Privacy Policy — 62idn

In this Privacy Policy, the following terms have the meanings set out below.

62idn collects Personal Data in the following categories depending on how you interact with the Platform:

2.1 Registration Data. When you create a 62idn Account, we collect your full legal name, date of birth, Indonesian mobile telephone number, email address, chosen username, and — once KYC is initiated — a copy of a government-issued identity document (Indonesian National Identity Card / KTP, Passport, or Driving Licence / SIM).

2.2 Financial Data. To process deposits and withdrawals via local Indonesian payment channels — including BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — we collect bank account numbers, e-wallet identifiers, transaction reference numbers, and deposit/withdrawal amounts denominated in Indonesian Rupiah (IDR / Rp). We do not store full card numbers or bank PINs; these are handled directly by our licensed payment processor partners.

2.3 Technical Data. We automatically record IP addresses, browser type and version, device type and operating system, screen resolution, referring URLs, session duration, pages viewed, and clickstream data each time you access the Platform. This data is used for security, fraud prevention, and platform performance optimisation.

2.4 Gameplay Data. We retain complete records of all bets placed, game sessions, wager amounts, winnings, bonus claims, and wagering requirement progress associated with your Account. This data is essential for the accurate settlement of bets, the administration of promotions, and the detection of irregular activity.

2.5 Communications Data. When you contact 62idn via live chat, email at [email protected], or any other support channel, we retain records of the content and metadata of those communications in order to resolve queries effectively and improve service quality.

2.6 Responsible Gaming Data. If you make use of any of 62idn's responsible gaming tools — including deposit limits, session time controls, cool-off periods, or self-exclusion — we record those elections and their effective dates. This data is handled with the highest level of confidentiality and is used exclusively to enforce your chosen restrictions.

3.1 Directly from You. The majority of Personal Data we hold is provided by you directly — during registration, when completing KYC verification, when making deposits or requesting withdrawals, when setting responsible gaming limits, and when contacting our support team.

3.2 Automatically via the Platform. Technical Data (as described in Clause 2.3) is collected automatically through server logs, cookies, and similar tracking technologies each time you visit or use the Platform. See Clause 9 for full details of our cookie practices.

3.3 From Third Parties. In limited circumstances, we receive Personal Data from third-party service providers engaged to assist with identity verification (KYC), fraud screening, and payment processing. Data received from these providers is used solely for the purpose for which it was shared and is handled in accordance with this Policy.

3.4 From Publicly Available Sources. Where permitted and relevant to fraud prevention or AML compliance, 62idn may supplement Account data with information from publicly available sources such as official government identity registers.

62idn processes your Personal Data for the following defined purposes only:

62idn relies on the following lawful bases to process your Personal Data:

• Contractual Necessity: Processing required to perform the contract between you and 62idn — principally, operating your Account, settling bets, and processing payments.
• Legitimate Interests: Processing necessary for 62idn's legitimate business interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: Processing required to comply with applicable licensing conditions, AML obligations, and other legal requirements.
• Consent: Processing for optional marketing communications (email newsletters, promotional SMS). You may withdraw consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6.1 Service Providers. 62idn shares Personal Data with carefully selected third-party Data Processors who assist in delivering Platform services. These include:

• Payment Processors: Licensed payment gateway providers that facilitate transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• KYC & Identity Verification Providers: Third-party services that assist with document authentication and age verification against Indonesian KTP records.
• Game Studios: Licensed content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — that operate game servers and retain session logs necessary for game integrity and RTP auditing.
• Cloud & Hosting Infrastructure: Secure data centre and cloud providers that store Platform data in geographically resilient, encrypted environments.
• Analytics Providers: Privacy-compliant analytics tools that process anonymised or pseudonymised usage data to help us understand and improve the Platform.

All Data Processors are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to 62idn.

6.2 Legal Disclosures. 62idn may disclose Personal Data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or the conditions of 62idn's international gaming licence. In such cases, 62idn will disclose only the minimum data necessary and will notify you of such disclosure where legally permitted.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or a material portion of 62idn's assets, Personal Data held by 62idn may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

6.4 No Data Sales. 62idn does not sell, rent, or otherwise transfer your Personal Data to unaffiliated third parties for their own marketing, advertising, or commercial purposes.

62idn retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The table below sets out our standard retention periods by data category.

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised so that it can no longer be associated with you as an individual.

62idn implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. Our primary technical and organisational safeguards include:

• TLS Encryption in Transit: All communication between your browser and the 62idn servers is protected by Transport Layer Security (TLS) 1.2 or 1.3, ensuring that data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data fields — including passwords (stored as salted cryptographic hashes), KYC document references, and financial identifiers — are encrypted at rest using AES-256 or equivalent standards.
• Access Control & Authentication: Internal systems require multi-factor authentication (MFA) for all staff with access to player data. Access is granted on a strict need-to-know basis and is reviewed quarterly.
• Intrusion Detection: 62idn operates continuous network monitoring, anomaly detection, and intrusion prevention systems to identify and respond to security threats in real time.
• Penetration Testing: The Platform undergoes regular third-party penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 62idn will notify affected players within 72 hours of becoming aware of the breach, and will provide clear guidance on protective steps you should take.

62idn uses cookies and similar browser-based tracking technologies to operate the Platform, remember your preferences, and gather anonymised analytics data. The table below describes the categories of cookies we use.

Managing Cookies. You can manage or delete cookies at any time through your browser settings. Please note that disabling Strictly Necessary cookies will impair your ability to log in to and use the 62idn Platform. Disabling other cookie categories will not prevent you from using core Platform features but may affect personalisation and analytics functionality.

62idn does not use third-party advertising cookies or cross-site tracking pixels for the purpose of serving targeted advertisements on external websites.

As a data subject, you have the following rights in relation to the Personal Data 62idn holds about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Request — [your Account username]". 62idn will respond within 30 calendar days.

11.1 The 62idn Platform is strictly intended for adults aged 21 and over. 62idn does not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

11.2 If 62idn becomes aware that Personal Data has been collected from a person under 21 years of age, the relevant Account will be immediately suspended, all associated data will be securely deleted, and any funds held in the Account will be handled in accordance with applicable law.

11.3 Parents and guardians who believe that their child has registered on the 62idn Platform should contact us immediately at [email protected]. We take all reports of underage access seriously and will act swiftly to investigate and remediate.

12.1 As an internationally licensed online gaming platform, 62idn may transfer your Personal Data to Data Processors located outside Indonesia, including in jurisdictions where 62idn's cloud infrastructure, game servers, or KYC providers are based.

12.2 Where Personal Data is transferred to a country that does not provide a level of data protection equivalent to that applicable in Indonesia, 62idn implements appropriate safeguards — such as standard contractual clauses or equivalent transfer mechanisms — to ensure that your data receives an adequate standard of protection regardless of where it is processed.

12.3 By registering an Account on the 62idn Platform, you acknowledge and consent to the transfer of your Personal Data to processors located in other jurisdictions as described in this clause, subject always to the safeguards described above.

13.1 62idn reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. For material changes, 62idn will notify registered players via email or through an in-Platform notification.

13.2 Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you should cease using the Platform and may request Account closure by contacting [email protected].

13.3 We encourage you to review this Privacy Policy periodically to stay informed about how 62idn protects your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the 62idn Data Protection team using the details below. All privacy enquiries are handled by dedicated staff with data protection responsibilities.

For formal Data Subject Requests (access, rectification, erasure, portability, restriction, objection), please include your full Account username, the specific right you wish to exercise, and sufficient information to allow us to verify your identity before processing the request. 62idn may ask for additional verification in line with its KYC obligations before fulfilling sensitive requests such as data portability or erasure.