idc88 Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "idc88", "we", "us", "our" — refers to the operator of the idc88 platform accessible at idc88.club, together with its affiliated entities, data processors, and authorised service partners.
• "Platform" — refers to the idc88 website, mobile browser interface, all sub-pages, APIs, game lobbies, cashier system, and any software made available at idc88.club.
• "Player", "you", "your" — refers to any individual who accesses, registers on, or uses the Platform, including visitors who have not yet registered an account.
• "Personal Data" — refers to any information that identifies or could reasonably be used to identify you as an individual, including your name, email address, Indonesian mobile number, device identifiers, and payment method details.
• "Processing" — refers to any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Third-Party Service Partners" — refers to external organisations that process Personal Data on idc88's behalf, including game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe), payment processors (such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja), and KYC verification providers.
• "KYC" — refers to Know Your Customer identity verification procedures required prior to processing withdrawal requests or in response to security reviews.
• "Cookies" — refers to small text files placed on your device by the Platform to maintain session state, support security functions, and collect anonymised usage analytics.

idc88 collects Personal Data in three ways: information you provide directly, information generated automatically by your use of the Platform, and information received from Third-Party Service Partners.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

2.3 Data Received from Third Parties

idc88 may receive supplementary identity verification results from KYC partners (for example, database matches against Indonesian civil registry data), fraud-signal scores from payment processors, and game round logs from certified third-party game studios. This data is used solely to maintain platform security and regulatory compliance.

idc88 uses your Personal Data for the following specific purposes:

• Account Management: To create, maintain, and secure your idc88 account, including login authentication, password resets, and session management.
• Transaction Processing: To process deposits and withdrawals via Indonesian payment channels (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), verify payment method ownership, and maintain transaction records.
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in accordance with our obligations under international gaming regulations and anti-money-laundering (AML) standards.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, match-fixing, money laundering, and other prohibited conduct described in the idc88 Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling and to administer self-exclusion, deposit limits, and cool-off periods requested by players via our Responsible Gaming tools.
• Platform Improvement: To analyse anonymised usage data and improve the idc88 game lobby, cashier experience, mobile interface, and overall platform performance.
• Marketing Communications (with consent only): To send you promotional offers, bonus announcements, and seasonal campaigns (such as Idul Fitri, Ramadhan, Indonesian Independence Day, and Nyepi specials) where you have explicitly opted in to receive such communications.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and enforce the idc88 Terms & Conditions.

idc88 processes your Personal Data on one or more of the following legal bases:

5.1 Third-Party Service Partners

idc88 shares your Personal Data only with Third-Party Service Partners that are contractually bound to process it solely on idc88's instructions and in accordance with this Privacy Policy. Current categories of Third-Party Service Partners include:

• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe — for the delivery of game content and round-result logs. These providers receive only a pseudonymous player identifier and game session data; they do not receive your full name, KTP number, or financial data.
• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja — for the processing of deposits and withdrawals. These partners receive only the financial data necessary to execute the specific transaction.
• KYC Verification Providers: idc88 works with internationally certified KYC and identity verification vendors. These partners receive your identity documents solely for the purpose of age and identity verification and are prohibited from retaining or using your data for any other purpose.
• Analytics Providers: Anonymised and aggregated usage data may be processed by platform analytics tools to generate performance reports. No personally identifiable information is shared for analytics purposes.

5.2 Legal Disclosures

idc88 may disclose your Personal Data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by applicable law, court order, or regulatory mandate. idc88 will, where legally permissible, notify you of such a disclosure request.

idc88 uses cookies and similar tracking technologies on the Platform. The following table describes the categories of cookies in use:

You can manage or disable optional cookies at any time through your browser's privacy or cookie settings. Please note that disabling strictly necessary or security cookies will prevent the Platform from functioning correctly and may result in your session being terminated for security reasons.

idc88 retains your Personal Data only for as long as it is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply:

When a retention period expires, Personal Data is either securely deleted or anonymised in a manner that makes re-identification impossible. idc88 conducts periodic data audits to ensure retention schedules are followed.

idc88 implements a layered technical and organisational security programme to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• Transport Encryption: All data in transit between your device and the idc88 platform is encrypted using TLS 1.3 with 256-bit AES cipher suites. HTTP connections are automatically redirected to HTTPS.
• Data-at-Rest Encryption: Sensitive Personal Data stored in idc88 databases — including KYC documents and financial account details — is encrypted at rest using AES-256.
• Access Controls: Access to Personal Data is restricted to idc88 personnel and partner systems on a strict need-to-know basis. All internal access events are logged and audited.
• Intrusion Detection: idc88 operates automated intrusion detection and rate-limiting systems to identify and block suspicious access patterns in real time.
• Penetration Testing: idc88's platform infrastructure undergoes regular third-party security assessments to identify and remediate vulnerabilities.
• Employee Training: All idc88 personnel who handle Personal Data receive mandatory data protection training upon onboarding and at regular intervals thereafter.

As an idc88 player, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact idc88 at support@idc88.club. idc88 will respond to all verified requests within 30 calendar days.

• Right of Access: You may request a copy of the Personal Data idc88 holds about you, together with information about how it is processed.
• Right to Rectification: You may request that idc88 correct any inaccurate or incomplete Personal Data held about you. You may also update certain account details directly through your account settings page.
• Right to Erasure ("Right to Be Forgotten"): You may request that idc88 delete your Personal Data. Note that idc88 may be required to retain certain data to comply with AML and KYC regulatory obligations even after your account is closed; in such cases idc88 will inform you of the specific data categories and legal basis for continued retention.
• Right to Restrict Processing: You may request that idc88 restrict the processing of your Personal Data in certain circumstances, for example where you contest the accuracy of the data or where you object to processing based on legitimate interests.
• Right to Data Portability: You may request that idc88 provide your Personal Data in a structured, commonly used, and machine-readable format (e.g., CSV or JSON), where technically feasible, so that you can transfer it to another provider.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, in which case idc88 will weigh your interests against its own and cease processing if your interests override.
• Right to Withdraw Consent: Where idc88 processes your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

idc88 implements the following technical and procedural measures to prevent underage access:

• Date-of-birth confirmation is required at the point of account registration.
• KYC identity verification confirms age using government-issued identification documents (KTP, passport, or SIM) before withdrawal processing is enabled.
• Automated monitoring flags account activity patterns consistent with underage use for human review.

If idc88 discovers that Personal Data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated data will be securely deleted, and any deposits made will be returned to the originating payment method following a fraud and AML review.

Parents or guardians who believe their child has registered an account on idc88 should contact idc88 support immediately at support@idc88.club.

idc88 is operated from a jurisdiction outside Indonesia and, as a consequence, your Personal Data may be transferred to, stored in, and processed in countries other than Indonesia. These countries may have data protection laws that differ from — and in some cases offer less protection than — Indonesian law.

Where idc88 transfers Personal Data internationally, it implements appropriate safeguards to ensure that your data receives a consistent standard of protection. These safeguards include:

• Contractual data processing agreements with Third-Party Service Partners that include standard data protection clauses aligned with internationally recognised frameworks.
• Technical security measures (as described in Section 8) that apply consistently regardless of the location where data is stored or processed.
• Restriction of international data transfers to partners who have demonstrated compliance with applicable data protection standards through independent certification or audit.

By registering an idc88 account and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data in accordance with the safeguards described above.

idc88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The date of the most recent revision is displayed at the top of this page.

Where a change to this Privacy Policy is material — for example, where we introduce a new purpose for processing your Personal Data or change the categories of Third-Party Service Partners to whom data is disclosed — idc88 will provide advance notice by posting a prominent notification on the Platform and, where your email address is on file, sending a notification email to your registered address.

Your continued use of the idc88 Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised Privacy Policy, you must cease using the Platform and contact idc88 to close your account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy concern, please contact the idc88 Data Privacy team through the following channel:

• Email: support@idc88.club (plain text — not a clickable link). Please include "Privacy Request" in the subject line together with your registered account username.
• Live Chat: Available 24/7 via the chat widget on the Platform, staffed by native Indonesian-speaking agents who can assist you in English or Bahasa Indonesia.
• Response Time: All privacy-related requests are acknowledged within 24 hours WIB and resolved within 30 calendar days. Where a request is complex or involves multiple data categories, idc88 may extend this period by a further 30 days with written notice.