Privacy Policy — ind66

ind66 is committed to protecting the privacy and personal data of every individual who interacts with our platform — whether as a registered Member, a prospective Member who has browsed without registering, or a visitor who arrives via search or referral. This Policy covers all personal data collected, stored, processed, or transmitted by ind66 in the course of providing its online betting, live casino, and gaming services.

This Policy applies to:

• All registered Members of the ind66 platform regardless of their country of access.
• All unregistered visitors to the ind66 website at https://ind66.cam.
• All individuals who contact ind66 via live chat, email, or any other supported communication channel.
• All individuals who participate in ind66 promotional activities, surveys, or research.

This Policy does not apply to third-party websites, payment processors, or game content providers that may be accessible from or integrated with the ind66 platform. Those parties operate under their own privacy policies, for which ind66 bears no responsibility.

ind66 acts as the Data Controller for all personal data collected through the platform. As Data Controller, ind66 determines the purposes and means of processing your personal data, and is responsible for ensuring that such processing complies with applicable data protection laws and the standards set out in this Policy.

ind66 collects the minimum personal data necessary to operate the platform, comply with legal obligations, prevent fraud, and deliver a high-quality user experience. The categories of data we collect are described below.

ind66 collects personal data through the following channels and mechanisms:

• Direct Provision: Data you actively provide when registering an Account, completing KYC verification, making a deposit, requesting a withdrawal, contacting support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically when you access or interact with the ind66 platform, including via cookies, session tracking, and server logs.
• Third-Party Sources: Identity and fraud-check data received from KYC verification partners, payment processors, and financial crime monitoring services when processing transactions or verifying your identity.
• Inferred Data: Preferences, interests, and risk profiles inferred from your transaction history and platform usage, used solely to improve your user experience and support responsible gaming assessments.

ind66 processes personal data only where a recognized lawful basis exists. The primary bases on which we rely are:

ind66 uses collected personal data strictly for the purposes set out below. We do not use your data for any purpose that is incompatible with the reason it was collected.

• Account Management: Creating, maintaining, verifying, and securing your ind66 Account throughout its lifecycle.
• Service Delivery: Processing bets, settling wagers, managing game sessions, and providing all functions of the ind66 platform to you as a registered Member.
• Payment Processing: Executing deposit and withdrawal transactions via your chosen Indonesian bank (BCA, BRI, BNI, Mandiri, and others) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity & Age Verification: Confirming that you are at least 21 years of age and that your identity matches the Account registration details — a core requirement for all ind66 Members.
• Fraud Prevention & AML: Detecting and preventing unauthorized Account access, suspicious transaction patterns, money laundering, and other financial crimes.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling behaviour, enforcing self-imposed limits, and facilitating self-exclusion requests in accordance with our responsible gaming obligations.
• Customer Support: Responding to Account queries, resolving disputes, processing complaints, and providing technical assistance via live chat and email.
• Regulatory Compliance: Maintaining records required by our gaming license, responding to regulatory inquiries, and cooperating with law enforcement where legally obligated.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, user experience, and responsible gaming tools.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — but only to Members who have actively opted in and only via channels they have consented to.

ind66 shares personal data only where necessary and only with the categories of recipient described below. All third-party recipients are bound by confidentiality obligations and are prohibited from using your data for any purpose beyond the specific service they provide to ind66.

• Payment Service Providers: Your financial data is shared with the relevant Indonesian bank or e-wallet operator (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your requested transaction.
• KYC & Identity Verification Partners: Identity documents and biometric data submitted during KYC are processed by ind66's accredited identity verification partner(s) under strict data processing agreements.
• Fraud Prevention & AML Services: Transaction data and device fingerprints may be shared with specialist financial crime monitoring providers to comply with anti-money laundering obligations.
• Technology Service Providers: Cloud hosting, content delivery, platform infrastructure, and analytics services are provided by vetted third-party technology vendors who process data only on ind66's instructions.
• Gaming Content Providers: Game studios integrated within the ind66 platform receive session-level data (stake amount, game result, session ID) necessary to deliver and settle game outcomes. They do not receive your identity or financial data.
• Regulatory Authorities: ind66 will disclose personal data to gaming regulators, licensing authorities, tax authorities, and law enforcement agencies when required by applicable law or a valid legal order.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the Company's business, your personal data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy.

ind66 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal or regulatory retention obligations that may require us to hold certain records for defined minimum periods. Our standard retention schedule is as follows:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with an identifiable individual.

ind66 implements comprehensive technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and ind66 servers is encrypted using TLS 1.3 (256-bit), the same standard employed by major international banking institutions.
• Encryption at Rest: Sensitive personal and financial data stored on ind66 servers is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to ind66 personnel with a legitimate business need. Access is governed by role-based permissions, multi-factor authentication, and activity logging.
• Penetration Testing: ind66 engages independent security firms to conduct regular penetration tests and vulnerability assessments of the platform infrastructure.
• Incident Response: ind66 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the relevant supervisory authority within the timeframes required by applicable law.
• Staff Training: All ind66 personnel who handle personal data receive regular data protection training and are contractually bound to confidentiality obligations.

While ind66 applies strong security measures, no internet transmission is completely immune to interception. You are responsible for keeping your Account credentials confidential and for notifying [email protected] immediately if you suspect unauthorized access to your Account.

ind66 uses cookies and similar technologies (such as session tokens, local storage, and pixel tags) to operate the platform and, where consent has been provided, to analyze usage and deliver relevant communications. The categories of cookies we use are:

You may manage your cookie preferences through your browser settings. Please note that disabling Strictly Necessary cookies will impair the platform's ability to function correctly. Withdrawing consent for Analytics or Marketing cookies will not affect your ability to use ind66 services.

Subject to applicable law and certain conditions, you have the following rights with respect to your personal data held by ind66. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving a valid request.

The ind66 platform is strictly restricted to adults aged 21 years and older. ind66 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an Account, access any service, or provide any personal information on the ind66 platform.

ind66 operates internationally and your personal data may be transferred to, stored in, and processed by servers located outside Indonesia. Where such transfers occur, ind66 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that which applies within Indonesia, including:

• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by applicable law.
• Use of Standard Contractual Clauses (SCCs) or equivalent contractual mechanisms where required to legitimize the transfer.
• Technical measures including end-to-end encryption to protect data in transit across jurisdictional boundaries.

ind66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the services we provide. Material changes — those that meaningfully affect your rights or the way we process your data — will be communicated to registered Members via email or prominent in-platform notification at least 14 days before the changes take effect.

The "Last updated" date at the top of this Policy always reflects the most recent revision. Your continued use of the ind66 platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised terms, you should cease using the platform and contact us to request Account closure and data deletion where applicable.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how ind66 handles your personal data, please contact our Data Protection team using the details below. All data-related requests are handled in strict confidence.

If you are not satisfied with ind66's response to a data protection complaint, you have the right to lodge a complaint with the relevant supervisory or data protection authority in your jurisdiction. ind66 will cooperate fully with any such authority in the investigation of a complaint.