idxbigPrivacy Policy

This page describes what we collect when you use idxbig and how we keep that data protected. When you register an account, fund deposits via DANA, e-wallet, mobile banking, local payment, or bank transfer, or stream live-dealer games through our app, we gather information necessary to verify your identity, process your transactions, and deliver our service. We take data protection seriously and apply encryption, access controls, and privacy safeguards across all our systems.

Our privacy practices comply with regulations in jurisdictions where we operate—including Indonesia and any other territory where our services are available by law. We do not sell your personal data to advertisers or marketing firms. We do not share your account information with third parties except as required for payment processing, legal compliance, or fraud prevention. This policy outlines what information we hold, how long we retain it, and what rights you have over your data.

Please read this policy carefully. By using idxbig, you consent to our data collection and processing practices as described here. If you have questions or concerns about your privacy, contact our support team.

Information We Collect on idxbig

We collect several categories of information when you use idxbig. First, we gather account registration datayour email address, password hash, full name, date of birth, phone number, and residential address. This information is required to open and verify your account. Second, we collect payment informationtransaction history, payment method details (e.g., which DANA or e-wallet account you used), deposit and withdrawal amounts, and timestamps. This data is necessary for settlement and fraud prevention.

Third, we collect game play datawhich games you access, your stakes, your outcomes, and your account balance over time. This helps us track fair play, detect unusual patterns, and resolve disputes. Fourth, we collect device and access datayour IP address, device type (Android phone, iPhone, desktop), browser type, and approximate location. This helps us secure your account against unauthorized access and identify potential fraud. Fifth, we collect communication data if you contact our support team—your messages, support tickets, and our responses.

How We Use Your Data on idxbig

We use your personal data to deliver idxbig services. Your email and password verify your identity when you log in. Your name, date of birth, and address fulfill KYC regulatory requirements and enable us to detect duplicate accounts or fraudulent registrations. Your payment information processes deposits and withdrawals through mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, or local payment. Your game play data settles wagers, calculates your balance, and determines payouts on Liga 1 betting, live blackjack, Aviator slots, or any other game on idxbig.

We use device and access data to detect account compromise, prevent unauthorized logins, and block players accessing from restricted jurisdictions. We use communication data to respond to your support requests and maintain records of disputes or complaints. We do not use your data for targeted advertising, behavioral profiling, or sale to third parties. We do not combine your idxbig data with data from other websites or apps unless required by law enforcement.

Data Retention and Storage

We retain your data for as long as necessary to operate idxbig and comply with regulatory requirements. Account registration data is kept for the lifetime of your account plus seven years (to support regulatory audits and dispute resolution). Payment transaction records are retained for seven to ten years to satisfy financial compliance obligations. Game play data is kept for at least five years to enable outcome verification and fair-play investigations.

Our servers may be located outside your jurisdiction—including in Indonesia, Singapore, or other regions where we maintain data centers. Your data is encrypted in transit (using SSL/TLS) and at rest (using AES-256 or equivalent). We use access controls, firewalls, and intrusion detection to prevent unauthorized access. If we experience a data breach, we will notify affected users without undue delay and cooperate with authorities as required by law.

Third-Party Service Providers

We work with third-party vendors to operate idxbig. Our payment processors (who handle online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfer transactions) receive your name, account number, transaction amount, and date—but not your password or full payment history. Our email provider sends transactional messages (password resets, account verification, withdrawal confirmations). Our analytics vendor tracks aggregate traffic patterns and game performance—but cannot identify individual users.

All third-party vendors sign data protection agreements requiring them to apply equivalent security measures and use your data only for the services they provide to idxbig. We do not authorize any vendor to use your data for their own marketing or profiling purposes. If a vendor is acquired or changes ownership, we will notify you and provide an opportunity to opt out of data sharing.

We keep your data encrypted, access-controlled, and retained only as long as necessary to serve you fairly and comply with law.

Cookies and Tracking Technologies

Our idxbig app and web platform use cookies and similar tracking technologies to enhance your experience. Session cookies keep you logged in during your play session and expire when you log out or close the app. Persistent cookies remember your preferences (language, table limits, notification settings) across future visits. We do not use cookies to track your behavior across other websites or apps.

You can control cookie preferences through your device settings (for mobile apps) or browser settings (for web access). Disabling cookies may limit platform functionality—for example, you may need to re-enter your password on each visit, or your table preferences may not persist.

Your Data Rights on idxbig

You have the right to access your personal data held by idxbig. You can view your account registration, transaction history, and game play records by logging into your account. If you want a copy of all data we hold about you in a portable format, contact our support team and we will provide it within 30 days.

You have the right to correct inaccurate or outdated information. If your address, phone number, or name has changed, update it through your account settings or contact support. You have the right to request deletion of your data after your account is closed—we will delete non-regulatory data (such as game logs and device logs) after seven years, though payment records required by law will be retained. You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

Legal Obligations and Law Enforcement

We may disclose your personal data if required by court order, legal process, or government authority. This includes requests from Indonesian authorities, foreign law enforcement agencies, or regulatory bodies investigating fraud, money laundering, or other illegal activity. We will disclose the minimum information necessary to comply with such requests and will notify you when legally permitted to do so.

We may also disclose data if necessary to protect the rights, safety, or property of idxbig, our users, or the public—for example, to prevent fraud, investigate unauthorized account access, or respond to threats.

Updates to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or through a prominent notice on our platform. Your continued use of idxbig after posting of modified policy constitutes your acceptance of the updated terms. If you do not agree with any change, you may close your account and request data deletion (subject to legal retention obligations).

Contact and Accountability

Our privacy team is available to answer questions about this policy and your personal data. If you wish to exercise your data rights, file a complaint, or report a privacy concern, contact our support team through the idxbig app or website. We will respond to all data requests within 30 days. For users accessing idxbig from Jakarta, Surabaya, Bandung, Medan, Semarang, or other Indonesian jurisdictions, we are subject to Indonesian data protection laws and will comply with any inquiries from Indonesian regulatory authorities.

We commit to transparency and accountability in how we handle your data. Our encryption and access controls are regularly audited by external security vendors. If you discover a vulnerability in our data protection systems, please contact our security team immediately and we will investigate and remediate the issue promptly.

Your privacy is central to how we operate idxbig. We collect only the minimum data necessary to verify accounts, process payments, settle games, and prevent fraud. We do not monetize your data through advertising or sale. We protect your data with encryption and access controls. Your trust in idxbig depends on our commitment to privacy—and we take that responsibility seriously.