Privacy Policy indo78 — Your Personal Data Security Is Our Top Priority

This Privacy Policy ("Policy") describes the personal data collection, use, disclosure, and protection practices carried out by indo78 ("Platform", "We", "indo78"). This document is designed to ensure that every user ("You", "Player") fully understands the rights and protections afforded to their personal information when using the indo78 platform.

Indo78 deeply respects your privacy and is committed to handling personal data in a transparent, responsible manner that complies with applicable data protection legislation. We believe your trust is the most valuable asset we must safeguard with the utmost integrity.

Indo78 collects various categories of information to provide you with a safe, seamless, and tailored service. The following are the categories of data we collect:

We do not collect sensitive information such as biometric data, medical records, or religious information unless required by law. All data collection follows the principle of minimisation — only data that is strictly necessary is collected.

Indo78 collects your personal data through various channels as follows:

• Account Registration: When you register a new account, you are required to provide basic personal information for identity verification and account setup.
• Identity Verification (KYC): During the KYC process, you will be required to upload a copy of your identification document, proof of address, and any other relevant supporting documents.
• Platform Usage: Technical data and game data are collected automatically when you use the platform, including activity logs, preferences, and wagering records.
• Financial Transactions: Information related to deposits, withdrawals, and transaction history is collected each time you carry out a financial transaction on the platform.
• Support Communications: When you contact our support team via live chat, email, or other channels, those conversations are recorded for reference and service improvement.
• Cookies & Tracking Technologies: Our platform uses cookies and related technologies to improve the user experience and analyse platform usage patterns.

Personal data collected by indo78 is used solely for the following legitimate and stated purposes:

• Account Management: To create, verify, and manage your account on the indo78 platform, including login processing and account security.
• Legal Compliance & KYC: To comply with anti-money laundering (AML) legal requirements, player identity verification, and applicable gambling regulatory compliance.
• Transaction Processing: To securely and accurately process all deposits, withdrawals, and financial transactions in accordance with your instructions.
• Platform Security: To detect, investigate, and prevent any fraudulent activity, security threats, system abuse, or violations of the terms of service.
• Service Improvement: To analyse usage patterns for the purpose of improving platform design, technical performance, and overall user experience.
• Service Communications: To send important account-related notifications, platform updates, relevant promotions, and pertinent service information.
• Responsible Gaming: To monitor gameplay patterns in order to identify players who may require support through our responsible gambling us.

Indo78 does not sell, rent, or disclose your personal data to third parties for marketing purposes. Data sharing only occurs in limited, specified situations as follows:

• Payment Service Providers: Minimum required data is shared with licensed payment processors such as FPX, digital wallet providers, and banks to facilitate the processing of your financial transactions.
• Game Service Providers: Basic account information is shared with third-party game software providers that supply game content on the indo78 platform, solely for technical purposes.
• Government Authorities: Information will be disclosed to law enforcement authorities, regulatory bodies, or government agencies when required by law or a valid court order.
• Analytics Services: Data that cannot directly identify an individual (anonymised data) may be shared with analytics providers to help us understand platform performance.
• Audit & Certification: Independent auditors and certification bodies conducting security reviews and compliance audits may be granted limited access to the data required.

All third parties that receive personal data from indo78 are bound by strict confidentiality agreements and are required to handle such data in accordance with protection standards equivalent to our own policy.

Indo78 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure:

• 128-bit SSL Encryption: All communications between your browser and indo78's servers are encrypted using the latest SSL/TLS protocols, ensuring that transmitted data cannot be intercepted by third parties.
• Encryption of Stored Data: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 algorithms.
• Firewall & Intrusion Detection System: Our servers are protected by multi-layered firewalls and intrusion detection and prevention systems (IDS/IPS) operating 24 hours a day.
• Two-Factor Authentication (2FA): You are encouraged to enable 2FA for an additional layer of protection on your account. All staff access to internal systems also requires 2FA.
• Regular Security Audits: We conduct regular penetration testing and independent security audits to identify and address any system vulnerabilities.
• Staff Training: All staff who handle personal data receive comprehensive data protection training and are bound by strict confidentiality agreements.

The indo78 platform uses cookies and similar tracking technologies to enhance your user experience. Cookies are small text files stored on your device when you visit our platform.

The types of cookies we use are as follows:

• Essential Cookies: These cookies are required for core platform functions such as login, session security, and navigation. The platform will not operate properly without them.
• Performance Cookies: These cookies help us understand how users interact with the platform, including the most frequently visited pages and response times. This information is used to improve platform performance.
• Functional Cookies: These cookies store your preferences such as preferred language, display settings, and login information to enhance your browsing experience.
• Analytics Cookies: We use analytics tools to collect aggregated, anonymised usage data to help us make data-driven decisions in improving the platform.

As an indo78 user, you have the following rights regarding your personal data, which we are committed to upholding:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you, including details on how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate, outdated, or incomplete personal data. Corrections will be made within 14 business days.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that some data may need to be retained to comply with legal obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data under certain circumstances, such as when you dispute the accuracy of the data.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes, and we will comply with such requests immediately.
• Right to Data Portability: You have the right to receive the personal data you provided to us in a machine-readable format to enable transfer to another service.

To exercise any of the above rights, please contact the indo78 support team. We will process your request within 30 days of receipt.

Indo78 retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. Our data retention policy is as follows:

• Active Account Data: For as long as your account remains active, your personal data will be retained to ensure you can access all indo78 services seamlessly.
• After Account Closure: Financial data and transaction records are retained for a minimum of five years after account closure to comply with anti-money laundering and tax legal requirements.
• KYC Records: Identity verification documents are retained for the period required by applicable regulations, typically between five and seven years.
• Communication Data: Support chat records and emails are retained for two years for reference and service improvement purposes.
• Technical Data: System logs and technical data are retained for 12 months before being automatically deleted.

When data is no longer needed and there is no legal requirement to retain it, we will delete or destroy it using secure, irreversible methods.

In the course of its operations, indo78 may transfer your personal data to servers or third parties located outside Malaysia. All international data transfers we conduct are subject to strict safeguards:

• Data transfers are only made to countries or entities that provide a level of data protection equivalent to or higher than that required under Malaysian law.
• Comprehensive data transfer agreements are signed with all international data recipients to ensure your data is handled to the required standard.
• We ensure all our international vendors comply with internationally recognised security standards such as ISO 27001 or equivalent.

Indo78 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any significant changes will be communicated to you via:

• In-platform notifications when you log in to your account.
• Email to the address registered in your account for changes that materially affect your rights.
• Update the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of the indo78 platform following any amendments constitutes your acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact the indo78 Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform.
• Response Time: We commit to responding to all privacy-related enquiries within two business days.