idr168Privacy Policy

What data we collect on idr168

We collect your email address and mobile phone number when you register an idr168 account. These are used for account login, password recovery, two-factor authentication (if you enable it), and customer support contact. We also collect your username and a password that you set; this password is encrypted and never stored in plain text.

During KYC verification, we ask you to upload a photo of your identity document (KTP, passport, or equivalent) and a proof of residence (utility bill, bank statement, or official letter). We store these documents securely in encrypted format for verification purposes and to comply with anti-money-laundering regulations. Once verification is complete, you can request deletion of these documents, and we will remove them within a specified period if no open transactions or compliance review is pending.

We collect transaction data: every deposit, withdrawal, and game session is logged with timestamps, amounts, payment method, and outcomes. Your balance is updated in real time. We also collect device information—your phone model, operating system version, and app version—to optimize our Android and iOS browser experience. IP addresses are logged for security and abuse prevention.

How we use your data on idr168

We use your email and phone number to send you account alerts—login confirmations, deposit confirmations, withdrawal status updates, and password-reset links. We also use these to notify you of important policy changes or security advisories. You can manage notification preferences in your account settings; however, security alerts cannot be disabled.

Your KYC documents are used solely to verify your identity and prevent fraud and money laundering. Transaction data is used to detect suspicious activity, reconcile accounts, and generate your account statement and tax documentation (if required by your jurisdiction). Game session data helps us debug technical issues, calculate your account balance accurately, and provide you with a full play history. Device and IP information are used for fraud detection and to ensure service availability.

Third-party processors and data locations

We work with payment processors to handle deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank virtual accounts (mobile banking, local payment, online payment, e-wallet). These processors receive only the minimal data needed to complete your transaction—your name, phone number, and transaction amount. We do not share your full account history or balance with payment processors.

Our servers may be located outside Indonesia. Your data may be transferred to and stored in data centers in other countries for redundancy and performance. Any such transfer complies with data protection standards. We encrypt all sensitive data in transit and at rest. Third-party service providers (cloud hosting, monitoring, and analytics) may access anonymized or aggregated data but not your personal identifiers.

Cookies

We use session cookies on our website to remember your login and keep you authenticated. These expire when you log out. We do not use persistent tracking cookies for advertising.

KYC verification

We verify your identity against your uploaded documents and cross-check against regulatory watchlists to comply with anti-money-laundering and counter-terrorism-financing rules.

Your rights and our commitments on idr168

You have the right to request access to all personal data we hold about you. You can download a copy of your account data, including transaction history and KYC documents, from your account settings. You also have the right to request corrections if any information is inaccurate—contact our support team to update your registered phone number, address, or other details.

You may request deletion of your account and associated data, subject to legal and compliance requirements. If your account has open transactions, pending withdrawals, or is under compliance review, deletion will be delayed until those matters are resolved. Historical transaction data may be retained for accounting and tax purposes even after account closure.

We undertake to protect your data with industry-standard encryption, secure authentication (optional two-factor verification), and regular security audits. We do not sell or share your personal data with advertisers or unrelated third parties. We do not use your data for profiling, automated decision-making, or targeted marketing without your explicit consent. Our support team in Jakarta, Surabaya, Bandung, and Medan is available during business hours in English and Indonesian.

Jurisdiction and policy updates on idr168

Our services are available only where local law permits. Your use of idr168 is subject to the jurisdiction where you reside and where the account is opened. We may update this privacy policy at any time; we will notify you of material changes via email or in-app notification. Continued use of idr168 after a policy update constitutes your acceptance of the new terms.

If you have concerns about how we handle your data or believe your privacy has been violated, contact our support team via in-app chat in English. For formal complaints, you may also reach out to the relevant data protection authority in your jurisdiction. We are committed to resolving privacy issues promptly.