Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by Indokasino (hereinafter "Indokasino", "we", "us", or "our"), the operator of the online gaming platform accessible at https://indokasino.cam. This Policy describes how we collect, use, disclose, store, and protect personal data relating to individuals (hereinafter "Player", "User", or "you") who register for, access, or use our services.

Indokasino is committed to handling personal data responsibly and in a manner consistent with applicable international data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework where applicable, and any relevant data privacy legislation in jurisdictions served by the Platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and Indokasino. In the event of any conflict between this Policy and the Terms & Conditions regarding data privacy matters, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, NRIC/passport number, IP address, payment details, and behavioural data.
• "Processing" — any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, storage, alteration, retrieval, use, disclosure, or deletion.
• "Data Controller" — Indokasino, as the entity that determines the purposes and means of processing personal data.
• "Data Processor" — any third party that processes personal data on behalf of Indokasino pursuant to a contractual arrangement.
• "Consent" — freely given, specific, informed, and unambiguous agreement by the data subject to the processing of their personal data.
• "KYC" — Know Your Customer; the identity verification process undertaken to comply with anti-money-laundering and age-verification obligations.
• "Platform" — the indokasino website and all associated services, games, features, and content at https://indokasino.cam.

Indokasino collects personal data in the following categories, depending on how you interact with the Platform:

Indokasino collects personal data through the following means:

1. Direct Collection: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or completing a preference or survey form.
2. Automated Technologies: Data collected automatically when you use the Platform, including via cookies, web beacons, pixels, and server log files that capture technical and behavioural data.
3. Third-Party Payment Providers: Transaction confirmation data and partial payment identifiers received from Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong, as part of the deposit and withdrawal process.
4. Identity Verification Services: Data returned by third-party KYC verification providers engaged to confirm the identity and age of Players prior to enabling withdrawals.
5. Fraud Prevention and Security Partners: Risk signals, device fingerprinting data, and fraud indicators shared by security service providers to protect the integrity of the Platform.

Indokasino processes personal data for specific, explicit, and legitimate purposes. The following table outlines our primary processing activities and the legal basis for each:

Indokasino does not sell, rent, or trade your personal data to third parties for commercial purposes. We may, however, share personal data with the following categories of recipients where necessary and lawful:

• Payment Service Providers: To process deposits and withdrawals in MYR via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, GrabPay, Boost, and other supported channels. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• KYC and Identity Verification Providers: Third-party services engaged to verify player identity and age as required under our regulatory and compliance obligations.
• Fraud Prevention and Security Services: Providers who assist in detecting, preventing, and investigating suspicious activity, money laundering, or platform abuse.
• Technology Infrastructure Providers: Cloud hosting, data storage, and content delivery providers engaged as data processors under contractual data processing agreements that require them to maintain appropriate security standards.
• Legal and Regulatory Authorities: Where we are required by law, court order, or competent regulatory authority to disclose personal data. We will disclose only the minimum information required to satisfy the lawful obligation.
• Professional Advisers: Lawyers, auditors, and insurers, subject to duties of confidentiality, where necessary for the operation of our business.

Given the international nature of our operations, personal data collected from Players in Malaysia may be transferred to, stored in, or processed by systems located outside Malaysia. Where such transfers occur, Indokasino takes steps to ensure that an adequate level of protection is applied to your personal data, including:

• Engaging only data processors that provide contractual commitments to apply appropriate technical and organisational security measures;
• Implementing standard contractual clauses or equivalent data transfer mechanisms where required;
• Ensuring that transferred data is used solely for the purposes described in this Policy.

By using the Platform, you acknowledge and consent to the transfer of your personal data to servers and processors located outside your country of residence, subject to the safeguards described above.

Indokasino retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Account and Identity Data: Retained for the duration of the account lifecycle and for a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of transaction in accordance with standard financial record-keeping requirements.
• Support Communications: Retained for up to three (3) years following the resolution of the relevant query or complaint.
• Marketing Consent Records: Retained for as long as you remain a subscriber and for a reasonable period thereafter to evidence opt-in consent.
• Technical and Analytical Data: Typically retained in aggregated or pseudonymised form for up to two (2) years for performance analysis purposes.

Indokasino implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including identity documents, payment identifiers, and KYC records;
• Access controls ensuring that personal data is accessible only to authorised personnel on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Multi-factor authentication for internal administrative access to systems containing personal data;
• Contractual obligations requiring all third-party processors to maintain equivalent security standards.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Indokasino will notify affected Players and relevant authorities in accordance with applicable law without undue delay.

The Platform uses cookies and similar tracking technologies to enhance your user experience, remember your preferences, and analyse how the Platform is used. The following categories of cookies may be placed on your device:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, authentication tokens, and security cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and session continuation across visits.
• Analytical/Performance Cookies: Collect aggregated, anonymised data on how Players interact with the Platform — page views, navigation paths, error encounters — to help us improve the user experience.
• Marketing Cookies: Where you have opted in to marketing communications, these cookies help us deliver relevant promotional content. These are not used for third-party advertising networks.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Most modern browsers provide options to block or delete cookies under the browser's privacy or settings menu.

Subject to applicable law and the conditions described herein, you have the following rights in relation to your personal data held by Indokasino:

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and aim to provide a full response within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days and will notify you accordingly.

The indokasino Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not access or use the Platform, provide any information through registration, or interact with any feature of the Platform.

If Indokasino becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete such data from our systems and close the associated Account. Any funds associated with an underage Account will be handled in accordance with our Terms & Conditions and applicable law.

Indokasino reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. Where changes are material, we will provide advance notice by:

• Displaying a prominent notice on the Platform;
• Sending an email notification to your registered email address; or
• Both of the above, depending on the significance of the change.

The "Last Updated" date shown at the top of this Policy reflects when the most recent revision was made. We encourage all Players to review this Policy periodically. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which Indokasino processes your personal data, please contact our Data Protection team using the details below:

You may also find answers to frequently asked questions about your account and our data practices on our FAQ page.