idx77 Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection and processing of personal data by idx77 ("Company," "we," "us," or "our") from users ("User," "you," or "your") who access or use our online gaming platform at https://idx77.cam and associated mobile applications. This policy applies to all Indonesian residents aged 21 years or older who register accounts and engage with our gaming services including casino games, sports betting, live dealer tables, and related entertainment products.

idx77 operates as a data controller responsible for determining how and why personal data is processed. We collect and process personal information necessary to provide gaming services, comply with legal obligations, prevent fraud and abuse, and enhance user experience. This policy explains what data we collect, the legal basis for processing, how we protect it, who we share it with, and your rights regarding your personal information.

2. Data We Collect

idx77 collects several categories of personal data necessary for account creation, identity verification, payment processing, regulatory compliance, and service improvement. The specific data collected includes:

2.1 Account Registration Data

When you create an idx77 account, we collect the following mandatory information:

• Personal Identifiers: Full legal name as it appears on your government-issued identification, date of birth, gender, and nationality
• Contact Information: Email address, mobile phone number, residential address including street, city, province, and postal code
• Account Credentials: Username and encrypted password (stored using industry-standard hashing algorithms)
• Security Questions: Optional security questions and answers for account recovery purposes

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and age verification requirements, we require the following documentation:

• Government-Issued ID: Clear photographs or scans of your Indonesian identity card (KTP), passport, or driver's license showing your full name, date of birth, photograph, and document number
• Proof of Address: Recent utility bills, bank statements, or government correspondence dated within the last 90 days confirming your residential address
• Payment Verification: Bank card photographs (with middle digits obscured), bank account statements, or e-wallet screenshots confirming ownership of payment methods
• Selfie Verification: Photographs of you holding your identification document for biometric comparison and fraud prevention

2.3 Financial Transaction Data

We collect and retain comprehensive records of all financial transactions conducted through your account:

• Deposit Information: Payment method used (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja), account holder name, transaction amounts in Indonesian Rupiah (IDR), transaction dates and times, and unique transaction reference numbers
• Withdrawal Records: Destination bank account or e-wallet details, beneficiary name, withdrawal amounts, processing times, and transaction status updates
• Balance History: Complete audit trail of account balance changes including deposits, withdrawals, bets placed, winnings credited, bonus activations, and fee deductions
• Payment Method Details: Last four digits of bank account numbers, bank names, e-wallet identifiers (excluding full credentials)

2.4 Gaming Activity and Behavioral Data

To provide personalized gaming experiences, detect fraud, and ensure responsible gaming, we track:

• Gaming History: Complete record of all bets placed including game type (slots, live casino, sports betting), stake amounts, outcomes (win/loss), timestamps, and net profit/loss calculations
• Session Information: Login and logout times, session durations, games accessed, bonus participation, VIP tier progression, and loyalty point accumulations
• Betting Patterns: Frequency of play, preferred game categories, average stake sizes, peak playing times, and risk profile analysis for responsible gaming monitoring
• Bonus Usage: Promotional offers claimed, wagering requirement progress, bonus conversion rates, and terms compliance status

2.5 Technical and Device Data

We automatically collect technical information about your device and how you access idx77 services:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and device unique identifiers
• Connection Data: IP address, geographic location (city-level based on IP geolocation), internet service provider, connection type (WiFi, mobile data), and network performance metrics
• Usage Analytics: Pages viewed, navigation paths, click patterns, search queries, feature usage statistics, and time spent on different sections of the platform
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies, and advertising cookies (see Section 9 for detailed cookie policy)

2.6 Communications and Support Data

When you contact idx77 customer support or communicate with us, we retain:

• Support Tickets: Complete history of customer support interactions including email correspondence, live chat transcripts, phone call recordings (with consent), and attachments submitted
• Feedback and Surveys: Responses to customer satisfaction surveys, product feedback forms, and promotional preference selections
• Marketing Consents: Records of marketing communication preferences including email subscriptions, SMS notifications, and promotional offer opt-ins/opt-outs

3. Legal Basis for Data Processing

idx77 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to provide gaming services under our Terms and Conditions, process deposits and withdrawals, settle bets, and maintain your account.
• Legal Obligation: We must process certain data to comply with gaming regulations, anti-money laundering laws, age verification requirements, tax reporting obligations, and responses to lawful government requests.
• Legitimate Interests: We process data to prevent fraud, enhance platform security, improve services, conduct analytics, manage risks, and enforce our policies, provided such processing does not override your fundamental rights.
• Consent: For marketing communications, non-essential cookies, and optional data processing activities, we obtain explicit consent which you may withdraw at any time.

4. How We Use Your Data

idx77 uses collected personal data for the following specific purposes:

4.1 Service Provision and Account Management

• Creating and maintaining your gaming account with secure authentication
• Processing deposits to credit your account balance via BCA, BRI, BNI, Mandiri, and e-wallet partners
• Processing withdrawal requests and transferring funds to your verified bank accounts or e-wallets
• Enabling gameplay across casino games, sports betting markets, live dealer tables, and other entertainment products
• Tracking bonus eligibility, wagering requirements, and VIP tier progression through our six-tier loyalty program
• Maintaining accurate transaction records and account statements

4.2 Verification and Compliance

• Verifying your identity through KYC procedures to confirm you are at least 21 years of age
• Confirming Indonesian residency and right to access online gaming services
• Preventing multiple account creation and fraudulent registration attempts
• Complying with anti-money laundering (AML) and counter-terrorist financing (CTF) regulations
• Responding to requests from regulatory authorities or law enforcement agencies
• Maintaining audit trails for gaming license compliance requirements

4.3 Fraud Prevention and Security

• Detecting and preventing unauthorized account access, payment fraud, and identity theft
• Monitoring for suspicious betting patterns including collusion, arbitrage, and bonus abuse
• Identifying use of automated betting software, bots, or unauthorized third-party tools
• Analyzing transaction patterns to detect money laundering or other financial crimes
• Protecting platform integrity against DDoS attacks, hacking attempts, and other security threats
• Enforcing Terms and Conditions through detection of policy violations

4.4 Responsible Gaming and Player Protection

• Monitoring gaming behavior for signs of problem gambling or addictive patterns
• Implementing deposit limits, loss limits, and session time restrictions when requested
• Processing self-exclusion requests and preventing access during exclusion periods
• Sending reality check notifications about session duration and net win/loss
• Providing access to responsible gaming resources and support helplines
• Restricting access for users who exhibit concerning gambling behavior

4.5 Customer Support and Communication

• Responding to customer inquiries via email, live chat, and phone support (24/7 Indonesian-language support)
• Resolving disputes regarding bets, payments, bonuses, or account issues
• Sending transactional notifications about deposits, withdrawals, bonus credits, and account changes
• Providing important service updates, policy changes, and security alerts
• Offering technical assistance with platform navigation, game rules, and payment methods

4.6 Marketing and Personalization (With Consent)

• Sending promotional emails about new games, bonuses, tournaments, and special offers tailored to Indonesian players
• Displaying personalized game recommendations based on your playing history and preferences
• Notifying you of VIP program benefits, tier upgrades, and exclusive VIP events
• Conducting customer satisfaction surveys to improve service quality
• Targeting relevant advertising through analytics and behavioral data (with cookie consent)

4.7 Platform Improvement and Analytics

• Analyzing user behavior to optimize website navigation, game placement, and user interface design
• Measuring game popularity to inform content acquisition and development decisions
• Testing new features and improvements through A/B testing and user feedback
• Identifying technical issues, bugs, and performance bottlenecks for resolution
• Conducting market research to understand Indonesian player preferences and trends

5. Data Sharing and Third-Party Disclosure

idx77 does not sell your personal data to third parties. However, we share limited data with trusted partners and service providers under strict confidentiality agreements for the following purposes:

5.1 Payment Service Providers

We share necessary transaction data with Indonesian payment processors and financial institutions including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. Shared information includes account holder name, transaction amounts, and payment method details, transmitted via secure encrypted channels.

5.2 Identity Verification Services

We engage third-party KYC verification providers to authenticate government-issued identification documents, verify addresses, and screen against sanctions lists and politically exposed persons (PEP) databases. These providers have access to uploaded identification documents and verification results only, under strict data processing agreements.

5.3 Gaming Software Providers

Game developers and live casino studio operators receive limited data (username, currency, session tokens) necessary to deliver gaming experiences. They do not receive your full personal information, contact details, or financial data.

5.4 Anti-Fraud and Security Services

We utilize specialized fraud detection services that analyze behavioral patterns, device fingerprints, and transaction data to identify suspicious activity. These services operate under confidentiality agreements and process data solely for fraud prevention purposes.

5.5 Marketing and Analytics Partners (With Consent)

With your explicit consent, we share aggregated or pseudonymized data with analytics providers (e.g., Google Analytics) and marketing platforms to measure campaign effectiveness, understand user demographics, and optimize advertising. You can withdraw consent at any time through cookie preference settings.

5.6 Legal and Regulatory Authorities

We may disclose personal data when required by law, including responses to court orders, subpoenas, government investigations, or gaming regulatory inquiries. We may also share data to protect idx77's legal rights, prevent fraud, enforce our Terms and Conditions, or protect user safety.

5.7 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to successor entities. You will be notified of any such transfer, and the acquiring party will be bound by this Privacy Policy or provide notice of policy changes.

6. Data Security Measures

idx77 implements comprehensive security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmission between your device and idx77 servers is protected by 256-bit SSL/TLS encryption, the same standard used by major Indonesian banks for online banking.
• Secure Storage: Personal data is stored on secure servers located in certified data centers with physical security controls, environmental protections, and 24/7 monitoring.
• Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data, and all access is logged for audit purposes.
• Password Protection: User passwords are hashed using bcrypt or similar cryptographic algorithms and are never stored in plain text.
• Regular Audits: We conduct regular security audits, penetration testing, and vulnerability assessments to identify and remediate potential weaknesses.
• Staff Training: All idx77 employees with data access undergo privacy and security training and are bound by confidentiality agreements.
• Incident Response: We maintain an incident response plan to quickly identify, contain, and remediate any data breaches, with mandatory user notification as required by law.

7. Data Retention Periods

idx77 retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law:

• Active Accounts: Personal data is retained for the duration of your account's active status and for a reasonable period after voluntary account closure to handle disputes or legal inquiries.
• KYC Documents: Identity verification documents are retained for at least 5 years after account closure to comply with anti-money laundering regulations and gaming license requirements.
• Financial Records: Transaction history, deposits, withdrawals, and betting records are retained for 7 years in accordance with financial record-keeping regulations and tax reporting obligations.
• Support Communications: Customer support interactions are typically retained for 3 years to resolve disputes and improve service quality.
• Marketing Data: Marketing consent records and communication history are retained until consent is withdrawn, after which data is deleted or anonymized within 30 days.
• Anonymized Analytics: Aggregated and anonymized usage data may be retained indefinitely for statistical analysis and business intelligence purposes, as it cannot identify individual users.

8. Your Privacy Rights

As an idx77 user, you have the following rights regarding your personal data:

8.1 Right of Access

You have the right to request a copy of all personal data idx77 holds about you. Contact customer support to request a data access report, which will be provided within 30 days in a structured, commonly used, and machine-readable format.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you may request corrections. You can update your email address, phone number, and address directly through your account settings. For changes to your legal name or date of birth, contact support with supporting documentation.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances, such as when data is no longer necessary for its original purpose or you withdraw consent. However, we may retain data when required by law (e.g., KYC records, financial transaction history) or to establish, exercise, or defend legal claims.

8.4 Right to Restrict Processing

You can request that we limit how we use your personal data, for example, if you contest data accuracy or object to processing. During restriction periods, we will store data but not actively process it without your consent.

8.5 Right to Data Portability

You have the right to receive your personal data in a portable format and request transfer to another service provider where technically feasible.

8.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

8.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications, cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing. Manage preferences through account settings or contact support.

Exercising Your Rights: To exercise any privacy rights, contact idx77 customer support at [email protected] with your account details and specific request. We will verify your identity before fulfilling requests and respond within 30 days.

9. Cookies and Tracking Technologies

idx77 uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that enable websites to recognize returning visitors and remember preferences.

9.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality including authentication, security, and payment processing. These cannot be disabled without impairing service access.
• Preference Cookies: Remember your language preferences, currency settings, and display options for a customized experience.
• Analytics Cookies: Track usage patterns, popular games, navigation paths, and technical performance to improve the platform (e.g., Google Analytics).
• Marketing Cookies: Enable personalized advertising and measure campaign effectiveness across websites and platforms.

9.2 Managing Cookies

You can control cookie preferences through your browser settings or our cookie consent banner displayed on first visit. Disabling certain cookies may limit platform functionality. Most browsers allow you to block third-party cookies while accepting first-party cookies.

10. International Data Transfers

idx77 primarily stores data on servers located in secure international data centers. When data is transferred outside Indonesia, we ensure appropriate safeguards are in place including standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms to protect your data in accordance with international standards.

11. Children's Privacy

idx77 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal data from minors. If we discover that a user is underage, we will immediately suspend their account, void all transactions, and delete their personal information. Parents or guardians who believe their child has provided information to idx77 should contact support immediately.

12. Changes to This Privacy Policy

idx77 may update this Privacy Policy periodically to reflect changes in data practices, legal requirements, or platform features. Material changes will be communicated via email notification, account dashboard alerts, or prominent website banners at least 30 days before taking effect. The "Last Updated" date at the top of this policy indicates the most recent revision. Continued use of idx77 services after policy updates constitutes acceptance of revised terms.

13. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

• Email: [email protected]
• Subject Line: Privacy Inquiry / Data Protection Request
• Response Time: We aim to respond to all privacy inquiries within 7 business days and fulfill data subject requests within 30 days

idx77 takes your privacy rights seriously and is committed to addressing all concerns promptly, transparently, and in accordance with applicable data protection regulations.