This Privacy Policy describes how ind126 ("we", "us", "our") collects, uses, stores, and discloses personal information when you access or use the ind126 platform at ind126.app. We are committed to protecting the privacy of all Members and visitors in accordance with internationally recognized data protection principles. Please read this policy carefully. By registering an Account with ind126 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.
Throughout this Privacy Policy, the following terms carry the meanings set out below.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, date of birth, email address, phone number, IP address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, transmission, disclosure, and deletion. |
| "Member" / "You" | Any individual who has registered an Account on the ind126 Platform or who browses the Platform as a visitor. |
| "Platform" | The ind126 website accessible at ind126.app, including all sub-pages, games, sportsbook, live casino, and mobile interfaces. |
| "Third-Party Service Provider" | Any external company or individual engaged by ind126 to perform services on its behalf, including payment processors, KYC verification providers, and IT infrastructure partners. |
| "Cookies" | Small text files placed on your device by the Platform to store session information, preferences, and anonymous behavioral analytics. |
2.1 Identity. ind126 acts as the data controller for all Personal Data collected through the Platform. As data controller, ind126 determines the purposes and means by which your Personal Data is processed.
2.2 International Operations. ind126 operates under an international gaming license and serves Members primarily located in Indonesia. Our servers and data infrastructure may be located outside of Indonesia. By using the Platform, you acknowledge that your Personal Data may be transferred to, stored in, and processed in jurisdictions outside Indonesia. ind126 takes all reasonable steps to ensure that such transfers are conducted in compliance with applicable data protection standards.
2.3 Contact for Data Matters. All data protection enquiries, access requests, and complaints should be directed to our dedicated support channel at [email protected] with the subject line "Data Privacy — [Your Account Username]".
3.1 Registration Data. When you create an Account on the ind126 Platform, we collect the following information:
3.2 Identity Verification (KYC) Data. To comply with our anti-money laundering obligations and to verify your age and identity, we may collect:
3.3 Financial Data. We collect transaction-related information including deposit amounts, withdrawal requests, payment method details (bank account numbers, e-wallet identifiers), transaction timestamps, and transaction reference numbers. ind126 does not store full card numbers or CVV codes — card-present transactions are handled by our PCI-DSS compliant payment processors.
3.4 Behavioral and Usage Data. As you interact with the Platform, we automatically collect:
3.5 Communications Data. When you contact ind126 customer support, we retain records of your messages, including live-chat transcripts, email correspondence, and any attachments you send. This data is used to manage your enquiry and to improve service quality.
3.6 Responsible Gaming Data. If you use any of the ind126 responsible gaming tools — including deposit limits, cooling-off periods, or self-exclusion — we record the settings you have applied. This data is used operationally to enforce your chosen limits and is treated with the highest level of sensitivity.
Note on Sensitive Data. ind126 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information — unless this is directly relevant to a responsible gaming assessment requested by the Member or required by a regulatory authority.
4.1 Directly from You. The majority of Personal Data we hold is information you provide directly — at registration, during KYC verification, when making deposits or withdrawal requests, when contacting customer support, and when completing promotional opt-in forms.
4.2 Automatically via Technical Means. Certain data is collected automatically when you access the Platform, using technologies including:
4.3 From Third Parties. ind126 may receive Personal Data about you from the following third-party sources:
ind126 processes your Personal Data only for specified, explicit, and legitimate purposes. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each processing activity.
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of contract — necessary to provide the Platform service you have requested |
| Age verification (21+ compliance) | Legal obligation — mandatory minimum-age verification under our licensing conditions |
| Identity verification (KYC/AML) | Legal obligation — required by anti-money laundering standards |
| Processing deposits and withdrawals | Performance of contract — necessary to facilitate financial transactions on the Platform |
| Fraud prevention and security monitoring | Legitimate interests — protecting Members and ind126 from fraudulent activity |
| Responsible gaming enforcement | Legal obligation and legitimate interests — protecting Members from gambling-related harm |
| Customer support | Performance of contract — responding to Member enquiries and resolving disputes |
| Platform analytics and improvement | Legitimate interests — improving the quality, safety, and usability of the Platform |
| Direct marketing communications | Consent — only where you have explicitly opted in to receive promotional communications from ind126 |
5.1 Withdrawal of Consent. Where ind126 processes your Personal Data on the basis of your consent (e.g., for direct marketing), you have the right to withdraw that consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing email we send. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6.1 We Do Not Sell Your Data. ind126 does not sell, rent, or commercially exploit your Personal Data to any third party for that party's own marketing purposes. Your data belongs to you.
6.2 Sharing with Third-Party Service Providers. To operate the Platform, ind126 engages trusted Third-Party Service Providers who process data strictly on our behalf and under our instructions. These include:
All Third-Party Service Providers are contractually bound to use your data only for the specific purpose for which it was shared, to maintain appropriate security standards, and to delete it once the service purpose is fulfilled.
6.3 Legal and Regulatory Disclosure. ind126 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of ind126, its Members, or the public.
6.4 Business Transfers. In the event that ind126 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected Members via the email address registered to their Account prior to any such transfer becoming effective, and the new data controller will be required to honor the terms of this Privacy Policy.
⚠️ AML Disclosure Obligation. ind126 is required to file reports with relevant financial intelligence authorities where it identifies or reasonably suspects transactions connected with money laundering or the financing of terrorism. Such disclosures are made without prior notification to the subject, as legally required.
7.1 Retention Periods. ind126 retains your Personal Data for as long as is necessary to fulfill the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. The following standard retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active Account plus 5 years after account closure |
| KYC / identity documents | Duration of active Account plus 5 years after account closure |
| Financial transaction records | 7 years from the date of each transaction (AML legal requirement) |
| Betting and game history | Duration of active Account plus 5 years after account closure |
| Customer support correspondence | 3 years from the date of the last communication in the thread |
| Responsible gaming records | Duration of exclusion period plus 10 years (self-exclusion records) |
| Cookie and analytics data | Up to 24 months from collection, depending on cookie type |
| Marketing opt-in records | Until consent is withdrawn, plus 2 years as proof of consent |
7.2 Deletion on Request. Subject to our legal retention obligations (particularly AML and gaming-license requirements), you may request deletion of your Personal Data by contacting [email protected]. Where a legal obligation requires us to retain specific data beyond your requested deletion date, we will inform you of the relevant retention basis and the earliest date on which deletion can occur.
8.1 Technical Safeguards. ind126 implements a comprehensive set of technical security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction:
8.2 Organizational Safeguards. Access to Personal Data within ind126 is governed by a strict role-based access control (RBAC) framework. Only employees whose job function requires access to specific categories of Personal Data are granted access, and all access events are logged. All staff with access to Personal Data undergo regular data protection training.
8.3 Data Breach Response. In the event of a Personal Data breach that poses a risk to Members, ind126 will notify affected Members as promptly as possible and within the timeframes required by applicable regulations. Notifications will be sent to the email address registered to the affected Account and will include: a description of the nature of the breach; the categories and approximate volume of data affected; the likely consequences of the breach; and the measures ind126 has taken or proposes to take to address it.
8.4 Your Responsibilities. The security of your Account also depends on steps you take to protect your credentials. You are responsible for: keeping your password confidential and not sharing it with any third party; enabling 2FA on your Account; logging out of your Account when using shared or public devices; and notifying ind126 immediately at [email protected] if you suspect unauthorized access to your Account.
9.1 What Are Cookies. Cookies are small text files stored on your device when you visit the ind126 Platform. They allow the Platform to recognize your device across page visits, remember your session state, and collect anonymous usage analytics.
9.2 Types of Cookies We Use.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent cross-site request forgery (CSRF), enable platform core functionality. Cannot be disabled. | Session / up to 24 hours |
| Functional | Remember your language preference, UI layout settings, and responsible gaming display preferences. | Up to 12 months |
| Analytics | Collect anonymized data on page views, game engagement, and navigation flows to improve Platform performance. No personally identifiable data is included in analytics reports. | Up to 24 months |
| Fraud Prevention | Device fingerprinting signals used solely to detect multi-account abuse and bot activity. Not shared with advertising networks. | Up to 6 months |
9.3 Managing Cookies. You can control cookie settings at the browser level. Most browsers allow you to refuse all cookies, accept all cookies, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging into your ind126 Account and using core Platform features. Disabling analytics or functional cookies will not prevent you from using the Platform but may affect your user experience.
9.4 No Third-Party Advertising Cookies. ind126 does not embed third-party advertising network cookies on the Platform. We do not share behavioral data with advertising exchanges or retargeting platforms.
As a Member of the ind126 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request — [Right Type] — [Your Account Username]". ind126 will respond within 30 days of receiving a valid request.
Request a copy of the Personal Data we hold about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
Request correction of any inaccurate or incomplete Personal Data we hold about you. Account name and date of birth corrections require supporting documentation.
Request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations under AML and gaming licensing rules.
Request that we restrict processing of your Personal Data — for example, while we verify the accuracy of data you have disputed — without deleting it outright.
Receive a copy of Personal Data you have provided to us in a structured, commonly used, machine-readable format (JSON or CSV), where technically feasible.
Object to processing of your Personal Data carried out on the basis of legitimate interests, including direct marketing. Marketing objections are honored immediately upon receipt.
Identity Verification for Rights Requests. To protect your privacy, ind126 will verify your identity before acting on any data rights request. We may ask you to confirm your registered email address, provide a copy of your ID, or answer security questions. This step is in place to prevent unauthorized parties from accessing or deleting your data.
11.1 Strictly Adults Only. The ind126 Platform is strictly intended for individuals aged 21 and over. We do not knowingly collect Personal Data from any person under the age of 21. If ind126 discovers or is notified that a person under 21 has created an Account or submitted Personal Data, we will immediately suspend the Account, delete the associated Personal Data to the extent permitted by law, and return any Balance to the originating payment method.
11.2 Reporting Underage Access. If you have reason to believe that a minor under the age of 21 has registered an Account on the ind126 Platform or has accessed your Account, please notify us immediately at [email protected]. We take underage access extremely seriously and will investigate all reports promptly.
11.3 Parental Controls. ind126 recommends that parents and guardians of minors use device-level content filtering and parental control software to prevent access to gambling platforms. ind126 does not make the Platform accessible in a manner targeted at individuals under 21.
12.1 Scope of This Policy. This Privacy Policy applies solely to the ind126 Platform at ind126.app. The Platform may integrate with third-party game engines, payment gateways, and support tools. While ind126 takes care to partner only with reputable providers, once you leave the ind126 Platform domain, the privacy practices of third-party services are governed by their own respective privacy policies, which ind126 does not control.
12.2 Game Provider Sessions. When you launch a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), your game session is served from that provider's infrastructure. These providers may collect device and session data necessary to deliver the game experience. Their data collection is governed by ind126's data processing agreements with each provider, which restrict their use of your data to game-service delivery purposes only.
12.3 Payment Gateways. When you initiate a deposit or withdrawal using a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), your transaction is processed through that provider's payment infrastructure. Your interaction with those providers is also governed by their own terms of service and privacy policies.
13.1 Right to Update. ind126 reserves the right to amend this Privacy Policy at any time. The most current version will always be published at ind126.app/privacy-policy, with the "Last Updated" date revised accordingly.
13.2 Notice of Material Changes. Where we make a material change to this Privacy Policy — such as introducing a new purpose for processing your data, changing the categories of third parties with whom data is shared, or altering data retention periods — we will notify active Members via their registered email address at least seven days before the change takes effect.
13.3 Continued Use. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised terms, you may close your Account by contacting [email protected] before the effective date of the change. Your real-money Balance will be returned to your verified withdrawal method in accordance with the Account Closure provisions of the ind126 Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way ind126 handles your Personal Data, please contact us through the following channel:
Data Privacy Enquiries:
Subject Line Format:
"Data Privacy — [Request Type] — [Your Account Username]"
Response Timeframe:
ind126 will acknowledge all privacy-related enquiries within 48 hours (WIB, UTC+7) and aim to provide a substantive response within 30 calendar days. Complex requests involving large volumes of data or requiring legal review may take up to 60 days; in such cases, we will notify you of the extension before the initial 30-day period expires.
Support Hours:
24 hours a day, 7 days a week, including Indonesian public holidays. Indonesian-speaking support agents are available at all times for Members who prefer to communicate in Bahasa Indonesia.
ind126 operates under an international gaming license and is not affiliated with any Indonesian government body. All Personal Data is processed in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and integrity and confidentiality.
Six core commitments that define ind126's approach to data privacy across every aspect of platform operations.
Every connection between your device and the ind126 Platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest — including KYC documents and financial records — is stored using AES-256 encryption. Your data is never transmitted in plain text.
ind126 does not sell, rent, or license your Personal Data to third-party advertisers or data brokers. Your information is shared only with service providers who are contractually bound to use it exclusively to operate the ind126 Platform on your behalf.
Role-based access control (RBAC) ensures that only authorized ind126 staff whose job function requires it can access your Personal Data. All internal data access events are logged and audited regularly by our security team.
ind126 does not hold your data indefinitely. Clear retention schedules govern every category of data we collect. Once the retention period expires and no legal obligation requires further storage, your data is securely and permanently deleted.
This Privacy Policy is written in plain, readable English — not dense legalese. We clearly explain what data we collect, why we collect it, and who we share it with. You always have the right to ask questions and receive straight answers.
ind126 is committed to honoring your data rights — access, rectification, erasure, portability, restriction, and objection. Submit a request to [email protected] and we will respond with a substantive answer within 30 days.
Your data is protected. Your privacy is respected. Now it's time to enjoy the games — from live sports betting and Mahjong to slots, Dragon Tiger, and the full ind126 Casino experience.