Privacy Policy – indo6d Online Gaming Malaysia

01 Introduction

This Privacy Policy ("Policy") is issued by indo6d ("We", "Us", "Our", "Platform"), the operator of the online gaming services available at https://indo6d.lat and all associated subdomains, mobile interfaces, and applications. This Policy applies to all individuals who visit, register on, or otherwise interact with the indo6d platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations from which the Platform is accessed.

Indo6d takes the privacy and security of your personal data seriously. We process personal data only for the purposes described in this Policy and in accordance with our obligations under applicable data protection principles and our international gaming licence requirements. We do not process personal data in ways that are incompatible with those purposes.

By registering an account on indo6d, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this Policy, you should not use the Platform. Questions about this Policy may be directed to our support team at the contact details in Section 15.

Scope: This Policy applies to personal data processed in connection with your use of the indo6d platform. It does not apply to third-party websites, payment processors, or services linked from the Platform that operate under their own independent privacy policies.

02 Definitions

The following terms carry the meanings set out below throughout this Policy:

Term	Meaning
Personal Data	Any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. Includes name, email address, device identifiers, and transaction history.
Processing	Any operation performed on personal data — including collection, storage, use, disclosure, transfer, deletion, and anonymisation.
Data Subject	The individual to whom the personal data relates — in most cases, a registered indo6d player or platform visitor.
Data Controller	indo6d, as the entity that determines the purposes and means of processing personal data collected through the Platform.
Third-Party Processor	An external entity engaged by indo6d to process personal data on its behalf and under its instruction — such as a payment gateway, KYC verification provider, or hosting provider.
Cookies	Small text files placed on your device by the Platform to store session information, preferences, or anonymised analytics data.
KYC	Know Your Customer — the identity and age verification process carried out by indo6d before processing withdrawals or as otherwise required.

03 Data We Collect

Indo6d collects the following categories of personal data from members and platform visitors:

3.1 Registration Data

Full legal name
Date of birth (for age verification — minimum age 21)
Email address
Mobile phone number
Preferred currency (MYR as default for Malaysian players)
Username and encrypted password

3.2 Identity Verification (KYC) Data

Scanned copies of government-issued photo ID (MyKad, Passport)
Proof of address documents (utility bills, bank statements issued within 3 months)
Payment method verification documents (bank statement headers, e-wallet account names)

3.3 Financial Data

Deposit and withdrawal transaction records including amounts in MYR or cryptocurrency equivalent
Payment method identifiers (bank account suffix, DuitNow QR reference, Touch 'n Go eWallet account identifier, crypto wallet address)
Transaction timestamps, reference numbers, and processing outcomes

3.4 Gameplay and Behavioural Data

Game session logs (start time, end time, duration, wagers placed, outcomes)
Sports betting activity (markets accessed, stakes, results)
Bonus and promotion usage records
Responsible gambling tool usage (deposit limit settings, self-exclusion requests)

3.5 Technical and Device Data

IP address and approximate geographic location (city-level)
Device type, operating system, and browser version
Session identifiers and authentication tokens
Platform navigation patterns and feature interaction logs

04 How We Collect Data

Indo6d collects personal data through the following means:

Directly from you: When you complete the registration form, submit KYC documents, contact customer support, or update your account preferences.
Automatically during platform use: Through cookies, server logs, and analytics tools that record device identifiers, session data, and gameplay activity when you interact with the Platform.
From payment processors: Transaction confirmation data, payment reference numbers, and status updates provided by FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network confirmations.
From KYC verification providers: Results and confirmation flags from third-party identity verification services engaged to process document submissions, where applicable.
From fraud and AML detection systems: Risk scoring, device fingerprinting, and pattern analysis data generated by compliance and anti-money laundering tools operated in accordance with our licensing obligations.

05 Data Processing

Indo6d processes your personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and operating your registered account, including authentication, password recovery, and account preference management.
Transaction Processing	Processing deposits in MYR and cryptocurrency, executing withdrawal requests, and maintaining accurate financial records for your account.
Identity & Age Verification	Verifying that you are at least 21 years of age and that your identity matches the details provided at registration, as required by our licensing obligations.
Customer Support	Responding to queries, complaints, and support requests submitted via live chat, email, or WhatsApp in English, Bahasa Melayu, and Mandarin.
Fraud & AML Prevention	Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other prohibited activities under our Terms & Conditions.
Responsible Gambling	Operating self-exclusion systems, deposit limit controls, session reminders, and monitoring gameplay patterns to identify players who may need support.
Platform Improvement	Analysing anonymised or aggregated usage data to improve platform performance, user experience, game catalogue, and promotional offerings.
Legal Compliance	Meeting obligations imposed by our international gaming licence, applicable anti-money laundering frameworks, and lawful requests from competent regulatory authorities.

Indo6d does not use personal data for automated decision-making that produces significant legal effects on individuals without human review, except where required by AML compliance obligations.

06 Legal Basis for Processing

Indo6d processes your personal data on one or more of the following legal bases:

Contractual necessity: Processing required to deliver the services described in our Terms & Conditions — including account creation, deposit processing, withdrawal execution, and gameplay facilitation.
Legal obligation: Processing required to comply with our international gaming licence obligations, anti-money laundering requirements, and lawful directions from competent regulatory bodies.
Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and anonymised analytics — where these interests do not override your rights and freedoms.
Consent: Processing for optional communications such as promotional emails and SMS notifications, where you have expressly opted in. Consent may be withdrawn at any time via account settings.

07 Data Sharing & Disclosure

Indo6d does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

Payment processors: Transaction data shared with DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network partners solely to execute and confirm your payment instructions.
KYC and identity verification providers: Document data shared with licensed third-party KYC vendors for the sole purpose of verifying identity and age. KYC providers are bound by strict data processing agreements.
AML and fraud detection services: Anonymised or pseudonymised risk data shared with compliance technology providers to fulfil our anti-money laundering obligations.
Hosting and infrastructure providers: Technical access to personal data by cloud infrastructure and server hosting providers, who act as data processors under contractual data processing agreements.
Regulatory and law enforcement authorities: Indo6d will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or our licensing obligations.
Business transfers: In the event of a merger, acquisition, or sale of material assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

No Advertising Sharing: Indo6d does not share your personal data with third-party advertisers, social media platforms, or data analytics companies for advertising targeting purposes. Our cookie usage does not extend to cross-site behavioural advertising networks.

08 Cookies & Tracking Technologies

Indo6d uses cookies and similar technologies to operate the Platform and improve your experience. The following categories of cookies are used:

Cookie Type	Required?	Purpose
Essential	Always Active	Maintain your authenticated session, remember login state, and ensure the Platform functions correctly. Cannot be disabled without breaking core functionality.
Functional	Optional	Remember your language preference, display settings, and responsible gambling tool configurations between sessions.
Analytical	Optional	Collect anonymised data on page visits, feature usage, and session duration to help indo6d improve platform performance. Data is aggregated and not linked to individual accounts.
Security	Always Active	Support fraud detection, CSRF protection, and bot mitigation. These cookies do not track your behaviour across external sites.

You may manage non-essential cookie preferences within your account settings or via your browser's cookie controls. Disabling essential cookies will prevent you from accessing authenticated areas of the Platform. Indo6d does not use advertising or third-party tracking cookies.

09 Data Retention

Indo6d retains personal data for as long as necessary to fulfil the purposes described in this Policy, to comply with our licensing and legal obligations, and to resolve any disputes that may arise.

Active account data: Retained for the duration of your account's active status plus a minimum retention period thereafter as required by licensing obligations.
Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in line with standard AML record-keeping requirements.
KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
Customer support communications: Retained for 3 years from the date of the most recent interaction.
Anonymised analytics data: May be retained indefinitely as it cannot be linked to any identifiable individual.
Self-exclusion records: Retained for the duration of the exclusion period plus 5 years, to prevent re-registration in breach of exclusion terms.

Upon expiry of applicable retention periods, personal data is either securely deleted or irreversibly anonymised. Deletion requests submitted by users are assessed against retention obligations before action is taken.

10 Data Security

Indo6d implements a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, and destruction. Key technical and organisational measures include:

Transport encryption: 256-bit TLS encryption for all data in transit between your device and indo6d's servers.
Storage encryption: AES-256 encryption applied to personal data at rest within indo6d's databases and document stores.
Access controls: Role-based access restrictions limiting personal data access to authorised personnel on a need-to-know basis. All access is logged and auditable.
Two-factor authentication: Available for player accounts and mandatory for all internal administrative systems handling personal data.
Penetration testing: Regular third-party security assessments of platform infrastructure and APIs.
Incident response: A documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified in accordance with applicable regulatory requirements.

Your Responsibility: While indo6d takes comprehensive measures to protect your data, you are responsible for maintaining the confidentiality of your account credentials. Do not share your password with anyone. Indo6d support staff will never ask for your password. If you suspect unauthorised access to your account, contact live chat immediately.

11 User Rights

As a data subject, you have the following rights in relation to your personal data held by indo6d. To exercise any of these rights, please contact us at the details in Section 15. We will respond to all verified requests within 30 calendar days.

Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some corrections (such as name changes) may require supporting documentation.
Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and licensing retention obligations. Note that financial and AML records cannot be deleted within mandatory retention periods.
Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as while a rectification request is pending.
Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to indo6d for transfer to another controller.
Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. Objections to direct marketing will be actioned immediately.
Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw consent at any time via your account settings without affecting the lawfulness of prior processing.

Identity verification may be required before processing any data rights request. This is to ensure that we do not disclose or amend personal data in response to requests from unauthorised parties.

12 Minors & Age Verification

The indo6d platform is strictly intended for individuals aged 21 and above. Indo6d does not knowingly collect personal data from persons under 21 years of age. Age verification is a mandatory step in the KYC process and is enforced before withdrawal privileges are activated.

If indo6d identifies or receives credible notification that an account belongs to a person under 21, the following actions will be taken immediately:

The account will be suspended pending investigation.
All gameplay activity will be voided and stakes refunded to the deposit source.
All personal data associated with the minor's account will be deleted after mandatory AML retention obligations are met.
The incident will be reported to relevant authorities as required by our licensing obligations.

If you have reason to believe that a minor has registered on the indo6d platform, please report this immediately to our support team via live chat or at the email address in Section 15.

13 Cross-Border Data Transfers

Indo6d operates with server infrastructure and third-party service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, indo6d takes steps to ensure appropriate safeguards are in place, including:

Contractual data processing agreements requiring third-party processors to apply data protection standards equivalent to those described in this Policy;
Transfers to jurisdictions with recognised data protection frameworks or adequate legal safeguards;
Minimum necessary data sharing — only the personal data required to fulfil a specific processing purpose is shared with any given third party.

By using the indo6d platform, you acknowledge that your personal data may be transferred internationally as described above. If you have concerns about international data transfers, please contact us as described in Section 15.

14 Amendments to This Policy

Indo6d reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our licensing obligations, or our data processing practices. When material changes are made, we will notify registered members via a notice displayed on the Platform and, where practical, via email to your registered address.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the indo6d platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the indo6d data team through the following channels:

Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 via the Platform in English, Bahasa Melayu, and Mandarin
Data Rights Requests: Please include your full registered name, account username, and a description of your request to expedite handling

All data rights requests will be acknowledged within 5 business days and resolved within 30 calendar days unless exceptional complexity requires an extension, in which case you will be informed.

For further information about responsible gambling tools, self-exclusion, and deposit limits, please visit our Responsible Gambling page. For general platform information, visit our FAQ page.

Indo6d's support team operates 24 hours a day, 7 days a week. Average live chat response time is 3–5 minutes.