Privacy Policy

idn45 is an internationally operated online casino and sports betting platform serving English-preference players primarily located in Indonesia. We operate under an internationally issued gaming licence and take our obligations with respect to personal data protection seriously.

This Policy applies to all personal data collected through:

• The idn45 website accessible at https://idn45.cam and any mobile-optimised versions thereof.
• Any registration, KYC verification, deposit, withdrawal, or customer support interaction conducted through the Platform.
• Communications between you and idn45 via email, live chat, or any other supported channel.
• Cookies, web beacons, and similar tracking technologies deployed on the Platform as described in Clause 6.

This Policy does not apply to third-party websites, payment processors, or identity verification services that may be linked from or integrated with the Platform. Those services operate under their own independent privacy policies, and we encourage you to review them.

We collect personal data in the following categories. We collect only information that is necessary for a specific, legitimate purpose.

idn45 uses personal data for the specific, documented purposes listed below. We do not use your data for any purpose incompatible with these stated purposes without first obtaining your consent or establishing a new lawful basis:

• Account Administration: To create, maintain, and close your Member account, authenticate your identity on each login, and enforce the one-account-per-person policy.
• KYC & Age Verification: To verify that you are a natural person aged 21 or older and resident in a jurisdiction from which idn45 accepts Members. This is a legal and regulatory obligation we cannot waive.
• Transaction Processing: To process IDR deposits via supported Indonesian banks and e-wallets, and to execute withdrawal requests to your verified payment account.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, bonus abuse, and other conduct prohibited under our Terms & Conditions.
• Regulatory Compliance: To maintain the financial records required under applicable anti-money-laundering (AML) regulations and to respond to lawful information requests from competent authorities.
• Responsible Gaming: To monitor wagering activity for signs of problem gambling behaviour, enforce self-exclusion requests, and apply deposit or session limits set by the Member. Usage data is analysed to identify at-risk patterns and trigger appropriate interventions.
• Customer Support: To respond to enquiries, resolve disputes, and maintain records of support interactions for quality assurance and audit purposes.
• Platform Improvement: To analyse aggregated, anonymised usage patterns in order to improve game offerings, website performance, and user experience. No individual is identified in this analysis.
• Marketing Communications (opt-in only): To send promotional offers, bonus notifications, and seasonal campaigns — for example, around Idul Fitri, Ramadhan, or BRI Liga 1 season highlights — exclusively to Members who have explicitly opted in. You may withdraw consent at any time.

For each purpose for which we process your personal data, we rely on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, transaction processing, and KYC verification — is carried out because it is necessary to deliver the service you have signed up for.
• Legal Obligation: Certain processing activities, particularly financial record-keeping, AML compliance, and responses to regulatory requests, are mandated by law and we have no discretion to decline them.
• Legitimate Interests: Fraud detection, security monitoring, platform analytics, and responsible gaming interventions are carried out on the basis of our legitimate interest in operating a secure, fair, and sustainable platform. We have assessed these interests and found that they are not overridden by your privacy rights.
• Consent: Marketing communications and the setting of non-essential cookies are conducted solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

idn45 does not sell your personal data. We do not share your data with third parties for their own commercial purposes. The following limited disclosures are made strictly as necessary to operate the Platform and fulfil our legal obligations:

All third-party processors engaged by idn45 are contractually bound to process your data only on our documented instructions, to implement appropriate technical and organisational security measures, and to delete or return your data at the conclusion of their engagement.

In the event that idn45 is acquired by, merged with, or transfers substantially all of its assets to another entity, your personal data may be transferred as part of that transaction. You will be notified via the email address registered on your Account prior to any such transfer taking effect, and you will retain your rights to request deletion or portability of your data.

The idn45 Platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, detect fraud, and (with your consent) analyse usage patterns. The following categories of cookies may be set:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be declined because they are essential to the service. No consent is required for strictly necessary cookies.
• Functional Cookies: Used to remember your preferences — such as preferred language display, session time-limit settings, and responsible gaming reminder intervals. These cookies are set on the basis of your use of Platform features; disabling them may reduce functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Members navigate the Platform — which pages are visited most, how long sessions last, and where navigation issues occur. This data is used exclusively for internal platform improvement. Analytics cookies are set only with your consent.
• Marketing Cookies: idn45 does not currently deploy third-party advertising or retargeting pixels. If this changes in the future, this Policy will be updated and renewed consent will be sought before any marketing cookies are set.

You may manage cookie preferences through your browser settings at any time. Blocking strictly necessary cookies will prevent you from logging in and using the Platform. Blocking analytics cookies will have no impact on your ability to use the service.

idn45 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention schedule is as follows:

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised using industry-standard methods. Anonymised data (from which no individual can be identified by any reasonable means) is not subject to deletion obligations and may be retained for platform analytics indefinitely.

Where a Member requests deletion of their personal data (see Clause 8), idn45 will process the request promptly but is entitled to retain any data for which a legal retention obligation exists, notifying the Member of the specific categories retained and the basis for retention.

As a Member of the idn45 Platform, you hold the following rights in respect of your personal data. These rights are exercisable by contacting idn45 support as described in Clause 12. We will respond to all valid requests within 30 calendar days:

The idn45 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age under any circumstances.

In line with our age verification obligations, all Members are required to pass identity verification confirming that they meet the minimum age requirement prior to making a deposit or placing a wager. Any account discovered to belong to a person under 21 will be immediately closed, all balances forfeited, and the relevant data purged from our systems within 30 days, except where retention is required for fraud or legal reporting purposes.

idn45 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our measures include:

• Transport Security: All data transmitted between your device and idn45 servers is encrypted using TLS 1.2 or higher (256-bit). Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Data-at-Rest Encryption: Personal data and financial records stored on idn45 infrastructure are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and rotated on a scheduled basis.
• Access Controls: Access to Member personal data within idn45's operational systems is restricted to personnel who require it to perform their documented roles. All internal access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): idn45 offers — and strongly recommends — two-factor authentication for Member account logins. Enabling 2FA significantly reduces the risk of unauthorised account access even if your password is compromised.
• Penetration Testing: The Platform undergoes regular third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to Member rights, idn45 will notify affected Members via their registered email addresses within 72 hours of becoming aware of the breach, in accordance with applicable data-protection obligations.
• Third-Party Security Standards: All third-party processors engaged by idn45 are required by contract to maintain security standards at least equivalent to those described in this clause, and to notify idn45 of any breach affecting Member data without undue delay.

While idn45 implements robust security controls, no system is completely immune to attack. Members are encouraged to use a strong, unique password for their idn45 Account, enable 2FA, and contact support immediately if they suspect unauthorised activity.

idn45 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will:

• Update the "Last updated" date displayed at the top of this page.
• Send a notification email to all registered Members at their registered email address, providing at least 14 days' advance notice before the changes take effect.
• Display a prominent notice on the Platform homepage for a minimum of 30 days following any material amendment.

Your continued use of the Platform after the effective date of any amendment to this Policy constitutes your acknowledgement of the revised terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure and data deletion in accordance with Clause 8 before the effective date.

We recommend that Members bookmark this page and review it periodically to remain informed of how idn45 handles their personal data. Minor editorial or structural updates that do not affect the substance of our data practices will be made without individual notification, though the "Last updated" date will always reflect the most recent revision.

For all privacy-related enquiries, data rights requests, or concerns about how idn45 handles your personal data, please contact us using the details below. All correspondence must be submitted in English to ensure accurate handling by our compliance team.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the supervisory authority in your jurisdiction, or to the data protection authority in the jurisdiction of idn45's operating entity. Details of the relevant authority will be provided upon request.