Your privacy matters to idr678. This Privacy Policy explains exactly what personal data we collect when you use the idr678 platform, why we collect it, how it is stored and protected, with whom it may be shared, and what rights you hold over your own information. We encourage you to read this document in full before creating an Account.
Registration details, payment information, KYC documents, device data, and gameplay activity — only what is necessary to operate the platform and verify your identity.
To verify your age and identity, process Rupiah transactions, deliver customer support, prevent fraud, and comply with applicable international licensing obligations.
Only idr678's vetted internal teams and essential third-party processors — payment gateways, KYC providers, and game studios — under strict contractual data-protection obligations.
256-bit SSL encryption on every connection, PCI-DSS compliant payment processing, access-controlled server infrastructure, and regular independent security audits.
You may access, correct, export, or request deletion of your personal data at any time by contacting our support team at [email protected].
Personal data is retained for as long as your Account is active and for a minimum of five years after closure, in accordance with our licensing and anti-money-laundering obligations.
The following terms are used throughout this Privacy Policy with the meanings defined below.
| Term | Meaning |
|---|---|
| "idr678" / "we" / "us" | The operator of the idr678 online betting and casino platform accessible at idr678.app and all associated sub-pages and services. |
| "Personal Data" | Any information that identifies or could reasonably identify you as a natural person — including your name, email address, date of birth, national identity number, payment account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, alteration, and deletion. |
| "Account" | Your registered user account on idr678, linked to a single verified identity and Rupiah payment method. |
| "KYC" | Know Your Customer — the identity and age verification process conducted before withdrawals are processed and on an ongoing basis as required by our licensing obligations. |
| "Third-Party Processor" | Any external service provider that processes Personal Data on idr678's behalf under a contractual data-processing agreement, including payment gateways, KYC verification providers, and game studio platforms. |
| "Cookies" | Small text files stored on your device by your browser when you visit idr678.app, used to maintain session state, remember preferences, and support analytics. |
idr678 acts as the data controller for all Personal Data collected through the idr678 platform. As data controller, idr678 determines the purposes and means of processing your Personal Data and is responsible for ensuring that such processing is carried out in accordance with applicable international data-protection standards.
All data-protection inquiries, access requests, correction requests, and complaints should be directed to our dedicated support channel:
idr678 collects Personal Data through three primary channels: information you provide directly, information generated automatically by your use of the platform, and information received from verified third-party sources. The table below summarizes the categories of data we collect and the context in which each category arises.
| Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, Indonesian national ID number (NIK), passport number | Account registration and KYC verification |
| Contact Data | Email address, phone number (if provided), city of residence (e.g., Jakarta, Surabaya, Bandung) | Account registration and support interactions |
| Financial Data | Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (DANA, OVO, GoPay, ShopeePay, LinkAja), transaction amounts in IDR | Deposit and withdrawal processing |
| KYC Documents | Scanned copies of KTP (Indonesian national identity card), passport, driver's license, selfie with document | Identity verification process |
| Technical Data | IP address, browser type and version, operating system, device type and model, screen resolution, time zone (WIB/WITA/WIT) | Automatically collected on platform access |
| Usage Data | Pages visited, games played, bet amounts and outcomes, session duration, login timestamps | Automatically collected during platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
idr678 does not collect sensitive personal data beyond what is necessary for age verification and fraud prevention. We do not request or store details relating to racial or ethnic origin, political opinions, religious beliefs, health conditions, or biometric data beyond the facial-photograph component of standard KYC document submissions.
idr678 processes your Personal Data only where a valid legal basis exists. The legal bases on which we rely are as follows:
The Personal Data idr678 collects is used exclusively for the following purposes:
idr678 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Data is shared only in the limited circumstances described below, and always under strict contractual obligations that require the recipient to protect your data to a standard equivalent to our own.
idr678 uses cookies and similar tracking technologies to maintain the security and functionality of the platform. The table below describes the types of cookies deployed on idr678.app.
| Cookie Type | Purpose | Required? |
|---|---|---|
| Session Cookies | Maintain your authenticated login session and preserve your Account state across page navigations within a single browser session. | Yes — essential |
| Security Cookies | Detect and prevent fraudulent login attempts, CSRF attacks, and suspicious session hijacking activity. | Yes — essential |
| Preference Cookies | Remember your platform preferences such as display settings and last-visited game category. | No — functional |
| Analytics Cookies | Collect anonymised data on page visits, bounce rates, and feature usage to help idr678 improve the platform experience. | No — optional |
Essential and security cookies are deployed automatically as they are strictly necessary for platform operation. Functional and analytics cookies are only deployed with your consent. You may manage your cookie preferences through your browser settings at any time; note that disabling essential cookies may prevent you from logging into your Account.
idr678 takes the security of your Personal Data seriously and implements a layered set of technical and organizational measures to protect it against unauthorized access, accidental loss, alteration, or disclosure.
idr678 retains your Personal Data for as long as is necessary to fulfil the purposes set out in this Privacy Policy and to comply with our legal and licensing obligations. The specific retention periods that apply to the main categories of data are as follows:
When Personal Data is no longer required, idr678 securely deletes or anonymises it. Anonymised data — from which you cannot be identified — may be retained and used for business intelligence purposes without time limitation.
As a data subject, you hold a number of rights over your Personal Data held by idr678. These rights are summarized below. To exercise any of them, contact us at [email protected] with the subject line "Privacy Request". We will respond within five business days.
Request a copy of all Personal Data idr678 holds about you, including the categories, purposes, and any third parties it has been shared with.
Request correction of any inaccurate or incomplete Personal Data in your Account — for example, a misspelled name or an outdated email address.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations.
Request that we restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being contested.
Request a structured, machine-readable export of the Personal Data you provided to idr678, where technically feasible.
Object to processing of your Personal Data based on legitimate interests — including direct marketing and analytics profiling — at any time.
Please note that certain rights are subject to limitations where processing is required for compliance with a legal obligation or the performance of a contract. idr678 will always clearly explain the basis for any limitation when responding to your request.
idr678 is strictly an adults-only platform. Registration and participation are prohibited for any individual under the age of 21. idr678 does not knowingly collect Personal Data from individuals under this age.
If idr678 becomes aware that Personal Data has been collected from a person under 21 years of age, the relevant Account will be immediately suspended, the data will be deleted from active systems within 30 days (subject to any overriding legal obligation to retain evidence of the underage access), and any deposits will be returned to the payment method used — with winnings forfeited.
If you are a parent or guardian and believe that a minor in your care has created an idr678 Account without authorization, please contact us immediately at [email protected]. We will investigate and act promptly.
idr678 operates as an internationally licensed platform. Your Personal Data may be transferred to and processed in jurisdictions outside Indonesia, including the jurisdiction in which idr678 holds its operating license and the jurisdictions in which our Third-Party Processors maintain their infrastructure.
Where Personal Data is transferred internationally, idr678 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under applicable international data-protection frameworks. These safeguards include contractual data-processing agreements with all Third-Party Processors that incorporate standard data-protection clauses.
By registering an Account with idr678 and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data as described in this section.
The idr678 platform may display the branding or interface elements of third-party game studios (such as Evolution Gaming, Pragmatic Play, Spribe, or Pocket Games Soft) within its gaming environment. While these studios operate under contractual data-processing agreements with idr678 as described in Section 6, they maintain their own privacy policies governing their own systems and infrastructure.
idr678 is not responsible for the privacy practices of any third-party studio or external service whose technology is integrated into the platform. We encourage you to review the relevant studio's privacy documentation if you have specific concerns about data handled within a particular game environment.
idr678 reserves the right to update or amend this Privacy Policy at any time. When a material change is made — one that affects how we collect, use, or share your Personal Data — we will notify you by sending an email to your registered address and by updating the "Last Reviewed" date at the top of this document.
Minor, non-material amendments (such as clarifications of existing language or corrections of typographical errors) may be made without individual notification, though the Last Reviewed date will always be updated to reflect the change.
Your continued use of the idr678 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must cease using the platform and may close your Account as described in the Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how idr678 has handled your Personal Data, please contact us through the following channel:
If you are unsatisfied with idr678's response to a privacy complaint, you may escalate the matter to the data-protection authority in the jurisdiction applicable to our operating license. idr678 will cooperate fully with any such regulatory inquiry.
For questions about responsible gaming tools, deposit limits, or self-exclusion, please visit the dedicated Responsible Gaming page. For general platform questions, visit our FAQ page.
We are committed to keeping your personal information secure and transparent. If you have any questions about how your data is used, our support team is available 24/7. Ready to play? Explore our full game library or log in to your Account.