Privacy Policy

1 Introduction

ibc123 ("the Company", "we", "us", "our") operates the online gaming platform accessible at https://ibc123.cam, providing sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) services primarily to players based in Indonesia. In doing so, we necessarily process personal data belonging to our registered members and, in limited circumstances, to visitors who browse our platform without a registered account.

This Privacy Policy sets out in plain, comprehensive terms how ibc123 collects, processes, stores, shares, and ultimately erases personal data. We have written this policy to be genuinely readable — not buried in impenetrable legal language — because we believe you have a real right to understand exactly what happens to your information when you engage with our platform.

Our data practices are designed to be proportionate: we collect only what is reasonably necessary to deliver, secure, and improve our services, and we retain it only for as long as we are legally or operationally required to do so. We do not harvest data speculatively or share it with parties who have no legitimate role in delivering services to you.

2 Data Controller

For the purposes of applicable data protection law, the data controller responsible for the personal information collected via the ibc123 platform is:

All enquiries, data access requests, correction requests, erasure requests, and data-related complaints should be directed to the contact above. We aim to acknowledge all privacy-related correspondence within 2 business days and to resolve requests fully within 30 calendar days.

3 Data We Collect

The categories of personal data that ibc123 collects and processes are described in the table below. We have distinguished between data that is mandatory for account operation and data that is collected on an optional or automated basis.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless you voluntarily disclose such information to our support team in the context of a responsible gaming referral (for example, disclosing a gambling-related health concern when requesting self-exclusion). In that case, such data is handled with the highest level of confidentiality and used solely to action your request.

4 How We Collect Data

ibc123 collects personal data through the following channels:

4.1 Directly From You

The majority of personal data we hold is provided directly by you at the time of account registration, during KYC verification, when you make deposits or request withdrawals via local Indonesian payment methods such as BCA, BRI, BNI, or Mandiri bank transfer or e-wallets like OVO, DANA, and GoPay, or when you contact our support team.

4.2 Automatically Through Platform Interaction

When you access the ibc123 platform — whether on a desktop browser, a mobile browser, or through a progressive web app (PWA) — our servers and analytics tools automatically record technical and usage data. This includes your IP address, device fingerprint, pages visited, game sessions initiated, and timestamps of all platform interactions. This automated collection is necessary for platform security, fraud detection, and service optimization.

4.3 From Third-Party Sources

In specific circumstances, ibc123 may receive data about you from regulated third-party sources. These include:

• Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay) — for transaction confirmation and fraud screening purposes.
• Identity verification service providers — third-party KYC platforms that cross-reference the identity documents you submit against government and credit databases to confirm authenticity.
• Fraud prevention and AML screening services — which may flag accounts associated with known fraudulent activity or sanctions lists.

5 Purpose & Legal Basis for Processing

ibc123 processes your personal data only where a valid legal basis exists. The following table summarises the primary purposes for which we process data and the corresponding legal basis for each:

Where we rely on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your fundamental rights and freedoms, having regard to the nature of the data involved and the reasonable expectations of players using an online gaming platform.

6 Data Sharing

ibc123 does not sell, rent, or otherwise commercially exploit your personal data. We share data only in the following defined circumstances, and only to the extent strictly necessary for the stated purpose:

6.1 Service Providers

We engage carefully selected third-party service providers who assist us in operating the ibc123 platform. These include payment processing partners (Indonesian banks and e-wallet operators), cloud hosting and infrastructure providers, KYC and identity verification platforms, customer support software vendors, and cybersecurity and fraud detection services. All service providers are bound by data processing agreements that require them to handle your data securely, in compliance with applicable law, and exclusively for the purposes specified by ibc123.

6.2 Game Content Providers

Our platform integrates games from licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive anonymised or pseudonymised session data (such as game round identifiers and wager amounts) to facilitate game delivery, RNG certification, and dispute resolution. They do not receive your full identity data.

6.3 Regulatory and Law Enforcement Authorities

ibc123 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. We will, where legally permitted, notify you of any such disclosure.

6.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of ibc123's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to the processing of your data that result from it, and you will have the opportunity to exercise your data rights at that time.

7 Data Retention

ibc123 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual retention requirements. Our general retention schedules are as follows:

• Active Account Data: Retained for the full duration that your account remains active on the platform.
• Closed Account Data: Following voluntary or involuntary account closure, core identity, transaction, and KYC records are retained for a minimum of 5 years to satisfy anti-money laundering record-keeping obligations and to resolve any late-arising disputes or regulatory enquiries.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction in accordance with international AML standards.
• Customer Support Communications: Retained for 2 years from the date of each interaction, after which they are permanently deleted unless relevant to an ongoing dispute.
• Marketing Consent Records: Retained for the duration of your account plus 1 year after closure, to demonstrate compliance with consent requirements.
• Technical and Usage Logs: Retained for up to 12 months for fraud monitoring and platform security purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised so that it can no longer be associated with any identifiable individual.

8 Data Security

ibc123 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, and alteration. Our security framework includes:

• Transport Encryption: All data in transit between your device and our servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• Data at Rest Encryption: Sensitive data stored on our servers — including identity documents, KYC records, and financial account details — is encrypted at rest using AES-256.
• Access Controls: Access to production systems and player data is restricted to authorised ibc123 personnel on a least-privilege, need-to-know basis. All internal access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): Available for all player accounts and mandatory for all ibc123 administrative accounts. We strongly recommend all players enable 2FA on their ibc123 account.
• Penetration Testing: Our platform undergoes regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: ibc123 maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players and the relevant regulatory authority within the timeframe required by applicable law.

9 Cookies & Tracking Technologies

ibc123 uses cookies and similar tracking technologies on our platform to ensure core functionality, maintain session security, and understand how players use our services so that we can improve them. We do not use advertising cookies or deploy third-party behavioral tracking networks.

9.1 Types of Cookies We Use

9.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the ibc123 platform from functioning correctly — you will not be able to log in or place bets without session cookies active. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Samsung Internet) are available in each browser's help documentation.

10 International Data Transfers

ibc123 operates internationally, and some of the service providers and infrastructure partners we use may process your personal data in jurisdictions outside Indonesia. Where such international transfers occur, ibc123 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Indonesia and the jurisdiction of our operating licence.

Safeguards we use to legitimise international transfers include:

• Contractual data transfer agreements incorporating recognised model clauses for international data transfer.
• Transfers only to jurisdictions that maintain an adequate level of data protection, as assessed by relevant regulatory bodies.
• Application of end-to-end encryption for all data transmitted internationally, ensuring that even if data in transit is intercepted, it cannot be read by unauthorised parties.

You may request further information about the specific safeguards applied to any international transfer of your data by contacting us at [email protected].

11 Your Privacy Rights

As a player whose personal data is processed by ibc123, you hold a meaningful set of data privacy rights. We are committed to honouring these rights promptly and without imposing unnecessary barriers. The rights available to you are summarised below:

To exercise any of the above rights, please contact us in writing at [email protected]. Include your registered account username and a clear description of your request. We will respond within 30 calendar days. We may need to verify your identity before processing certain requests to prevent unauthorised access to your data.

12 Protection of Minors

The ibc123 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Our registration process includes age declaration requirements, and our KYC verification process confirms the date of birth of every player before their first withdrawal is approved.

If ibc123 becomes aware that personal data has been collected from an individual under the age of 21 — whether through our own detection processes or as a result of a report — we will immediately suspend the relevant account, delete the associated personal data to the extent not required for legal reporting purposes, and return any deposits to the original payment source after deducting amounts already wagered.

Parents or guardians who believe that a minor has registered an account on ibc123 are encouraged to contact us immediately at [email protected]. We take such reports seriously and will act on them as a priority.

13 Third-Party Services & Links

The ibc123 platform integrates with a number of third-party services that are essential to its operation, including payment gateways connected to BCA, BRI, BNI, Mandiri, and digital wallet providers such as OVO, DANA, GoPay, and ShopeePay, as well as game content delivery networks operated by licensed providers including Evolution Gaming, Pragmatic Play, Spribe, and Pocket Games Soft.

When you interact with these integrated services — for example, when you initiate a bank transfer deposit or play a live dealer game — the third-party provider may process certain data under their own privacy policy, which operates independently of this document. ibc123 recommends that you review the privacy policies of any third-party providers whose services you use in connection with our platform.

ibc123 is not responsible for the privacy practices of third-party providers beyond the data processing agreement terms we hold with them as described in Section 6. Our platform does not contain hyperlinks to unrelated external websites, and we do not endorse or accept liability for the content or data practices of any website outside of https://ibc123.cam.

14 Changes to This Privacy Policy

ibc123 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services we offer. When we make material changes — meaning changes that significantly affect how we use your data or the rights available to you — we will notify you by email to your registered address at least 14 days before the changes take effect.

Non-material updates, such as clarifications of existing language or corrections of typographical errors, may be made without advance notice. The version number and effective date displayed at the top of this document will be updated on every revision. We encourage you to review this page periodically to stay informed about how ibc123 protects your privacy.

Your continued use of the ibc123 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated practices. If you object to any change, you may exercise your right to request account closure and data erasure as described in Section 11.

15 Contact & Data Requests

For all privacy-related enquiries, data subject access requests, corrections, deletion requests, or complaints relating to this Privacy Policy or ibc123's data practices, please use the contact details below. All privacy communications must be submitted in writing.

This Privacy Policy was last reviewed and updated on 1 January 2026. ibc123 thanks you for trusting us with your personal data and remains committed to handling it with transparency, integrity, and the highest standard of security.