Privacy Policy

idcoin ("we", "us", "our") is an online betting and gaming platform serving players across Indonesia. This Privacy Policy describes how we collect, use, store, and protect your personal information when you access and use the idcoin platform.

We understand that privacy is of paramount importance to our Members, and we are committed to treating your personal data with the care, confidentiality, and security that it deserves. This Policy is written to be clear and transparent, so you always know exactly what data we hold, why we hold it, and how it is used.

References in this Policy to "personal data" mean any information relating to an identified or identifiable individual, including your name, contact details, identity documents, financial information, and transactional records.

This Policy is intended to comply with our international licensing obligations and, where applicable, with relevant data protection laws governing the processing of personal information. For further information about how idcoin operates, please also review our Terms & Conditions and our Responsible Gaming policy.

idcoin collects personal data through several channels, including your registration form, ongoing use of the platform, payment processing, and communications with our support team. The categories of data we may collect include:

2.1 Registration Data. When you create an idcoin Account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to open and maintain your Account and to verify your eligibility under our Terms & Conditions.

2.2 Identity Verification Data. As part of our mandatory Know Your Customer (KYC) process, we collect copies of government-issued identity documents — principally the Indonesian national identity card (KTP — Kartu Tanda Penduduk) — as well as proof of residential address and, where required, source-of-funds documentation.

2.3 Financial Data. We collect data relating to your deposits and withdrawals, including bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in Indonesian Rupiah (IDR), and transaction timestamps. We do not store full card numbers or banking passwords.

2.4 Transactional and Wagering Data. We maintain records of all wagers, game sessions, bet outcomes, bonus usage, and balance movements associated with your Account. This data is required for account administration, dispute resolution, and regulatory reporting.

2.5 Technical Data. We automatically collect certain technical information when you access the platform, including your IP address, browser type and version, operating system, device identifiers, session duration, and pages visited. This data helps us maintain platform security and improve user experience.

2.6 Communications Data. If you contact our support team by email or live chat, we retain records of those communications, including the content of messages and any attachments you provide, to resolve queries and maintain service quality.

2.7 Marketing Preference Data. Where you have opted in to receive promotional communications from idcoin, we record your consent and preferences to ensure we only send you relevant offers and that you can update or withdraw your consent at any time.

idcoin uses your personal data only for the purposes for which it was collected or for purposes that are compatible with those original purposes. Specifically, we use your data to:

• Open, administer, and maintain your Account — including processing your registration, verifying your identity, and managing your Account Balance in Indonesian Rupiah (IDR).
• Process deposits and withdrawals — securely routing transactions via your chosen local bank or e-wallet, including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Deliver our Services — enabling you to place wagers on sports markets, play casino and slot games, participate in togel (Indonesia's traditional numbers lottery) draws, and access all other products available on the platform.
• Comply with our legal and regulatory obligations — including KYC verification, anti-money-laundering (AML) screening, and reporting requirements imposed by our international licensing authority.
• Prevent and detect fraud and abuse — monitoring Account activity for patterns consistent with fraudulent transactions, multiple-account abuse, or any of the prohibited conduct described in our Terms & Conditions.
• Provide customer support — responding to your queries, resolving disputes, and processing responsible gaming requests such as deposit limit changes or self-exclusion.
• Send promotional communications — where you have provided your consent, informing you of bonuses, seasonal promotions (such as Idul Fitri or BRI Liga 1 specials), and platform updates.
• Improve the platform — analysing aggregated, anonymized usage data to enhance the performance, security, and user experience of the idcoin platform.

idcoin processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, identity documents, and financial data is necessary to perform the contract between you and idcoin — namely, the provision of our betting and gaming Services under our Terms & Conditions.
• Legal obligation: We are required by our international gaming license to conduct KYC verification, retain transactional records, and submit regulatory reports. Processing for these purposes is mandatory and non-negotiable.
• Legitimate interests: We process technical and transactional data to detect fraud, maintain platform security, and resolve disputes. These are legitimate interests that we have carefully balanced against your privacy rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so only on the basis of your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing that took place before withdrawal.

idcoin does not sell or rent your personal data to any third party. We share your data only in the following limited and controlled circumstances:

5.1 Payment Processors. To process deposits and withdrawals, we share the minimum necessary payment data with our authorized payment partners, including local bank networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners are contractually bound to process your data only for payment purposes and to apply security standards equivalent to those maintained by idcoin.

5.2 Identity Verification Services. We may share identity document data with third-party KYC and AML screening providers for the purpose of verifying your identity and screening your name against international sanctions lists. These providers operate under strict data-processing agreements.

5.3 Game and Software Providers. Game outcome data (but not personal identifying information) is shared with our game platform providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — solely for the purpose of delivering and auditing game content.

5.4 Legal and Regulatory Authorities. idcoin will disclose personal data to law enforcement agencies, courts, or our licensing regulator where we are required to do so by law, court order, or regulatory direction. We will notify you of any such disclosure to the extent permitted by applicable law.

5.5 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of idcoin's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights will be preserved.

idcoin uses cookies and similar tracking technologies to operate the platform, enhance your user experience, and maintain the security of your Account session. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for you to log in, navigate the platform, and use core features such as the betting slip and Account Balance display. They cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting or most recently viewed markets — to provide a more personalized experience across sessions.
• Security Cookies: We use security tokens and session identifiers to protect your Account from unauthorized access, cross-site request forgery (CSRF), and other common web security threats.
• Analytics Cookies: With your consent, we use anonymized analytics cookies to understand how Members navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used exclusively to improve the platform and is never linked back to individual Member identities.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the idcoin platform. For all other cookie categories, your consent can be withdrawn at any time through your Account preferences.

idcoin implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and idcoin's servers is encrypted using industry-standard TLS protocols.
• Isolated Data Storage: Member financial data is stored in database environments that are physically and logically isolated from the general application layer, with strict access controls and comprehensive audit logging.
• Multi-Factor Authentication (MFA): idcoin's administrative systems require multi-factor authentication for all staff access to Member data. We encourage Members to use strong, unique passwords for their own Accounts.
• Regular Security Audits: Our platform undergoes scheduled penetration testing and independent security audits to identify and remediate vulnerabilities before they can be exploited.
• Intrusion Detection Systems: We deploy real-time network monitoring and intrusion detection tools that alert our security team immediately upon identification of anomalous access patterns.
• Staff Training: All idcoin staff members who handle Member data receive regular data protection and security awareness training.

While we take every reasonable precaution to secure your data, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, idcoin will notify you without undue delay and will take all appropriate steps to contain and remediate the breach.

idcoin retains your personal data for as long as your Account remains active and for a period thereafter as required by our legal and regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your Account relationship with idcoin and for a minimum of five (5) years following Account closure, in compliance with our international licensing authority's anti-money-laundering record-keeping requirements.
• Transactional and wagering records: Retained for a minimum of five (5) years from the date of each transaction, as required for regulatory audit and dispute resolution purposes.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of verification or Account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication, or longer if the communication relates to an ongoing dispute or regulatory investigation.
• Marketing consent records: Retained until you withdraw your consent, at which point your data will be removed from our marketing database within thirty (30) days.
• Technical and log data: Retained for a maximum of twelve (12) months from the date of collection, unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification. Where anonymization is not technically feasible, data will be rendered inaccessible and flagged for scheduled deletion.

As an idcoin Member, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us in writing at [email protected]. We will respond to all verified requests within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of all personal data that idcoin holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. This right does not override our mandatory regulatory retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data while a dispute regarding its accuracy or our use of it is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud detection. idcoin will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

10.1 idcoin is obligated under its international gaming license to implement a Know Your Customer (KYC) verification programme. KYC is a standard industry requirement designed to prevent fraud, money laundering, terrorist financing, and underage gambling.

10.2 The personal data and documents you submit during KYC — including your KTP, proof of address, and payment method evidence — are processed solely for the purpose of verifying your identity and are not used for any other commercial purpose.

10.3 KYC documents are shared only with idcoin's authorized third-party identity verification providers, who are bound by contractual data-processing agreements to handle your documents with the same level of security and confidentiality as idcoin itself.

10.4 All KYC documents are stored in an encrypted, access-controlled repository. Access is restricted to designated compliance personnel and, where legally required, to our licensing authority.

10.5 idcoin will not process a withdrawal request until KYC verification has been successfully completed. This is a non-negotiable requirement under our licensing obligations and serves as a fundamental protection for all Members.

idcoin operates as an internationally licensed platform. As a result, your personal data may be transferred to and processed in countries outside Indonesia where our server infrastructure, licensing authority, or third-party service providers are located.

Where such international transfers occur, idcoin ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data-processing agreements that impose security and confidentiality obligations equivalent to those applied by idcoin.
• Transfers to recipients in jurisdictions recognized as providing an adequate level of data protection.
• Application of technical security measures — including encryption in transit and at rest — for all cross-border data transfers.

If you would like further information about the international transfer mechanisms we use, please contact us at [email protected].

The idcoin platform integrates with a number of third-party service providers to deliver its full range of features. These include game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, as well as payment infrastructure partners supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.

Each of our third-party providers operates under a data-processing agreement with idcoin and is permitted to use Member data only for the specific purpose for which it was shared. idcoin regularly reviews the privacy and security practices of all service partners.

This Privacy Policy applies exclusively to data collected and processed by idcoin. We are not responsible for the privacy practices of third-party websites or services that may be referenced on the platform. We encourage you to review the privacy policies of any third-party services you access independently.

idcoin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. When we make material changes, we will notify you by posting a prominent notice on the idcoin platform and, where appropriate, by sending a direct notification to your registered email address.

The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the idcoin platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. If any proposed change is material and requires your fresh consent, we will seek that consent before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way idcoin handles your personal data, please contact our Data Protection team. We are available 24 hours a day, 7 days a week, and our team includes Indonesian-speaking agents who can assist you in your preferred language.

All privacy-related communications are handled in strict confidence by our compliance team. We do not share the content of privacy requests with any third party except as required to fulfil the request or comply with a legal obligation.