Indo13 Privacy Policy – Personal Data Protection for Malaysian Players

indo13 is an online casino entertainment platform operating in Malaysia, catering exclusively to adult players aged 21 and above. In providing this service, the collection and processing of users' personal data is an unavoidable necessity. We fully recognise that privacy is an extremely sensitive and important matter for every individual, particularly in the context of using an online platform that involves financial transactions.

This Privacy Policy applies to all users who register an account, use any of our services, or simply visit the platform indo13. It covers all aspects of personal data processing — from initial collection at registration through to data deletion upon account closure. This Policy should be read together with Terms & Conditions indo13, and both documents together form the entire agreement between you and us.

indo13 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs the collection, processing, and storage of personal data in Malaysia. We regularly review our practices to ensure ongoing compliance with the latest developments in data protection law.

indo13 collects your personal data through several means — directly when you complete the registration form or submit documents for identity verification, automatically when you use our platform, and in certain cases through legitimate third parties such as payment service providers.

Data collected directly from you includes:

• Full name as stated on your MyKad or passport
• Valid Malaysian MyKad number or passport number
• Date of birth for age verification against the 21-year minimum
• An active Malaysian phone number (used for OTP and verification)
• Your personal email address
• Current residential address in Malaysia
• Payment method details — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow account details, or bank account numbers for FPX via Maybank2u or CIMB Clicks
• Supporting documents such as a copy of your MyKad or bank statement when requested for KYC purposes

Data collected automatically while you use the platform:

• IP address and network location information (for security and fraud prevention purposes)
• Web browser type, operating system, and device information (Android, iOS, PC)
• Login records including date, time, and session duration
• Game history, bets, wins, and losses across all games at indo13
• Records of all deposit and withdrawal transactions in MYR
• User interface interaction data for the purpose of improving user experience

indo13 uses the personal data collected for the following legitimate and necessary purposes:

• Account Management: Creating, maintaining, and managing your account on the platform indo13, including the login process, account recovery, and updates to personal information.
• Identity Verification (KYC): Fulfils legal requirements to verify user identity, ensure the minimum age requirement is met, and prevent use of the platform by ineligible individuals.
• Transaction Processing: Processing all deposits and withdrawals in Malaysian Ringgit (RM) via your chosen payment method — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u and CIMB Clicks.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or any unauthorised use of the platform that may compromise your safety or that of other users.
• Customer Support: Providing technical assistance and quality customer support in Bahasa Malaysia via live chat and email.
• Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal alerts, security notices, and platform policy updates.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including Anti-Money Laundering (AML) requirements and mandatory reporting to the relevant authorities where required.
• Responsible Gaming: Identifying potentially concerning gaming patterns and providing appropriate support as part of our responsible gaming programme.
• Platform Improvement: Analysing how the platform is used to identify areas for improvement and enhance the overall experience for Malaysian players.

indo13 will not use your personal data for any third-party marketing purposes without your prior explicit consent.

indo13 upholds the principle that your personal data will not be shared, sold, rented, or disclosed to third parties for commercial purposes. However, there are limited circumstances in which we may need to share your data for legitimate operational reasons:

Circumstances in which data may be shared with selected third parties:

• Payment Service Providers: Minimum transaction information necessary to be shared with payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX (Maybank, CIMB) to process your deposits and withdrawals in MYR.
• Game Providers: Minimum data necessary to be shared with game providers such as Evolution Gaming, Play'n GO, and Pragmatic Play in order to deliver live casino games such as Football Studio and European Roulette, as well as slot games such as Cat Wilde, Colossal Gems, and Triple Pandas.
• Competent Authorities: Where required by Malaysian law or the directive of a competent authority, indo13 may be required to disclose certain user data. We will only do so when legally obligated and strictly within the scope specified.
• Technical Service Providers: Companies that provide technical infrastructure, server hosting, and cybersecurity services to indo13 may have limited access to data in the course of carrying out their duties. All such providers are bound by strict confidentiality agreements.

indo13 implements multiple layers of technical and administrative security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All communications between your browser and the platform indo13 encrypted using 256-bit SSL — the highest industry standard, the same technology used by leading Malaysian banks such as Maybank and CIMB for their online banking systems.
• Stored Data Encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using robust encryption algorithms.
• Strict Access Controls: Access to user personal data within internal systems indo13 is strictly limited to staff with a legitimate business need only, and all access is logged and monitored.
• 24/7 Security Monitoring: Cybersecurity team indo13 continuously monitors our systems to detect and respond to any threats or suspicious activity in the shortest possible time.
• Regular Security Testing: We conduct regular penetration testing and security audits by independent experts to ensure our systems remain up to date and resilient against the latest security threats.
• Two-Factor Authentication (2FA): indo13 provides a two-factor authentication option for user accounts, adding an extra layer of security that keeps your account protected even if your password is compromised.

While we take all reasonable steps to protect your data, no security system can guarantee 100% protection under all circumstances. We encourage you to play your part in keeping your account safe by using a strong password and never sharing it with anyone.

indo13 retains your personal data for as long as your account remains active and for the required period following account closure to fulfil our legal obligations. Specifically:

• While Your Account Is Active: All personal data and activity records are retained for as long as your account remains active on the platform indo13.
• After Account Closure: Financial transaction records and KYC documents are retained for a minimum of 7 years following account closure, in compliance with Malaysia's applicable AML (Anti-Money Laundering) legal requirements.
• Communication Data: Customer support conversation records are retained for 3 years for quality control purposes and to resolve any disputes that may arise.
• Technical Log Data: Technical logs and security data are retained for 12 months for the purpose of security incident investigations where required.

Once the relevant retention period has expired and there is no legal requirement to retain the data further, your personal data will be securely deleted or anonymised using methods that ensure it can no longer be identified.

As a user of the platform indo13 and Malaysian citizens or residents protected under PDPA 2010, you have the following rights with respect to your personal data:

To exercise any of the above rights, please contact our support team indo13 via live chat within your account or by emailing [email protected]. Please include your account identification details to facilitate the identity verification process we are required to complete before acting on your request.

Platform indo13 uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting the overall functionality of the platform.
• Performance Cookies: Collecting information on how you use the platform indo13 — pages visited, time spent, and any technical errors. This data is collected anonymously and used solely to improve platform performance.
• Functionality Cookies: Remembering your personal preferences such as your chosen language (Bahasa Malaysia), display settings, and gaming preferences to ensure a more personalised experience each time you use the platform.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality and security of your platform experience indo13. We recommend keeping cookies enabled for the best and most secure gaming experience.

indo13 maintains a strict policy against access by minors and underage individuals. Our platform is exclusively for users aged 21 and above, and we do not knowingly collect personal data from underage individuals under any circumstances.

Should we discover that we have inadvertently collected personal data from someone under the age of 21, we will immediately take the following steps:

• Closing the associated account immediately
• Deleting all personal data collected from that user
• Refunding any remaining balance in the account

If you become aware that a minor has registered for or is using the platform indo13, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

indo13 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technologies used, legal requirements, or any other relevant factors. When material changes occur, we will:

• Updating the "Last Updated" date at the top of this page
• Publishing notices on the platform indo13 that notifies users of any changes made
• In the event of highly significant changes, sending a notification directly to your registered email address

We encourage you to review this Privacy Policy page regularly to stay informed about how we handle your personal data. Your continued use of the platform indo13 following the publication of any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how indo13 manage your personal data, we strongly encourage you to reach out to us. Our Bahasa Malaysia-speaking team is ready to assist you:

• Live Chat: The fastest option — available within the indo13 platform 24 hours a day, 7 days a week, including Malaysian public holidays
• Email: [email protected] — we aim to respond to all privacy-related enquiries within 24 hours

When contacting us regarding a privacy matter, please include your account ID number or username (without disclosing your password) so we can identify and process your request more quickly and accurately. All privacy-related communications are handled with complete confidentiality by our team.