Privacy Policy

ink798 is committed to protecting the privacy and personal data of all players who use our online gaming platform. This Policy has been drafted in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and applicable data protection laws in the jurisdictions in which we operate.

This Policy applies to all personal data collected through the ink798 website, including account registration forms, deposit and withdrawal workflows, customer support interactions, and platform usage analytics. It applies equally to players accessing the platform from Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and all other locations in Indonesia, as well as any other geographic location from which the platform is accessed.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between ink798 and registered players. Where this Policy refers to obligations or rights set out in the Terms & Conditions, those references incorporate the relevant provisions by reference.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or indirectly (e.g., name, email address, bank account details, IP address, device identifier).
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Controller" — ink798, which determines the purposes and means of processing personal data.
• "Data Processor" — any third-party service provider that processes personal data on behalf of ink798 under a contractual data processing agreement.
• "Data Subject" — the individual to whom personal data relates; in this context, registered players of ink798.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
• "KYC" — Know Your Customer; the identity verification process used to confirm a player's identity and comply with anti-money laundering (AML) obligations.
• "Cookie" — a small data file stored on a user's device by a website, used to remember preferences and track session behaviour.

ink798 collects personal data across the following categories, limited strictly to what is necessary for the purposes described in this Policy:

ink798 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our customer support team, or respond to a survey or promotion. This represents the primary source of personal data held by ink798.

4.2 Automated Technical Collection

When you visit or interact with the ink798 platform, we automatically collect certain technical data via cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser configuration, and session activity. This data is collected to maintain platform security, detect fraudulent behaviour, and improve the overall player experience.

4.3 Third-Party Sources

In some circumstances, ink798 may receive personal data from third-party sources, including:

• KYC and identity verification service providers engaged to confirm the authenticity of documents submitted during account verification
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, and approved e-wallet providers) who may share transaction confirmation data
• Fraud prevention databases and sanctions screening services, used to identify individuals or entities subject to legal restrictions
• Publicly available sources, where relevant to compliance or responsible gaming obligations

ink798 processes personal data only where a valid lawful basis exists. The applicable bases are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including operating your account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and reporting duties to relevant regulatory authorities.
• Legitimate Interests: Processing carried out in pursuit of ink798's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given consent, particularly in relation to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ink798 uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and administering your player account, including processing login requests, updating account details, and managing account closure.
• Transaction Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, and processing withdrawal requests to verified payment methods.
• Identity Verification: Conducting KYC checks to confirm your identity, verify your age (minimum 21 years), and ensure the legitimacy of your payment methods in accordance with AML obligations.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the platform.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, enforcing self-exclusion and deposit limit requests, and providing appropriate support referrals.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality and consistency of our support services.
• Legal Compliance: Meeting our obligations under applicable laws, including regulatory reporting, record-keeping requirements, and responding to lawful requests from competent authorities.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the design, functionality, and content of the ink798 platform.
• Promotional Communications: Sending you information about bonuses, promotions, and platform updates where you have provided consent or where we have a legitimate interest in doing so, with clear opt-out mechanisms provided in every communication.

ink798 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including payment processing, KYC verification, fraud detection, IT hosting, and customer support technology. These providers act as Data Processors under binding contractual agreements that restrict their use of your data to the specific purposes for which it was shared and require them to maintain appropriate security standards.

7.2 Regulatory and Legal Authorities

ink798 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory mandate. We will, where legally permitted, notify you of such a disclosure requirement.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or a portion of ink798's business assets, personal data held by the Company may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices of the successor entity before your data is transferred.

7.4 Responsible Gaming Authorities

Where required by our responsible gaming obligations or licensing conditions, ink798 may share relevant information with third-party responsible gaming organisations or self-exclusion scheme operators to enforce exclusion requests and protect player welfare.

ink798 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by the applicable regulatory framework.
• Customer Support Records: Retained for three (3) years from the date of the final interaction, to support dispute resolution and quality assurance.
• Technical and Usage Data: Retained for up to twenty-four (24) months from collection, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent, to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

ink798 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the ink798 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Secure Data Storage: Personal data is stored on servers protected by firewalls, access controls, and intrusion detection systems. Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
• Access Controls and Authentication: ink798 enforces strong password policies and multi-factor authentication for internal system access. Player accounts are protected by password hashing and session management controls.
• Regular Security Audits: The platform undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Employee Training: All ink798 personnel with access to personal data receive mandatory data protection and security awareness training upon onboarding and on an ongoing annual basis.
• Incident Response: ink798 maintains a documented data breach response procedure. In the event of a confirmed breach that poses a risk to your rights, we will notify affected players and relevant authorities within the timeframes required by applicable law.

ink798 uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve performance, and to understand how players interact with our services.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to operate. These cookies enable core functions such as session management, user authentication, and security. They cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where errors occur. This information is used solely to improve platform performance.
• Functional Cookies: Enable the platform to remember your preferences (such as language settings and display options) to deliver a more personalised experience.

10.2 What We Do Not Use

ink798 does not deploy advertising cookies, cross-site tracking cookies, or third-party behavioural profiling cookies. We do not share cookie data with advertising networks or social media platforms.

10.3 Managing Cookies

You may control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, disabling strictly necessary cookies may prevent you from accessing certain features of the ink798 platform. Instructions for managing cookies in common browsers are available through your browser's help documentation.

Subject to applicable law, you hold the following rights in respect of the personal data that ink798 processes about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed. We will respond within thirty (30) days of a verified request.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data held in your account. Where data has been shared with third parties, we will inform them of the correction where reasonably practicable.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML and financial regulation requirements.
• Right to Restriction: You may ask us to restrict processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contractual obligation, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected] with clear identification of your request. We may require identity verification before processing your request to protect against unauthorised access to another person's data.

The ink798 platform is strictly for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

If ink798 discovers or is notified that an account has been registered by or on behalf of an individual under the age of 21, we will immediately suspend the account, void any associated transactions, and permanently delete the personal data collected, unless retention is required for legal or regulatory reasons.

If you believe a minor has gained access to the ink798 platform, please notify us immediately at [email protected]. We take age restriction compliance extremely seriously and will act on all credible reports without delay.

ink798 operates internationally, and your personal data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, ink798 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Safeguards used for international transfers may include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with third-party processors located outside Indonesia
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection
• Binding corporate rules or equivalent intra-group data transfer mechanisms where applicable

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting our support team.

ink798 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. The "Last Updated" date at the top of this document will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or how we use your personal data — ink798 will notify registered players via email at least fourteen (14) days before the revised Policy takes effect. For non-material changes (such as formatting corrections or clarifications that do not alter the substance of our practices), the updated Policy will be published without prior individual notice.

Your continued use of the ink798 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any amendment, you should cease using the platform and contact us to request account closure and data deletion.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about the way ink798 handles your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the platform, with native Indonesian-speaking support agents
• Response Time: Data rights requests and privacy complaints are acknowledged within two (2) business days and fully responded to within thirty (30) calendar days
• Business Hours: Customer support operates around the clock, all times referenced in Western Indonesia Time (WIB, UTC+7)