idrok Casino & Sportsbook Data Care
This page describes what we collect when you use idrok and how we keep that data protected. When you open an account, deposit funds, or play on our live tables, we gather certain information. We use it to verify your identity, process payments, detect fraud, and improve our service. We never sell your data to marketers or third parties outside our operational needs.
Our commitment is simple: your personal information stays private and secure. We encrypt sensitive data, limit who can access it, and comply with applicable data-protection laws. This policy covers all idrok services — live casino, slots, sportsbook, esports, and regional games.
We operate across supported jurisdictions including Jakarta, Surabaya, Bandung, Medan, and Semarang. Our servers and processors may sit outside your region, which we explain below.
What we collect and why
We collect information in three categories: account data, payment data, and gameplay data. Account data includes your email address, password, full name, date of birth, phone number, and identity documents (passport, national ID, driver's license). We collect this to verify your identity, comply with legal obligations, and prevent fraud.
Payment data includes your chosen deposit and withdrawal methods — DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet account details. We store this securely to process your transactions and prevent duplicate or fraudulent deposits. We also track deposit and withdrawal amounts and timings to detect suspicious patterns.
Gameplay data includes your game history, bets placed, results, and account balance. We track which games you play, how long you stay active, and when you log in or out. This helps us understand platform usage, improve game stability, and detect problem patterns (such as rapid repeated losses that might indicate account compromise).
- Email, name, phone, date of birth — required for account opening
- Identity documents — required for KYC (know-your-customer) verification
- Payment method details — collected and encrypted for secure processing
- Game history and balance — logged for transparency and fraud detection
- Login data and session timestamps — tracked for security monitoring
How we protect your data on idrok
We encrypt all sensitive data using industry-standard encryption (TLS 1.2 or higher). Your password is hashed and salted, meaning we cannot read it even if our servers were breached. Payment details are encrypted before storage and decrypted only when processing transactions.
We limit staff access to your data. Only our finance and support teams can view your account details, and only when necessary to process withdrawals, verify identity, or resolve disputes. We do not share your data with third parties except to process payments through your chosen payment provider.
We conduct regular security audits to identify and fix vulnerabilities. If we discover a data breach, we will notify affected users within a reasonable timeframe and explain what happened and what steps we took to secure your data.
Third-party processors and your data rights
We work with third parties only for essential operations. Payment processors (for mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfers) receive your payment details to complete transactions. They are bound by confidentiality agreements and process data only as we direct.
We may share aggregate, anonymised data with analytics partners to understand platform trends — for example, "peak hours occur during Liga 1 matches" or "Idul Fitri holidays see higher game activity." This data contains no personal identifiers.
We comply with legal requests from authorities. If a court orders us to disclose your information, we will do so. We do not voluntarily share data with law enforcement without a legal order.
Your data rights on idrok
You have the right to request a copy of all data we hold about you. Contact our support team through your account to submit this request. We will provide your data within a reasonable timeframe, typically within 30 days.
You can request deletion of your account and associated data at any time. If you have an outstanding balance or unresolved dispute, we may retain data temporarily to resolve it. Once resolved, we will delete your personal information upon request.
You can update your account details (name, phone, email) anytime through your account settings. If you believe your account was compromised, contact support immediately — we will review activity and help secure your account.
Data retention and privacy across regions
We retain your account data as long as your account is active. After closure, we keep limited information (transaction history, KYC documents) for legal compliance, typically for three to seven years. We delete gameplay data after two years unless required by law to keep it longer.
Our policy applies to users across all supported jurisdictions. Regional laws may give you additional rights — for example, some jurisdictions allow data portability or objection to certain processing. We respect these rights and encourage you to contact us if you believe your regional data law applies differently.
During peak seasons — Liga 1 playoffs, Piala AFF tournaments, Idul Fitri and Idul Adha holidays — we may process more data as account activity increases. We maintain the same encryption and access controls during these periods.
Changes to this privacy policy
We may update this policy from time to time. When we make material changes, we will notify you through your account or email. Continued use of idrok after changes are posted means you accept the updated policy.
Minor clarifications or administrative updates may be made without notice. We encourage you to review this page periodically to stay informed of how we handle your data.
Contact us about your data
If you have questions about how we collect, use, or protect your data, contact our support team through your idrok account. We respond in English and Indonesian and typically reply within one business day.
If you believe we have violated this policy or applicable data-protection law, you may lodge a complaint with the data-protection authority in your jurisdiction.