Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how idr89 ("we", "us", "our", or "the Platform") collects, uses, processes, stores, discloses, and protects personal information provided by users ("you", "your") of our online gaming services. This policy applies to all individuals who access the idr89 website located at https://idr89.cam, create an account, make deposits or withdrawals, place wagers, or otherwise interact with our services. By using the idr89 Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

idr89 is committed to maintaining the highest standards of data protection and privacy for all Indonesian users. We recognize that personal information is sensitive and valuable, and we employ industry-leading security measures to ensure your data remains confidential and secure. This Privacy Policy is designed to be transparent about our data practices and to provide you with clear information about your rights regarding your personal information. We comply with applicable international data protection laws and regulations, and we continuously update our practices to reflect evolving privacy standards.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account with idr89, you voluntarily provide us with personal information necessary for account registration, identity verification, and service delivery. This information includes:

• Identity Information: Full legal name as it appears on your government-issued identification documents, date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, residential address including city (Jakarta, Surabaya, Medan, Bandung, or other Indonesian location), postal code, and province.
• Account Credentials: Username, password (stored in encrypted format), and security questions and answers for account recovery purposes.
• Financial Information: Bank account details for Indonesian banks (Bank Central Asia/BCA, Bank Rakyat Indonesia/BRI, Bank Negara Indonesia/BNI, Bank Mandiri, CIMB Niaga), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records, and payment method verification details.
• Verification Documents: Copies of government-issued identification (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements dated within three months), and selfie photographs for identity confirmation as part of our KYC (Know Your Customer) compliance procedures.
• Communication Records: Content of your communications with our customer support team via live chat, email, WhatsApp, or phone, including inquiries, complaints, feedback, and support requests.

2.2 Information Collected Automatically

When you access or use the idr89 Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (desktop, mobile phone, tablet), operating system (Windows, iOS, Android), browser type and version (Chrome, Safari, Firefox, Edge), screen resolution, and device identifiers.
• Connection Information: Internet Protocol (IP) address, Internet Service Provider (ISP), approximate geographic location derived from IP address (city and region level, not precise GPS coordinates), connection timestamps, and session duration.
• Usage Data: Pages visited on the Platform, features accessed, games played, bet types and amounts, login and logout times, navigation patterns, clickstream data, referral sources (how you arrived at idr89), and time spent on each page.
• Performance Metrics: Page load times, error messages encountered, feature usage statistics, and other technical diagnostic information used to improve Platform performance and user experience.

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources to verify your identity, prevent fraud, or comply with legal obligations. These sources include payment processors that confirm transaction legitimacy, identity verification services that validate documentation authenticity, credit reference agencies (where applicable and permitted by law), and law enforcement or regulatory authorities when legally required. We only collect such third-party information when necessary and in accordance with applicable data protection laws.

3. How We Use Your Information

idr89 uses your personal information for the following purposes, all of which are necessary for providing our gaming services and maintaining a secure, compliant platform:

3.1 Account Management and Service Delivery

• Creating and maintaining your user account on the idr89 Platform
• Authenticating your identity when you log in and processing your access requests
• Processing deposits from Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay)
• Processing withdrawal requests and transferring funds to your verified payment methods
• Recording and settling sports bets, casino game wagers, and slot game play
• Calculating winnings, updating account balances, and maintaining accurate financial records
• Providing customer support and responding to your inquiries in English or Indonesian

3.2 Legal Compliance and Security

• Verifying that you are at least 21 years of age and eligible to use online gambling services
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by international gaming regulations
• Detecting and preventing fraudulent activity, unauthorized access, payment fraud, bonus abuse, and Terms of Service violations
• Monitoring for problem gambling behaviors and implementing responsible gaming interventions when necessary
• Complying with legal obligations, court orders, subpoenas, and requests from law enforcement or regulatory authorities
• Maintaining security logs and audit trails for regulatory compliance purposes

3.3 Service Improvement and Communications

• Analyzing usage patterns to improve Platform functionality, game offerings, and user experience
• Personalizing content and game recommendations based on your preferences and playing history
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts
• Delivering promotional communications about bonuses, special offers, tournaments, and new games (only if you have opted in to receive marketing materials)
• Conducting customer satisfaction surveys and gathering feedback to enhance our services
• Performing technical diagnostics, troubleshooting issues, and optimizing Platform performance

4. Data Sharing and Disclosure

idr89 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients when necessary for service delivery, legal compliance, or operational purposes:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) that facilitate deposits and withdrawals. These entities receive only the financial information necessary to process transactions.
• Game Providers: Software developers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe that power our casino games and slots. They may collect gameplay data to operate their games but are contractually prohibited from using it for other purposes.
• Identity Verification Services: Third-party KYC providers that validate the authenticity of identification documents and perform fraud screening checks.
• Cloud Hosting Providers: Technology companies that host our servers and databases, all of which employ encryption and security measures consistent with industry standards.
• Customer Support Tools: Live chat software and email service providers that enable us to communicate with you efficiently.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulatory bodies, or courts when required by law, including in response to court orders, subpoenas, or legal investigations. We may also share information when necessary to protect idr89's legal rights, prevent fraud, enforce our Terms and Conditions, or ensure the safety and security of our users and the Platform.

4.3 Business Transfers

In the event that idr89 undergoes a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

idr89 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption: All data transmissions between your device and our servers are protected using 256-bit Secure Socket Layer (SSL) encryption, the same technology used by banks and financial institutions. Passwords are stored using advanced cryptographic hashing algorithms and are never stored in plain text.
• Access Controls: Access to personal information is restricted to authorized idr89 employees and contractors who require it to perform their job functions. All personnel with access to user data undergo background checks and sign confidentiality agreements.
• Network Security: Our servers are protected by enterprise-grade firewalls, intrusion detection systems, and regular security patches. We conduct vulnerability assessments and penetration testing to identify and remediate potential security weaknesses.
• Account Protection: We offer two-factor authentication (2FA) to add an extra layer of security to your account. We recommend enabling this feature through your account settings.
• Monitoring and Incident Response: We maintain 24/7 security monitoring to detect and respond to potential security incidents. In the event of a data breach that affects your personal information, we will notify you promptly in accordance with applicable data protection laws.

While we employ industry-standard security measures, no method of electronic transmission or storage is completely secure. You acknowledge that you provide information at your own risk, and idr89 cannot guarantee absolute security.

6. Data Retention

idr89 retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information associated with active accounts is retained for the duration of your relationship with idr89 and for a minimum of seven (7) years following account closure, as required by financial recordkeeping regulations and anti-money laundering laws.
• Transaction Records: Deposit, withdrawal, and wagering records are retained for a minimum of seven (7) years to comply with financial auditing requirements and tax regulations.
• Identity Verification Documents: Copies of KYC documents (identification cards, proof of address, selfie verification) are retained for seven (7) years following account closure or the last transaction, whichever is later.
• Communication Records: Customer support interactions are retained for three (3) years for quality assurance, training, and dispute resolution purposes.
• Marketing Preferences: Records of your consent or objection to marketing communications are retained indefinitely to ensure we honor your preferences.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices.

7. Your Privacy Rights

As a user of idr89, you have certain rights regarding your personal information, subject to applicable Indonesian and international data protection laws:

7.1 Right to Access

You have the right to request confirmation of whether we process your personal information and to obtain a copy of the personal data we hold about you. You can access most of your information directly through your account dashboard. For comprehensive data access requests, please contact our privacy team at [email protected].

7.2 Right to Rectification

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update many details (email address, phone number, address) directly in your account settings. For changes to identity information, contact our support team with supporting documentation.

7.3 Right to Erasure

You may request deletion of your personal information under certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected or when you withdraw consent. However, we may be required to retain certain information to comply with legal obligations, resolve disputes, enforce agreements, or complete pending transactions.

7.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing. During the period of restriction, we will store the information but not actively use it except with your consent or for legal claims.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to our processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails or by adjusting your communication preferences in your account settings.

7.7 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within thirty (30) days of receiving your request. We may require you to verify your identity before processing requests to protect your information from unauthorized access.

8. Cookies and Tracking Technologies

idr89 uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you when you return to the site. We use the following types of cookies:

• Essential Cookies: Required for basic Platform functionality, including login authentication, session management, and security features. These cookies cannot be disabled without affecting site usability.
• Performance Cookies: Collect anonymous information about how users interact with the Platform, including pages visited, error messages, and load times. This data helps us improve site performance.
• Functionality Cookies: Remember your preferences (language selection, display settings) and provide enhanced features tailored to your usage patterns.
• Marketing Cookies: Track your browsing activity to deliver targeted advertisements and promotional content. You can opt out of these cookies through your browser settings.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may limit your ability to use certain Platform features. For more information about managing cookies, consult your browser's help documentation.

9. International Data Transfers

idr89 operates internationally, and your personal information may be transferred to, stored in, or processed in jurisdictions outside of Indonesia where our servers, service providers, or business partners are located. These jurisdictions may have data protection laws that differ from Indonesian laws. When we transfer your information internationally, we implement appropriate safeguards to ensure your data receives adequate protection, including contractual clauses, encryption standards, and compliance with applicable data transfer regulations. By using the idr89 Platform, you consent to the transfer of your information to these international locations.

10. Children's Privacy

idr89 services are strictly intended for individuals aged twenty-one (21) years and above. We do not knowingly collect, use, or solicit personal information from anyone under the age of 21, nor do we permit such individuals to create accounts or use our services. If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information from our systems. If you believe that a minor has provided personal information to idr89, please contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

idr89 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this policy and notify you through one or more of the following methods: prominent notice on the Platform homepage, email notification to your registered email address, or in-app notification when you log in. Your continued use of the idr89 Platform after changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us through the following channels:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 through the idr89 Platform
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours during business days

For serious data protection concerns or if you believe your privacy rights have been violated, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.