Privacy Policy

This Privacy Policy ("Policy") is issued by indo6d, the operator of the online betting platform accessible at https://indo6d.cam ("Platform"). It explains how indo6d collects, uses, stores, shares, and protects the personal data of individuals who register an Account on the Platform, visit the Platform without registering, or otherwise interact with indo6d's services ("you" or "Data Subject").

This Policy applies to all personal data processing activities carried out by indo6d in connection with the Platform and its associated services — including sports betting (covering football markets, bandar bola online betting, Asian handicap markets, and live in-play wagering), live casino, togel (Indonesia's traditional numbers lottery) pools, slots, and esports betting products. It applies regardless of how you access the Platform — desktop browser, mobile browser, or progressive web application.

This Policy should be read alongside indo6d's Terms & Conditions (available at https://indo6d.cam/terms-conditions) and Responsible Gaming Policy (available at https://indo6d.cam/responsible-gaming), both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on matters of data protection, this Policy shall prevail.

Indo6d collects personal data through three primary channels: information you provide directly during registration and Account use, information collected automatically when you interact with the Platform, and information obtained from regulated third-party verification providers during the KYC process. The table below sets out each category of data collected, its source, and its primary purpose.

Indo6d does not collect sensitive personal data categories — such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for unique identification purposes beyond standard KYC liveness checks, health data, or data concerning sexual orientation — except where this is incidental and unavoidable in a document you submit for KYC purposes. Where such data is incidentally collected, it is not processed for any purpose beyond identity verification.

Indo6d uses the personal data collected in the ways described below. Each use is tied to a documented purpose and a corresponding legal basis described in Section 4.

• Account Registration and Management: To create and maintain your Account, authenticate your identity at login, manage your preferences, and communicate Account-related information such as password reset confirmations, deposit credit notifications, and withdrawal status updates.
• Payment Processing: To process deposits and withdrawals via your nominated Indonesian bank account or e-wallet, verify that the payment method is registered in your own name, and maintain accurate transaction records in IDR.
• KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in accordance with international KYC standards, preventing underage gambling and unauthorized Account access.
• Regulatory Compliance and AML: To monitor transactions and betting patterns for indicators of money laundering, terrorist financing, match-fixing, or other prohibited activities; to file reports with relevant authorities where legally required; and to respond to lawful requests from regulatory bodies or law enforcement agencies.
• Responsible Gaming: To monitor betting behavior for indicators of problem gambling — such as escalating deposit frequency, extended session durations, or patterns consistent with chasing losses — and to trigger responsible gaming interventions including Account alerts, support outreach, and automatic deposit limit reminders.
• Fraud Prevention and Platform Security: To detect and prevent fraudulent Account creation, multi-accounting, bonus abuse, automated betting (bot activity), and unauthorized access attempts using device fingerprinting, IP analysis, and behavioral pattern recognition.
• Service Delivery and Improvement: To deliver the Sports Betting, Live Casino, togel, Slots, and Esports products; to resolve technical issues; to optimize Platform performance; and to develop new features informed by aggregate, anonymized usage analytics.
• Marketing Communications (Consent-Based): To send promotional emails, SMS notifications, and in-Platform messages about bonuses, seasonal promotions (Idul Fitri specials, Ramadhan cashback offers, Indonesian Independence Day tournaments), and new product launches — only to Players who have opted in to receive such communications.
• Customer Support: To respond to your inquiries through live chat and email, to maintain records of support interactions for quality assurance, and to use transcripts as evidence in the event of a dispute escalation.
• Legal Claims and Disputes: To establish, exercise, or defend legal claims arising from your use of the Platform, including chargeback disputes with payment providers and regulatory proceedings.

Indo6d processes your personal data on one or more of the following legal bases, depending on the processing activity involved:

Indo6d does not sell or rent your personal data. Data sharing is limited to the following categories of regulated recipients, each bound by contractual data processing obligations that restrict their use of your data to the specific purpose for which it was shared:

• Payment Processors and Banking Partners: Your Financial Data is shared with the relevant Indonesian payment infrastructure — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to process your deposits and withdrawals. Indo6d shares only the minimum data required to authorize each transaction.
• KYC and Identity Verification Providers: Your Identity Data and KYC documents are processed by indo6d's contracted identity verification service providers for the purpose of age verification, document authentication, and liveness checking. These providers are contractually prohibited from using your data for any purpose beyond the verification service.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe receive anonymized session tokens and game outcome data necessary to deliver their game products within the Platform. These providers do not receive your name, bank details, or contact information.
• Regulatory Authorities and Law Enforcement: Indo6d will disclose personal data to regulatory bodies, law enforcement agencies, or courts where legally required to do so — for example, in response to a valid legal process, to prevent serious harm, or to comply with AML reporting obligations. Indo6d will notify affected Players of any such disclosure to the extent permitted by law.
• Professional Advisors: Indo6d's legal counsel, auditors, and cybersecurity consultants may access personal data on a strictly need-to-know basis in the course of providing professional services, subject to professional confidentiality obligations.
• Business Transfers: In the event that indo6d undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material change to this Policy that results from it.

Indo6d uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform, maintain your login session, detect fraud, and — where you have consented — to personalize your experience and measure the effectiveness of promotional campaigns.

The Platform uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform operation. These cookies maintain your authenticated session, remember your preferred language and currency (IDR), store your in-progress bet slip data, and enable security features such as CSRF protection. These cookies cannot be disabled without disrupting Platform functionality.
• Performance and Analytics Cookies: Collect anonymized data about how visitors interact with the Platform — including which pages are visited most frequently, average session duration, and error rates. This data is used exclusively to improve Platform performance. These cookies are set only with your consent.
• Functional Cookies: Remember your preferences and customizations — such as your preferred sports market view or notification settings — to provide a more personalized experience between sessions. These cookies are set only with your consent.
• Marketing and Targeting Cookies: Used to deliver promotional messages that are relevant to your betting interests and to measure the effectiveness of indo6d's affiliate and promotional campaigns. These cookies are set only with your explicit consent and can be withdrawn at any time via your Account settings.

Indo6d retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the legal minimum retention periods set out below. Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymized.

Where a legal claim has been made or is reasonably anticipated, indo6d may extend the retention period for relevant data categories until the claim is fully and finally resolved.

Indo6d implements a layered security architecture designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, and unlawful disclosure. Key technical and organizational measures include:

• Encryption in Transit: All data transmitted between your device and indo6d's servers is protected by TLS 1.3 with 256-bit encryption. HTTP connections are automatically redirected to HTTPS. HSTS (HTTP Strict Transport Security) headers are enforced to prevent protocol downgrade attacks.
• Encryption at Rest: Sensitive data fields in indo6d's databases — including KYC document stores, financial data, and KTP/passport numbers — are encrypted using AES-256 with hardware security module (HSM)-protected key management.
• Access Controls: Access to systems containing personal data is restricted to authorized indo6d staff on a strict need-to-know basis. Multi-factor authentication (MFA) is mandatory for all staff access to production data environments. All access is logged and subject to automated anomaly detection.
• Penetration Testing: Indo6d conducts independent third-party penetration testing at least annually and after any material infrastructure change to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: Indo6d maintains a documented data breach response plan. In the event of a confirmed breach that is likely to result in a risk to your rights and freedoms, indo6d will notify affected Players without undue delay and no later than 72 hours after becoming aware of the breach, in accordance with applicable breach notification standards.
• Staff Training: All indo6d staff who handle personal data receive mandatory privacy and data security training upon onboarding and annually thereafter. Staff are subject to contractual confidentiality obligations that survive employment termination.

The Platform is strictly intended for adults aged 21 and above. Indo6d does not knowingly collect or process personal data from individuals under the age of 21. All Account registrations are subject to age verification as part of the KYC process, and Accounts where the holder is found to be under 21 are immediately suspended and closed.

If you are a parent or guardian and believe that a minor has registered an Account on the Platform or has otherwise provided personal data to indo6d without your knowledge or consent, please contact us immediately at [email protected]. Upon receiving such a report, indo6d will take immediate steps to verify the claim, suspend the Account, delete any personal data associated with the minor, and return any deposits to the originating payment method.

As an indo6d account holder or Platform visitor, you hold the personal data rights summarized in the quick-reference grid earlier on this page. This section provides the full procedural detail for exercising each right.

To submit any data rights request, send an email to [email protected] with the subject line "Data Rights Request — [Your Full Name]", specifying the right you wish to exercise and providing your registered email address and Account username for identification purposes. Indo6d will:

1. Acknowledge receipt of your request within 48 hours.
2. Verify your identity using the information held on your Account before processing the request. Additional identity verification documentation may be required for high-sensitivity requests (e.g., full data export or erasure requests).
3. Provide a substantive response within 30 calendar days of receipt. Where the request is particularly complex or numerous, this period may be extended by up to a further 60 days, with notice provided to you within the initial 30-day window.
4. Process the request free of charge in the vast majority of cases. Indo6d reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, repetitive, or excessive.

Please note that certain rights — particularly the right of erasure and the right to restrict processing — are subject to indo6d's overriding legal obligation to retain certain data categories for the minimum periods specified in Section 7. Where a request cannot be fulfilled in full due to a legal retention obligation, indo6d will explain the applicable constraint in its response.

Indo6d reserves the right to update this Privacy Policy at any time to reflect changes in applicable law or regulatory guidance, changes to the Services or data processing activities, changes in technical security standards, or updates to third-party service providers who process data on indo6d's behalf.

Where an amendment is material — meaning it substantively affects how your personal data is collected, used, or shared — indo6d will notify registered Players by email to the address on file and will display a prominent notice on the Platform for a period of not less than 14 days prior to the amendment taking effect.

Minor amendments — such as typographical corrections, clarifications that do not change the substantive meaning of a provision, or updates to contact information — may take effect immediately upon posting without prior notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Indo6d takes privacy seriously and has designated a Data Protection Officer (DPO) responsible for overseeing all personal data processing activities and ensuring compliance with this Policy and applicable data protection standards. The DPO is also the primary point of contact for regulatory inquiries related to data protection.

Indo6d is committed to resolving all privacy-related complaints promptly and fairly. If you are not satisfied with our response to a privacy complaint or data rights request, you may refer the matter to the relevant data protection authority in indo6d's regulatory jurisdiction for independent review.