Privacy Policy indo666 — Data Protection & User Security

1 Introduction

Indo666 is committed to protecting the privacy of every user on our platform. This Privacy Policy is designed to give you a clear understanding of what data we collect, why we need it, and how we keep it safe at all times.

When you register an account at indo666, log in to the platform, make a deposit or withdrawal, use our mobile app, or simply browse our website, certain data may be collected automatically or you may be asked to provide it directly. All data management processes are governed by the policy set out here.

Indo666 operates to strict data protection standards. We do not take a "collect as much as possible" approach — every piece of data we store has a clear purpose and legitimate justification.

2 Data We Collect

Indo666 collects several categories of personal data depending on how you interact with our platform:

Identity Data:

• Full name as shown on official identification documents
• Date of birth for age verification
• National identification number (MyKad) or passport number
• Current residential address
• Mobile phone number
• Active email address

Financial Data:

• Bank account information for withdrawal processing (bank name and account number only)
• Deposit and withdrawal transaction records
• Betting history and gaming activity

Technical Data (collected automatically):

• IP address and general location information
• Device type and version, operating system
• Web browser information
• Login session data and usage timestamps
• Cookie and session tracking information

3 How We Use Your Data

The data we collect is used for specific and legitimate purposes only. indo666 uses your data to:

• Identity Verification & KYC — to confirm you are who you claim to be and that you meet the minimum age requirement
• Account Management — to process registration, password recovery, and information updates
• Transaction processing — to verify and securely process deposits and withdrawals
• Fraud prevention — to detect and block suspicious activity or unauthorised duplicate usage
• Legal compliance — to meet anti-money laundering (AML) and Know Your Customer (KYC) requirements
• Customer support — to enable our support team to resolve your account issues accurately and promptly
• Platform improvements — to analyse usage patterns and improve the overall user experience
• Account-related communications — to send important notifications such as transaction confirmations, security alerts, and policy update information

4 Legal Basis for Data Processing

Indo666 processes your personal data on the following lawful bases:

• Contract performance — processing of data necessary to provide the services you registered for
• Legal obligation — compliance with applicable KYC, AML, and regulatory requirements
• Legitimate interest — fraud prevention, platform security, and technical analysis for service improvement
• Your consent — for opted-in marketing communications and promotional content you have chosen to receive

You have the right to withdraw consent at any time, particularly for marketing communications. Withdrawing consent does not affect the validity of any processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

Indo666 does not sell your personal data to any third party. However, in certain limited circumstances, your data may be shared with the following parties:

• Payment service providers — payment gateways used to process your deposits and withdrawals, bound by strict confidentiality agreements
• Technology service providers — server infrastructure and cloud services used to operate the platform, subject to data processing agreements
• Licensed game providers — the minimum data required to provide access to games in the indo666 lobby
• Legal authorities — when required by law, court order, or a legitimate law enforcement agency
• Regulatory authority — information required to meet applicable regulatory compliance requirements

6 Data Security

Indo666 continuously invests in security infrastructure to ensure your data is protected at all times. Key security measures we employ include:

• 256-bit SSL Encryption for all communications between your device and indo666 servers
• Hashed password storage — your password is not stored in plain text; only a cryptographic hash is stored
• Two-factor authentication (2FA) available and recommended for all accounts
• Continuous security monitoring — intrusion detection system active 24/7
• Strict internal access controls — only authorised staff with a legitimate operational need may access user data
• Regular security audits by independent third parties
• Data storage on secure servers with physical and digital protection

While indo666 takes all reasonable precautions, no system can be guaranteed 100% secure. You are also responsible for maintaining the security of your own login credentials.

7 Data Retention Period

Indo666 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by law:

• Active account data — retained for as long as your account is active and for the required period following closure
• Financial transaction records — retained for the minimum period stipulated by applicable legal requirements (typically 5–7 years)
• KYC verification data — retained in accordance with applicable anti-money laundering regulatory requirements
• Technical logs — retained for 90 days for security and troubleshooting purposes

Once data is no longer needed and there is no legal obligation to retain it, indo666 will securely delete or anonymise it.

8 Your Rights

As an indo666 user, you have the following rights regarding your personal data:

To submit any request related to the above rights, please contact the indo666 customer support team via Live Chat. We are committed to processing requests within 30 calendar days.

9 Cookies & Tracking Technologies

Indo666 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The types of cookies used include:

• Essential Cookies — required for core platform functions such as login session verification and security. This cannot be disabled.
• Preference Cookies — to save your preferences such as language and display settings for a smoother repeat experience
• Analytics Cookies — to collect anonymised information on how users interact with the platform for improvement purposes
• Security Cookies — to help detect and prevent fraudulent activity and unauthorised access

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the indo666 platform.

10 Children's Privacy

The indo666 platform is not suitable and not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

If you believe a child has registered an account or provided personal data to indo666, please contact our support team immediately. We will take prompt action to remove that data and close the account in question.

11 Privacy Policy Amendments

Indo666 reserves the right to modify this Privacy Policy from time to time in response to changes in law, technology, or our operational practices. Any material changes will:

• Displayed on this page with an updated revision date
• Active users notified via in-platform notifications or email
• Takes effect within a reasonable period after notification, except for legally mandated changes which may take effect immediately

Continued use of the indo666 platform after any policy changes are published will be considered your acceptance of the updated policy.

12 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, you may contact us through the following channels:

• Live Chat — via the chat icon available at the bottom corner of the platform (available 24/7)
• Support email — [email protected] (response within 1–3 business days)

For data rights requests (access, correction, deletion), please clearly state the type of request and the identity verification information required for us to process it securely.