1. Introduction
This Privacy Policy applies to all personal information collected by idr505 through our website, mobile platforms, and related services (collectively, "Services"). idr505 operates as an online gaming platform serving Indonesian players with sports betting, casino games, lottery games, and related entertainment services.
We recognize that privacy is important to our users. This policy describes how we collect, use, disclose, and safeguard your personal information in compliance with applicable data protection laws and regulations. We encourage you to read this Privacy Policy carefully to understand our practices regarding your personal data.
2. Information We Collect
2.1 Information You Provide to Us
When you register for an idr505 account, use our Services, or contact customer support, you may provide us with the following types of information:
- Account Registration Information: Full legal name, date of birth, gender, residential address, email address, phone number, and username/password.
- Identity Verification Information: Government-issued identification documents (Indonesian National Identity Card - KTP), proof of address documents (utility bills, bank statements), and selfie photographs for KYC (Know Your Customer) verification.
- Financial Information: Bank account details, e-wallet information, payment card details (processed securely through third-party payment processors), transaction history, deposits, withdrawals, and betting activity.
- Communication Information: Messages sent to customer support, feedback, survey responses, and any other communications you have with idr505.
- Marketing Preferences: Your communication preferences, including consent to receive promotional emails, SMS messages, and push notifications.
2.2 Information We Collect Automatically
When you access and use idr505 Services, we automatically collect certain technical and usage information:
- Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
- Usage Data: Pages visited, games played, bets placed, session duration, click patterns, navigation paths, timestamps, and feature usage statistics.
- Location Information: IP address, geographic location data (country, city, time zone), and language preferences.
- Cookies and Tracking Technologies: Cookies, web beacons, pixel tags, and similar technologies to track your activity on our platform and provide personalized experiences. See Section 8 for more details on cookies.
2.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Payment Processors: Transaction verification, fraud detection data, and payment method validation from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
- Identity Verification Services: Document authentication, age verification, and fraud prevention data from KYC service providers.
- Marketing Partners: Referral source information and campaign performance data (with your consent).
- Social Media Platforms: If you choose to link your idr505 account to social media, we may receive basic profile information subject to your social media privacy settings.
3. How We Use Your Information
idr505 uses your personal information for the following purposes:
3.1 Account Management and Service Provision
- Create and manage your player account
- Process deposits, withdrawals, and financial transactions
- Provide access to gaming products and services
- Maintain game history and transaction records
- Calculate winnings and distribute payouts
- Enforce betting limits and account restrictions
3.2 Verification and Security
- Verify your identity and age to comply with legal requirements (21+ minimum age)
- Prevent fraud, money laundering, and other illegal activities
- Detect and prevent unauthorized account access
- Monitor betting patterns for collusion or cheating
- Protect the security and integrity of our platform
- Comply with KYC and anti-money laundering (AML) regulations
3.3 Customer Support
- Respond to your inquiries and support requests
- Resolve disputes and complaints
- Provide technical assistance and troubleshooting
- Conduct quality assurance and training for support staff
3.4 Marketing and Communications
- Send promotional offers, bonuses, and special deals (with your consent)
- Notify you about new games, features, and platform updates
- Send transactional emails (deposit confirmations, withdrawal notifications, account alerts)
- Conduct surveys and request feedback to improve our services
- Personalize your gaming experience based on preferences and activity
3.5 Legal Compliance and Protection
- Comply with applicable laws, regulations, and licensing requirements
- Respond to legal processes, court orders, and government requests
- Enforce our Terms & Conditions and other policies
- Protect our rights, property, and safety, and that of our users
- Investigate and prevent violations of our terms or illegal activity
3.6 Analytics and Improvement
- Analyze usage patterns and user behavior to improve our Services
- Conduct research and development for new features and products
- Optimize platform performance, speed, and reliability
- Generate aggregated, anonymized statistics for business intelligence
4. Legal Basis for Processing (Indonesian Context)
idr505 processes your personal information based on the following legal grounds:
- Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gaming services, processing transactions, managing your account).
- Legal Obligation: Processing is required to comply with Indonesian and international laws, including age verification, KYC/AML requirements, tax reporting, and licensing obligations.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and protecting users, provided these interests do not override your privacy rights.
- Consent: Processing is based on your explicit consent, such as receiving marketing communications, using cookies for personalization, or sharing data with third parties for promotional purposes. You may withdraw consent at any time.
5. How We Share Your Information
idr505 does not sell your personal information to third parties. However, we may share your information in the following circumstances:
5.1 Service Providers
We share information with trusted third-party service providers who perform services on our behalf, including:
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for deposit and withdrawal processing.
- Identity Verification Services: KYC/AML compliance providers for document verification and fraud prevention.
- Game Providers: Software studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe) that supply casino games and live dealer services.
- Cloud Hosting Providers: Secure data storage and infrastructure services.
- Customer Support Tools: Live chat, ticketing systems, and communication platforms.
- Analytics Providers: Website analytics and performance monitoring services.
All service providers are contractually bound to protect your data and use it only for the purposes we specify.
5.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by government authorities, including to:
- Comply with legal obligations, court orders, or regulatory requirements
- Respond to lawful requests from law enforcement agencies
- Protect our rights, property, or safety, or that of our users or the public
- Detect, prevent, or investigate fraud, security issues, or illegal activity
5.3 Business Transfers
If idr505 is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any change in ownership or use of your personal information.
5.4 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so, such as participating in promotional campaigns or surveys conducted by partners.
6. Data Security
idr505 takes data security seriously and implements comprehensive technical and organizational measures to protect your personal information:
6.1 Technical Security Measures
- SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same standard used by banks and financial institutions.
- Secure Data Storage: Personal information is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems.
- Payment Security: We use PCI-DSS compliant payment gateways and never store complete credit card numbers or bank account details on our servers.
- Regular Security Audits: Third-party security experts conduct regular penetration testing and vulnerability assessments.
- Data Anonymization: Where possible, we anonymize or pseudonymize personal data to minimize privacy risks.
6.2 Organizational Security Measures
- Access Controls: Personal information is accessible only to authorized employees who need it to perform their job functions. All staff undergo security training.
- Confidentiality Agreements: Employees and contractors are bound by strict confidentiality obligations.
- Incident Response Plan: We maintain a comprehensive data breach response plan to quickly detect, contain, and remediate security incidents.
- Password Policies: We enforce strong password requirements and encourage two-factor authentication for player accounts.
6.3 Your Responsibility
While we implement robust security measures, you also play a role in protecting your account:
- Choose a strong, unique password and never share it with anyone
- Log out of your account when using shared or public devices
- Notify us immediately if you suspect unauthorized account access
- Keep your email account secure, as it is used for account recovery
7. Data Retention
idr505 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Active Accounts: We retain account information for the duration of your active account and for a reasonable period after closure to comply with legal obligations and resolve disputes.
- Transaction Records: Financial transaction data is retained for a minimum of seven years to comply with Indonesian tax and anti-money laundering regulations.
- KYC Documents: Identity verification documents are retained for the duration required by our licensing and regulatory obligations.
- Marketing Data: If you unsubscribe from marketing communications, we will retain only the minimum information necessary to honor your opt-out request.
- Closed Accounts: After voluntary account closure, we retain essential data for legal and compliance purposes, but anonymize or delete other personal information.
8. Cookies and Tracking Technologies
idr505 uses cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies are small text files stored on your device when you visit our website.
8.1 Types of Cookies We Use
- Essential Cookies: Necessary for the website to function properly. These enable core features like login, account security, and transaction processing. You cannot opt out of essential cookies.
- Performance Cookies: Collect anonymous information about how visitors use our site, helping us identify errors and improve performance.
- Functional Cookies: Remember your preferences (language, time zone) and provide enhanced, personalized features.
- Analytics Cookies: Help us understand user behavior, popular pages, and navigation patterns to optimize our services.
- Advertising Cookies: Used to deliver relevant promotional content and measure campaign effectiveness (only with your consent).
8.2 Managing Cookies
Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Note that disabling cookies may limit your ability to use certain features of the idr505 platform. To manage cookies, access your browser's settings or privacy menu.
9. Your Privacy Rights
Under applicable data protection laws, you have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal information.
- Right to Erasure: Request deletion of your personal information, subject to legal retention requirements.
- Right to Restrict Processing: Request that we limit the processing of your personal information in certain circumstances.
- Right to Data Portability: Request a copy of your data in a structured, machine-readable format for transfer to another service provider.
- Right to Object: Object to our processing of your personal information for direct marketing or legitimate interests.
- Right to Withdraw Consent: Withdraw consent for data processing at any time (does not affect lawfulness of processing prior to withdrawal).
To exercise any of these rights, please contact our Data Protection Officer using the contact information in Section 11. We will respond to your request within 30 days.
10. International Data Transfers
idr505 operates internationally and may transfer your personal information to servers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Transferring data only to countries with adequate data protection laws
- Using standard contractual clauses approved by data protection authorities
- Implementing technical and organizational measures to protect transferred data
By using idr505 services, you consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.
11. Children's Privacy
idr505 services are strictly intended for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected information from someone under 21, we will take immediate steps to delete that information from our systems.
Parents and guardians: If you believe your child has provided personal information to idr505, please contact us immediately so we can remove it.
12. Changes to This Privacy Policy
idr505 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated via:
- Prominent notice on our website homepage
- Email notification to registered users
- In-app notification for mobile users
The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of idr505 services after changes are posted constitutes acceptance of the revised policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Data Protection Officer Email: (not a clickable link)
- Customer Support Email: (not a clickable link)
- Live Chat: Available 24/7 on the idr505 website
- WhatsApp: +62 812-3456-7890 (text only, not a clickable link)
We are committed to resolving privacy concerns promptly and transparently. Our Data Protection Officer will respond to all inquiries within 30 business days.