Indobet Privacy Policy – Your Personal Data Protection

1. Introduction

This Privacy Policy ("Policy") describes the practices of indobet ("We", "Platform") for collecting, using, storing, and protecting personal data in connection with all services offered on the website https://indobet.ml and its associated mobile applications.

Indobet operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We believe that privacy is more than a legal obligation — it is the foundation of trust we build with every member of our platform.

By registering an account or using indobet services, you agree to the collection and use of your information as described in this Privacy Policy. Please take a moment to read this document carefully as it contains important information about your rights regarding your personal data.

This Privacy Policy covers all channels through which you interact with indobet, including the website, mobile app, live chat, email, and any other communication methods we provide for our members' convenience.

2. Personal Data We Collect

We collect various types of personal data depending on how you interact with the indobet platform. The information collected is divided into the following categories:

3. Purpose of Personal Data Use

Indobet uses your personal data for clear and lawful purposes. Each data category is used strictly in accordance with the following functional requirements:

• Account management – to create, verify, and securely manage your account, including the login process and identity verification.
• Transaction processing – to process deposits, withdrawals, and all financial transactions related to your indobet account.
• KYC and AML compliance – to fulfil Know Your Customer (KYC) and anti-money laundering (AML) requirements in line with current legislation.
• Service improvement – to analyse platform usage patterns in order to improve the gaming experience, system performance, and user interface.
• Platform security – to detect and prevent fraud, account abuse, bot activity, and any other security threats.
• Service communications – to send important notifications related to your account, transactions, system updates, and promotional information you have opted in to receive.
• Customer support – to provide effective assistance when you contact the indobet support team.
• Responsible gaming – to monitor betting patterns and identify members who may need support in managing their gaming habits.

4. Data Sharing with Third Parties

Indobet does not sell or rent your personal data to any party. However, in the course of operating the platform, we may share limited information with the following parties for legitimate reasons:

• Payment providers – required financial information is shared with payment gateway providers such as FPX, DuitNow, Touch 'n Go, and others to process your transactions.
• Gaming service provider – third-party game providers (such as Pragmatic Play and Evolution Gaming) receive the minimum session data required to run the games.
• Technical infrastructure provider – cloud and hosting service providers acting as data processors under strict confidentiality agreements.
• Regulatory authorities – when required by law, we may need to disclose data to the relevant authorities.
• Identity verification service – approved third-party KYC providers to verify the identity of new members.

All third parties receiving personal data of indobet members are bound by comprehensive data processing agreements and are required to comply with data protection standards equal to or higher than indobet's own standards.

5. Personal Data Security

The security of your data is indobet's top priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL Encryption – all data transmitted between your browser or app and indobet's servers is protected using the latest SSL encryption.
• Encrypted password storage – your account password is never stored in plain text; we use an irreversible bcrypt hashing algorithm.
• Two-factor authentication (2FA) – an additional security layer that all members can enable to protect their account from unauthorised access.
• 24/7 security monitoring – an automated monitoring system that detects unusual activity and potential security threats in real time.
• Internal access controls – only authorised personnel with a legitimate business need may access members' personal data, with all access fully logged.
• Regular security audits – penetration testing and independent security audits are conducted regularly by certified cybersecurity firms.
• Certified data centres – your data is stored in licensed data centres compliant with ISO 27001 standards and subject to strict physical security controls.

6. Cookies & Tracking Technologies

Indobet uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect platform functionality. We do not use third-party cookies for external advertising purposes.

7. Your Rights Regarding Personal Data

As a data subject, you have the following rights guaranteed under Malaysia's PDPA and fully upheld by indobet:

To exercise any of the rights above, contact our Data Protection team via email at [email protected] or through live chat. We will process your request within 14 business days.

8. Data Retention Period

Indobet retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law:

• Active account data – retained for the duration your account is active and for 5 years after account closure for AML compliance purposes.
• Financial transaction records – retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements.
• Support communication logs – retained for 2 years for service improvement and dispute resolution purposes.
• Technical data and system logs – retained for 90 days before being automatically deleted.
• KYC Documents – retained for the duration the account is active and for 5 years after account closure.

Upon expiry of the retention period, your data will be securely deleted or fully anonymised using procedures that do not permit recovery. Data deletion is carried out on an automated schedule that is audited on a regular basis.

9. Amendments to the Privacy Policy

Indobet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service expansion. When any material amendments are made, we will:

• Displaying a clear notice on the platform's main page at least 14 days before amendments take effect.
• Sending notification emails to all registered members informing them of key changes.
• Updating the "Last Updated" date shown at the top of this document.

Your continued use of the indobet platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with any amendment, you have the right to close your account by contacting our support team.

10. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the indobet Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (displayed as plain text only)
• Live Chat: Available 24/7 on the indobet platform
• Response time: Within 14 working days for written requests

For data protection complaints that cannot be resolved directly with us, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) through their official channels.