all associated data, and refund any funds deposited to the original payment method.

If you are a parent or guardian and believe that a minor in your care has accessed the ids368 Platform or provided us with Personal Data, please contact our support team immediately at [email protected]. We will investigate the matter promptly and take appropriate action.

We strongly recommend that parents and guardians use parental-control software to restrict minors' access to gambling websites and have open conversations with young people about the risks associated with gambling.

11. Changes to This Policy

ids368 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where we hold your email address, by sending you a direct notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the revised Policy.

If a proposed change materially reduces your rights or increases our data collection scope in a way you find unacceptable, you may close your account before the change takes effect by contacting our support team.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how ids368 handles your Personal Data, please reach out to our Data Protection team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the ids368 Platform — average response time under 2 minutes.
• WhatsApp: +62 812-3456-7890

Our support team includes Indonesian-speaking agents available around the clock to assist Users across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and all other regions of Indonesia. We aim to acknowledge all privacy-related enquiries within 24 hours and to resolve them fully within 30 calendar days.