Last Updated: 1 January 2026 | Version 3.1
Important Notice: This Privacy Policy ("Policy") applies to all personal data collected and processed by ink327 ("we", "us", "our", "the Platform") when you visit our website at https://ink327.cam, register an Account, or use any of our services. By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Policy and agree to the collection, use, and disclosure of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.
1 Introduction
1.1 ink327 is committed to protecting the privacy and security of your personal data. We recognize that trust is the foundation of our relationship with every player, and we take our responsibility as a data custodian seriously. This Privacy Policy explains in clear, straightforward language what personal information we collect, how we use it, who we share it with, and what rights you have regarding your data.
1.2 This Policy applies to all personal data processed by ink327 in connection with your use of our website, mobile-optimized interface, customer support channels, and all betting, gaming, and payment services we provide. It should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy.
1.3 ink327 operates as an international online gambling platform serving players in Indonesia and complies with applicable data protection and privacy laws. We implement technical and organizational measures to ensure the confidentiality, integrity, and security of your personal data at all times.
2 Data Controller
2.1 ink327 is the data controller responsible for the collection, processing, and storage of your personal data. As data controller, we determine the purposes and means by which your personal data is processed and are accountable for compliance with applicable data protection laws.
2.2 Our contact details for data protection and privacy inquiries are:
- Email: [email protected]
- WhatsApp: +62 811 2734 327
- Live Chat: Available 24/7 via the Platform
2.3 If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to report a data security concern, please contact us using the channels above. Our support team is trained in privacy matters and will respond to all inquiries within 72 hours.
3 What Personal Data We Collect
3.1 We collect only the personal data necessary to provide our services, comply with legal obligations, and protect the security and integrity of the Platform. The categories of personal data we collect include:
3.1.1 Registration and Account Data
When you register an Account, we collect: full legal name (as it appears on your government-issued ID), date of birth, gender, residential address (street, city, province, postal code), mobile phone number, email address, username, and password. This data is necessary to create and maintain your Account, verify your identity, and communicate with you.
3.1.2 Identity Verification (KYC) Data
To comply with Know Your Customer (KYC) and anti-money-laundering regulations, we collect copies of your government-issued identification documents (Indonesian KTP, passport, or national ID card), proof of address documents (utility bills, bank statements), and proof of payment method (bank account screenshots, e-wallet profile pages). These documents contain your photograph, ID number, date of birth, and issuing authority details.
3.1.3 Payment and Transaction Data
When you deposit or withdraw Funds, we collect: bank account name and number (for BCA, BRI, BNI, Mandiri transfers), e-wallet account name and phone number (for OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts, transaction dates and times, payment method used, and transaction status. We do not store full credit card numbers or CVV codes — payment card data is tokenized and processed through secure, PCI-DSS compliant third-party payment processors.
3.1.4 Betting and Gaming Data
We record all bets placed, games played, wagers made, outcomes of bets, winnings and losses, bonus claims, bonus wagering progress, and Account balance history. This data is necessary to settle bets, credit winnings, enforce wagering requirements, detect fraud and bonus abuse, and comply with gaming regulations.
3.1.5 Technical and Device Data
When you access the Platform, our servers automatically collect: IP address, device type and model, operating system and version, browser type and version, screen resolution, language preference, time zone, referring website URL, pages viewed, time spent on pages, click patterns, and session duration. We also use device fingerprinting technology to detect duplicate accounts and prevent fraud.
3.1.6 Communications and Support Data
When you contact customer support via live chat, email, or WhatsApp, we record the content of your messages, support ticket history, attachments you send, and our responses. This data is used to resolve your inquiries, improve service quality, and maintain a record of support interactions for compliance purposes.
3.2 We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than photographs on ID documents), health data, or data concerning sexual orientation. If you voluntarily provide such information in communications with us, we will handle it with appropriate care and confidentiality.
4 How We Use Your Personal Data
4.1 ink327 uses your personal data for the following purposes:
- Account Management: To create, maintain, and administer your Account; authenticate your identity when you log in; process Account updates; and manage self-exclusion or Account closure requests.
- Payment Processing: To process deposits and withdrawals; verify payment method ownership; prevent fraudulent transactions; comply with anti-money-laundering (AML) regulations; and maintain transaction records as required by law.
- Service Delivery: To enable you to place bets, play casino games, participate in togel draws, claim bonuses, and access all Platform features; to settle bets and credit winnings to your Account; and to apply wagering requirements and bonus terms.
- Identity Verification (KYC): To verify your age (21+ requirement), confirm your identity, validate your residential address, detect duplicate accounts, and comply with responsible gaming and regulatory obligations.
- Fraud Prevention and Security: To detect and prevent fraud, collusion, bonus abuse, money laundering, and other prohibited conduct; to monitor betting patterns for irregularities; to protect the Platform from cyberattacks, unauthorized access, and technical vulnerabilities; and to enforce our Terms and Conditions.
- Customer Support: To respond to your inquiries, resolve technical issues, investigate disputes, provide assistance with deposits and withdrawals, and deliver 24/7 support via live chat, email, and WhatsApp.
- Responsible Gaming: To enforce age restrictions, monitor player behavior for signs of problem gambling, implement deposit limits and self-exclusion tools, and provide access to responsible gaming resources and support contacts.
- Legal Compliance: To comply with gaming regulations, tax reporting obligations, court orders, law enforcement requests, and other legal requirements applicable to online gambling operators.
- Marketing and Promotions (with your consent): To send you promotional emails about bonuses, tournaments, new games, and special offers — only if you have opted in to receive marketing communications. You can opt out at any time via Account settings or by clicking "unsubscribe" in any marketing email.
- Platform Improvement: To analyze user behavior, identify technical issues, improve website performance, optimize user experience, and develop new features based on player feedback and usage patterns.
4.2 We do not use automated decision-making or profiling that produces legal effects or similarly significant consequences for you, except as necessary to detect fraud, prevent bonus abuse, or enforce responsible gaming limits (e.g., automatically blocking an Account if a player fails age verification or exceeds self-imposed deposit limits).
5 Legal Basis for Processing
5.1 Under international data protection laws, we must have a lawful basis to collect and process your personal data. ink327 processes your personal data on the following legal grounds:
- Contractual Necessity: Processing is necessary to perform our contract with you (the Terms and Conditions you accepted when registering). This includes Account creation, payment processing, bet settlement, and service delivery.
- Legal Obligation: Processing is necessary to comply with legal obligations imposed on us, such as KYC/AML verification, tax reporting, record-keeping requirements, and responding to lawful requests from authorities.
- Legitimate Interests: Processing is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include fraud prevention, security monitoring, customer support, Platform improvement, and marketing to existing customers (subject to opt-out).
- Consent: For certain processing activities (such as sending marketing emails to new registrants who have not yet placed a bet), we rely on your explicit consent. You can withdraw consent at any time via Account settings or by contacting support, though this will not affect the lawfulness of processing based on consent before withdrawal.
6 How We Share Your Personal Data
6.1 ink327 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:
6.1.1 Payment Processors
We share your name, bank account or e-wallet details, and transaction amounts with trusted third-party payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja payment gateways) to facilitate deposits and withdrawals. These processors are bound by strict confidentiality agreements and process data solely to execute your payment instructions.
6.1.2 Game Providers
When you play casino games or slots, your username, bet amounts, and game outcomes are shared with the relevant game studio (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.) to deliver the gaming experience. Game providers process this data under their own privacy policies and data processing agreements with ink327.
6.1.3 KYC and Fraud Prevention Services
We may share identity verification documents and transaction data with specialized KYC verification services and fraud detection platforms to verify your identity, check government watchlists, and detect suspicious activity. These providers operate under strict data protection obligations and retain data only as long as necessary to complete verification.
6.1.4 Law Enforcement and Regulators
We may disclose your personal data to law enforcement agencies, gaming regulators, tax authorities, or courts if required by law, court order, subpoena, or lawful government request. We will only disclose the minimum data necessary to comply with the legal obligation and will notify you of such disclosure where legally permitted.
6.1.5 Professional Advisors
We may share your data with legal counsel, accountants, auditors, and other professional advisors when necessary to obtain advice, comply with legal obligations, or defend legal claims. These advisors are bound by professional confidentiality obligations.
6.2 All third parties with whom we share data are required to maintain the confidentiality and security of your personal information and are prohibited from using it for any purpose other than providing services to ink327 or complying with legal requirements.
6.3 In the event of a business sale, merger, acquisition, or transfer of assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such change in ownership and given the opportunity to delete your Account if you do not wish to continue under the new ownership.
7 Data Retention
7.1 ink327 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:
- Active Account Data: Retained for the duration of your Account's active status plus 6 months after Account closure to allow for withdrawal processing, dispute resolution, and fraud investigation.
- KYC Documents: Retained for 5 years after Account closure to comply with AML regulations and legal record-keeping requirements.
- Transaction Records: Retained for 7 years after the transaction date to comply with financial regulations, tax laws, and audit requirements.
- Betting and Gaming History: Retained for 2 years after the bet is settled to resolve disputes, enforce wagering requirements, and detect fraud.
- Marketing Communications: Retained until you opt out of marketing or close your Account, whichever comes first.
- Customer Support Logs: Retained for 3 years to maintain service quality records and resolve ongoing issues.
- Technical Logs (IP addresses, device data): Retained for 90 days for security monitoring and fraud detection, then anonymized or deleted.
7.2 After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be linked to you. Anonymized data may be retained indefinitely for statistical analysis and Platform improvement purposes.
7.3 If you request deletion of your personal data under your data protection rights (see Section 9), we will delete all data not subject to a legal retention obligation within 30 days of your request.
8 Data Security
8.1 ink327 implements industry-leading technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, ensuring secure communication channels.
- Encrypted Data Storage: All personal data stored in our databases is encrypted at rest using AES-256 encryption. Encryption keys are stored separately and rotated regularly.
- Access Controls: Access to personal data is restricted to authorized personnel only on a need-to-know basis. All employees with data access undergo background checks and sign confidentiality agreements.
- Secure Servers: Our servers are hosted in secure, access-controlled data centers with 24/7 monitoring, fire suppression systems, redundant power supplies, and physical security guards.
- Intrusion Detection and Prevention: We deploy firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and DDoS mitigation technology to protect against cyberattacks.
- Regular Security Audits: Our infrastructure undergoes regular penetration testing, vulnerability assessments, and third-party security audits to identify and remediate potential weaknesses.
- Secure Password Storage: All user passwords are hashed using bcrypt or Argon2 algorithms with per-user salts. ink327 employees cannot view your plaintext password.
- Two-Factor Authentication (2FA): We offer optional 2FA via SMS or authenticator app to add an extra layer of security to your Account login.
8.2 While we implement robust security measures, no system is completely immune to security breaches. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by data protection laws.
Your Responsibility: You are responsible for maintaining the confidentiality of your Account login credentials. Never share your password with anyone, and always log out of your Account when using a shared or public device. If you suspect unauthorized access to your Account, change your password immediately and contact support.
9 Your Data Protection Rights
9.1 Under applicable data protection laws, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (typically PDF or CSV) within 30 days of your request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most personal data directly via your Account settings, or contact support for assistance.
- Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal data if: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. We may be required to retain certain data to comply with legal obligations (e.g., KYC records, transaction history).
- Right to Restriction of Processing: You have the right to request that we temporarily suspend processing of your personal data if: (a) you contest the accuracy of the data; (b) processing is unlawful but you prefer restriction over deletion; (c) we no longer need the data but you need it to establish, exercise, or defend legal claims; or (d) you have objected to processing pending verification of our legitimate grounds.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider, where technically feasible.
- Right to Object: You have the right to object to processing of your personal data based on our legitimate interests. If you object, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, or we need to process the data to establish, exercise, or defend legal claims.
- Right to Withdraw Consent: Where we process your data based on consent (e.g., marketing emails), you have the right to withdraw consent at any time via Account settings or by clicking "unsubscribe" in marketing emails. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
- Right to Lodge a Complaint: If you believe we have violated your data protection rights, you have the right to lodge a complaint with a supervisory data protection authority in your jurisdiction.
9.2 To exercise any of these rights, please contact us at [email protected] with your full name, Account username, and a description of your request. We will verify your identity and respond within 30 days. There is no fee for exercising these rights unless your request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee.
10 Cookies and Tracking Technologies
10.1 ink327 uses cookies and similar tracking technologies to enhance your user experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser when you visit a website.
10.2 We use the following types of cookies:
- Essential Cookies: Necessary for the Platform to function. These cookies enable core features such as login sessions, Account authentication, payment processing, and security. Essential cookies cannot be disabled as the Platform would not work without them.
- Performance Cookies: Collect information about how you use the Platform (pages visited, time spent, error messages encountered) to help us improve performance and user experience. These cookies are aggregated and anonymized.
- Functional Cookies: Remember your preferences (language, currency, recently viewed games) to provide a more personalized experience. These cookies do not track you across other websites.
- Advertising Cookies: Used to deliver targeted promotional offers based on your betting behavior and game preferences. We do not share advertising cookies with third-party ad networks.
10.3 You can control cookie settings via your browser preferences. Most browsers allow you to block or delete cookies. However, disabling essential cookies will prevent you from logging in or using the Platform's core features. For more information on managing cookies, visit your browser's help documentation.
10.4 We do not use third-party advertising networks (Google Ads, Facebook Pixel, etc.) that track you across multiple websites. All cookies used on the Platform are first-party cookies controlled by ink327.
11 Children's Privacy
11.1 ink327 is strictly an adult-only Platform. We do not knowingly collect, process, or store personal data from individuals under the age of 21. All users must be at least 21 years of age and residents of Indonesia to register an Account, as stated in our Terms and Conditions.
11.2 If we discover that we have inadvertently collected personal data from a person under 21, we will immediately delete all such data and permanently close the associated Account. If you believe we have collected data from a minor, please contact us immediately at [email protected].
11.3 We implement age verification checks during the KYC process by requesting government-issued identification documents that display the user's date of birth. Accounts that fail age verification are immediately suspended and all Funds are returned to the source payment method after verification of ownership.
12 Changes to This Privacy Policy
12.1 ink327 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Any changes will be effective immediately upon publication on this page, with the updated "Last Updated" date displayed at the top of this document.
12.2 If we make material changes that significantly affect your rights or how we process your data, we will notify you via email (to the email address registered on your Account) and/or by displaying a prominent notice on the Platform homepage at least 14 days before the changes take effect.
12.3 Continued use of the Platform after the effective date of any Privacy Policy update constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using the Platform and may close your Account by contacting customer support.
12.4 We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data. The version number and effective date at the top of this page indicate the most recent update.
13 Contact Information
13.1 If you have any questions, concerns, or requests regarding this Privacy Policy, the processing of your personal data, or the exercise of your data protection rights, please contact us using the following channels:
- Email: [email protected] (Privacy inquiries are prioritized and typically receive a response within 24 hours)
- WhatsApp: +62 811 2734 327
- Live Chat: Available 24/7 via the chat icon in the bottom-right corner of the Platform
- Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays
13.2 Our customer support team is trained in privacy and data protection matters and can assist with Account data requests, consent management, correction of inaccurate information, and guidance on exercising your rights under this Policy.
Document Version: This Privacy Policy (Version 3.1) was last updated on 1 January 2026 and supersedes all previous versions. By continuing to use ink327 after this date, you accept this updated Policy in full. This Policy is published in English; in the event of any conflict between this version and any translation, the English version shall prevail.