Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "idn33," "we," "us," "our" — the idn33 online gaming platform operated at https://idn33.pro, including all associated subdomains, mirror domains, and mobile-optimized sites.
• "Platform" — the idn33 website, any idn33-branded application, and all services, content, and tools accessible thereon.
• "You," "User," "Member," "Data Subject" — any individual who visits, accesses, registers on, or uses the idn33 Platform in any capacity.
• "Personal Data" — any information that identifies or could reasonably be used to identify you as a natural person, including but not limited to your name, date of birth, email address, phone number, residential address, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Controller" — idn33, which determines the purposes and means of processing your Personal Data.
• "Processor" — any third-party service provider that processes Personal Data on idn33's behalf under a data processing agreement.
• "KYC" — Know Your Customer; the identity and age verification procedures idn33 conducts to confirm your eligibility to use the Platform.
• "Cookies" — small text files placed on your device by the Platform to facilitate session management, analytics, and personalization.

Data We Collect

idn33 collects the following categories of Personal Data from Users of the Platform:

2.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used for age verification — idn33 requires all members to be 21 or older)
• Residential address (city, province, postal code — Indonesia-based Users typically provide Jakarta, Surabaya, Bandung, Bali, Medan, or other Indonesian city addresses)
• Email address
• Mobile phone number
• Indonesian National Identity Card (KTP) number or passport number (collected during KYC verification)

2.2 Financial Data

• Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or Bank Permata)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment channel used
• Bonus and promotional credit history

idn33 does not store full card numbers, CVV codes, or banking PINs. Payment processing is handled by certified third-party payment processors who are subject to their own PCI-DSS compliance obligations.

2.3 Account & Gaming Activity Data

• Username and account registration date
• Login timestamps and session durations
• Betting history: game type, stake amount, outcome, and settlement date across all product verticals (sportsbook, live casino, slot games, togel)
• Bonus participation and wagering progress records
• Responsible gaming settings: deposit limits, session time-out preferences, self-exclusion status
• Customer support ticket history and live chat transcripts

2.4 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Unique device identifiers
• Cookie identifiers and session tokens
• Referral source URL (e.g., the page or search query that led you to idn33)
• Pages visited on the idn33 Platform, time spent on each page, and click interactions

How We Collect Data

idn33 collects Personal Data through the following channels:

• Direct collection: When you complete the account registration form, submit a KYC verification document, initiate a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated collection: When you browse or interact with the idn33 Platform, our servers and analytics tools automatically record technical and behavioral data (IP address, device information, pages visited, session duration) via cookies, log files, and similar technologies.
• Third-party sources: idn33 may receive supplementary identity or fraud-risk data from third-party identity verification providers and payment processors used to process your transactions or verify your account.
• Customer support interactions: When you contact our support team via live chat or email, any Personal Data you voluntarily provide in that interaction is collected and retained as part of your support record.

How We Use Your Data

idn33 uses the Personal Data it collects for the following specific purposes:

Legal Basis for Processing

idn33 processes Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing is required to perform our contract with you — specifically, to maintain your account, accept bets, process financial transactions, and deliver the gaming services you have requested.
• Legal obligation: idn33 is required by the terms of its international gaming license and applicable AML regulations to collect, verify, and retain certain identity and financial data. This includes mandatory KYC verification and transaction monitoring.
• Legitimate interests: idn33 has a legitimate business interest in detecting fraud, preventing multi-accounting, ensuring Platform security, monitoring responsible gaming indicators, and improving the overall quality of the service — provided these interests do not override your fundamental privacy rights.
• Consent: Where idn33 sends you marketing communications or deploys non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

idn33 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing purposes. We may share your data with the following categories of recipient, strictly to the extent necessary for the purposes described in this policy:

6.1 Payment Processors

To process deposits and withdrawals, idn33 shares relevant financial and identity data with certified payment processors operating the BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja payment channels. Each processor is bound by data processing agreements and their own applicable financial data protection regulations.

6.2 Identity Verification Providers

idn33 uses reputable third-party KYC and AML screening services to verify your identity and assess fraud risk. These providers receive the minimum data necessary to perform the verification (typically name, date of birth, and document number) and are contractually prohibited from using your data for any other purpose.

6.3 Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft supply live game streams and RNG game engines to the idn33 Platform via technical integrations. These providers may receive aggregated, pseudonymized session data for platform integrity and game performance purposes. No directly identifying information is shared with game studios beyond what is necessary for dispute resolution on a specific game round.

6.4 Legal & Regulatory Authorities

idn33 may disclose Personal Data to relevant regulatory bodies, law enforcement agencies, or courts when required to do so by law, court order, or the directives of our gaming license authority. idn33 will notify you of such a disclosure where legally permitted to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of substantially all of idn33's assets, your Personal Data may be transferred to the acquiring entity. You will be notified in advance of any such transfer, and your rights under this policy will be preserved.

Cookies & Tracking Technologies

The idn33 Platform uses cookies and similar technologies to deliver a functional, personalized, and secure experience. The following cookie categories are in use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account authentication state, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences, such as your preferred language settings, display options, and last-visited game category. They improve convenience but are not essential to core Platform operation.
• Analytics Cookies: idn33 uses aggregated analytics data (e.g., pages visited, session duration, bounce rate) to understand how Users interact with the Platform and to prioritize improvements. Analytics data is pseudonymized and does not directly identify individual Users.
• Marketing & Attribution Cookies: Where you have given consent, idn33 may use attribution cookies to track which promotional channel brought you to the Platform. This data is used internally to measure the effectiveness of our marketing campaigns and is not shared with advertising networks.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Clearing cookies will end your current session and require you to log in again.

Data Retention

idn33 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and our gaming license obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following permanent account closure, to satisfy AML record-keeping requirements.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• KYC documents: Identity verification documents are retained for a minimum of five years following the end of the business relationship, in compliance with international gaming license and AML requirements.
• Customer support records: Support tickets and live chat transcripts are retained for three years from the date of the most recent interaction, or for the duration of any ongoing dispute, whichever is longer.
• Marketing consent records: Records of your consent to receive promotional communications are retained for the duration of the consent period plus three years, to demonstrate compliance in the event of a regulatory inquiry.
• Technical logs: Server access logs and security event logs are retained for up to 12 months, after which they are securely deleted.

When Personal Data is no longer required, idn33 deletes or anonymizes it in a secure manner. Anonymized aggregate data (which cannot be used to identify any individual) may be retained indefinitely for statistical and analytical purposes.

Data Security

idn33 implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the idn33 Platform is encrypted in transit using industry-standard TLS 1.2 or higher.
• Encryption at Rest: Sensitive Personal Data stored in idn33's databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within idn33 is restricted to employees and contractors who require it to perform their job functions. Access rights are reviewed periodically and revoked immediately upon staff departure.
• Two-Factor Authentication (2FA): idn33 recommends and supports SMS-based 2FA for all member accounts. Internal system access by idn33 personnel requires 2FA as a mandatory control.
• Penetration Testing: The idn33 Platform undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: idn33 maintains a documented data breach response plan. In the event of a breach that poses a significant risk to your rights or freedoms, idn33 will notify affected Users within a reasonable timeframe.

Your Rights

As a data subject, you hold the following rights with respect to the Personal Data that idn33 holds about you. To exercise any of these rights, contact our Data Protection contact using the details in Section 14.

• Right of Access: You have the right to request a copy of the Personal Data idn33 holds about you, together with information about how it is processed. idn33 will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any Personal Data idn33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (email, phone number, address) directly within your idn33 account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request that idn33 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to idn33's legal retention obligations — data that must be retained for AML or licensing compliance purposes cannot be erased on request.
• Right to Restriction of Processing: You may request that idn33 restrict the processing of your Personal Data in certain circumstances, such as while a dispute regarding the accuracy of that data is resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract with you and is carried out by automated means, you have the right to receive your Personal Data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on idn33's legitimate interests. idn33 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent: Where idn33 relies on your consent to process data (e.g., for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

Children's Privacy

The idn33 Platform is strictly intended for adults aged 21 years or older. idn33 does not knowingly collect Personal Data from individuals under the age of 21. If idn33 discovers that a registered member is under 21, the account will be immediately closed, any funds returned net of winnings generated during the period of underage use, and all associated Personal Data purged from our active systems (subject to any mandatory legal retention obligations).

If you are a parent or guardian and believe that a minor in your care has registered on idn33 without authorization, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving a substantiated report.

International Data Transfers

idn33 is an internationally operated gaming platform. Your Personal Data may be processed on servers and by service providers located outside of Indonesia. Where such international transfers occur, idn33 takes appropriate steps to ensure that your Personal Data receives a level of protection consistent with this Privacy Policy, including:

• Entering into data processing agreements with all third-party processors that impose data protection obligations at least equivalent to those described in this policy.
• Ensuring that any third-party processor operating in a jurisdiction without an equivalent data protection framework has agreed to standard contractual clauses that provide appropriate safeguards for your Personal Data.
• Conducting due diligence on all international payment processors (including those operating the BCA, BRI, BNI, OVO, DANA, and GoPay payment rails) to confirm their data security and compliance standards.

By registering an account and using the idn33 Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section.

Amendments to This Policy

idn33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the scope of our gaming services. When material changes are made, we will update the "Last Updated" date at the top of this page. For significant changes that materially affect your rights or the way we handle your Personal Data, idn33 will notify registered members via email or in-platform notification at least 14 days before the amended policy takes effect.

Your continued use of the idn33 Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and contact our support team to request account closure and data deletion (subject to our legal retention obligations).

Contact & Data Protection

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by idn33, please contact us using the following details:

• Email: [email protected] — use subject line "Privacy Inquiry" or "Data Subject Request" as appropriate. Email addresses are displayed as plain text and are not clickable links.
• Live Chat: Available 24 hours a day, 7 days a week via the idn33 Platform. Native Indonesian-speaking agents are available at all times alongside our English-language support team — covering WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.
• Response Time: idn33 aims to acknowledge all privacy-related inquiries within 24 hours and to provide a substantive response within 30 calendar days of receipt of a verified data subject request.

idn33 is committed to resolving privacy concerns directly and promptly. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant supervisory authority or data protection regulator in the jurisdiction applicable to your situation.