indosurga88 Platform Privacy Notice

This page describes what we collect when you use indosurga88 and how we keep that data protected. We collect personal information—your name, email, phone number, date of birth, and identity documents—to verify your account and comply with anti-money-laundering regulations. We also collect transaction data, betting history, and device information to operate our platform securely and detect fraud.

We at indosurga88 do not sell your personal data to third parties. We share information only with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), compliance auditors, and law enforcement when legally required. Your data is encrypted in transit and at rest. We retain your information for as long as your account is active, plus seven years for regulatory compliance, then delete it securely.

Our privacy practices comply with applicable data-protection laws in the jurisdictions where we operate. You have the right to access, correct, or request deletion of your personal data. Contact our privacy team to exercise these rights. This notice applies to all users of indosurga88, regardless of location.

What Data We Collect and How We Use It

When you register on indosurga88, we collect your full legal name, email address, phone number, and date of birth. We use this information to create your account, verify your identity, and communicate with you about account activity, promotions, and service updates. We do not use your email or phone for marketing purposes unless you explicitly opt in.

We collect identity documents—your national ID (KTP, passport, or driver's license) and proof of address (utility bill, rental agreement, or bank statement)—to comply with Know-Your-Customer (KYC) and anti-money-laundering (AML) regulations. We store these documents encrypted and retain them for seven years after account closure for regulatory audit purposes. We do not share your identity documents with third parties except as required by law or to comply with regulatory requests from authorities in Jakarta, Surabaya, Bandung, Medan, Semarang, or other jurisdictions where we operate.

We collect transaction data—deposit amounts, withdrawal requests, payment methods used, and timestamps—to process your payments and detect fraud. We also collect betting history (games played, stakes placed, outcomes) to calculate your tier status, referral commissions, and promotional eligibility. This data is stored on our servers and is accessible only to authorized indosurga88 staff and our compliance team.

Device and usage data: We collect your IP address, browser type, device model, and operating system to detect unauthorized access, prevent account takeover, and improve platform performance. We do not track your location in real time, but we may infer your general region from your IP address for compliance purposes.

Third-Party Processors and Data Sharing

We share your payment information with our payment processors—DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank partners (mobile banking, local payment, online payment, e-wallet)—to process deposits and withdrawals. These processors are bound by confidentiality agreements and use your data only to facilitate transactions. We do not control their privacy practices; we recommend reviewing their privacy policies directly.

We may share aggregated, anonymized data with third-party analytics providers to understand platform usage patterns and improve our services. This data cannot identify you individually. We do not share your personal data with marketing partners, advertisers, or data brokers. We share data with law enforcement, regulators, or courts only when legally compelled by subpoena or court order.

Our servers may be located outside your jurisdiction. By using indosurga88, you consent to your data being transferred to and processed in countries where we operate. We apply the same security standards globally regardless of server location.

Your Rights and Our Data Protection Practices

You have the right to access your personal data held by indosurga88. Submit a request via our privacy contact form or email our privacy team; we will provide a copy of your data within 30 days. You have the right to correct inaccurate information—update your profile directly in your account settings or contact support. You have the right to request deletion of your data; we will delete your account and associated personal information within 90 days, except where we are legally required to retain it (e.g., for AML compliance, we retain transaction records for seven years).

We use encryption (TLS 1.2 or higher) to protect data in transit between your device and our servers. We hash passwords and do not store them in plaintext. We restrict access to personal data to authorized indosurga88 employees and contractors who need it to perform their duties. We conduct annual security audits and penetration testing to identify and remediate vulnerabilities.

Data breach notification: If we discover a security breach affecting your personal data, we will notify you via email within 72 hours and describe the nature of the breach, the data affected, and steps we are taking to remediate it.

Cookies and Tracking Technologies

We use cookies to remember your login session, store your language preference, and track your activity on indosurga88 for fraud prevention. Essential cookies are necessary for the platform to function; you cannot disable them. Optional cookies (analytics, marketing) are set only with your consent. You can manage cookie preferences in your browser settings; disabling non-essential cookies will not prevent you from using indosurga88, but some features may be limited.

We do not use cookies to track you across other websites. We do not sell cookie data to third parties. Our analytics provider (if used) operates under a data-processing agreement and cannot use your data for their own purposes.

Contact and Data Subject Rights

To exercise your privacy rights—access, correction, deletion, or data portability—contact our privacy team at [email protected] or via the privacy request form in your account settings. We will respond within 30 days. If you believe we have violated your privacy rights, you may lodge a complaint with your local data-protection authority.

Our services are available only where local law permits. We comply with applicable data-protection regulations in each jurisdiction where we operate. This privacy notice may be updated periodically; we will notify you of material changes via email or by posting a notice on indosurga88. Your continued use of the platform after changes are posted constitutes acceptance of the updated notice.

indosurga88 data protection and privacy team
Privacy officer and compliance lead

We take your privacy seriously. Our commitment is to collect only the data we need, protect it rigorously, and respect your rights. If you have questions about how we handle your information, contact us directly—we are here to help.