Privacy Policy Indowd – Your Data, Our Responsibility

Indowd collects several categories of information from our users — directly when you interact with the platform, and automatically through technology embedded in our services.

1.1 Information You Provide Directly

This is data you provide directly when registering, completing your profile, or communicating with our team:

• Full legal name as per official identification.
• Active email address used for login and communications.
• Phone number for account verification and notifications.
• Date of birth for minimum age verification of 18 years.
• Identity documents (national ID, passport, or other official documents) for the KYC process.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Residential address used for identity verification.

1.2 Information Collected Automatically

When you use the indowd platform — whether via browser or mobile app — some technical information is collected automatically:

• IP address and general location information.
• Device type, operating system, and browser version in use.
• Game session data including start time, duration, game type, and betting history.
• Deposit and withdrawal transaction history with timestamps.
• Interaction data with the platform interface (pages visited, features used).

Every piece of data we collect is used for specific, legitimate, and transparent purposes. Here is the full breakdown:

We do not use your data for any purpose beyond those listed above without first obtaining your explicit consent.

Every personal data processing activity carried out by indowd has a valid legal basis. We rely on one of the following grounds depending on the context of use:

• Contract performance: Data processing required to deliver the services you signed up for, such as account creation, deposit processing, and game operation.
• Legal obligation: Data processing to meet regulatory obligations, including KYC identity verification and transaction reporting in accordance with applicable anti-money laundering requirements.
• Legitimate interests: Processing for platform security, fraud prevention, and overall service improvement — without overriding your rights.
• Consent: For marketing communications and promotional notifications, we always request your explicit consent and provide the option to withdraw it at any time.

Indowd does not sell or rent your personal data. However, under certain limited and controlled circumstances, we may need to share some of your data with trusted third parties to operate our services effectively:

• Payment gateway providers: Minimal transaction data required to process your deposits and withdrawals. All our payment providers are licensed and bound by strict confidentiality agreements.
• Game provider: Game session information required for games to run properly on your account. Providers such as Evolution Gaming and Pragmatic Live have their own independent privacy policies.
• Regulatory authorities and law enforcement: We are required to comply with official requests from regulatory bodies or law enforcement agencies that have legal jurisdiction over our operations. This is done only where a legal obligation applies.
• Technical service providers: Such as cloud infrastructure providers, anonymous analytics services, and cybersecurity tools — all contractually bound not to use your data beyond the scope of services provided to indowd.

Indowd uses cookies and similar technologies to enhance your experience on the platform. The following are the categories of cookies we use:

• Essential cookies: Required for the platform to function properly. Without these cookies, key features such as login, game cart, and session preferences will not work. These cookies cannot be disabled.
• Functional cookies: Remembering your preferences such as language, display settings, and login details so you do not have to re-enter them each time.
• Analytics cookies: Helps us understand how users interact with the platform on an anonymous and aggregated basis, so we can continuously improve our services.
• Security cookies: Used to detect suspicious activity, prevent fraud, and ensure the integrity of your login session.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some platform features, but will not prevent you from accessing Indowd's core services.

We implement comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or accidental destruction.

• In-transit data encryption using 256-bit TLS/SSL.
• At-rest data encryption for sensitive information stored in the database.
• Role-based access control — only staff with a direct need can access specific data.
• Audit logs for every access to and modification of personal data.
• Regular penetration testing by our internal security team and independent third parties.
• Documented incident response procedures for fast and accurate handling of data breaches.

Regarding data retention, we store your personal data for as long as your account is active and for the period required to fulfill legal obligations after account closure — generally between 5 and 7 years in accordance with regulations applicable to our operating jurisdiction. After that period, data is securely deleted or anonymized.

As the owner of your personal data, you have a number of protected rights that you can exercise at any time by contacting the indowd support team:

Indowd is committed to responding to all rights-related requests within 30 calendar days. For complex requests, we may extend the response period by up to 60 days with prior notice to you.

Indowd services are exclusively intended for individuals aged 18 and above. We do not knowingly collect or process personal data from minors.

If you are a parent or guardian who becomes aware that a minor has registered on our platform by providing false age information, please contact Indowd customer support immediately. We will promptly close the account in question and delete all collected data.

As a platform operating in the global digital environment, some of your data may be processed or stored on servers located outside Indonesia. This applies primarily to cloud infrastructure services and international payment processing.

Indowd ensures that all international data transfers are carried out with adequate safeguards, including:

• Use of service providers located in jurisdictions with equivalent or higher data protection standards.
• Application of Standard Contractual Clauses binding data recipients in the destination country to protect data in accordance with our standards.
• Data encryption prior to transfer to ensure confidentiality throughout the transmission process.

By using Indowd's services, you consent to this international data transfer, which is carried out with the protective measures described above.

Indowd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or technological developments that affect how we manage user information.

Any material changes — meaning changes that significantly affect your rights or how we use your data — will be communicated through:

• Notifications displayed when you log in to the platform after changes take effect.
• Email notification sent to the address registered to your account.
• Update of the "Last Updated" date at the top of this page.

We encourage you to review this page periodically to stay informed on how Indowd protects your personal data. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise any of the rights described in Section 7, please contact the Indowd customer support team, available 24 hours a day, 7 days a week via live chat on the platform.