Privacy Policy

1. Introduction

Welcome to the idr789 Privacy Policy. This document explains how idr789 ("we", "us", "our", "the Company") collects, uses, stores, protects, and shares your personal information when you access our website at https://idr789.cam, create an account, or use any of our gaming services including casino games, sports betting, live dealer games, slots, and related products.

idr789 is committed to protecting your privacy and ensuring the security of your personal data in accordance with international data protection standards and Indonesian privacy regulations. We recognize that when you provide us with personal information, you trust us to handle it responsibly and transparently. This Privacy Policy sets out our obligations and your rights regarding your personal data.

By registering an account, depositing funds, or using any idr789 service, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you must immediately cease using our services and contact us to request account closure and data deletion.

2. Information We Collect

idr789 collects various types of personal information to provide, maintain, protect, and improve our services. The categories of data we collect include:

2.1 Information You Provide Directly

When you register for an idr789 account, you voluntarily provide the following information:

• Personal Identification Data: Full legal name as it appears on your KTP (Kartu Tanda Penduduk - Indonesian Identity Card), date of birth, gender, nationality, and KTP number
• Contact Information: Email address, mobile phone number, residential address including street, city, province, and postal code
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account IDs), payment card details if applicable
• Verification Documents: Photographs or scans of your KTP, selfie holding your KTP, proof of address documents (utility bills, bank statements), and any additional documents requested during enhanced due diligence procedures
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Communication Content: Messages exchanged with Customer Support via live chat, email, or WhatsApp, including attachments and call recordings

2.2 Information Collected Automatically

When you access and use idr789 services, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, device ID)
• Connection Data: IP address, internet service provider, geographic location (country, region, city level based on IP), time zone settings
• Usage Data: Pages visited, features accessed, time spent on pages, navigation paths, links clicked, search queries entered
• Gaming Activity: Games played, bets placed, stakes wagered, winnings and losses, bonus activations and usage, tournament participation, game sessions duration
• Transaction History: Deposits (amount, method, timestamp), withdrawals (amount, method, status, timestamp), account balance changes, payment processor transaction IDs
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and similar technologies that track your interaction with our platform (see Cookie Policy section below)

2.3 Information from Third Parties

We may receive additional information about you from third-party sources including:

• Payment Processors: Transaction verification data from banks and e-wallet providers to confirm deposit and withdrawal authenticity
• Identity Verification Services: Enhanced KYC data from third-party verification providers to confirm your identity and prevent fraud
• Fraud Prevention Services: Risk assessment data, blacklist checks, and suspicious activity alerts from specialized security providers
• Game Providers: Gameplay data, RTP statistics, and session information from third-party game developers like Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming

3. How We Use Your Information

idr789 uses the collected personal information for the following legitimate business purposes:

3.1 Account Management and Service Provision

• Creating and maintaining your player account
• Processing your deposits, withdrawals, and financial transactions
• Providing access to casino games, sports betting markets, live dealer tables, and other gaming products
• Recording game results, updating your balance, and maintaining accurate transaction records
• Processing bonus activations and tracking wagering requirement progress
• Managing your VIP tier status and delivering VIP benefits

3.2 Verification and Compliance

• Verifying your identity through KTP validation and selfie verification to comply with Know Your Customer (KYC) regulations
• Confirming you are at least 21 years of age as required by Indonesian law
• Preventing underage gambling by cross-referencing birth dates with government databases
• Conducting enhanced due diligence checks on high-value transactions and suspicious activity
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
• Responding to legal requests, court orders, and regulatory inquiries

3.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, multiple accounts, bonus abuse, collusion, and other forms of cheating
• Monitoring login patterns and device fingerprints to identify unauthorized account access
• Analyzing betting patterns to detect suspicious behavior or match-fixing
• Protecting our platform from cyberattacks, DDoS attacks, and security vulnerabilities
• Investigating disputes, complaints, and irregularities
• Enforcing our Terms and Conditions and taking action against policy violations

3.4 Customer Support and Communication

• Responding to your inquiries, support tickets, and complaints via live chat, email, or WhatsApp
• Providing technical assistance with deposits, withdrawals, game issues, and account problems
• Sending you transactional emails regarding deposits, withdrawals, bonus activations, and account changes
• Notifying you of important platform updates, maintenance schedules, and policy changes
• Conducting customer satisfaction surveys to improve our services (optional participation)

3.5 Marketing and Promotions (With Your Consent)

• Sending promotional emails about new games, bonus offers, tournaments, and special events (you may opt-out at any time)
• Delivering personalized offers based on your gaming preferences and activity history
• Displaying targeted advertisements on our platform and partner websites
• Inviting you to participate in exclusive VIP events and promotions
• Sending SMS notifications about time-sensitive bonuses and promotions (with explicit consent)

3.6 Platform Improvement and Analytics

• Analyzing user behavior and preferences to optimize platform design and user experience
• Testing new features, games, and payment methods with selected user groups
• Generating aggregated statistics and reports on platform performance (anonymized data)
• Conducting research to understand gambling trends and player preferences in Indonesia
• Improving game recommendations and search functionality based on your playing history

4. Legal Basis for Processing (GDPR Compliance)

For users in jurisdictions covered by the General Data Protection Regulation (GDPR) or similar data protection laws, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing required to provide gaming services, process transactions, and fulfill our Terms and Conditions
• Legal Obligation: Processing required to comply with KYC, AML, CTF, age verification, and other legal requirements
• Legitimate Interest: Fraud prevention, security measures, platform improvement, and analytics conducted for our legitimate business interests without overriding your privacy rights
• Consent: Marketing communications, personalized advertising, and optional data processing activities conducted only with your explicit consent

5. How We Protect Your Information

idr789 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security Measures

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit Secure Sockets Layer (SSL) technology, the same level of encryption used by major Indonesian banks like BCA, BRI, BNI, and Mandiri
• Secure Data Storage: Personal information is stored on secure servers located in certified data centers with 24/7 monitoring, redundant power supplies, fire suppression systems, and physical security controls
• Password Protection: User passwords are hashed using advanced cryptographic algorithms (bcrypt or SHA-256) and never stored in plain text. We cannot retrieve your original password
• Two-Factor Authentication (2FA): Optional 2FA via SMS or authenticator app adds an extra layer of account security
• Firewall Protection: Multiple layers of firewalls protect our infrastructure from external attacks and unauthorized access attempts
• Regular Security Audits: Independent third-party security firms conduct quarterly penetration testing and vulnerability assessments
• Payment Security: We never store your full bank account details or credit card information on our servers. Payment data is tokenized and processed through PCI-DSS compliant payment gateways

5.2 Organizational Security Measures

• Access Control: Strict role-based access controls ensure that only authorized personnel can access personal data, and only to the extent necessary for their job functions
• Employee Training: All idr789 staff undergo regular data protection training and sign confidentiality agreements
• Data Minimization: We collect and retain only the personal information necessary to provide our services and comply with legal obligations
• Incident Response Plan: Documented procedures for detecting, responding to, and reporting data breaches in compliance with applicable notification requirements

5.3 Your Responsibility

While we implement strong security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password combining uppercase letters, lowercase letters, numbers, and special characters
• Never share your login credentials with anyone, including friends, family, or individuals claiming to be idr789 staff
• Log out of your account after each session, especially on shared or public devices
• Enable two-factor authentication (2FA) for enhanced security
• Regularly monitor your account activity and report any suspicious transactions immediately
• Use up-to-date antivirus software and keep your device's operating system patched
• Be cautious of phishing emails that mimic idr789 communications—always verify sender addresses

6. Data Sharing and Disclosure

idr789 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with trusted partners and service providers in the following limited circumstances:

6.1 Service Providers

We engage third-party companies to perform specific functions on our behalf, including:

• Payment Processors: To facilitate deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment methods. These processors receive only the information necessary to complete transactions
• KYC Verification Providers: To verify your identity documents and conduct background checks as required by law
• Customer Support Software: To manage support tickets, live chat, and communication history
• Cloud Hosting Providers: To store data on secure servers
• Email Service Providers: To send transactional and promotional emails (you can opt-out of marketing emails)
• Analytics Tools: To analyze platform usage and generate performance reports (Google Analytics, which anonymizes IP addresses)

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

6.2 Game Providers

When you play games from third-party developers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.), certain gameplay data such as bet amounts, game results, and session duration is shared with the game provider to facilitate gameplay and maintain game integrity. These providers operate under their own privacy policies and data protection agreements.

6.3 Legal and Regulatory Compliance

We may disclose your personal information if required by law, regulation, legal process, or governmental request, including:

• Responding to subpoenas, court orders, or legal proceedings
• Cooperating with law enforcement investigations
• Complying with AML/CTF reporting obligations to financial intelligence units
• Protecting the rights, property, or safety of idr789, our users, or the public
• Enforcing our Terms and Conditions and investigating policy violations

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor. You will be notified via email and platform announcement of any such change in ownership or control of your data.

6.5 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy if you provide explicit consent at the time of collection.

7. Data Retention

idr789 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods:

• Active Accounts: Personal data is retained for the duration your account remains active
• Closed Accounts: After voluntary account closure, personal data is retained for 7 years to comply with financial record-keeping requirements and AML regulations
• Transaction Records: Deposit, withdrawal, and betting history retained for 7 years as required by Indonesian financial regulations
• KYC Documents: Identity verification documents retained for 7 years after account closure
• Communication Records: Support chat logs and email correspondence retained for 3 years
• Marketing Data: If you opt-out of marketing communications, your email address is retained on our suppression list to ensure we don't contact you again, but all other marketing profile data is deleted within 90 days

After retention periods expire, personal data is securely deleted or anonymized so it can no longer identify you.

8. Your Privacy Rights

Indonesian data protection regulations and international standards provide you with certain rights regarding your personal information. You have the right to:

8.1 Right to Access

You may request a copy of the personal information idr789 holds about you, including account details, transaction history, KYC documents, and communication records. We will provide this information in a commonly used electronic format within 30 days of your request.

8.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update your contact information, address, and bank account details directly in your account settings. For corrections to KYC documents or legal name, contact Customer Support with supporting documentation.

8.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or you withdraw consent for processing. However, we may be legally required to retain certain information for 7 years to comply with AML regulations and financial record-keeping laws, even after account closure.

8.4 Right to Restrict Processing

You may request that we limit how we process your personal data in specific situations, such as when you contest the accuracy of the data or object to our processing.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

8.6 Right to Object

You may object to processing based on legitimate interests or direct marketing. If you object to marketing communications, we will immediately cease sending promotional emails, SMS, or other marketing materials.

8.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you may withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer at:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 through your account dashboard

We will respond to your request within 30 days. We may require additional information to verify your identity before processing requests related to personal data access, correction, or deletion.

9. Cookies and Tracking Technologies

idr789 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content.

9.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality such as login, account access, and transaction processing. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use our site, including most visited pages, error messages, and navigation patterns. Used to improve platform performance.
• Functionality Cookies: Remember your preferences (language, currency, display settings) to provide enhanced features.
• Advertising Cookies: Track your browsing activity to deliver personalized ads on idr789 and partner websites. You can opt-out through browser settings.

9.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Note that disabling cookies may affect platform functionality and prevent you from accessing certain features.

10. International Data Transfers

idr789 operates internationally and may transfer your personal data to servers located outside Indonesia, including jurisdictions that may not have equivalent data protection laws. When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses, encryption, and data processing agreements to ensure your information remains protected in accordance with this Privacy Policy.

11. Children's Privacy

idr789 services are strictly intended for individuals aged 21 and above. We do not knowingly collect personal information from anyone under the age of 21. If we discover that a user is underage, we will immediately close the account, forfeit the balance, and delete all associated personal data. Parents or guardians who believe their child has provided personal information to idr789 should contact us immediately at [email protected].

12. Changes to This Privacy Policy

idr789 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to your registered email address and prominently displayed on the platform. The "Last Updated" date at the top of this document indicates when the policy was last revised.

Your continued use of idr789 services following any updates to this Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Data Protection Team:

• Email: [email protected] (subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 through your account dashboard
• WhatsApp: +62 812-3456-7890 (9 AM - 11 PM WIB)

We are committed to resolving privacy concerns promptly and transparently. You can expect a response within 7 business days.