Privacy Policy

68idn operates the online gaming platform accessible at 68idn.bio (the "Platform"). As the data controller for personal information collected through the Platform, 68idn is committed to handling that information responsibly, transparently, and securely.

This Privacy Policy applies to all personal data collected from Members, prospective Members, and visitors to the Platform, regardless of the device or method used to access it. It should be read together with our Terms & Conditions, which govern the broader relationship between you and 68idn.

We recognize that Indonesian players — whether in Jakarta, Surabaya, Medan, Bandung, Bali, or elsewhere across the archipelago — entrust us with sensitive personal and financial information. That trust is not taken lightly. Our data practices are designed to collect only what is necessary, to store it only as long as required, and to protect it to the highest practical standard throughout its lifecycle.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

68idn collects the following categories of Personal Data from Members and Platform visitors:

3.1 Identity & Contact Data. When you register an account, we collect your full legal name, date of birth, gender, residential address (including city and province in Indonesia — for example, Jakarta, Bandung, or Surabaya), email address, and mobile phone number. This data is used to create and verify your account, communicate with you, and fulfill our KYC obligations.

3.2 Identity Verification Documents. To complete KYC verification, we may request copies of government-issued identification documents, including your Indonesian National Identity Card (KTP), passport, or driving license. We may also request a proof-of-address document or a selfie photograph alongside your ID document. These Sensitive Data items are processed exclusively for identity and age verification purposes.

3.3 Financial Data. We collect details of the payment instruments you use to deposit and withdraw funds — including your bank account number (for BCA, BRI, BNI, Mandiri, CIMB Niaga, or BSI transfers), e-wallet identifiers (for OVO, DANA, GoPay, ShopeePay, or LinkAja), and transaction history on the Platform. We do not store complete credit or debit card numbers on our servers. All financial data is processed within a PCI-DSS-compliant environment.

3.4 Account & Gaming Activity Data. We record all activity associated with your account: login timestamps and IP addresses, wager amounts and outcomes across all products (slots, live baccarat, sportsbook — including BRI Liga 1, EPL, and Champions League markets — togel (Indonesia's traditional numbers lottery) draws, and other games), bonus claims and wagering progress, session durations, and responsible gaming settings you have configured (such as deposit limits or session time controls).

3.5 Technical & Device Data. We automatically collect technical data when you access the Platform, including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and pages visited. This data is used for security monitoring, fraud detection, and improving Platform performance.

3.6 Communications Data. When you contact 68idn's support team via live chat, email, or WhatsApp, we retain records of those communications — including the content of messages, associated timestamps, and your account details at the time of contact — for quality assurance and dispute-resolution purposes.

3.7 Marketing Preferences. Where you have opted in to receive promotional communications from 68idn, we record your preferences and maintain a history of communications sent to you. You may update or withdraw your marketing consent at any time through your account settings.

68idn collects Personal Data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical and device data collected automatically via cookies, web beacons, server logs, and similar tracking technologies each time you access the Platform.
• Payment processors: Transaction confirmation data received from our integrated payment service providers — including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — when you make a deposit or withdrawal.
• Identity verification partners: Confirmation signals received from KYC service providers when they verify your identity documents against authoritative databases.
• Fraud and security services: Risk scoring signals received from third-party fraud detection tools that analyze behavioral patterns and device fingerprints to identify potentially fraudulent access attempts.
• Publicly available sources: In cases where account activity raises compliance concerns, we may consult publicly available sanction lists, politically exposed persons (PEP) databases, or adverse media sources.

We use your Personal Data for the following purposes:

68idn processes Personal Data on the following legal bases:

• Contract Performance: Processing necessary to fulfill the contractual relationship between you and 68idn as established by the Terms & Conditions — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable legal obligations, including AML regulations, KYC verification requirements, and data retention mandates imposed by our international licensing authority.
• Legitimate Interests: Processing carried out in pursuit of 68idn's legitimate business interests — including fraud prevention, security monitoring, and Platform analytics — where those interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional purposes — principally direct marketing and the use of non-essential cookies — where you have given clear, freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

68idn does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We share your data only in the following strictly controlled circumstances:

7.1 Service Providers (Data Processors). We engage trusted third-party service providers who process data strictly on our behalf and under our written instructions. These include:

• Payment service providers and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) — for transaction processing only.
• KYC and identity verification platforms — for age and identity confirmation.
• Fraud detection and cybersecurity vendors — for Platform security monitoring.
• Cloud infrastructure providers — for secure data hosting under contractual data protection obligations.
• Game software providers (Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, and others) — who receive anonymized session tokens necessary to deliver their games, but not your full identity profile.

7.2 Legal and Regulatory Disclosure. We may disclose Personal Data to law enforcement agencies, regulatory authorities, or courts when required to do so by a valid legal order or when we believe in good faith that disclosure is necessary to prevent fraud, protect the safety of any person, or protect the rights and property of 68idn.

7.3 Business Transfers. In the event that 68idn undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change to this Privacy Policy that results from it.

7.4 With Your Consent. We may share your data with additional third parties where you have given explicit prior consent for a specific purpose.

68idn retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention framework is as follows:

• Active Account Data: Retained for the duration of the account's active status and for a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or from the date the account is closed, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping requirements.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, unless the communication relates to an unresolved dispute or legal claim, in which case it is retained until the matter is fully resolved.
• Marketing Data: Retained until you withdraw consent or for a maximum of two (2) years from your last engagement with a marketing communication, whichever comes first.
• Technical & Log Data: Retained for up to thirteen (13) months for security monitoring and analytics purposes, then automatically purged.

When Personal Data is no longer required, it is securely deleted or anonymized so that it can no longer be associated with you.

68idn employs a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, and disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 68idn's servers is encrypted in transit using industry-standard TLS 1.2 or higher. Look for the padlock symbol in your browser's address bar when accessing the Platform.
• Data Encryption at Rest: Sensitive Data — including KYC documents and financial account details — is stored in encrypted form on our servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to systems containing Personal Data is restricted on a strict need-to-know basis. All staff with access to sensitive systems undergo background checks and regular security training. Multi-factor authentication is mandatory for all internal system access.
• Intrusion Detection and Monitoring: 68idn's infrastructure is continuously monitored for anomalous activity, unauthorized access attempts, and potential data breaches using automated detection tools and a dedicated security team.
• PCI-DSS Compliance: Our payment processing environment is maintained in accordance with Payment Card Industry Data Security Standards, with regular independent audits.
• Penetration Testing: We conduct regular third-party penetration testing of our Platform and infrastructure to proactively identify and remediate security vulnerabilities.

In the event of a data breach that poses a material risk to your rights or freedoms, 68idn will notify affected Members without undue delay and will take immediate steps to contain the breach and prevent recurrence.

The 68idn Platform uses cookies and similar tracking technologies (including web beacons and local storage) to ensure the Platform functions correctly, to remember your preferences, and to collect analytics data that helps us improve the Member experience.

10.1 Essential Cookies. These cookies are strictly necessary for the Platform to operate — for example, to maintain your login session, remember items in your account queue, and ensure that security mechanisms function correctly. These cookies cannot be disabled without breaking core Platform functionality.

10.2 Preference Cookies. These cookies remember choices you make — such as your preferred game display settings or notification preferences — so you do not have to reconfigure them on each visit.

10.3 Analytics Cookies. These cookies collect aggregated, anonymized data about how Members navigate and interact with the Platform. The information helps us understand which features are most used, where usability improvements are needed, and how performance can be optimized. We do not use this data to identify individual Members.

10.4 Marketing Cookies. Where you have consented, marketing cookies allow 68idn to deliver relevant promotional content on the Platform. These cookies record whether you have interacted with a promotion and help prevent the same offer from being shown repeatedly.

10.5 Managing Cookies. You can control and delete cookies through your browser settings. Please note that disabling essential cookies will impair core Platform functionality including the ability to log in and place bets. Detailed instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

As a Member of 68idn, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us at [email protected] with your registered username and a clear description of your request. We will respond within 30 days.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. Some data — such as your registered name and date of birth — can only be corrected by submitting updated KYC documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to legal retention obligations — for example, AML regulations require us to retain transaction records for five years even after account closure.
• Right to Restriction: You have the right to request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, and to opt out of direct marketing at any time. An objection to direct marketing will always be honored immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The 68idn Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from any person under the age of 21. Our registration process requires declaration of date of birth, and KYC verification is used to confirm age before withdrawal functionality is enabled.

If 68idn becomes aware that Personal Data has been collected from a person under 21 — whether through a false age declaration during registration or any other means — we will immediately suspend the account, void any associated winnings, and delete the underage individual's Personal Data as promptly as practicable while retaining only the minimum records required to comply with our legal obligations.

If you are a parent or guardian and believe that a minor in your care has registered on the 68idn Platform, please contact us immediately at [email protected]. We will treat your report with the highest priority and investigate without delay.

68idn may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. When we make material changes — meaning changes that significantly affect how we collect, use, or share your Personal Data — we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the Platform informing Members of the change and its effective date.
• Where practicable and where the change materially affects your rights, notify active Members via their registered email address.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any updated Privacy Policy has been posted constitutes your acceptance of the revised terms. If you disagree with any changes, you should discontinue use of the Platform and contact support to exercise your right to erasure subject to applicable retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how 68idn processes your Personal Data, please reach out through any of the following channels:

• Support Email: [email protected] — for written privacy requests, data subject rights submissions, or formal complaints.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the 68idn Platform. Indonesian-speaking support agents are available at all hours.
• WhatsApp: Available daily from 08:00 to 24:00 WIB (Western Indonesia Time, UTC+7).

When submitting a privacy-related request by email, please include your registered username, a clear description of your request (e.g., "Right of Access Request", "Request for Erasure"), and sufficient information to verify your identity. We aim to acknowledge all formal privacy requests within 5 business days and to provide a substantive response within 30 days.