idn45 Privacy Policy

idn45 ("we", "us", "our") is committed to protecting the privacy of all individuals who access or use the idn45 platform at https://idn45.org (the "Platform"). This Privacy Policy describes how idn45 collects, processes, stores, shares, and protects personal data relating to registered Players, prospective Players, and all other visitors to the Platform.

This Privacy Policy forms part of the idn45 Terms & Conditions and should be read alongside them. By registering an idn45 account or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

idn45 operates as Indonesia's premier online casino and sportsbook platform, serving English-preference players across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and beyond. All account balances, transactions, and payment processing are conducted in Indonesian Rupiah (IDR / Rp). The Platform is intended exclusively for adults aged 21 and above.

For the purposes of applicable data protection law, idn45 is the data controller responsible for your personal data collected through the Platform. As data controller, idn45 determines the purposes and means by which your personal data is processed.

If you have any questions about how your personal data is handled, or if you wish to exercise any of your data rights described in Clause 11, you may contact idn45's data protection point of contact at:

idn45 is licensed and regulated internationally. Our data protection practices are designed to meet the standards of applicable international privacy frameworks and align with the personal data protection principles increasingly adopted in the Indonesian regulatory environment.

idn45 collects personal data across several categories, depending on how you interact with the Platform. The following table summarizes the categories of personal data we collect and the context in which each category is obtained.

idn45 does not intentionally collect special-category personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) except where a KYC document incidentally contains such information — in which case it is processed solely for identity verification purposes and is not used for any other purpose.

idn45 collects personal data through the following methods:

• Direct Submission: Data you provide when completing the registration form, submitting KYC documents, initiating deposit or withdrawal transactions, or contacting our customer support team.
• Automated Collection: Technical data collected automatically as you interact with the Platform, including your IP address, device identifiers, browser configuration, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies (see Clause 10).
• Third-Party Sources: In certain circumstances, idn45 may receive data about you from third-party identity verification providers, payment processors, fraud detection services, or game studio partners (such as Evolution Gaming, Pragmatic Play, or Pocket Games Soft) where such data is necessary to deliver or secure a Platform service. Any third-party data provider used by idn45 is contractually required to confirm that they have a lawful basis for sharing your data with us.
• Publicly Available Sources: idn45 may consult publicly available databases — including sanctions lists, politically exposed persons (PEP) registers, and adverse media sources — as part of its AML and KYC compliance procedures.

idn45 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to create and manage your idn45 account, process deposits and withdrawals in IDR, deliver games and sportsbook products, and fulfil our obligations under the Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) requirements, Know Your Customer (KYC) obligations, and responses to lawful requests from regulatory authorities or law enforcement bodies.
• Legitimate Interests: Processing for purposes that are in idn45's legitimate business interests and are not overridden by your privacy rights — including fraud detection, security monitoring, Platform performance optimization, responsible gaming intervention, and internal analytics.
• Consent: Processing for marketing communications, optional platform personalization, and any other purpose for which idn45 has obtained your specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

idn45 uses the personal data it collects for the following specific purposes:

idn45 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except where such processing is necessary for fraud detection, AML screening, or responsible gaming interventions — in which case you have the right to request human review of any automated decision that affects your account.

idn45 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following circumstances, and only to the minimum extent necessary:

• Payment Service Providers: Financial data is shared with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of processing your IDR deposits and withdrawals.
• Identity Verification Providers: KYC documents and identity data may be processed by idn45's third-party identity verification partner to confirm your identity and age (21+). The verification partner is contractually bound to process your data only for verification purposes and to delete raw documents after the verification process is complete.
• Game Studio Partners: Aggregated, pseudonymized gaming session data may be shared with studio partners (including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Pocket Games Soft, and Spribe) for the purpose of game performance analysis and RTP auditing. No personally identifiable data is shared with game studios.
• Fraud Detection and AML Services: Technical and financial data may be shared with third-party fraud detection and AML screening services as part of idn45's compliance obligations. These providers operate under data processing agreements that restrict their use of your data to the specified compliance purpose.
• Regulatory Authorities and Law Enforcement: idn45 will disclose personal data to regulators, tax authorities, law enforcement agencies, or courts where required to do so by applicable law or valid legal process. idn45 will notify you of such a disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or a substantial part of idn45's business assets, personal data held by idn45 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

idn45 operates from its international licensing jurisdiction, and some of the third-party service providers we use (including cloud infrastructure providers and game studio technology partners) may process personal data on servers located outside Indonesia. Where personal data is transferred internationally, idn45 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by applicable privacy laws.

Safeguards employed by idn45 for international data transfers include:

• Standard contractual clauses or data processing agreements incorporating equivalent data protection obligations;
• Transfers only to service providers operating in jurisdictions with recognized data protection frameworks;
• Contractual restrictions on sub-processing and onward data transfers by third-party processors.

If you would like further information about the safeguards in place for any specific international data transfer, please contact us at [email protected].

idn45 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following standard retention periods apply:

When the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with any individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

idn45 uses cookies and similar tracking technologies to operate the Platform, maintain session state, detect fraud, and improve the user experience. The following categories of cookies are used on the idn45 Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login, session management, and payment security. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, time zone (WIB), and previously visited game categories — to deliver a more personalized experience. They are activated based on your usage and may be cleared via your browser settings.
• Analytics Cookies: idn45 uses internal analytics tools to collect aggregated, anonymized data about how Players navigate and interact with the Platform. This data informs decisions about Platform design and feature development. No personally identifiable data is included in analytics reports.
• Security and Fraud Detection Cookies: These cookies assist idn45 in identifying suspicious login patterns, detecting bot activity, and preventing unauthorized account access. They are a component of our security infrastructure and are strictly necessary for Platform integrity.

idn45 does not use third-party advertising cookies or behavioral tracking cookies that would enable third-party advertisers to serve targeted ads to you based on your activity on the Platform.

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will impair the functionality of the idn45 Platform and may prevent you from logging in or completing transactions.

Subject to applicable law and regulatory restrictions, you have the following rights in relation to the personal data that idn45 holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request".

The idn45 Platform is strictly intended for adults aged 21 and above. idn45 does not knowingly collect personal data from any individual under the age of 21. Registration by persons under 21 is prohibited, and idn45 employs age verification procedures as part of its KYC process to enforce this restriction.

If idn45 becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately close the associated account, delete the personal data in question (subject to any overriding legal retention obligations), and — where applicable — report the incident to the relevant regulatory authority.

idn45 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the idn45 Platform is encrypted using TLS 1.3, the current industry-standard transport layer security protocol.
• Encryption at Rest: Sensitive stored data — including KYC documents, bank account details, and account credentials — is encrypted using AES-256 at the storage layer.
• Access Controls: Access to production systems containing personal data is restricted to authorized idn45 personnel on a need-to-know basis, enforced through role-based access controls (RBAC) and multi-factor authentication (MFA).
• Intrusion Detection: idn45's infrastructure is monitored 24/7 by automated intrusion detection systems and a dedicated security operations team based in the Western Indonesia Time (WIB, UTC+7) zone.
• Regular Penetration Testing: idn45 commissions independent security audits and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Data Minimization: idn45 applies data minimization principles at the system design level, ensuring that only data strictly required for each processing purpose is collected and stored.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a material risk to your rights and freedoms, idn45 will notify you promptly in accordance with our incident response procedures and applicable breach notification obligations.

The idn45 Platform may contain references to third-party game studios (such as Evolution Gaming, Pragmatic Play, and Spribe) and payment service providers (such as BCA, BRI, OVO, and DANA). While idn45 integrates these services within the Platform, each third-party provider operates under its own privacy policy and data protection framework.

idn45 is not responsible for the privacy practices of any third-party service providers. Where your data is shared with a third-party provider for the purposes described in this Privacy Policy, that sharing is governed by a data processing agreement that requires the provider to handle your data in accordance with applicable privacy standards. However, once you leave the idn45 Platform and interact directly with a third-party provider's own interface or website, idn45 has no control over how that provider handles your data.

We recommend reviewing the privacy policies of any third-party service providers whose services you use in connection with your idn45 account.

idn45 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services available on the Platform. When a material change is made to this Policy, idn45 will:

• Update the "Last Updated" date displayed at the top of this page;
• Display a prominent notice on the idn45 Platform for a minimum of 14 days following the update; and
• Where the change materially affects how we process your personal data, send a notification to your registered email address before the updated Policy takes effect.

Your continued use of the idn45 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how idn45 protects your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which idn45 processes your personal data, please contact us through the following channel:

If you are not satisfied with idn45's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.