IDNCash Privacy Policy

IDNCash ("we", "us", "our", "the platform") is committed to handling the personal information of its users with care and transparency. This Privacy Policy applies to all individuals who visit the IDNCash website, register an account, deposit or withdraw funds, place casino wagers, submit sports bets, claim promotions, contact support, or otherwise interact with any IDNCash service.

By accessing or using IDNCash, you acknowledge that you have read this Privacy Policy and agree to the processing of your personal data as described. If you do not agree, you must not register, deposit funds, or continue using IDNCash.

This Privacy Policy should be read together with the IDNCash Terms & Conditions and Responsible Gambling information. Where a specific account process, promotion, or payment method carries additional data conditions, those conditions apply alongside this policy.

"Personal data" means any information that can identify you directly or indirectly as a natural person, including your name, identity document number, email address, contact number, residential address, financial account details, device identifiers, and usage records.

"Processing" includes collecting, recording, organising, storing, adapting, retrieving, sharing, restricting, erasing, or destroying personal data. "Data controller" means IDNCash, which determines the purposes and means of processing. "Data processor" means a third-party service provider acting under IDNCash instructions. "You" and "the user" mean the individual whose personal data is processed under this policy.

IDNCash collects personal data through registration, account use, identity verification, payments, communications, platform interactions, and technical systems.

• Registration information: full legal name, date of birth, email address, mobile number, and a chosen username and password.
• Identity verification (KYC) documents: copies or photographs of a valid Malaysian identity document (MyKad, Driver's Licence, or Passport), current proof of residential address, and a live selfie where required.
• Payment information: bank account name, account number, bank name (such as Maybank, CIMB, Public Bank, or Hong Leong), e-wallet identifiers (such as Touch 'n Go eWallet, Boost, or GrabPay), DuitNow registration details, and FPX transaction records.
• Transaction records: deposit amounts, withdrawal requests, game history, sports betting activity, bonus claims, and balance changes.
• Communication records: support chat logs, emails sent to IDNCash, and feedback submitted through the platform.
• Technical and device data: IP address, device type, browser type and version, operating system, session duration, pages visited, and approximate location derived from IP data.
• Responsible gambling preferences: deposit limits, session controls, cooling-off elections, and self-exclusion requests where submitted.

IDNCash processes personal data only where a lawful basis applies. The principal bases and their corresponding purposes are described below.

• Contract performance: creating and administering your IDNCash account, processing MYR deposits and withdrawals, settling wagers, crediting bonuses, and providing support services you have requested.
• Legal obligation: complying with applicable anti-money laundering requirements, Know Your Customer regulations, fraud prevention obligations, record-keeping duties, and lawful requests from competent authorities.
• Legitimate interests: maintaining platform security, detecting prohibited conduct, preventing unauthorised access, improving service quality, managing disputes, and communicating material account or policy changes.
• Consent: sending optional marketing messages where you have expressly opted in, or processing data for a specific purpose where you have given a clear and informed consent. You may withdraw consent at any time by contacting support.

Collected personal data may be used for the following purposes:

• Registering your IDNCash account and authenticating your identity at login.
• Conducting KYC checks before or after deposits, withdrawals, or promotion claims.
• Processing MYR payments through bank, e-wallet, DuitNow, FPX, or other supported channels.
• Settling bets on casino games, live dealer tables, sports markets including Liga Super Malaysia and EPL, and other available products.
• Administering VIP tiers, birthday bonuses, referral rewards, and other promotional programmes.
• Responding to account queries, complaint submissions, and responsible gambling requests.
• Monitoring transactions and platform behaviour to detect fraud, money laundering, duplicate accounts, and abuse of IDNCash promotions.
• Enforcing the IDNCash Terms & Conditions, including the 21+ age restriction and self-exclusion conditions.
• Maintaining audit trails, security logs, and records required for compliance, dispute resolution, and regulatory examination.
• Sending transactional notifications about deposits, withdrawals, security events, and account status changes.
• Sending marketing communications where you have opted in and subject to your right to withdraw consent.

IDNCash does not sell your personal data. Sharing occurs only where necessary for service delivery, legal compliance, or legitimate protection of IDNCash and its users.

• Payment service providers: banks, e-wallet operators, DuitNow processors, and FPX service providers receive the payment reference information required to complete your transaction.
• Identity verification suppliers: third-party KYC or document-verification services may process identity documents on IDNCash's behalf under contractual restrictions.
• Fraud and security providers: anti-fraud, risk-scoring, and security monitoring tools may receive technical data to detect suspicious activity.
• Platform technology providers: hosting, content-delivery, analytics, and customer-support systems operate under data-processing agreements that prohibit independent use of your information.
• Lawful authorities: where IDNCash is legally required to disclose information by a competent authority, court order, or applicable obligation, a disclosure may occur without prior notice to you where permitted by law.

Service providers processing data on IDNCash's behalf are required to maintain confidentiality and apply appropriate technical and organisational security measures. They may not use your personal data for their own commercial purposes.

IDNCash uses cookies and similar tracking technologies to support platform functionality, maintain authenticated sessions, remember language and display preferences, measure aggregate page-level traffic, and detect security anomalies.

Strictly necessary cookies are active whenever you access IDNCash. Optional analytics or preference cookies may be applied where accepted. You may adjust your browser settings to block non-essential cookies, though doing so may affect certain IDNCash features.

IDNCash retains personal data for as long as your account remains active and for a reasonable period afterwards. Specific retention considerations include:

• Transaction records and KYC documents are retained for the period required by applicable anti-money laundering obligations, which may extend beyond account closure.
• Support correspondence and complaint records are retained for the period needed to resolve disputes and maintain accountability.
• Security logs are retained for a period consistent with fraud prevention and platform security requirements.
• Responsible gambling records, including self-exclusion elections, are retained for the period necessary to enforce the applicable restriction.

When the retention purpose is fulfilled and no legal obligation requires continued storage, IDNCash will securely erase or anonymise the relevant personal data.

IDNCash applies technical, administrative, and physical security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Measures include SSL/TLS encryption for transmitted data, access controls limiting personal data to authorised personnel, secure server environments, and security monitoring.

No online system is entirely risk-free. You are responsible for protecting your IDNCash login credentials and for notifying support promptly if you suspect that your account has been compromised. IDNCash will not request your password through support chat or email.

Subject to applicable law, you hold the following rights in relation to your IDNCash personal data:

• Right of access: you may request a summary of the personal data IDNCash holds about you.
• Right to rectification: you may ask IDNCash to correct inaccurate or incomplete personal data.
• Right to erasure: you may request deletion of personal data where it is no longer needed for a lawful purpose, subject to overriding legal retention obligations.
• Right to restriction: you may ask IDNCash to limit processing in certain circumstances while a query is under review.
• Right to portability: where processing is based on consent or contract and performed by automated means, you may request a structured copy of your data.
• Right to withdraw consent: where IDNCash processes data based solely on your consent, you may withdraw that consent. Withdrawal does not affect the legality of prior processing.
• Right to object: you may object to processing carried out on the basis of IDNCash's legitimate interests where your specific situation justifies it.

To exercise any of these rights, contact IDNCash via live chat or using the email address shown below. Requests are assessed within a reasonable timeframe, and IDNCash may ask for identity verification before responding to a data request.

IDNCash does not knowingly collect personal data from individuals under 21 years of age. The platform is restricted to adult users, and age verification forms part of the account registration and KYC process. If IDNCash discovers that personal data has been collected from a person below the minimum age, the data and the associated account will be removed.

If you are a parent or guardian and believe that a minor has registered with IDNCash without authorisation, please contact support immediately.

IDNCash operates under an international online gaming licence and uses service providers located in various jurisdictions. Personal data may therefore be processed outside Malaysia. Where data is transferred to a jurisdiction with different data protection standards, IDNCash applies contractual safeguards or other appropriate mechanisms to protect the data in transit and at rest.

By registering with IDNCash, you acknowledge that your personal data may be processed in locations outside Malaysia as described in this policy.

IDNCash may update this Privacy Policy to reflect changes in platform services, data practices, legal obligations, or operational requirements. The effective date at the top of this page will be revised when a material update is published.

We encourage you to review this page periodically. Continued use of IDNCash after a revised policy takes effect constitutes acceptance of the updated terms. If you disagree with a material change, you should stop using IDNCash and request account closure, subject to settlement of any outstanding transactions.

For data access requests, correction or deletion queries, privacy concerns, complaints about data handling, or any other matter relating to this Privacy Policy, please contact the IDNCash support team through the live chat widget available on every page of the site.

You may also reach us by plain-text email at: [email protected]. Please include your registered account details and a clear description of your request so we can respond efficiently.

IDNCash aims to acknowledge data-related requests promptly and to provide a substantive response within a reasonable period. We may ask you to verify your identity before processing a request that involves accessing or deleting account data.