idr88 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "idr88" / "we" / "us" / "our" — The idr88 platform and its operating entity, accessible at https://idr88.club, including all associated pages, applications, and services.
• "You" / "Member" / "User" — Any individual who visits the idr88 website, creates a member account, or uses any service offered on the platform.
• "Personal Data" — Any information that identifies or could reasonably identify a natural person, including name, national ID number, contact details, bank account information, IP address, and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" (Know Your Customer) — The identity verification process idr88 applies before processing withdrawals, which may require submission of a government-issued Indonesian national ID (KTP) and supporting financial documentation.
• "Third-Party Service Provider" — Any external organisation engaged by idr88 to assist in delivering platform services, including payment processors, game studios, fraud-detection services, and cloud infrastructure providers.
• "Cookies" — Small text files placed on your device by the idr88 platform to maintain session state, remember preferences, and collect analytical data about platform usage.

This Privacy Policy applies to all Personal Data collected by idr88 in connection with:

• Registration and maintenance of a member account on the idr88 platform.
• Use of any idr88 service, including sportsbook, live casino, slot games, togel (Indonesia's traditional numbers lottery), online poker, and scratch cards.
• All financial transactions processed through the platform, including deposits and withdrawals via Indonesian bank transfers and e-wallets.
• Communications between you and idr88 through any channel — live chat, email, WhatsApp, or in-app messaging.
• Visits to the idr88 website, regardless of whether you are a registered member.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and our Terms & Conditions on a data-related matter, this Privacy Policy prevails.

idr88 collects Personal Data in the following categories:

idr88 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond the facial photograph required for KYC identity matching.

idr88 collects Personal Data through the following channels and methods:

• Directly from you: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile.
• Automatically: When you visit or interact with the idr88 website or mobile platform, our servers and analytics systems automatically log Technical Data and Usage Data as described in Section 3.
• From third-party service providers: Our KYC verification partners may provide supplementary identity-confirmation data. Payment processors confirm the status and details of financial transactions. Fraud-detection services flag anomalous activity patterns.
• From cookies and similar technologies: As described in Section 10, idr88 uses cookies, pixel tags, and local storage objects to collect certain Technical and Usage Data passively during your browsing session.

idr88 processes your Personal Data only for clearly defined, legitimate purposes. The table below maps each processing activity to its purpose and legal basis:

Where idr88 relies on your consent as the legal basis for processing — specifically for marketing communications — you may withdraw that consent at any time by updating your preferences in the account dashboard or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

idr88 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors and banking partners: We share transaction-relevant financial data with our Indonesian banking partners (including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals.
• KYC and identity verification providers: We share identity documents and photographs with accredited third-party KYC service providers to confirm member identity and age eligibility.
• Game content providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised or pseudonymised session identifiers necessary to deliver their games within the idr88 platform. These providers do not receive your full identity or financial data.
• Fraud detection and security services: We share Technical and Usage Data with specialist fraud-prevention providers who assist in identifying and blocking suspicious account activity.
• Legal and regulatory authorities: idr88 will disclose Personal Data to competent authorities, courts, or regulators where required to do so by law, court order, or in connection with our international licensing obligations.
• Corporate transactions: In the event of a merger, acquisition, or restructuring of idr88's operating entity, Personal Data may be transferred to the successor organisation, subject to equivalent privacy protections.

idr88 operates as an internationally licensed platform. Some of our third-party service providers — including cloud hosting infrastructure providers, game content studios, and fraud-detection services — may be located outside Indonesia. As a result, your Personal Data may be transferred to and processed in countries other than Indonesia.

Where such transfers occur, idr88 ensures that appropriate safeguards are in place, which may include:

• Contractual clauses in service agreements that impose data protection obligations equivalent to those described in this Policy.
• Transfers to jurisdictions recognised as providing an adequate level of data protection under the standards applied by our licensing authority.
• Technical measures such as pseudonymisation and encryption applied to data prior to transfer.

By registering an account and using idr88's services, you acknowledge that your Personal Data may be transferred internationally in the manner described above.

idr88 applies a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your browser or device and idr88's servers is encrypted using TLS 1.2 or higher (HTTPS). Our SSL certificate status is visible in your browser's address bar at all times.
• Encryption at rest: Sensitive Personal Data, including financial account details and KYC documents, is stored in encrypted form on our secure servers.
• Access controls: Access to Personal Data within idr88's internal systems is restricted on a strict need-to-know basis. Staff with authorised access are subject to confidentiality obligations and regular security training.
• Intrusion detection: idr88 employs automated monitoring systems that flag and alert our security team to anomalous access patterns or potential breaches in real time.
• Penetration testing: Our platform undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and interests, idr88 will notify affected members without undue delay through the contact details registered on their account.

idr88 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our international licensing obligations and applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and business-intelligence purposes.

idr88 uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve your experience, and to understand how members interact with our services. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They maintain your login session, remember your language or currency preferences, and support security functions such as CSRF protection. You cannot opt out of these cookies without ceasing to use the platform.
• Analytical / Performance Cookies: These cookies collect anonymised data about how visitors use the idr88 platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used solely to improve platform performance and is not linked to individual identity.
• Functional Cookies: These cookies allow the platform to remember choices you have made — such as your preferred deposit method or notification settings — and deliver a more personalised experience on subsequent visits.
• Fraud Prevention Cookies: Certain cookies assist our fraud-detection systems in identifying unusual or suspicious activity patterns that may indicate account compromise or platform abuse.

idr88 does not use third-party advertising or retargeting cookies that track your behaviour across other websites. Our cookie usage is strictly limited to the operational, analytical, and security purposes described above.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your idr88 account and using core platform features.

As an idr88 member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team via live chat or email at [email protected] (plain text — not a clickable link).

• Right of Access: You may request a copy of the Personal Data idr88 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held on your account. For basic profile data, you can make corrections directly through the account dashboard; for identity and KYC data, please contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal retention obligations — idr88 cannot delete financial transaction records during the mandatory five-year retention period.
• Right to Restriction of Processing: You may request that idr88 limit the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You may request a copy of Personal Data you have directly provided to idr88 in a structured, commonly used, machine-readable format (such as CSV or JSON), where technically feasible.
• Right to Object: You may object to processing based on idr88's legitimate interests, including profiling for responsible gaming risk assessment. Where you object, idr88 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

idr88 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with written notice provided to you within the initial 30-day window. We may require proof of identity before processing a data rights request to prevent unauthorised disclosure.

idr88 is strictly an adults-only platform. Registration is permitted only for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from any person under the age of 21.

If idr88 discovers or is notified that a member account has been created by a person under the age of 21, we will:

• Immediately suspend the account pending investigation.
• Delete any Personal Data associated with the underage individual to the extent permitted by law.
• Refund any real-money deposits to the originating payment method where it is technically possible to do so.

If you are the parent or guardian of a person under 21 whom you believe has registered on idr88 without your knowledge, please contact our support team immediately via live chat so that we can take appropriate action.

The idr88 platform may display content or functionality delivered by third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) embedded within our interface. These providers operate under their own privacy and data-handling policies in respect of data processed directly within their game engines.

idr88 does not control and is not responsible for the privacy practices of third-party game studios or any external website or service that may be referenced in our promotional or informational content. We recommend that you review the privacy policies of any third-party service you interact with directly.

idr88 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or our platform's functionality. When material changes are made, we will notify registered members by email to the address on file, or via an in-platform notification displayed upon your next login.

The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the idr88 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We recommend bookmarking this page and reviewing it periodically. The current version of this Privacy Policy is always available at idr88.club/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to idr88's handling of your Personal Data, please contact our support and compliance team through any of the following channels:

• Live Chat: Available 24/7 directly within the idr88 platform — the fastest channel for urgent enquiries.
• WhatsApp: Available 07:00–24:00 WIB (Western Indonesia Time, UTC+7).
• Email: [email protected] — please note this address is plain text and is not a clickable link; copy and paste it into your email client. Email support is available 08:00–22:00 WIB.

When submitting a data rights request, please clearly state in your opening message: (a) the nature of your request (e.g., access, correction, erasure), (b) your registered email address and username, and (c) a description of the specific data concerned. This will help our compliance team process your request as efficiently as possible.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the idr88 Privacy Policy.