Privacy Policy

1. Introduction

idc188 ("we", "us", "our", "Company") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our online gaming platform and services (collectively, the "Service"). This policy applies to all users who access idc188 services, whether through desktop browsers, mobile browsers, or any other means.

By creating an account, accessing our website, or using any portion of our Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with the terms of this Privacy Policy, you should not access or use idc188 services.

This Privacy Policy is incorporated by reference into our Terms and Conditions and should be read in conjunction with that document. We recommend reviewing both documents carefully to understand your rights and obligations when using idc188.

2. Information We Collect

idc188 collects various types of personal information to provide, maintain, and improve our services. The information we collect falls into three primary categories:

2.1 Information You Provide Directly

When you register an account with idc188, you voluntarily provide us with the following personal information:

• Identity Information: Full legal name (as it appears on your government-issued identification), date of birth, gender, nationality, and residential address.
• Contact Information: Email address, mobile phone number, and preferred communication method.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery purposes.
• Financial Information: Bank account details (account number, account holder name, bank name, branch), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay numbers), payment method preferences, transaction history, deposit amounts, and withdrawal requests.
• Verification Documents: Copies of government-issued identification (Indonesian National ID / KTP, passport), proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and any additional documentation requested during the KYC (Know Your Customer) process.
• Communication Records: Content of your communications with our customer support team via Live Chat, email, WhatsApp, or in-app messaging, including any complaints, inquiries, or feedback you provide.

2.2 Information We Collect Automatically

When you access and use idc188 services, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system and version (Windows, macOS, Android, iOS), browser type and version, screen resolution, device unique identifiers, and mobile network information.
• Log Data: IP address, access times and dates, pages viewed, time spent on pages, navigation paths through our website, referring URL (the website you came from), exit URL (the page you left from), and HTTP headers.
• Geolocation Data: Approximate geographic location derived from your IP address. We use this to verify you are accessing our services from a permitted jurisdiction and to comply with regional regulations.
• Gaming Activity: Games played, bet amounts, bet types, win/loss records, gaming sessions duration, favorite games, gameplay patterns, bonus claims and usage, loyalty points earned and redeemed, and any in-game communications or actions.
• Cookies and Similar Technologies: We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, remember your preferences, and analyze usage patterns. See Section 8 for detailed information about cookies.

2.3 Information from Third-Party Sources

We may receive information about you from third-party service providers:

• Payment Processors: Transaction confirmation data, payment method validation, fraud detection alerts, and chargeback notifications from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay).
• Identity Verification Services: Results of identity checks, document authenticity verification, age verification confirmations, and sanctions screening from third-party KYC/AML service providers.
• Game Providers: Game outcome data, RTP (Return to Player) statistics, and technical performance metrics from our licensed game suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, etc.).

3. How We Use Your Information

idc188 processes your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Create and maintain your gaming account
• Verify your identity, age (21+), and residential address
• Process deposits, withdrawals, and financial transactions
• Manage your account balance, winnings, and bonus funds
• Enable you to play games, place bets, and participate in togel draws
• Track your loyalty points and VIP tier status
• Facilitate communications between you and customer support

3.2 Legal Compliance and Security

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Prevent fraudulent transactions, unauthorized account access, and payment fraud
• Detect and prevent multi-accounting, bonus abuse, collusion, and other prohibited activities
• Enforce our Terms and Conditions and protect our legal rights
• Respond to legal requests from law enforcement or regulatory authorities
• Maintain records for regulatory audit and reporting purposes
• Implement responsible gaming measures including self-exclusion, deposit limits, and age verification

3.3 Service Improvement and Personalization

• Analyze user behavior and preferences to improve our platform's usability and performance
• Recommend games based on your playing history and preferences
• Personalize promotional offers, bonuses, and communications to your interests
• Conduct market research and statistical analysis to understand player demographics and trends
• Test new features, games, and functionalities before wider release
• Optimize website performance, loading times, and mobile responsiveness

3.4 Marketing and Communications

• Send promotional emails about new games, bonuses, tournaments, and special offers (with your consent)
• Notify you about important account updates, security alerts, and policy changes
• Send transactional confirmations for deposits, withdrawals, and significant account activities
• Provide customer support responses to your inquiries and complaints
• Inform you about responsible gaming resources if concerning patterns are detected

4. Data Sharing and Disclosure

idc188 does not sell your personal information to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) process your financial transactions. We share your name, account identifiers, and transaction details necessary to complete deposits and withdrawals.
• Game Providers: Licensed suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, etc.) operate the casino games, live dealer tables, and sports betting platforms. They may collect game interaction data, session logs, and betting patterns for technical operations and compliance.
• Identity Verification Services: Third-party KYC/AML providers verify your identity documents, perform age checks, and screen against sanctions lists. We share your name, date of birth, address, ID document images, and selfie photos for verification purposes.
• Customer Support Tools: Live chat platforms, ticketing systems, and communication management tools process your support inquiries. Customer service representatives access your account information to resolve issues efficiently.
• Analytics Providers: Web analytics services help us understand user behavior, traffic sources, and platform performance. These providers may collect usage data through cookies and similar tracking technologies.
• Cloud Hosting Providers: Our website, databases, and applications are hosted on secure cloud infrastructure. Hosting providers maintain the physical and network security of servers storing your data.

All third-party service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

4.2 Legal Requirements and Protection of Rights

We may disclose your personal information when required by law or to protect our legal interests:

• Comply with subpoenas, court orders, or legal processes from Indonesian or international authorities
• Respond to lawful requests from law enforcement agencies investigating suspected criminal activity
• Cooperate with gaming regulators during audits, investigations, or licensing reviews
• Enforce our Terms and Conditions, prevent fraud, or take action against prohibited activities
• Protect the safety, rights, and property of idc188, our users, or the public
• Detect and prevent money laundering, terrorism financing, or other financial crimes

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, bankruptcy, or other corporate restructuring, your personal information may be transferred to the acquiring entity or successor. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you have provided explicit consent. For example, if you opt-in to receive marketing communications from our partners or participate in co-branded promotions with third-party sponsors.

5. Data Security Measures

idc188 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is protected using TLS/SSL encryption (minimum 256-bit). Sensitive data at rest, including passwords and financial information, is encrypted using AES-256 encryption standards.
• Secure Authentication: Passwords are hashed using industry-standard bcrypt algorithms with salt. Two-factor authentication (2FA) is available for all accounts to add an extra security layer.
• Firewall Protection: Our network infrastructure is protected by enterprise-grade firewalls that filter malicious traffic and prevent unauthorized access attempts.
• Intrusion Detection Systems: Automated systems monitor for suspicious activity, unauthorized access attempts, and potential security breaches 24/7.
• Regular Security Audits: Third-party security firms conduct annual penetration testing and vulnerability assessments to identify and address potential weaknesses.
• DDoS Protection: Distributed Denial of Service mitigation systems ensure service availability during attack attempts.

5.2 Administrative Controls

• Access Controls: Employee access to personal data is limited on a need-to-know basis. Only authorized personnel with specific job responsibilities can access customer information.
• Staff Training: All employees handling personal data receive mandatory privacy and security training, including confidentiality obligations and data protection best practices.
• Incident Response Plan: We maintain documented procedures for detecting, responding to, and recovering from data breaches, including user notification protocols.
• Vendor Management: Third-party service providers undergo security assessments before engagement and are contractually required to maintain equivalent security standards.

5.3 Physical Security

• Data centers hosting our infrastructure implement strict physical access controls, including biometric authentication, 24/7 surveillance, and environmental monitoring.
• Server rooms maintain redundant power supplies, fire suppression systems, and climate control to protect hardware and data integrity.

Important Notice: While we implement robust security measures, no system is completely impenetrable. You are responsible for maintaining the confidentiality of your login credentials. Never share your password with anyone, including idc188 staff. We will never ask for your password via email, chat, or phone. If you suspect unauthorized access to your account, contact support immediately.

6. Data Retention

idc188 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Personal information for active accounts is retained indefinitely while your account remains open and in good standing.
• Closed Accounts: After account closure, we retain your data for a minimum of 7 years to comply with financial record-keeping regulations, AML requirements, and potential dispute resolution needs.
• Transaction Records: Financial transaction history, including deposits, withdrawals, bets placed, and winnings paid, is retained for 10 years per international financial compliance standards.
• KYC Documentation: Identity verification documents (ID copies, selfies, proof of address) are retained for 7 years after account closure to satisfy regulatory audit requirements.
• Communication Records: Customer support conversations are retained for 3 years for quality assurance, training purposes, and dispute resolution.
• Marketing Data: If you unsubscribe from marketing communications, your email address is retained on a suppression list indefinitely to ensure we do not re-contact you.

After the retention period expires, personal data is securely deleted or anonymized so it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information. Indonesian residents have certain rights under applicable data protection principles:

7.1 Right to Access

You have the right to request confirmation of what personal information we hold about you and obtain a copy of that data. You can access much of your information directly through your account dashboard. For additional data, contact our support team.

7.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you can request correction. You can update your contact details, address, and communication preferences directly in your account settings. For changes to registered name or date of birth, contact support with supporting documentation.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances. However, we may be legally required to retain certain information for regulatory compliance (typically 7 years for financial and KYC records). After legal retention periods expire, data will be securely deleted upon request.

7.4 Right to Restrict Processing

You can request that we temporarily suspend processing of your personal data in specific situations, such as while we verify data accuracy or assess the legitimacy of a processing purpose.

7.5 Right to Data Portability

Where technically feasible, you can request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) to transfer to another service provider.

7.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time by unsubscribing from promotional emails or contacting support. You may also object to processing based on legitimate interests, though we may demonstrate compelling grounds to continue processing.

7.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you can withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights: To exercise any of these rights, contact us at the email address provided in Section 11. We will respond to verified requests within 30 days. We may request additional information to verify your identity before processing requests.

8. Cookies and Tracking Technologies

idc188 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience and analyze platform usage. By using our Service, you consent to our use of cookies as described in this section.

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They contain information about your preferences, session state, and browsing behavior. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain until they expire or you delete them).

8.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly. These enable account login, secure transactions, session management, and load balancing. You cannot opt-out of essential cookies.
• Performance Cookies: Collect anonymous information about how you use our website, including pages visited, time spent, and navigation paths. This helps us optimize site performance and identify technical issues.
• Functionality Cookies: Remember your preferences such as language settings, timezone, game display options, and notification preferences to personalize your experience.
• Targeting/Advertising Cookies: Track your activity across websites to deliver personalized advertisements and measure campaign effectiveness. These are used by third-party advertising partners.

8.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may limit your ability to use certain features of idc188, including account login and game functionality.

To manage cookies, consult your browser's help section: Chrome, Firefox, Safari, and Edge all provide cookie management options in their settings menus.

9. International Data Transfers

idc188 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. Some of these countries may not offer the same level of data protection as Indonesian law.

When we transfer data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses approved by international data protection authorities
• Ensuring third-party service providers implement equivalent security measures
• Data encryption during transmission and at rest
• Limiting data transfers to what is strictly necessary for service delivery

10. Changes to This Privacy Policy

idc188 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational needs. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on our website homepage

Your continued use of idc188 services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this page periodically to stay informed about how we protect your information.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

• Email: [email protected] (plain text, not clickable)
• Live Chat: Available 24/7 via the chat icon on our website (select "Privacy & Data Protection" topic)
• WhatsApp: +62 812-3456-7890 (plain text, not clickable)
• Response Time: We aim to respond to privacy inquiries within 5 business days