1 Definitions
Throughout this Privacy Policy, the following terms carry the meanings set out below:
- "idhoki", "we", "us", "our" — the company operating the idhoki platform at https://idhoki.cam and all associated subdomains and services.
- "Platform" — the idhoki website, progressive web application, and all software, tools, games, and services accessible at https://idhoki.cam.
- "Player", "you", "your" — any natural person who accesses, browses, registers on, or uses the idhoki Platform in any capacity.
- "Personal Data" — any information that identifies or could reasonably be used to identify you as an individual, including your name, date of birth, contact details, financial information, and device identifiers.
- "Processing" — any operation performed on Personal Data, including collection, storage, use, transfer, and deletion.
- "KYC" — Know Your Customer: the identity and age verification process required before a Player's first withdrawal.
- "Cookies" — small text files stored on your device by your browser at the Platform's instruction, used to maintain session state and improve Platform performance.
2 Data We Collect
2.1 Registration Data
When you create an idhoki Account, we collect the following information, which you provide directly:
- Full legal name (as it appears on your Indonesian national ID or passport)
- Date of birth
- Indonesian residential address
- Valid email address
- Active Indonesian mobile phone number
- Preferred username and encrypted password
2.2 KYC and Identity Verification Data
To comply with our international licensing obligations and to prevent underage gambling, idhoki requires identity verification documents before processing your first withdrawal. The documents we collect may include:
- Indonesian National Identity Card (KTP — Kartu Tanda Penduduk): front and back scan or photograph
- Republic of Indonesia passport: bio-data page scan
- Recent bank statement or utility bill confirming your Indonesian residential address (dated within 90 days)
- A selfie photograph holding your ID document, in certain higher-risk verification cases
2.3 Financial and Transaction Data
idhoki records all financial transactions processed through your Account, including:
- Deposit amounts, dates, and originating payment method (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja)
- Withdrawal amounts, dates, and destination payment method
- Wagering history, game outcomes, and bonus usage records
- Bank account numbers or e-wallet account identifiers used for transactions (stored in encrypted form)
2.4 Technical and Usage Data
When you access the Platform, our servers and analytics systems automatically collect certain technical information, including:
- IP address and approximate geolocation (country/city level)
- Browser type, version, and operating system
- Device type (desktop, mobile, tablet) and screen resolution
- Pages visited, time spent on each page, and navigation paths
- Session duration and login timestamps
- Referral source (if you arrived via a link from another site)
2.5 Communications Data
If you contact idhoki's customer support team via live chat, email, or WhatsApp, we retain records of those communications, including the date, time, and content of each interaction. This data is used for quality assurance, dispute resolution, and regulatory compliance purposes.
3 How We Use Your Data
idhoki uses your Personal Data strictly for the following purposes:
- Account management: Creating, maintaining, and securing your idhoki Account, including password recovery and session authentication.
- KYC and age verification: Confirming that you are at least 21 years of age and a resident of Indonesia before processing withdrawals, in compliance with our international licensing obligations.
- Payment processing: Facilitating deposits and withdrawals through your chosen Indonesian bank or e-wallet provider and preventing fraudulent transactions.
- Anti-money laundering (AML) compliance: Monitoring transaction patterns for indicators of money laundering, fraud, or terrorist financing, as required by international regulations.
- Customer support: Responding to your queries, resolving disputes, and providing 24/7 Indonesian-speaking assistance.
- Platform improvement: Analyzing aggregated, anonymized usage data to improve Platform performance, user experience, and game offering.
- Promotional communications: Sending you bonus offers, seasonal promotions (e.g., Idul Fitri cashback offers, Ramadhan reload bonuses), and Platform updates — but only if you have opted in to marketing communications. You may opt out at any time via your Account Settings.
- Responsible gaming: Monitoring wagering behavior to identify potential problem-gambling patterns and, where appropriate, proactively offering responsible gaming tools such as deposit limits or self-exclusion.
- Legal and regulatory compliance: Retaining records as required by applicable international gaming regulations and responding to lawful requests from authorized regulatory or law-enforcement bodies.
4 Legal Basis for Processing
idhoki processes your Personal Data on the following legal bases:
- Contractual necessity: Processing required to perform the contract between you and idhoki — including Account creation, payment processing, KYC verification, and customer support.
- Legal obligation: Processing required to comply with our international gaming license conditions, anti-money laundering regulations, and any lawful order from a competent regulatory authority.
- Legitimate interests: Processing necessary for idhoki's legitimate business interests — such as fraud detection, platform security, and aggregate analytics — where those interests are not overridden by your privacy rights.
- Consent: Where no other legal basis applies — in particular, for sending you marketing and promotional communications — we rely on your freely given, specific, and informed consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.
5 Data Sharing
5.1 Third-Party Service Providers
idhoki shares your Personal Data with carefully selected third-party service providers who assist in delivering the Platform's services. These providers are contractually bound to process your data only on idhoki's instructions and to maintain appropriate security standards. Categories of authorized third-party processors include:
- Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) — for transaction processing only.
- KYC and identity verification service providers — for age and identity confirmation.
- Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) — who receive limited session and wagering data necessary to deliver certified game experiences.
- Cloud infrastructure providers — for secure data storage and Platform hosting.
- Customer support platform providers — for live chat and ticketing systems.
5.2 Regulatory and Law Enforcement Disclosure
idhoki may disclose your Personal Data to competent regulatory authorities, law enforcement agencies, or courts of law where required to do so by a lawful order, warrant, or subpoena. idhoki will, where legally permissible, notify you of such a disclosure request before complying.
5.3 No Sale of Personal Data
idhoki does not and will not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. This commitment is absolute and is not subject to any business-model exception.
Data Protection Assurance: Every third-party processor engaged by idhoki is subject to a binding data processing agreement that mirrors the privacy commitments in this Policy. idhoki remains accountable for your data at all times.
6 Cookies & Tracking
6.1 Types of Cookies Used
idhoki uses the following categories of cookies on the Platform:
- Strictly Necessary Cookies: Essential for Platform operation. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without impairing Platform functionality.
- Performance and Analytics Cookies: Used to measure aggregate, anonymized Platform usage — such as which pages are most visited and how long sessions last. This data is used exclusively to improve Platform performance and user experience.
- Functional Cookies: Used to remember your preferences (such as language settings and preferred payment method) between sessions.
6.2 Cookies We Do NOT Use
idhoki does not use:
- Third-party behavioral advertising or retargeting cookies.
- Social media tracking pixels from Facebook, Google, or other platforms.
- Cross-site tracking technologies that follow your browsing activity outside the idhoki Platform.
6.3 Cookie Management
You may manage or disable non-essential cookies through your browser's cookie settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Most modern browsers — including Chrome, Firefox, Safari, and the Android WebView used by OVO and GoPay mini-apps — provide a cookie management interface in their settings menu.
7 Data Security
idhoki implements a comprehensive, multi-layered security framework to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Key security measures include:
- 256-bit SSL/TLS encryption on all data in transit between your device and idhoki's servers.
- AES-256 encryption for all sensitive data at rest, including KYC documents, bank account numbers, and password hashes.
- Multi-factor authentication (MFA) options available to all registered Players for Account login.
- Regular penetration testing and third-party security audits conducted by independent cybersecurity firms.
- Role-based access controls ensuring that idhoki staff can only access Personal Data to the minimum extent necessary for their specific job function.
- Real-time fraud monitoring systems that flag and investigate anomalous login patterns, unusual transaction volumes, and suspected account takeover attempts.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, idhoki will notify affected Players without undue delay and will report the breach to the relevant supervisory authority in accordance with applicable data protection regulations.
⚠️ Your Role in Security: idhoki will never ask for your password via email, live chat, or phone. If you receive a communication purporting to be from idhoki requesting your password, treat it as a phishing attempt and report it to
[email protected] immediately.
8 Data Retention
idhoki retains your Personal Data only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law. Our standard retention periods are as follows:
- Account and registration data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure, in compliance with international AML record-keeping requirements.
- KYC documents: Retained for a minimum of five (5) years following the completion of KYC verification, or longer if required by a specific regulatory obligation.
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
- Customer support communications: Retained for two (2) years from the date of the last interaction in each support thread.
- Marketing consent records: Retained for as long as you hold an Account plus one (1) year following Account closure, to demonstrate compliance with consent obligations.
- Anonymized analytics data: May be retained indefinitely, as it cannot be used to identify any individual.
Following the expiry of the applicable retention period, your Personal Data will be securely deleted or irreversibly anonymized using industry-standard deletion protocols.
9 Your Rights
As a Player on the idhoki Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, p
lease contact our support team at [email protected] with the subject line "Data Rights Request":
- Right of Access: You have the right to request a copy of all Personal Data idhoki holds about you, along with information about how that data is being processed.
- Right to Rectification: You have the right to request the correction of any inaccurate or incomplete Personal Data we hold about you. Minor Account details (such as your email address or phone number) may be updated directly via your Account Settings page.
- Right to Erasure: You have the right to request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. Please note that this right is subject to idhoki's legal obligations to retain certain data (such as transaction records) for a minimum period under applicable AML regulations.
- Right to Restriction of Processing: You have the right to request that idhoki restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
- Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another controller, where technically feasible.
- Right to Object: You have the right to object to the processing of your Personal Data where idhoki relies on legitimate interests as its legal basis. If you object, idhoki will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where idhoki processes your data on the basis of consent (in particular, for marketing communications), you may withdraw that consent at any time via your Account Settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
idhoki will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is particularly complex or numerous, this period may be extended by a further thirty (30) days, with written notice provided to you.
10 Minors & Age Verification
The idhoki Platform is strictly intended for adults aged 21 years and over. idhoki does not knowingly collect Personal Data from any individual under the age of 21. Age verification is a mandatory step in the KYC process, and no Player may complete a withdrawal without first confirming their age via a valid government-issued identity document.
If idhoki becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. All funds in such an Account will be handled in accordance with our Terms & Conditions and applicable regulatory guidance.
🔞 21+ Only: If you are a parent or guardian and you believe your child has registered an Account with idhoki, please contact us immediately at
[email protected]. We will investigate and act within 24 hours of receiving your report.
11 International Data Transfers
idhoki operates as an internationally licensed platform. As a result, your Personal Data may be transferred to and processed in countries outside of Indonesia where our servers, service providers, and game studio partners are located. These countries may have data protection laws that differ from those applicable in Indonesia.
Where such international transfers occur, idhoki ensures that appropriate safeguards are in place to protect your Personal Data, including:
- Binding contractual clauses with all third-party processors that impose data protection obligations equivalent to those in this Policy.
- Transfers exclusively to processors located in jurisdictions with an adequate level of data protection, or to processors that have implemented certified technical and organizational security measures.
- Internal data transfer policies that restrict cross-border data flows to the minimum necessary for Platform operations.
By registering an Account and using the idhoki Platform, you acknowledge and consent to the international transfer of your Personal Data on the terms described in this section.
12 Policy Amendments
idhoki reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — we will notify registered Players by email at least seven (7) days before the changes take effect, and we will update the "Last Updated" date at the top of this page.
For minor, non-substantive changes (such as typographical corrections or clarifications that do not alter the meaning of any clause), the Policy will be updated without prior notice, though the "Last Updated" date will reflect the revision.
Your continued use of the idhoki Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using the Platform and request Account closure by contacting [email protected] before the amendments take effect.