Your privacy matters to us. This Privacy Policy explains what personal data idr108 collects from members across Indonesia, how that data is used and protected, and what rights you hold in relation to your information. Please read this document in full before registering an account.
Six principles underpin how idr108 handles member data. These cards summarise the most important points — please read the full policy below for complete details.
All data transmitted between your device and the idr108 Platform is protected with 256-bit SSL/TLS encryption. Stored personal data and payment information are encrypted at rest using AES-256, the same standard used by major Indonesian banks.
idr108 does not sell, rent, or trade member personal data to third parties for their own marketing purposes. Your information is used exclusively to operate the Platform, fulfil our regulatory obligations, and deliver the services you have requested.
Identity documents submitted for KYC verification — such as your Indonesian national identity card (KTP) or passport — are stored in an isolated, access-controlled environment. Only authorised compliance personnel may view submitted documents.
idr108 uses cookies and similar tracking technologies strictly for session management, fraud prevention, and aggregate analytics. We do not deploy third-party advertising cookies. You can manage your cookie preferences through your browser settings at any time.
As a data subject, you hold the right to access, correct, and in certain circumstances request deletion of your personal data. You may also object to specific processing activities or request a portable copy of your data — all free of charge.
idr108 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and legal compliance. We do not collect data speculatively or beyond the scope of what is needed to deliver our services to you.
idr108 operates an internationally licensed online betting and casino platform serving English-preference players across Indonesia. In the course of providing our services — account registration, identity verification, payment processing, sports betting, live casino games, togel (Indonesia's traditional numbers lottery), and slot titles — we collect, store, and process certain personal data about our members.
This Privacy Policy ("Policy") explains in plain language: what personal data we collect and why; the lawful grounds on which we process that data; how long we retain it; who we share it with; and what rights you hold as a data subject. We have written this Policy in English, consistent with the overall language of the idr108 Platform.
idr108 is committed to protecting your privacy in accordance with applicable international data protection principles. Where Indonesian regulations impose additional or stricter requirements, those requirements govern. This Policy is incorporated into our Terms & Conditions by reference and should be read alongside them.
In this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, national identity number, email address, device identifiers, and transaction records. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For idr108 Platform members, idr108 is the Data Controller. |
| "Data Processor" | A third party that processes personal data on behalf of idr108 under a binding data processing agreement (e.g., a payment gateway, KYC verification provider, or cloud hosting provider). |
| "Data Subject" | The natural person to whom a specific piece of personal data relates. In the context of this Policy, this means you as a registered member or site visitor. |
| "Processing" | Any operation performed on personal data — including collection, storage, retrieval, use, disclosure, and deletion. |
| "KYC Data" | Identity and address verification documents submitted as part of the Know Your Customer process, including copies of identity cards, passports, and supporting financial documents. |
| "Platform" | The idr108 website and all associated services accessible at https://idr108.cam. |
| "Cookie" | A small text file placed on your device by the Platform for session management, fraud detection, and analytics purposes. |
idr108 collects personal data through three primary channels: information you provide directly, data generated automatically by your use of the Platform, and information received from trusted third-party verification providers. The table below summarises the categories of data we collect and the context in which each is gathered.
| Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Account registration; KYC verification |
| Contact Data | Email address, WhatsApp number, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali) | Account registration; support interactions |
| Identity Documents | Indonesian KTP scan, passport copy, selfie photograph | KYC verification process |
| Financial Data | Bank account number, e-wallet account (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR | Deposit and withdrawal processing |
| Technical Data | IP address, browser type, device model, operating system, session timestamps | Automatic collection on Platform access |
| Usage Data | Pages visited, games played, bet history, session duration, click patterns | Automatic collection during Platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, cool-down periods activated | Responsible gaming tool usage |
idr108 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data for identification purposes beyond what is strictly required by applicable KYC regulations. Where a document submitted for KYC incidentally contains sensitive data fields, that data is not separately processed or recorded.
idr108 uses the personal data we collect for the following specific purposes:
idr108 processes your personal data on one or more of the following lawful grounds, depending on the specific purpose of the processing activity:
6.1 Data Processors. idr108 engages trusted third-party service providers who process personal data on our behalf under binding data processing agreements. These processors are contractually required to handle your data only for specified purposes and in accordance with our instructions. Categories of processors include:
6.2 Legal Disclosures. idr108 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
6.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of idr108's business, member personal data may be transferred to the acquiring entity. We will notify affected members via Platform notice or email before any such transfer takes place, and your rights under this Policy will continue to apply.
6.4 No Sale of Data. idr108 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. Period.
The idr108 Platform uses cookies and similar technologies to operate correctly and to provide you with a secure, personalised experience. The table below describes the types of cookies deployed:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing — without these the Platform cannot function. | Session / up to 24 hours |
| Functional | Remembering your language preference, display settings, and recently viewed game categories. | Up to 30 days |
| Analytics | Aggregated, anonymised data on page visits, session duration, and feature engagement, used internally to improve the Platform. | Up to 12 months |
| Fraud Prevention | Device fingerprinting signals used to detect account takeover attempts, bot traffic, and multi-accounting. | Up to 90 days |
idr108 does not use third-party advertising cookies or retargeting pixels. You can control or disable non-essential cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent the Platform from functioning correctly and you will not be able to log in or place wagers.
idr108 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international gaming licence. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where deletion is not technically feasible in the short term (for example, where data exists in backup archives), idr108 will isolate the data from active processing until deletion becomes possible.
As a data subject, you hold the following rights in relation to the personal data idr108 holds about you. These rights may be subject to certain conditions and exceptions under applicable law.
You may request a copy of the personal data we hold about you, free of charge, within 30 days of your request.
You may ask us to correct inaccurate or incomplete personal data. Some corrections require re-submission of KYC documents for verification.
You may request deletion of your personal data where it is no longer needed for the original purpose. This right does not apply where retention is required by law (e.g., AML record-keeping).
You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will honour objections to marketing immediately.
You may ask us to suspend processing of your data — for example, while a rectification request is under review — without requesting deletion.
Where processing is based on your consent or contract performance, you may request a structured, machine-readable copy of your personal data for transfer to another service.
To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will acknowledge your request within 3 business days and aim to resolve it fully within 30 calendar days. Complex requests may take up to 60 days, in which case we will notify you of the extended timeline.
idr108 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:
While idr108 takes every reasonable precaution, no online system is completely immune from risk. You are responsible for keeping your account credentials confidential and for contacting support immediately if you suspect that your account has been compromised.
idr108 operates infrastructure and engages service providers in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, idr108 ensures that adequate safeguards are in place, including:
You may request further information about the safeguards applied to specific international transfers by contacting our Data Protection Officer (see Section 14).
The idr108 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the KYC process for all members before withdrawal privileges are activated.
If idr108 becomes aware that an account has been registered by or on behalf of a person under 21 years of age, the account will be immediately suspended, all wagering activity voided, and any deposited funds returned to the verified payment source. The collection and processing of personal data related to that account will be ceased and the data deleted, subject to any legal retention obligations that may apply.
Parents and guardians who believe a minor may have accessed the Platform using their details are encouraged to contact idr108 support immediately at [email protected].
idr108 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Material changes will be communicated to registered members via a notice on the Platform homepage or by email at least 7 days before the revised Policy takes effect.
The version number and effective date displayed at the top of this page indicate the current version. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree to the amended terms, you may request account closure as described in the Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a potential data security incident, please contact us through the following channels:
All privacy-related requests are treated with priority. We will acknowledge receipt of your request within 3 business days and provide a full response within 30 calendar days. For complex requests involving large volumes of data or requiring coordination across multiple processing systems, we may extend this period to 60 days, notifying you promptly if an extension is required.
Our support team is on hand 24/7 to address any data or privacy concerns. You can also review our full Terms & Conditions or visit the FAQ for quick answers.
Adults only (21+). Please gamble responsibly. Visit our Responsible Gaming page for self-limit tools and support resources.