Your privacy matters to us. This Privacy Policy explains exactly what personal data ind66 collects, why we collect it, how we use and store it, who we may share it with, and what rights you hold as a Member located in Indonesia. We encourage you to read it in full before registering an account.
ind66 treats data protection as a first-class obligation. Here is a plain-language summary of how we handle your information — full legal detail follows in the clauses below.
ind66 collects only the data strictly necessary to operate your account, process payments, verify your identity, and personalise your experience. We do not harvest data for its own sake.
All data transmitted between your device and ind66 servers is protected by TLS 1.3 encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256.
ind66 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used exclusively to deliver and improve platform services to you.
Where data must be shared — such as with KYC processors, payment gateways like BCA and OVO, or regulatory authorities — we disclose this clearly and limit sharing to the minimum necessary.
As an ind66 Member, you hold specific data rights — including the right to access, correct, and request deletion of your personal data. These rights are outlined in full in Clause 9 below.
ind66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Retention periods for each data category are specified in Clause 7 below.
ind66 ("we", "us", "our") operates the online betting and gaming platform accessible at https://ind66.bet (the "Platform"). As the data controller responsible for your personal information, we are committed to handling that information with integrity, transparency, and strict security.
This Privacy Policy ("Policy") describes the personal data we collect from you when you access or use the Platform, the purposes for which that data is processed, the conditions under which it may be shared with third parties, how long we retain it, and the rights available to you as a data subject.
This Policy applies to all Members and visitors of the Platform, regardless of how you access it — whether via desktop browser, mobile browser, or any application. By registering an ind66 account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree to the practices described herein, please discontinue use of the Platform and contact support to close your account.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with ind66.
ind66 collects the following categories of personal data. The specific data points collected in each category depend on how you interact with the Platform and which products and services you use.
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (KTP, passport, or SIM) | Registration & KYC verification |
| Contact Data | Email address, Indonesian mobile phone number, city and province of residence (e.g., Jakarta, Surabaya, Medan, Bandung, Bali) | Registration & account updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet account name (OVO, DANA, GoPay, ShopeePay, LinkAja), crypto wallet addresses (USDT, BTC), deposit and withdrawal transaction history, account balance history | Deposit, withdrawal & KYC |
| KYC Documents | Scanned or photographed copies of government-issued ID, selfie with ID (liveness check), proof of payment method ownership, source-of-funds documentation | KYC review process |
| Behavioural Data | Games played, wager amounts, bet history, session duration, responsible gaming tool usage (deposit limits, self-exclusion), bonus activity | Ongoing Platform use |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, time zone (WIB/WITA/WIT), referring URL, pages visited, session timestamps | Every Platform visit |
| Communications Data | Live chat transcripts, support email correspondence, any information voluntarily provided when contacting our team | Customer support interactions |
| Preference Data | Marketing communication preferences, notification settings, language and currency display preferences | Account settings & opt-in/out actions |
ind66 collects personal data through the following methods:
ind66 uses your personal data exclusively for the purposes listed below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent or being required to do so by law.
For each category of personal data processing described in Clause 4, ind66 relies on one or more of the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration & management | Performance of contract — necessary to create and manage your Member account |
| Identity & age verification (KYC) | Legal obligation — required under our licensing authority's AML and responsible gaming regulations |
| Payment processing | Performance of contract — necessary to execute deposit and withdrawal transactions |
| AML compliance & fraud prevention | Legal obligation & legitimate interests — protecting the Platform and its Members from financial crime |
| Responsible gaming monitoring | Legitimate interests & legal obligation — safeguarding Member wellbeing and meeting duty-of-care standards |
| Marketing communications | Consent — you must opt in; you may withdraw consent at any time (see Clause 13) |
| Platform analytics & personalisation | Legitimate interests — improving services and providing relevant content to Members |
| Legal compliance & regulatory reporting | Legal obligation — complying with applicable law and binding regulatory directions |
ind66 does not sell, rent, or trade personal data. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose.
ind66 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or our licensing conditions.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account & Identity Data | Duration of active membership + 5 years after account closure | AML regulatory requirements and potential legal claims |
| KYC Documents | Duration of active membership + 5 years after account closure | Regulatory obligation under licensing authority rules |
| Financial Transaction Records | 7 years from the date of each transaction | AML compliance and financial audit requirements |
| Behavioural & Betting Data | 3 years from the date of each activity record | Responsible gaming monitoring and dispute resolution |
| Technical & Log Data | 13 months from date of collection | Security monitoring and fraud investigation |
| Support Communications | 3 years from the date of the last communication in a thread | Dispute resolution and service quality auditing |
| Marketing Preferences | Until opt-out or account closure, whichever is earlier | Consent management |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data (such as statistical usage reports) may be retained indefinitely for platform analytics and improvement purposes.
ind66 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse Platform performance. The following categories of cookies may be set when you visit ind66:
As an ind66 Member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your registered account username and a clear description of your request.
ind66 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day window and explain the reason for the extension. ind66 does not charge a fee for exercising data rights, unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
If ind66 discovers or is notified that personal data has been collected from a person under 21 years of age, we will take the following immediate steps:
Parents, guardians, and responsible adults in Indonesia are encouraged to use parental control tools to prevent minors from accessing online gambling platforms. If you believe a minor has registered on ind66, please contact us immediately at [email protected] with relevant details and we will investigate as a priority matter.
ind66 employs a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:
ind66 operates a globally distributed infrastructure. As a result, your personal data may be processed on servers located outside Indonesia — for example, in the jurisdiction where ind66 holds its international gaming operating licence, or in data centres operated by our KYC and cloud infrastructure providers.
When personal data is transferred outside Indonesia, ind66 ensures that appropriate safeguards are in place to maintain a standard of protection equivalent to that applied domestically. These safeguards may include:
You may request details of the specific safeguards applied to cross-border transfers of your personal data by contacting [email protected].
ind66 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, seasonal promotions (such as Idul Fitri and Ramadhan special offers, or Independence Day tournaments), and platform updates. We will only do so if you have explicitly opted in to receive marketing communications during registration or via your account settings.
Opting Out: You may withdraw your marketing consent and unsubscribe from all promotional communications at any time using any of the following methods:
Opt-out requests are processed within 5 business days. Please note that withdrawing your marketing consent does not affect transactional and service communications — such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages — which are sent regardless of your marketing preference settings, as they are necessary for the operation of your account.
The ind66 Platform may contain links to third-party websites, services, or resources for informational or promotional purposes. These third-party sites are independent of ind66 and are governed by their own privacy policies and terms of service. ind66 has no control over the content, privacy practices, or data handling of any third-party site, and we accept no responsibility or liability for them.
We strongly recommend that you review the privacy policy of any third-party site you visit before submitting personal information. The presence of a link on the ind66 Platform does not constitute an endorsement of the linked site or its privacy practices.
ind66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, Platform features, or regulatory guidance from our licensing authority. All amendments will be published on this page with an updated "Last updated" date at the top of the Policy.
Where a proposed amendment materially affects your rights or the way we process your personal data, ind66 will provide advance notice via email to your registered address and/or via a prominent in-platform notification, no less than 14 calendar days before the amendment takes effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
If you do not agree to a material amendment, you must notify us at [email protected] before the effective date and, if you wish, request account closure in accordance with our Terms & Conditions. ind66 will process any such request promptly and ensure your personal data is handled in accordance with the version of this Policy in force at the time of your request.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way ind66 handles your personal data, please contact our Data Protection team using the details below. We aim to resolve all privacy-related enquiries within 10 business days.
If you are not satisfied with ind66's response to your privacy enquiry or data rights request, you have the right to escalate your complaint to the data protection supervisory authority in the jurisdiction where ind66 holds its operating licence. Details of the relevant supervisory authority will be provided upon request.
ind66 is committed to resolving all data protection concerns fairly, transparently, and in a timely manner. We treat every privacy complaint as an opportunity to improve our data protection practices for the benefit of all Members across Jakarta, Surabaya, Medan, Bandung, Bali, and the rest of Indonesia.
Now that you understand how ind66 protects your personal data, explore everything the platform has to offer — from live casino tables and premium slots to full sportsbook coverage of BRI Liga 1, EPL, and beyond.
21+ For adults aged 21 and over only. Please gamble responsibly. View our Responsible Gaming page for support tools and resources.