Privacy Policy
idr45 Platform

idr45 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access and use the idr45 online betting platform at https://idr45.cam ("Platform"). This Privacy Policy describes the types of personal information we collect, the purposes for which we process it, the parties with whom we share it, how long we retain it, and the rights available to you as a data subject.

This Policy applies to all users of the idr45 Platform, including visitors who browse without registering, registered account holders, and players who actively wager on sports, live casino, togel (Indonesia's traditional numbers lottery), slots, and other gaming products available on idr45.

By creating an account on idr45 or continuing to use the Platform after the effective date of any updated version of this Policy, you acknowledge that you have read, understood, and agreed to the practices described herein. If you do not agree, please discontinue use of the Platform and contact our team to request account closure.

The following terms are used throughout this Privacy Policy and carry the meanings defined below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, national identification number, email address, IP address, and financial account details.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" — idr45, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — A third party that processes personal data on behalf of idr45 under a written data processing agreement (e.g., payment processors, KYC verification providers).
• "Data Subject" — The natural person whose personal data is being processed — in this context, you as a player or visitor.
• "KYC" — Know Your Customer: the identity verification process through which idr45 confirms the identity and age of registered players.
• "Cookie" — A small text file placed on your device by a website to remember preferences and enable certain functionality.
• "AML" — Anti-Money Laundering: the regulatory framework requiring idr45 to monitor and report suspicious financial activity.

idr45 collects the following categories of personal data, depending on how you interact with the Platform:

idr45 collects personal data through the following mechanisms:

• Direct submission: Information you enter into registration forms, KYC document upload interfaces, payment request forms, and support correspondence on the idr45 Platform.
• Automated technical collection: Server logs, session tracking systems, and browser-based cookies that record technical and behavioral data when you visit or use the Platform.
• Third-party identity verification services: idr45 integrates regulated KYC technology partners to assist with document authentication and identity confirmation. These partners process data under strict contractual data-processing agreements.
• Payment processors: When you initiate a deposit or withdrawal, the relevant bank, e-wallet provider, or USDT network confirms transaction details to idr45 to enable correct posting to your account.
• Analytics providers: Aggregated, anonymized behavioral analytics are collected via privacy-compliant analytics tools to help idr45 improve platform performance, navigation, and user experience.

idr45 processes your personal data for the following defined purposes:

• Account management: Creating, maintaining, and securing your idr45 account, including authentication and password recovery.
• Identity verification (KYC): Confirming that you are at least 21 years of age and are the individual you claim to be, as required by responsible gaming and AML obligations.
• Payment processing: Facilitating deposits from and withdrawals to your registered BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or USDT accounts.
• Platform delivery: Providing access to all gaming products on idr45, including sports betting, live casino, togel draws, and slot games, and ensuring fair and accurate settlement of all wagers.
• Legal and regulatory compliance: Meeting AML reporting obligations, responding to law enforcement requests, and maintaining transaction records as required by applicable financial regulations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent account activity, unauthorized access, bonus abuse, and money-laundering attempts.
• Customer support: Responding to inquiries, resolving complaints, processing disputes, and communicating platform updates relevant to your account.
• Responsible gaming: Monitoring for problem gambling patterns, enforcing player-set limits, and facilitating self-exclusion requests as described in the idr45 Responsible Gaming policy.
• Marketing communications (opt-in only): Sending promotional offers, bonus notifications, and platform updates to players who have explicitly consented to receive such communications. You may opt out at any time.
• Platform improvement: Using aggregated and anonymized behavioral analytics to improve site performance, navigation design, and game discovery on idr45.

idr45 processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and idr45, including account registration, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with AML regulations, identity verification obligations, and responses to lawful law enforcement or regulatory requests.
• Legitimate interests: Processing undertaken for fraud prevention, platform security, and aggregated analytics, where such interests are not overridden by your privacy rights.
• Consent: Processing of data for optional marketing communications and certain non-essential cookies, where your explicit opt-in consent has been obtained. Consent may be withdrawn at any time without affecting processing already carried out.

idr45 does not sell your personal data to third parties under any circumstances. Data is shared only in the following limited and controlled scenarios:

• Payment processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and blockchain network operators for USDT transactions receive only the minimum data necessary to process your specific financial transaction.
• KYC and identity verification partners: Regulated third-party services engaged by idr45 to authenticate identity documents and confirm player age. These providers operate under data processing agreements prohibiting secondary use of your data.
• Game software providers: Pragmatic Play, Evolution Gaming, Spribe, PG Soft, and other studio partners receive anonymized session and game-result data for technical integrity and fair-play auditing purposes. Personal identity data is not transmitted to game studios.
• Law enforcement and regulatory authorities: idr45 discloses personal data to government bodies, financial intelligence units, or law enforcement agencies where required by a lawful court order, regulatory directive, or AML reporting obligation. idr45 will notify you of such requests where permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of idr45's operations, personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

idr45's primary servers are located in jurisdictions with adequate data protection standards. However, given the international nature of the Platform's technology infrastructure — which includes cloud providers, KYC partners, and game studios located in multiple countries — your personal data may be transferred to and processed in jurisdictions outside Indonesia.

Where such international transfers occur, idr45 ensures that appropriate safeguards are in place, including:

• Contractual data transfer clauses requiring recipient organizations to maintain equivalent data protection standards.
• Transfer only to jurisdictions where the applicable regulatory authority has assessed data protection standards as adequate.
• Use of encrypted channels for all cross-border data transmission.

By using the idr45 Platform, you consent to the transfer of your personal data to idr45's international processing infrastructure as described above, subject to the safeguards outlined in this Section.

idr45 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Account and identity data (KYC): Retained for a minimum of 5 years from the date of account closure, as required by AML regulations applicable to the idr45 licensing jurisdiction.
• Transactional data: Deposit records, withdrawal records, and bet settlement data are retained for a minimum of 5 years from the date of each transaction.
• Communication records: Support correspondence and complaint documentation are retained for 3 years from the date of resolution.
• Marketing consent records: Consent logs and unsubscribe records are retained for 3 years to demonstrate compliance with opt-in requirements.
• Technical and behavioral data: Anonymized aggregate analytics data may be retained indefinitely for platform improvement purposes. Individual-level behavioral data linked to your account is retained for the duration of your account plus 12 months.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where legal proceedings or regulatory investigations are ongoing, data may be retained beyond standard periods until resolution.

idr45 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, disclosure, or destruction:

• Encryption in transit: All data transmitted between your browser or app and idr45 servers is encrypted using TLS 1.2 or higher with 256-bit keys.
• Encryption at rest: Sensitive data fields — including financial account details, identity document scans, and KYC records — are encrypted at rest using AES-256.
• Access controls: Access to systems containing personal data is restricted to authorized idr45 personnel on a strictly need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication.
• Intrusion detection: idr45 employs automated monitoring systems that detect and alert on anomalous access patterns, brute-force login attempts, and unusual data export activity.
• Regular audits: Security controls are subject to periodic internal review and third-party penetration testing to identify and remediate vulnerabilities.
• Incident response: In the event of a data security incident that affects your personal data, idr45 will notify you within 72 hours of becoming aware of the breach, in accordance with applicable regulatory requirements.

idr45 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to provide core platform functionality, remember your preferences, and collect anonymized usage analytics. The types of cookies used on the idr45 Platform include:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These enable authentication, session management, and security features. They cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences such as display settings, language, and preferred payment method, to improve your experience across sessions on idr45.
• Analytics Cookies: Collect aggregated, anonymized data about how visitors interact with the idr45 Platform — page views, feature usage, navigation paths, and session duration — to help us improve the site.
• Marketing Cookies: Used only with your explicit consent to track referral sources and enable performance measurement of idr45 promotional campaigns. Marketing cookies can be disabled through your browser settings or by contacting our support team.

You can manage cookie preferences through your browser settings at any time. Blocking strictly necessary cookies will impair platform functionality. Blocking analytics or marketing cookies does not affect your ability to use idr45's core betting and gaming features.

As a data subject, you hold the following rights in relation to your personal data held by idr45. To exercise any of these rights, contact our support team at [email protected] with your registered email address and a clear description of your request.

idr45 will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days with notification and explanation provided to you. Requests are processed free of charge unless they are manifestly unfounded or excessive.

If you are a parent or guardian and believe that a minor in your care has registered an account on idr45, please contact our support team immediately at [email protected]. We will act promptly to investigate and resolve the matter.

The idr45 Platform integrates third-party services — such as game studios (Pragmatic Play, Evolution Gaming, Spribe, PG Soft) and payment providers — to deliver its full product suite. These third-party services operate under their own privacy policies and data practices, which idr45 does not control.

idr45 is not responsible for the privacy practices of third-party game studios, payment processors, or any external website that may be linked to from the Platform. We encourage you to review the relevant privacy policies of any third-party services you interact with directly.

All third parties engaged as data processors by idr45 are contractually bound to handle personal data only on idr45's documented instructions and to maintain confidentiality and security standards consistent with this Policy.

idr45 may update this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, or Platform features. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players by email at the address associated with their idr45 account at least 7 days before the changes take effect, except where immediate changes are required for security reasons or by regulatory mandate.
• Display a prominent notice on the idr45 Platform during the notification period.

Your continued use of the idr45 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must stop using the Platform and request account closure before the effective date.

For questions about this Privacy Policy, requests to exercise your data rights, or to report a suspected data breach, please contact the idr45 data protection team through the following channels:

If you are unsatisfied with idr45's response to a privacy complaint, you may escalate the matter to the relevant data protection authority in the jurisdiction applicable to your circumstances. idr45 will cooperate fully with any regulatory investigation of a data-related complaint.