id678 is committed to protecting the privacy of every player. This Privacy Policy explains exactly what personal data we collect, how we use it, who we share it with, and the rights you hold over your information.
These cards highlight the core principles that govern how id678 handles your personal data. The full detail is in the clauses below.
All data transmitted between your device and id678 is protected by 256-bit SSL encryption. Stored passwords are hashed using industry-standard one-way algorithms. Financial data is handled under strict security protocols at every stage.
id678 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. Data shared with service providers is limited strictly to what is necessary for platform operation.
You have the right to access, correct, and request deletion of your personal data. Marketing communications can be opted out of at any time. Responsible Gaming self-exclusion requests are actioned within 24 hours.
id678 collects only the personal data that is strictly necessary for account management, payment processing, KYC compliance, and fraud prevention. We do not collect data speculatively or beyond operational requirements.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is reviewed for deletion upon account closure in line with our retention schedule.
Any marketing or promotional communications sent by id678 are clearly identified as such. You will never receive a communication from id678 that misrepresents its commercial nature or disguises a promotional message as a transactional one.
For the purposes of this Privacy Policy, the following definitions apply:
id678 acts as the data controller in respect of all Personal Data collected from Players through the id678 Platform. As data controller, id678 determines the purposes for which Personal Data is processed and the means by which that processing is carried out.
If you have any questions about how id678 processes your Personal Data, or if you wish to exercise any of your data rights as described in Clause 12, you may contact us at any time via the channels described in Clause 15.
id678 collects the following categories of Personal Data in the course of providing its services:
id678 collects Personal Data through the following methods:
id678 processes your Personal Data for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your id678 Account, including authentication and security. |
| Payment Processing | Processing deposits and withdrawals via supported Indonesian banking and e-wallet channels in IDR. |
| KYC & Age Verification | Verifying that you are at least 21 years of age and confirming your identity prior to withdrawal processing. |
| Fraud Prevention | Detecting and preventing duplicate accounts, collusion, money laundering, and other prohibited conduct. |
| Responsible Gaming | Monitoring gameplay patterns to identify problem gambling indicators and delivering appropriate interventions or self-exclusion tools. |
| Customer Support | Responding to enquiries, resolving disputes, and providing 24/7 Indonesian-speaking support via live chat and email. |
| Platform Improvement | Analysing aggregated usage data to improve game selection, interface design, and overall player experience. |
| Marketing Communications | Sending promotional offers, bonus notifications, and seasonal promotions where you have not opted out. You may opt out at any time. |
| Legal Compliance | Meeting obligations under applicable law, including data retention requirements and responses to lawful authority requests. |
id678 processes your Personal Data on the following legal bases:
id678 shares Personal Data with carefully selected third-party service providers who assist in operating the Platform. These providers are contractually bound to process data only on id678's instructions, to maintain appropriate security standards, and not to use the data for their own purposes. Categories of providers include:
id678 may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a court order, or a lawful authority request. id678 will disclose only the minimum data necessary to satisfy the legal obligation and will, where legally permissible, notify you of such a disclosure.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of id678's assets, Personal Data held by id678 may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to how your data is processed as a result.
id678 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own commercial or marketing purposes under any circumstances.
id678 is an internationally operated platform. Some of id678's third-party service providers — including cloud infrastructure partners and game content studios — may process Personal Data in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, id678 ensures that appropriate safeguards are in place, which may include:
By registering an Account with id678, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia as described in this clause.
id678 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of the Account plus 5 years following closure |
| KYC documents | Duration of the Account plus 5 years following closure |
| Financial transaction records | 7 years from the date of each transaction |
| Game play and wagering history | Duration of the Account plus 2 years following closure |
| Support communications | 3 years from the date of each interaction |
| Technical and session logs | 90 days on active storage; thereafter archived for up to 12 months |
| Marketing consent records | Until consent is withdrawn, plus 2 years for audit purposes |
Where retention is required by law, id678 will retain the relevant data for the period mandated by that law, even if it exceeds the periods set out above. Upon expiry of the applicable retention period, data is securely deleted or anonymised.
id678 implements a layered security architecture to protect your Personal Data from unauthorised access, loss, alteration, or disclosure. Key measures include:
id678 uses the following categories of cookies and similar tracking technologies on the Platform:
You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the id678 Platform — in particular, disabling strictly necessary cookies may prevent you from logging in or completing transactions.
For marketing cookies, you may withdraw consent at any time without affecting your Account status or access to the Platform's games and services.
Subject to applicable law and certain limited exceptions, you hold the following rights in respect of your Personal Data held by id678:
To exercise any of these rights, please contact id678 support via live chat or by email as described in Clause 15. id678 will respond to all data rights requests within 30 days of receipt. We may ask you to verify your identity before processing a request to protect against unauthorised access to your data.
The id678 Platform is strictly intended for adults aged 21 and over. id678 does not knowingly collect Personal Data from any individual under the age of 21. Age verification is conducted as part of the KYC process, and accounts where the holder is found to be under 21 are closed immediately, with any associated balance returned to the registered payment source.
If you have reason to believe that id678 has inadvertently collected Personal Data from a minor, please contact us immediately via the channels in Clause 15. Upon receiving such notification, id678 will promptly delete the data concerned and close the relevant account.
id678 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Where a material change is made, id678 will notify registered Players via an in-platform notification or a message to your registered contact address at least 7 days prior to the change taking effect, unless an immediate update is required for legal or security reasons.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the id678 Platform following any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any update, you should cease using the Platform and contact support to close your Account and request deletion of your Personal Data.
The most current version of this Privacy Policy is always available at https://id678.lat/privacy-policy.
If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how id678 processes your Personal Data, please contact us through the following channels:
When contacting id678 regarding a data rights request, please include your registered Account username and a description of the right you wish to exercise. We will acknowledge your request within 3 business days (WIB) and respond in full within 30 calendar days.
For responsible gaming matters — including deposit limit requests, self-exclusion, or cooling-off periods — please visit the Responsible Gaming page or raise the matter directly with a support agent. Such requests are treated as a priority and processed within 24 hours of confirmation.
id678 is built on transparency and trust. Explore our full range of games and sports markets, knowing your personal data is protected every step of the way.