Privacy Policy indowd – Member Personal Data Protection

This Privacy Policy ("Policy") is published by indowd and applies to all users who access the indowd website, mobile app, and all services operating under the indowd brand. This document describes our practices regarding the collection, use, storage, protection, and disclosure of your personal data.

This Policy is to be read together with Terms and Conditions and Responsible Gaming Policy us, which together form the complete contractual framework between you and indowd. In the event of any conflict between those documents regarding privacy matters, this Privacy Policy shall prevail.

This Policy does not apply to third-party websites or services that may be linked from our platform. We are not responsible for the privacy practices of those third parties and encourage you to read their privacy policies separately.

Indowd collects various types of personal data depending on how you interact with our platform. Below is a summary of the data categories we collect and their purposes:

We may also receive your personal data from legitimate third-party sources such as payment operators, identity verification agents, and anti-fraud service providers that work with indowd.

Indowd uses your personal data on valid legal grounds, including the performance of a contract, legal obligations, the company's legitimate interests, and in some cases, your consent. The following are the specific purposes for which data is used:

• Account management: Creating, verifying, and maintaining your account on the indowd platform.
• Transaction processing: Handling all deposits, withdrawals, and bonus payments securely and accurately.
• Identity verification (KYC): Verifying that you meet the minimum age requirement and confirming your identity before a withdrawal is processed.
• Platform security: Detecting and preventing fraud, money laundering, account abuse, and other unlawful activities.
• Customer support: Responding to inquiries, resolving complaints, and providing technical support effectively.
• Legal compliance: Meeting reporting obligations to regulatory bodies and relevant authorities.
• Platform improvements: Analyzing usage patterns to improve the user experience and service performance.
• Marketing communications: Sending you promotional information and relevant offers — only if you have consented to receive them.

Indowd does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, in operating the platform, we share data with the following categories of third parties on a need-only basis:

• Service providers: Companies that help operate our platform, such as server hosting providers, payment processors, and identity verification service providers. All such providers are bound by strict confidentiality agreements.
• Game service providers: Game developers providing content on the indowd platform may receive the minimum session data required for smooth gameplay.
• Regulatory bodies and authorities: indowd will disclose data when required by law, court order, or a legitimate request from a competent authority.
• Analytics providers: Aggregated and anonymized data used to understand platform usage patterns for improvement purposes.

Indowd continuously invests in security infrastructure to protect your personal data from unauthorized access, disclosure, alteration, or destruction. The security measures we implement include:

• 256-bit SSL encryption: All communications between your device and our servers are protected with military-grade encryption.
• Internal access controls: Only staff with specific authorization may access member personal data, and every access is logged for audit purposes.
• Real-time threat detection: Our automated monitoring system operates around the clock to detect and block any suspicious activity.
• Regular security testing: The indowd platform undergoes regular security testing and independent audits to identify and address any vulnerabilities.
• Secure data backup: Personal data is regularly backed up in an encrypted environment to ensure service continuity.

While we take reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in securing your account — please use a strong password and enable two-factor authentication.

Indowd uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand platform usage patterns. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as Login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Saving your personal settings such as language preference, display theme, and other preferences for your convenience.
• Analytical cookies: Collecting anonymized data on how users interact with the platform to help us improve our services.
• Security cookies: Used to detect and prevent fraudulent activity and protect your account from unauthorized access.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the indowd platform.

Indowd retains your personal data for as long as necessary to fulfill the original purpose for which it was collected, or as long as required to comply with legal obligations, resolve disputes, and enforce our agreements.

• Active account data: Retained for as long as your account remains active on the indowd platform.
• Financial transaction data: Retained for a minimum of 7 years after a transaction occurs to meet audit and anti-money laundering compliance requirements.
• KYC Data: Retained for 5 years after account closure for legal compliance purposes.
• Security logs: Retained for 12 months and then automatically deleted or anonymized.
• Marketing data: Retained until you withdraw consent or request deletion.

When your personal data is no longer needed, indowd will securely delete or anonymize it using methods that ensure the data cannot be recovered.

As a data subject, you have protected rights regarding the personal data held in indowd's care. Below is a summary of those rights:

To exercise any of the above rights, please contact our customer support team. We will process your request within 30 days of receipt. In complex cases, this period may be extended to up to 60 days with prior notice to you.

Indowd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operational practices, legal requirements, or regulatory guidance. We are committed to notifying you of any material changes.

When there are material amendments, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending you a notification via email or in-account notice at least 14 days before any amendment takes effect.
• In the case of highly material amendments, request your consent again before data processing continues.

Continued use of the indowd platform after any Privacy Policy amendment takes effect will be considered acceptance of the updated policy. If you do not agree with the changes, you may close your account and request deletion of your personal data.

If you have any questions, concerns, or complaints about how indowd handles your personal data, our privacy team is ready to assist. We take every enquiry seriously and are committed to providing accurate and thorough responses.

You can reach us through the following channels:

• Live chat: Available 24/7 via the chat icon at the bottom right corner of the platform.
• Privacy email: [email protected]
• Help Center: Browse page FAQ us for answers to frequently asked questions about privacy and data security.