Privacy Policy

id098 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our online sports betting and casino services at https://id098.pro. This Privacy Policy sets out, in clear and transparent terms, the categories of personal data we collect from players across Indonesia — including those in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, and beyond — the purposes for which we process that data, the parties with whom we may share it, the safeguards we have in place to protect it, and the rights available to you as a data subject.

id098 operates under an internationally recognised offshore gaming licence. While Indonesia does not currently have a comprehensive personal data protection framework identical to the European GDPR, id098 voluntarily adopts GDPR-aligned data protection standards as a matter of best practice, reflecting our commitment to international data privacy norms and the trust our players place in us.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which govern your use of the id098 Platform. In the event of any conflict between this Privacy Policy and those documents with respect to the processing of personal data, this Privacy Policy shall take precedence.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person ("data subject"). An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more factors specific to their identity.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Controller" — the entity that determines the purposes and means of processing personal data. For this Policy, id098 is the Controller of your personal data.
• "Processor" — a third party that processes personal data on behalf of the Controller, under the Controller's instructions and subject to a data processing agreement.
• "Player" or "You" — any individual who has registered an account on the id098 Platform, or who accesses the Platform without registering.
• "KYC" — Know Your Customer verification procedures, including identity verification and proof of address checks, carried out to comply with anti-money-laundering obligations and responsible gaming requirements.
• "Cookies" — small text files placed on your device by the id098 Platform to enable core functionality, analytics, and personalisation features as described in Section 8.
• "Sensitive Personal Data" — a special category of personal data whose processing carries heightened privacy risk, including but not limited to health data, biometric data, and religious or political beliefs. id098 does not intentionally collect Sensitive Personal Data unless expressly required by law or with your explicit consent.

id098 collects the minimum personal data necessary to operate a safe, compliant, and enjoyable betting platform. The categories of personal data we collect are set out in the table below:

id098 collects personal data through the following channels:

• Direct Interactions: You provide personal data directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotion.
• Automated Technologies: As you navigate and interact with the id098 Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies described in Section 8.
• Payment Processors: When you initiate a deposit or withdrawal via a local bank transfer (BCA, BRI, BNI, Mandiri, etc.) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), our payment processing partners transmit transaction confirmation data to id098 for account crediting and reconciliation purposes.
• Identity Verification Partners: Where id098 uses a third-party KYC verification service, that service may return a verified status flag and risk-score data alongside your submitted documents. The underlying document images are retained by id098 securely.
• Game Providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — return game-session results and round-level data to id098 for settlement, dispute resolution, and responsible gaming monitoring purposes.
• Publicly Available Sources: id098 may supplement identity or address data with information from publicly available sources (such as public record checks) where this is necessary for fraud prevention or KYC compliance.

id098 processes your personal data on the following lawful bases:

• Contractual Necessity: Processing your Identity Data, Contact Data, and Financial Data is necessary to perform the contract between you and id098 — specifically, to create and manage your account, process deposits and withdrawals, settle bets, and provide customer support.
• Legal Obligation: id098 is required to process KYC Document Data and Financial Data to comply with anti-money-laundering (AML) obligations, responsible gaming regulations, and the requirements of our offshore gaming licence.
• Legitimate Interests: id098 processes Technical Data and Usage Data on the basis of its legitimate interests in preventing fraud, maintaining platform security, improving the player experience, and managing business risk — provided those interests are not overridden by your privacy rights.
• Consent: Where id098 sends you direct marketing communications (e.g., promotional emails about BRI Liga 1 bonus offers, Idul Fitri cashback campaigns, or new slot releases), we do so on the basis of your consent, which you may withdraw at any time by updating your communication preferences in your account settings or by contacting support.

id098 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your id098 player account, including authentication, password reset, and account recovery.
• Transaction Processing: Crediting deposits from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; processing withdrawals to your verified payment method; and maintaining accurate financial records.
• KYC & Fraud Prevention: Verifying your identity and age (21+ requirement), detecting and preventing fraud, money laundering, and multi-accounting, and complying with AML obligations under our gaming licence.
• Responsible Gaming: Monitoring your gambling activity to identify signs of problem gambling, enforcing self-exclusion requests, maintaining deposit limit settings, and enabling reality checks and session time-outs as set by you.
• Customer Support: Responding to your queries via live chat and email ([email protected]), resolving disputes, and escalating complaints through our internal process.
• Platform Improvement: Analysing aggregated Usage Data and Technical Data to improve platform performance, fix bugs, optimise the user experience, and develop new features — including better in-play betting interfaces and slot discovery tools.
• Marketing Communications: Sending you personalised promotional offers, bonus notifications, and seasonal campaign emails (e.g., Ramadhan cashback offers, Independence Day promos) where you have provided consent to receive such communications.
• Legal & Regulatory Compliance: Maintaining records required by our licensing authority, responding to law enforcement requests, and enforcing our Terms & Conditions.

id098 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: We share your name and bank account or e-wallet identifier with our payment processing partners (including those facilitating BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) solely to execute your deposit and withdrawal instructions.
• KYC Verification Providers: Where we use a third-party identity verification service, we transmit your submitted KYC documents to that provider under a data processing agreement. The provider acts solely as our Processor and is prohibited from using your data for any other purpose.
• Game Studios: Game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive a session token and anonymised player identifier to initialise game sessions. They do not receive your full name, financial data, or contact information.
• Fraud Prevention & Security Partners: We may share Technical Data (IP address, device fingerprint) with specialist fraud prevention partners to identify and block suspicious activity, including bot usage and multi-accounting.
• Legal Authorities: id098 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when legally compelled to do so, or when we believe in good faith that disclosure is necessary to protect the safety of our players, prevent financial crime, or comply with our licensing obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of id098's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any change to the applicable privacy policy via email and a prominent notice on the Platform.

id098 uses cookies and similar tracking technologies to operate the Platform and enhance your experience. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences, and enable secure transactions. These cookies cannot be disabled without preventing the Platform from operating correctly.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use the id098 Platform — for example, which pages are visited most frequently, where players encounter errors, and how long sessions typically last. This data helps us improve platform performance and fix issues faster.
• Functionality Cookies: These cookies remember your choices — such as language preference, odds format, and time zone (defaulting to WIB, UTC+7) — to personalise your experience on return visits.
• Targeting & Personalisation Cookies: With your consent, we use these cookies to deliver relevant promotional content — for instance, displaying BRI Liga 1 bonus offers to players who frequently bet on Indonesian football, or showing slot gacor (high-payout slot) recommendations based on your game history.

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the id098 Platform. Disabling analytics or targeting cookies will not affect core functionality but will reduce the personalisation of your experience.

id098 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply:

When the applicable retention period expires, id098 securely deletes or anonymises the relevant personal data so that it can no longer be attributed to you as an identifiable individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business analysis purposes.

id098 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security controls include:

• Transport Layer Encryption: All data transmitted between your browser or app and the id098 servers is encrypted using TLS 1.2 or higher (256-bit AES encryption), ensuring that your credentials, financial data, and personal information cannot be intercepted in transit.
• Data-at-Rest Encryption: Sensitive data stored in our databases — including KYC document images and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within id098 is restricted on a strict need-to-know basis. Staff members access only the data necessary for their role. All administrative access is logged and audited.
• Two-Factor Authentication: id098 supports two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to add an additional layer of protection to your account credentials.
• Regular Security Audits: Our platform and infrastructure undergo periodic third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, id098 will notify affected players without undue delay, and no later than 72 hours after becoming aware of the breach, including details of the nature of the breach and the steps we are taking to address it.

As a player on the id098 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us via live chat or at [email protected] (displayed as plain text — not a clickable link):

• Right of Access: You may request a copy of the personal data id098 holds about you at any time. We will provide this in a structured, commonly used, and machine-readable format within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update most account details directly within your id098 account settings; for changes to KYC-verified data (such as your legal name or date of birth), please contact our support team and provide supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request that id098 delete your personal data. We will comply with erasure requests where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other lawful basis for processing. Note that we are legally required to retain certain financial and KYC data for the periods set out in Section 9, and erasure requests cannot override these obligations.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute is being investigated — you may request that id098 restrict the processing of your personal data rather than delete it outright.
• Right to Data Portability: You have the right to receive the personal data you have provided to id098 in a structured, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis. You also have an absolute right to object to direct marketing at any time, by updating your communication preferences or contacting support.
• Right to Withdraw Consent: Where id098 processes your personal data on the basis of consent — for example, for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

id098 will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you within the initial 30-day window and explain the reason for the extension. There is no fee for exercising your data rights under normal circumstances.

The id098 Platform is strictly for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires players to confirm their date of birth, and our KYC programme verifies age through government-issued identification.

If id098 discovers — whether through KYC verification, a parental notification, or any other means — that a player account has been registered by an individual under the age of 21, we will immediately suspend the account, return any deposits made (minus bonuses), void any winnings, and permanently delete the personal data associated with that account in accordance with our responsible gaming obligations.

id098 operates servers and engages service providers in multiple jurisdictions. As a result, your personal data may be transferred to, stored in, and processed in countries outside Indonesia. Where such transfers occur, id098 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within Indonesia, including:

• Data processing agreements incorporating standard contractual clauses with all third-party processors located outside Indonesia.
• Transfer only to jurisdictions that, in id098's assessment, provide an adequate level of data protection by law or through binding contractual obligations.
• Encryption of personal data in transit across all international data transfers, as described in Section 10.

By registering an account with id098 and accepting this Privacy Policy, you consent to the transfer of your personal data to countries outside Indonesia where such transfers are necessary to provide the Services to you.

id098 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, our gaming licence requirements, or the features and services available on the Platform. When we make material changes to this Policy, we will notify registered players by email and by posting a prominent notice on the id098 Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the date on which the most recent version of this Policy came into effect. We encourage you to review this page periodically. Your continued use of the id098 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, please cease using the Platform and request account closure via our support team.

Previous versions of this Privacy Policy are available on request — please contact [email protected] if you require a copy of a prior version for reference purposes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by id098, please reach out to our Data Protection team through the following channel:

For requests to exercise your data rights (access, rectification, erasure, portability, or objection), please include your registered email address and a brief description of your request so our team can verify your identity and process your request promptly. We will not process data rights requests from unverified individuals to protect the security of our players' accounts.

For responsible gaming concerns — including self-exclusion requests or concerns about underage access — please visit our Responsible Gaming page or contact support immediately via live chat. These requests are treated as the highest priority by our support team.