Your Privacy Matters: At indogg, we are deeply committed to protecting your personal information and respecting your privacy rights. This Privacy Policy explains in clear, transparent language what data we collect, why we collect it, how we use it, and how we keep it secure. By using our services, you consent to the data practices described in this policy.

1. Introduction

This Privacy Policy governs the collection, use, storage, and disclosure of personal information by indogg, an online gaming platform operated under international gaming licenses and serving players primarily in Indonesia. We recognize that privacy is a fundamental right, and we are committed to handling your personal data in accordance with international data protection standards, including principles aligned with the General Data Protection Regulation (GDPR), even though we operate primarily in jurisdictions outside the European Union.

This Privacy Policy applies to all users of the indogg platform, including visitors to our website, registered account holders, and individuals who interact with our customer service or marketing communications. It covers personal data collected through our website, mobile applications, customer support channels, and any other touchpoints where indogg interacts with you.

By creating an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with our data practices, you should not use our services. We encourage you to read this policy carefully and contact us if you have any questions or concerns.

2. Data Controller

For the purposes of applicable data protection laws, indogg is the data controller responsible for your personal information. This means we determine the purposes and means of processing your personal data and are accountable for compliance with data protection regulations.

Contact details for data protection inquiries:

  • Email: [email protected] (displayed as plain text only)
  • Postal Address: indogg Data Protection Office, [Business Address]
  • Response Time: We aim to respond to all privacy-related inquiries within 5-7 business days

3. Information We Collect

We collect several types of information from and about users of our services to provide, maintain, improve, and protect our platform. The categories of information we collect include:

3.1 Information You Provide Directly

  • Registration Information: When you create an account, we collect your full legal name, date of birth, residential address, email address, phone number, username, and password. This information is necessary to create and maintain your account and verify your identity.
  • Identity Verification Documents: To comply with Know Your Customer (KYC) regulations and prevent fraud, we may collect copies of government-issued identification (KTP, passport, or driver's license), proof of address (utility bills, bank statements), proof of payment method ownership, and selfie photographs for identity verification purposes.
  • Payment Information: We collect details about your payment methods, including bank account information for BCA, BRI, BNI, Mandiri, and e-wallet account details for OVO, DANA, GoPay, ShopeePay, and LinkAja. However, we do not store full bank account numbers or complete payment card details—sensitive payment data is processed through secure, PCI-DSS compliant payment gateways.
  • Transaction History: Records of all deposits, withdrawals, wagers, wins, losses, and bonus claims are maintained in your account history.
  • Communications: Content of communications you send to us via email, live chat, WhatsApp, phone calls (which may be recorded for quality assurance and training purposes), or contact forms.
  • Profile Preferences: Settings and preferences you configure in your account, including notification preferences, language settings, and responsible gaming limits.

3.2 Information We Collect Automatically

  • Device Information: IP address, device type, operating system, browser type and version, device identifiers, screen resolution, and mobile network information.
  • Usage Data: Pages visited, features used, time spent on pages, games played, bet amounts and frequencies, session duration, referral sources, and navigation paths through our platform.
  • Location Data: Approximate geographic location derived from IP address to ensure compliance with jurisdiction-specific regulations and detect suspicious activity.
  • Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies (see Section 9 for detailed information).

3.3 Information from Third Parties

  • Payment Processors: Transaction confirmation, payment status, and fraud detection signals from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment partners.
  • Identity Verification Services: Third-party verification services may provide validation of identity documents and anti-fraud checks.
  • Marketing Partners: If you arrive at our platform through an affiliate or marketing partner, we may receive limited referral information (but never your personal identifiable information without your consent).

4. How We Use Your Information

We process your personal information for the following legitimate purposes:

4.1 Service Provision and Account Management

  • Create, maintain, and manage your account
  • Process deposits, withdrawals, and wagers
  • Provide access to games and betting markets including sports betting on BRI Liga 1, EPL, live casino, slots, togel (lottery), and other gaming products
  • Track gameplay history and account balances
  • Apply bonuses, promotions, and loyalty rewards
  • Provide customer support and respond to inquiries

4.2 Legal and Regulatory Compliance

  • Verify your identity and age (21+ requirement) to comply with gaming regulations
  • Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
  • Detect and prevent fraud, money laundering, and other illegal activities
  • Comply with legal obligations and respond to lawful requests from government authorities
  • Maintain records as required by gaming licenses and applicable laws

4.3 Platform Security and Integrity

  • Monitor for suspicious activity, bonus abuse, and terms violations
  • Detect and prevent unauthorized account access
  • Protect against technical attacks, spam, and malicious software
  • Investigate disputes, complaints, and potential violations of our Terms & Conditions
  • Enforce our policies and protect the rights and safety of indogg, our users, and third parties

4.4 Service Improvement and Personalization

  • Analyze usage patterns to improve platform performance and user experience
  • Conduct research and development for new features and game offerings
  • Personalize content, recommendations, and promotional offers based on your preferences and gaming activity (you may opt out of personalized marketing)
  • A/B test features and measure effectiveness of improvements

4.5 Marketing and Communications

  • Send promotional offers, bonuses, and exclusive deals relevant to Indonesian players
  • Notify you about platform updates, new games, and important announcements
  • Conduct customer satisfaction surveys and gather feedback
  • Send service-related notifications (deposit confirmations, withdrawal status, security alerts)

Note: You can opt out of marketing communications at any time through your account settings or by clicking "unsubscribe" links in emails. However, you cannot opt out of essential service-related communications necessary for account operation.

4.6 Responsible Gaming

  • Monitor gameplay patterns to identify potential problem gambling behaviors
  • Enforce deposit limits, loss limits, and self-exclusion requests
  • Provide responsible gaming tools and resources
  • Intervene proactively when we detect concerning gambling patterns

5. Information Sharing and Disclosure

indogg does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

  • Payment Processors: BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other financial institutions to process deposits and withdrawals
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other content suppliers whose games you play on our platform
  • Identity Verification Services: Third-party KYC/AML compliance providers
  • Cloud Hosting: Secure server infrastructure and data storage providers
  • Customer Support Tools: Live chat software and helpdesk platforms
  • Analytics Providers: Tools that help us understand platform usage and performance

All service providers are contractually bound to protect your information, use it only for specified purposes, and maintain confidentiality in accordance with this Privacy Policy and applicable data protection laws.

5.2 Legal and Regulatory Requirements

We may disclose your information when required by law or in good faith belief that such action is necessary to:

  • Comply with legal obligations, court orders, subpoenas, or government requests
  • Respond to claims of illegal activity or violations of third-party rights
  • Protect the rights, property, and safety of indogg, our users, or the public
  • Report suspicious activity to financial intelligence units as required by AML regulations
  • Cooperate with gaming regulators and licensing authorities

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent at the time of collection or sharing.

6. Data Security Measures

indogg employs industry-leading technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

Security Measure Description
256-bit SSL/TLS Encryption All data transmitted between your device and our servers is encrypted using bank-level SSL/TLS protocols
Secure Data Storage Personal data stored in encrypted databases with restricted access controls
Firewalls & Intrusion Detection Multi-layered firewalls and real-time intrusion detection systems protect our infrastructure
Access Controls Role-based access ensures only authorized personnel can access personal data on a need-to-know basis
Two-Factor Authentication Available for account holders and mandatory for staff accessing sensitive systems
Regular Security Audits Independent third-party security assessments and penetration testing conducted quarterly
Employee Training All staff undergo data protection and security awareness training
Incident Response Plan Documented procedures for detecting, responding to, and recovering from security incidents

While we implement robust security measures, no system is completely impenetrable. We cannot guarantee absolute security of data transmitted over the internet or stored electronically. You also have a responsibility to protect your account—use strong passwords, enable two-factor authentication when available, never share login credentials, and notify us immediately if you suspect unauthorized account access.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods vary based on the type of information and legal requirements:

  • Active Account Data: Retained for the duration of your account plus 5 years after account closure to comply with gaming regulations and resolve potential disputes
  • Transaction Records: Retained for 7 years from the transaction date as required by financial regulations and tax laws
  • KYC/AML Documents: Retained for 7 years after account closure to comply with anti-money laundering regulations
  • Marketing Communications: Retained until you unsubscribe or for 3 years from last engagement, whichever comes first
  • Customer Support Records: Retained for 3 years from the date of inquiry resolution
  • Website Usage Logs: Retained for 12 months for security and analytics purposes

After the retention period expires, personal data is securely deleted or anonymized in accordance with our data disposal procedures. Anonymized data (from which you cannot be identified) may be retained indefinitely for research and analytics purposes.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most of your data directly through your account dashboard. For a comprehensive data export, contact our privacy team at [email protected] (displayed as plain text).

8.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most information through your account settings or by contacting customer support.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances. However, we may need to retain some information to comply with legal obligations, resolve disputes, enforce our Terms & Conditions, or maintain transaction records for regulatory compliance. Account closure does not automatically trigger immediate data deletion due to retention obligations.

8.4 Right to Restrict Processing

You may request restriction of processing your personal data in specific situations, such as when you contest the accuracy of data or object to processing.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time through account settings.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. However, withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory data protection authority if you believe your privacy rights have been violated.

To exercise any of these rights, contact us at [email protected] (displayed as plain text). We will respond to verified requests within 30 days. We may require additional information to verify your identity before processing your request.

9. Cookies and Tracking Technologies

indogg uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

9.1 Types of Cookies We Use

  • Essential Cookies: Necessary for platform operation, including authentication, session management, and security. These cannot be disabled without affecting functionality.
  • Performance Cookies: Collect anonymous data about how users interact with our platform, helping us identify and fix technical issues.
  • Functionality Cookies: Remember your preferences such as language settings, currency display, and customization choices.
  • Analytics Cookies: Help us understand user behavior, measure marketing effectiveness, and improve our services (e.g., Google Analytics).
  • Advertising Cookies: Used to deliver relevant advertisements and measure campaign performance (only with your consent).

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. However, disabling essential cookies may impair platform functionality, such as preventing you from logging in or placing bets. Most browsers allow you to block third-party cookies while accepting first-party cookies.

For more information about cookies and how to manage them, visit www.allaboutcookies.org (reference only, not a clickable link).

10. International Data Transfers

indogg operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. When we transfer data across borders, we implement appropriate safeguards to ensure your information receives adequate protection, including:

  • Standard Contractual Clauses approved by relevant data protection authorities
  • Ensuring third-party service providers maintain equivalent data protection standards
  • Conducting due diligence on the legal framework of destination countries

By using our services, you consent to the transfer of your information to countries that may have different data protection laws than Indonesia, understanding that we will protect your data in accordance with this Privacy Policy regardless of where it is processed.

11. Children's Privacy

indogg services are strictly for individuals aged 21 and older. We do not knowingly collect personal information from anyone under 21 years of age. If we become aware that we have inadvertently collected data from a person under 21, we will take immediate steps to delete that information and terminate the associated account.

If you are a parent or guardian and believe your child under 21 has provided personal information to indogg, please contact us immediately at [email protected] (displayed as plain text) so we can take appropriate action.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational needs. When we make material changes that significantly affect your privacy rights, we will notify you via email to your registered address or through a prominent notice on our website.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of indogg services after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the following channels:

  • Data Protection Officer Email: [email protected] (displayed as plain text only)
  • General Support: [email protected] (displayed as plain text only)
  • 24/7 Live Chat: Available on our website and mobile app
  • WhatsApp: +62 812 3456 7890 (displayed as plain text only)
  • Response Time: Privacy-related inquiries are prioritized and typically responded to within 5-7 business days

Effective Date: This Privacy Policy is effective as of January 15, 2026, and applies to all personal data collected by indogg from that date forward. For users who registered before this date, this policy supersedes all previous versions. By continuing to use our services, you acknowledge and accept the terms of this updated Privacy Policy.

Our Commitment to Data Security

How indogg protects your personal information

Bank-Level Encryption

256-bit SSL/TLS encryption protects all data in transit. Your information is as secure as online banking transactions.

Secure Data Centers

Personal data stored in encrypted databases hosted in certified secure facilities with 24/7 monitoring and access controls.

Regular Security Audits

Independent third-party penetration testing and security assessments conducted quarterly to identify and fix vulnerabilities.

Access Controls

Role-based access ensures only authorized personnel can view personal data, with all access logged and monitored.

Privacy by Design

Data protection principles embedded into our technology and business practices from the ground up, not added as an afterthought.

Regulatory Compliance

Full compliance with international gaming regulations, KYC/AML laws, and data protection standards across all jurisdictions we serve.

Questions About Your Privacy?

Our data protection team is here to address any concerns about how we handle your personal information

View FAQ Terms & Conditions Back to Home