Privacy Policy

This Privacy Policy ("Policy") describes how Indonet88 ("we", "us", "our", or "the Platform") collects, processes, stores, uses, and discloses personal data relating to individuals ("you", "your", "User", or "Player") who access or use the Indonet88 online gaming platform at https://indonet88.cam.

Indonet88 is committed to handling personal data responsibly and transparently. This Policy is intended to give you a clear understanding of our data practices so that you can make informed decisions about your engagement with the Platform. We recommend that you read this Policy alongside our Terms & Conditions.

By registering an account with Indonet88, making a deposit, or otherwise using the Platform's services, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. This Policy applies to all players regardless of geographic location, including our Malaysian player base across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial account information, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, Indonet88.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller, under written instruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data.
• "Cookie" means a small text file placed on your device by a website for the purpose of recording session information, preferences, or usage analytics.

Indonet88 acts as the Data Controller in respect of all Personal Data collected from players and visitors to the Platform. As Data Controller, Indonet88 determines the purposes for which your Personal Data is collected and the means by which it is processed.

Where Indonet88 engages third-party service providers (including payment processors, KYC verification services, and platform analytics providers) to process Personal Data on its behalf, those parties act as Data Processors and are subject to contractual obligations requiring them to process data only in accordance with Indonet88's instructions and this Policy.

Indonet88 collects Personal Data across several categories, depending on how you interact with the Platform. The table below summarises the principal data categories and specific data points within each:

Indonet88 collects Personal Data through the following channels and methods:

Indonet88 processes Personal Data on the following legal bases, as appropriate to the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions — including account creation, transaction processing, KYC verification, and bonus administration.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud detection, platform security, product improvement, and responsible gambling monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, record-keeping requirements, and law enforcement requests issued through lawful process.
• Consent: Processing activities for which you have provided explicit consent, such as receiving promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing undertaken prior to withdrawal.

Indonet88 processes your Personal Data for the following defined purposes:

• Account Management: Creating, maintaining, and administering your player account, including authentication, security checks, and profile updates.
• Transaction Processing: Facilitating MYR deposits and withdrawals via your chosen payment method, including reconciliation and dispute resolution.
• Identity Verification (KYC): Confirming your identity, age (21+), and source of funds in compliance with our operating standards and anti-money laundering obligations.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining a record of communications for quality assurance.
• Fraud Prevention & Security: Detecting and investigating suspicious behaviour, unauthorised account access, collusion, money laundering, and other prohibited activities.
• Responsible Gambling: Monitoring gameplay patterns to identify at-risk behaviour, administering self-exclusion requests, and enforcing deposit limits and session controls you have activated.
• Regulatory Compliance: Fulfilling record-keeping obligations, responding to lawful regulatory enquiries, and maintaining audit trails as required.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game performance, user interface design, and service quality.
• Marketing Communications (with consent): Sending promotional offers, bonus announcements, and platform updates to players who have opted in to receive such communications. You may unsubscribe at any time.

Indonet88 does not sell, rent, or disclose your Personal Data to third parties for commercial purposes. We share Personal Data only in the following limited and defined circumstances:

Indonet88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general framework:

• Account and Identity Data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of seven (7) years following the transaction date to satisfy financial record-keeping obligations.
• Gameplay Data: Retained for three (3) years from the date of the session, or longer where required for dispute resolution or regulatory audit purposes.
• Communications Data: Support chat transcripts and email correspondence are retained for two (2) years from the date of the last interaction.
• Technical and Log Data: Retained for twelve (12) months from the date of collection, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents recovery. Where anonymised data is retained for statistical or analytical purposes, it no longer constitutes Personal Data and is not subject to this Policy.

Indonet88 implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Personal Data stored in our databases is encrypted at rest.
• Access Controls: Personal Data access is restricted on a strict need-to-know basis. Staff with access to Personal Data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): 2FA is available on all player accounts and is strongly recommended. It is mandatory for staff accounts with administrative access to player data.
• Intrusion Detection: Our infrastructure is monitored continuously for suspicious activity. Anomaly detection systems alert our security team to unusual access patterns or potential breach attempts.
• Regular Security Audits: We conduct periodic penetration testing and security audits to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach affecting your Personal Data, Indonet88 will notify affected players without undue delay, describing the nature of the breach and the remediation steps taken.

While we employ robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access.

Indonet88 uses cookies and similar tracking technologies to operate the Platform, analyse usage patterns, and improve your experience. By continuing to use the Platform, you consent to the use of cookies as described in this section.

Subject to applicable law and any overriding legal obligations, you hold the following rights in respect of your Personal Data processed by Indonet88. To exercise any of these rights, please contact us using the details provided in Section 16.

Indonet88 will respond to all valid rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, notifying you of the extension and the reasons for it within the initial 30-day period.

Please note that certain rights may be limited where processing is required to comply with a legal obligation, to exercise or defend legal claims, or where conflicting rights of third parties are involved.

The Indonet88 Platform is strictly intended for persons aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21.

As part of our KYC verification process, all players are required to submit proof of age before withdrawals are processed. Where we discover that Personal Data has been submitted by an individual under 21 years of age, we will immediately close the associated account, void any pending transactions, and delete the relevant Personal Data in accordance with our data erasure procedures.

If you are a parent or guardian and believe that a minor has registered an account on the Platform, please contact us immediately at [email protected] so that we can take prompt remedial action.

As an online platform serving players across Malaysia and operating under international gaming licensing, Indonet88 may store or process Personal Data on servers located outside of Malaysia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, Indonet88 ensures that appropriate safeguards are in place, which may include:

• Contractual data protection clauses binding the receiving party to processing standards equivalent to those described in this Policy
• Technical security measures (encryption, access controls) applied consistently regardless of processing location
• Periodic review of third-party service providers' data security practices

By using the Indonet88 Platform, you acknowledge and consent to the transfer of your Personal Data to international servers and processing facilities as described in this section.

Indonet88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — that is, where they significantly affect the nature, scope, or legal basis of data processing — we will provide advance notice by email to the address registered to your account and/or through a prominent notice on the Platform, no later than 14 days before the changes take effect.

For non-material updates (such as corrections of typographical errors or clarifications that do not substantively alter processing activities), the revised Policy will take effect upon publication, as indicated by the updated "Last Updated" date at the top of this page.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with the amended Policy, you should cease using the Platform and may close your account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the Indonet88 Data Protection team through any of the following channels. All contact details are provided as plain text — please do not transmit sensitive personal information through unencrypted communication channels.

• Email: [email protected] — Please include "Privacy Request" in the subject line for faster routing. Response within 24 hours.
• Live Chat: Available 24/7 via the Platform — average response time under 5 minutes. Agents available in English, Bahasa Melayu, and Mandarin.
• WhatsApp: Available 24/7 — multilingual support including English and Bahasa Melayu.

When submitting a data rights request, please include: your full name, the email address registered to your account, a description of your request, and a copy of a government-issued photo ID to allow us to verify your identity before acting on the request. Identity verification is required to protect against unauthorised data disclosure.