Privacy Policy

ink678 is committed to safeguarding the privacy of every player who accesses our platform. We understand that the personal information you share with us — whether during account registration, identity verification, or routine transactions — is sensitive, and we treat it accordingly. This Policy sets out a transparent account of our data-handling practices so that you can make informed decisions about using our Services.

We serve players primarily across Indonesia, including major cities such as Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Semarang, Bali, Palembang, and Makassar. Our data practices are designed to reflect both international privacy best practices and the specific expectations of Indonesian players who entrust us with their personal information.

This Policy applies to all personal data processed by ink678 in connection with the delivery of our Services, including sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), and all associated account management and customer-support functions.

In this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that directly identifies you or can reasonably be used to identify you, including your name, email address, phone number, financial information, device identifiers, and gameplay history.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" means ink678, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of ink678 in accordance with our instructions and this Policy.
• "Player" / "You" means any registered user of the ink678 platform.
• "Services" means the full range of gaming and betting products available on the ink678 platform, as defined in our Terms & Conditions.
• "KYC" means Know Your Customer — the identity and address verification process required for account compliance and player protection.
• "Cookies" means small data files stored on your device by your browser when you visit the ink678 platform.

ink678 collects Personal Data in several categories, depending on the nature of your interaction with the platform. The table below provides a structured overview of the categories of data we collect and examples of each type.

We collect your Personal Data through the following channels:

4.1 Direct Interactions

You provide Personal Data directly to ink678 when you register an Account, complete the KYC verification process, make a deposit or withdrawal, contact our customer support team, or respond to a survey or promotion. This is the primary source of identity, contact, and financial data.

4.2 Automated Technologies

When you access the ink678 platform, we automatically collect technical data about your device and browsing behaviour through cookies, web beacons, pixel tags, and server log files. This automated collection begins as soon as you visit our website, whether or not you are logged in to your Account.

4.3 Third-Party Sources

In limited circumstances, ink678 may receive Personal Data about you from third-party sources, including identity verification service providers used during the KYC process, payment processors and banking partners (such as BCA, BRI, BNI, Mandiri, and e-wallet providers including OVO, DANA, GoPay, ShopeePay, and LinkAja), fraud-detection and anti-money-laundering screening services, and analytics providers who supply aggregated audience-insight data. In each case, we satisfy ourselves that the third party has a lawful basis for sharing the data with us before we act on it.

4.4 Publicly Available Sources

We may supplement the Personal Data you provide with information that is lawfully available from public sources, such as publicly accessible social media profiles (where relevant to fraud investigations) or publicly available electoral or address registers, to the extent permitted by applicable law.

ink678 processes your Personal Data only for defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected. The primary purposes for which we process your Personal Data are as follows:

• Account Management: To create, maintain, and administer your ink678 Account, including processing your registration, updating account details, and managing account security.
• Identity Verification (KYC): To verify your identity, age (21+), and residential address in compliance with our responsible-gaming obligations and international anti-money-laundering requirements.
• Payment Processing: To process deposits and withdrawals in Indonesian Rupiah (IDR) via your registered bank account or e-wallet, and to maintain accurate transaction records.
• Service Delivery: To provide access to all gaming and betting products on the platform, including personalised game recommendations and balance management.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple Account registrations, bonus abuse, and other prohibited conduct.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, apply player-requested deposit limits and self-exclusion measures, and fulfil our duty-of-care obligations toward all players.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance via live chat, email, and WhatsApp in Indonesian and English.
• Legal Compliance: To comply with applicable laws, regulations, regulatory requests, and court orders, and to exercise or defend legal claims.
• Marketing Communications: Where you have opted in, to send you promotional offers, seasonal bonuses (including Ramadhan, Idul Fitri, and Indonesian Independence Day promotions), and platform updates via your preferred communication channel.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the functionality, performance, and design of the ink678 platform.

ink678 processes your Personal Data on one or more of the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary to perform our contract with you — namely, to operate your Account, process transactions, and deliver the Services you have signed up for.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC/AML requirements, responsible-gaming regulations, and any lawful regulatory or governmental requests.
• Legitimate Interests: Processing is necessary for our legitimate business interests — such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: For optional processing activities such as marketing communications and the use of non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ink678 does not sell your Personal Data to unaffiliated third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Service Providers

We engage trusted third-party service providers who process Personal Data on our behalf as Data Processors. These include KYC and identity verification providers, payment gateway operators, cloud hosting and infrastructure providers, anti-fraud and AML screening services, and customer-relationship management (CRM) platforms. All such providers are bound by contractual data-processing agreements that require them to handle your data in accordance with this Policy and applicable privacy law.

7.2 Game Studios & Content Partners

Certain technical data (such as a player session token and game result logs) may be shared with certified third-party game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe — solely to the extent required to deliver their respective game titles. These studios do not receive your identity or financial data.

7.3 Legal & Regulatory Disclosure

We may disclose your Personal Data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required by law, court order, or regulatory directive, or where we believe disclosure is necessary to protect the rights, property, or safety of ink678, our players, or the public.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of our assets, your Personal Data may be transferred to the relevant successor entity. We will notify you of any such transfer and the privacy implications before it takes effect.

ink678 retains your Personal Data for as long as your Account is active and for a reasonable period thereafter, in accordance with the following principles:

• Active Accounts: Personal Data associated with an active Account is retained for the duration of the account relationship, for the purposes described in this Policy.
• Closed Accounts: Following Account closure, we retain identity, financial, and transaction data for a minimum of five (5) years to comply with AML regulations, resolve any outstanding disputes, and respond to regulatory enquiries.
• KYC Documents: Identity verification documents are retained for at least five (5) years after the end of the business relationship, consistent with standard international AML/KYC retention requirements.
• Marketing Data: If you have opted into marketing communications and subsequently withdraw consent, we will remove your details from our active marketing lists within 30 days of receiving your opt-out request, while retaining a record of the opt-out itself for compliance purposes.
• Technical and Log Data: Server logs, IP address records, and session data are typically retained for 12–24 months before being anonymised or deleted.

Where retention beyond the standard periods is required for ongoing legal proceedings, regulatory investigations, or the exercise of legal claims, ink678 will retain the relevant data until those matters are resolved.

ink678 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ink678 platform is encrypted in transit using industry-standard TLS protocols, ensuring that your credentials and financial data cannot be intercepted.
• At-Rest Encryption: Personal Data stored on our servers is encrypted at rest using AES-256 encryption, providing a robust secondary layer of protection against unauthorised access to our data stores.
• Access Controls: Access to Personal Data within our organisation is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and regular security training.
• Multi-Factor Authentication: Administrative access to systems holding Personal Data requires multi-factor authentication (MFA), significantly reducing the risk of credential-based breaches.
• Penetration Testing: ink678 commissions independent security assessments and penetration tests on a regular basis to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, ink678 will notify affected players without undue delay, in accordance with our incident-response procedures.

ink678 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytical insights. The following categories of cookies are used:

You can control or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ink678 platform. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, and Edge).

ink678 respects your rights in relation to your Personal Data. Subject to applicable law and certain exemptions, you have the following rights:

• Right of Access: You have the right to request a copy of the Personal Data ink678 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete Personal Data be corrected without undue delay.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to our legal retention obligations described in Section 8.
• Right to Restriction: You have the right to request that we restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is contested.
• Right to Data Portability: You have the right to receive Personal Data you have provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team using the details in Section 16. We will respond to all verified requests within 30 days. Where requests are complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension within the initial 30-day period.

ink678 operates internationally and may transfer your Personal Data to countries outside of Indonesia where our service providers, data centres, or group entities are located. Wherever such transfers occur, we take appropriate safeguards to ensure that your Personal Data receives a level of protection consistent with this Policy, including:

• Entering into standard contractual clauses or data-processing agreements that impose equivalent data-protection obligations on the receiving party
• Transferring data only to jurisdictions that provide an adequate level of data protection, as determined by relevant regulatory guidance
• Applying additional technical measures — such as pseudonymisation or encryption — where appropriate to mitigate transfer risks

The ink678 platform may contain links to third-party websites, payment portals, or game-studio interfaces that are operated independently of ink678. This Privacy Policy applies solely to data processed by ink678 and does not extend to any third-party platforms. We encourage you to review the privacy policies of any third-party services you access through or in connection with our platform, as ink678 accepts no responsibility for their data-handling practices.

The ink678 platform is strictly intended for adults aged 21 and over. We do not knowingly collect or process Personal Data belonging to individuals under the age of 21. If we become aware that Personal Data has been collected from a person under 21 without verified parental consent, we will take immediate steps to delete that data and close the associated Account in accordance with our responsible-gaming policy.

ink678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-handling practices, applicable laws, or the Services we offer. When we make material changes, we will post a prominent notice on the platform and update the "Effective Date" at the top of this page at least seven (7) days before the changes take effect.

For significant changes that materially affect how we use your Personal Data, we may also notify you directly via the email address registered on your Account. Your continued use of the platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of the platform and contact support to close your Account.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how ink678 handles your Personal Data, please contact our dedicated support team through any of the following channels. Our native Indonesian-speaking agents are available 24 hours a day, 7 days a week.

• Live Chat: Available within your Account dashboard — average initial response time under 30 seconds during WIB peak hours (09:00–21:00).
• Email: [email protected] — we aim to respond to privacy-related enquiries within 2 business days.
• WhatsApp: Contact details are available within your Account dashboard once you are logged in.

When submitting a data rights request, please include your full name, registered email address, Account ID, and a clear description of the right you wish to exercise or the concern you wish to raise. This will allow us to locate your records and respond as quickly as possible.