Privacy Policy — How ina858 Collects, Uses, and Protects Your Data

ina858 operates an online gaming and sports betting platform at ina858.app, providing casino games, live dealer tables, slots, video poker, live roulette, and sports betting services primarily to adult players resident in Indonesia. The processing of personal data is an essential component of delivering these services securely and in compliance with applicable anti-money-laundering and responsible gaming obligations.

ina858 is committed to handling personal data with integrity, transparency, and proportionality. This Privacy Policy is written in plain English to ensure that every player can understand, in clear terms, what data ina858 collects, why it is collected, who it may be shared with, and what rights you have in relation to your data.

This policy applies to all personal data processed in connection with the ina858 Platform, including data collected through the website, Live Chat, email communications, and identity verification processes. It does not apply to third-party websites or services linked to or from the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

• Personal Data means any information relating to an identified or identifiable natural person, including name, contact details, financial information, device identifiers, and behavioral data collected through Platform use.
• Processing means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or erasure.
• Data Controller means the entity that determines the purposes and means of Processing Personal Data — in this context, ina858.
• Data Processor means any third party that Processes Personal Data on behalf of ina858 under a data processing agreement, such as payment processors, KYC verification providers, and analytics service providers.
• KYC Data means identity documents and related information collected for the purpose of age verification and anti-money-laundering compliance, including but not limited to copies of government-issued identification and proof of address.
• Platform means the ina858 website and all associated services accessible at ina858.app.
• Player means any individual who holds a registered account on the ina858 Platform.
• Sensitive Data means a subset of Personal Data requiring heightened protection, including government-issued identification numbers, financial account details, and biometric data where applicable.

ina858 acts as the Data Controller for all Personal Data processed in connection with the Platform. As Data Controller, ina858 is responsible for determining the purposes for which Personal Data is collected, ensuring that appropriate legal bases for Processing exist, and implementing the technical and organisational measures required to protect your data.

For data protection enquiries, requests to exercise your privacy rights, or concerns about how ina858 handles your Personal Data, contact details are provided in Section 16 of this Privacy Policy.

ina858 collects the following categories of Personal Data in connection with the operation of the Platform:

ina858 does not collect special categories of Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless directly relevant to a responsible gaming referral made at a Player's request.

ina858 collects Personal Data through the following channels:

ina858 processes Personal Data only where a valid legal basis exists. The primary legal bases relied upon are as follows:

• Contract Performance: Processing necessary to fulfil the ina858 Terms & Conditions — including account management, deposit and withdrawal processing in IDR, game access, and customer support — is carried out on the basis of contract performance.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering obligations, age verification requirements, and regulatory requests is carried out on the basis of legal obligation. This includes the KYC verification process and transaction monitoring.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and product analytics is based on ina858's legitimate interest in operating a secure, fair, and sustainable gaming platform, provided that such interests are not overridden by your fundamental rights.
• Consent: Where ina858 processes Personal Data for optional purposes — such as sending promotional communications or enabling non-essential cookies — this is done on the basis of your freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

ina858 does not sell your Personal Data. Personal Data is shared with third parties only in the following limited circumstances:

• Payment Processors: Financial Data necessary to process deposits and withdrawals is shared with Indonesian banking partners and e-wallet service providers (including those supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) solely to execute the requested transaction.
• KYC & Identity Verification Providers: KYC Data is shared with contracted third-party identity verification service providers who process document verification on behalf of ina858 under strict data processing agreements.
• Game Studio Providers: Technical Data and limited gaming session data may be shared with game studio partners (including Evolution Gaming, Pragmatic Play, Microgaming, and others) for the purpose of delivering game content, resolving technical disputes, and RTP auditing. No Registration Data or Financial Data is shared with game studios.
• Analytics Providers: Aggregated, anonymised Technical Data may be shared with analytics service providers to support platform performance analysis. Individually identifiable data is not shared for analytics purposes.
• Legal & Regulatory Authorities: Personal Data may be disclosed to law enforcement agencies, regulatory bodies, or courts where ina858 is required to do so by applicable law, court order, or regulatory instruction.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ina858's business, Personal Data may be transferred to the relevant successor entity, subject to the same privacy protections described in this policy.

All third-party Data Processors engaged by ina858 are required to comply with data protection standards equivalent to those applied by ina858, and to process Personal Data only in accordance with ina858's documented instructions.

ina858 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

On expiry of the applicable retention period, Personal Data is either securely deleted or anonymised in a manner that prevents re-identification. Where deletion is not immediately technically feasible (e.g., backup systems), data is isolated from active processing and scheduled for deletion at the next available cycle.

ina858 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction:

In the event of a Personal Data breach that is likely to result in a high risk to your rights and freedoms, ina858 will notify affected players without undue delay via the contact details registered to their account.

ina858 uses cookies and similar tracking technologies on the Platform for the following limited purposes:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your logged-in session, storing your account preferences, and enabling secure transaction flows. These cookies cannot be disabled without impairing core Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors navigate and use the Platform — including page visit frequency, session duration, and feature usage patterns. This data is used solely to improve the Platform experience and is not associated with individual player identities.

ina858 does not use advertising cookies, cross-site tracking scripts, social media pixel tracking, or any third-party marketing technology that profiles individual users for targeted advertising purposes.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from accessing your account and using core Platform services. Disabling analytics cookies will not affect your ability to use any Platform feature.

ina858's primary user base is located in Indonesia, and the Platform is designed for players resident in Indonesia. Some of ina858's contracted Data Processors — including game studio technology providers and KYC verification service providers — may process data from server infrastructure located outside Indonesia.

Where Personal Data is transferred to a jurisdiction outside Indonesia, ina858 ensures that appropriate safeguards are in place, including:

• Contractual clauses with Data Processors requiring them to apply data protection standards equivalent to those described in this Privacy Policy;
• Technical safeguards including end-to-end encryption of all data in transit;
• Limitations on the categories of Personal Data transferred to those strictly necessary for the Data Processor's contracted function.

As a Player on the ina858 Platform, you have the following rights in relation to your Personal Data. Requests to exercise these rights should be submitted via Live Chat or email to [email protected]:

ina858 will respond to all privacy rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days with notice to you. ina858 will not charge a fee for processing rights requests unless a request is manifestly unfounded or excessive.

ina858's KYC process is specifically designed to verify that every account holder meets the 21-year minimum age requirement before withdrawal processing is enabled. Age verification is performed by reviewing government-issued identity documentation and, where required, cross-referencing with the registered Indonesian mobile number and bank account details.

The ina858 Platform integrates with third-party game studio providers — including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft — to deliver casino and live dealer game content. These providers operate their own data handling practices within the context of the game delivery infrastructure. ina858 contracts with these providers to ensure that data shared in connection with game session delivery is handled in accordance with standards consistent with this Privacy Policy.

The ina858 Platform does not contain links to external third-party websites. Where references to external organisations (such as Indonesian banks or e-wallet providers) appear on the Platform, these references are informational only. ina858 is not responsible for the privacy practices of any third-party organisation and encourages you to review the privacy policies of any external service you use in connection with your ina858 account — such as your BCA, BRI, BNI, or Mandiri banking app, or your OVO, DANA, or GoPay e-wallet — directly with those providers.

ina858 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality, or our data processing practices. The "Last Revised" date at the top of this page will be updated accordingly whenever a change is made.

Where a change is material — meaning it affects how your Personal Data is used in a way that is meaningfully different from the practices described at the time you registered — ina858 will notify you via the mobile number or email address registered to your account at least seven (7) calendar days before the revised policy takes effect.

Continued use of the ina858 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to a revised Privacy Policy, you should stop using the Platform and request account closure before the new policy takes effect. Any Personal Data associated with your account at the time of closure will be retained for the periods specified in Section 8, in accordance with applicable legal obligations.

We encourage you to review this Privacy Policy periodically so that you remain informed about how ina858 handles your data.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by ina858, the following contact channels are available. All privacy-related communications are treated with priority and handled in confidence by ina858's data protection team.

• Live Chat: Available 24 hours a day, 7 days a week, from within your ina858 account dashboard. Indonesian-speaking support agents are available on every shift. Typical response time: under 2 minutes. State "Privacy Request" at the start of your message to be routed directly to the data protection team.
• Email: [email protected] — plain text, not a clickable link. Include "Privacy Policy Request" in the subject line. Responses are provided within 24 hours on business days (WIB).
• WhatsApp: +62 811 858 858 — plain text, not a clickable link. Available during standard business hours, Western Indonesia Time (WIB, UTC+7).

If you are not satisfied with ina858's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. ina858 will provide details of the appropriate authority upon request.