At 678id, protecting your personal information is not an afterthought — it is a core commitment. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used, who it may be shared with, and the rights you hold over your own information as a member of our platform.
Every data-handling practice at 678id is guided by these six principles, which underpin our Privacy Policy in its entirety.
678id processes your personal data only on a lawful basis — contractual necessity, legal obligation, or your explicit consent. We are transparent about every category of data we hold and the purpose for which it is used.
All data transmitted between your device and the 678id platform is encrypted using industry-standard TLS/SSL protocols. Data at rest is stored on hardened, access-controlled servers with regular third-party security audits.
678id does not and will never sell your personal information to advertisers, data brokers, or any third party. Your data is used solely to operate, improve, and secure the services you access on the platform.
You have the right to access, correct, port, and request deletion of your personal data at any time. 678id provides a clear process for exercising each of these rights, with responses delivered within 30 days of a verified request.
Personal data is retained only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law — including anti-money-laundering (AML) record-keeping obligations applicable to gaming operators.
In the unlikely event of a data breach that poses a risk to your rights or freedoms, 678id will notify affected members promptly, describe the nature of the breach, and outline the steps taken to contain and remediate it.
The following terms carry the meanings set out below whenever they appear in this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, including name, date of birth, email address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on Personal Data — including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction — whether automated or manual. |
| "Data Controller" | The entity that determines the purposes and means of Processing Personal Data. For all data collected through the 678id platform, the Data Controller is 678id. |
| "Data Processor" | A third party that Processes Personal Data on behalf of 678id under a written data-processing agreement, acting solely on 678id's documented instructions. |
| "Member" | A natural person who has completed account registration on the 678id platform and holds an active or previously active account. |
| "Platform" | The 678id website accessible at 678id.app, together with any associated mobile applications, APIs, or sub-domains operated by 678id. |
| "KYC" | Know Your Customer — the identity and age verification process through which 678id confirms a Member's eligibility to hold an account. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Member's agreement to the Processing of their Personal Data for a stated purpose, evidenced by a clear affirmative action. |
678id operates as the Data Controller for all Personal Data collected through the Platform. As Data Controller, 678id is responsible for ensuring that all Processing activities comply with applicable data protection legislation, including the requirements of 678id's international gaming licence and any mandatory provisions of Indonesian law applicable to the protection of Member data.
Where 678id engages third-party service providers to Process Personal Data on its behalf — such as payment processors, KYC verification agencies, or cloud infrastructure providers — those providers act as Data Processors and are bound by written data-processing agreements that restrict their use of your data to the specific purposes for which it was shared.
678id collects the following categories of Personal Data in the course of providing its services to Members:
678id collects Personal Data through the following channels:
678id processes your Personal Data only where a lawful basis exists. The table below maps each processing purpose to the category of data involved and the applicable legal basis:
| Purpose | Data Categories | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Contract performance |
| Age and identity verification (KYC) | Identity, Contact | Legal obligation; Contract performance |
| Processing deposits and withdrawals | Financial | Contract performance |
| Fraud prevention and AML compliance | Identity, Financial, Technical | Legal obligation; Legitimate interests |
| Customer support and dispute resolution | Identity, Contact, Account & Gaming Activity | Contract performance; Legitimate interests |
| Responsible gaming monitoring | Account & Gaming Activity | Legal obligation; Member protection |
| Platform security and integrity | Technical, Account & Gaming Activity | Legitimate interests |
| Personalised promotions and bonuses | Account & Gaming Activity, Contact | Consent |
| Platform analytics and improvement | Technical (anonymised or pseudonymised) | Legitimate interests |
| Compliance with licensing authority requirements | Identity, Financial, Account & Gaming Activity | Legal obligation |
678id does not sell your Personal Data. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose:
678id engages carefully vetted third-party service providers who Process Personal Data on our behalf under written data-processing agreements. These include:
All service providers are prohibited from using your data for any purpose beyond the specific service they provide to 678id, and are required to maintain security standards commensurate with the sensitivity of the data they handle.
678id may disclose Personal Data to a competent authority, regulator, law enforcement body, or court where required to do so by applicable law, by the terms of 678id's international gaming licence, or pursuant to a valid legal order. 678id will, where legally permitted, notify affected Members of any such disclosure request before complying.
In the event that 678id undergoes a merger, acquisition, corporate restructuring, or sale of all or substantially all of its assets, Member Personal Data may be transferred to the acquiring entity as part of that transaction. 678id will provide advance notice of any such transfer via a platform notification, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.
As an internationally licensed platform serving Members in Indonesia, 678id and some of its third-party service providers process Personal Data in jurisdictions outside Indonesia. Where Personal Data is transferred outside the country in which it was collected, 678id ensures that appropriate safeguards are in place to protect that data, including:
You may request further information about the specific safeguards in place for international transfers of your Personal Data by contacting the 678id Data Protection team at [email protected].
Cookies are small text files placed on your device by a website when you visit it. 678id uses cookies and similar tracking technologies (including local storage objects and pixel tags) to operate the Platform, remember your preferences, keep your session active, and gather anonymised analytics data.
| Category | Purpose | Basis |
|---|---|---|
| Strictly Necessary | Session management, authentication, fraud prevention, load balancing. The Platform cannot function without these cookies. | Legitimate interests / Contract |
| Functional | Remembering language preferences, display settings, and previously selected payment methods to enhance your experience. | Legitimate interests |
| Analytics | Collecting pseudonymised data on page visits, session duration, and navigation paths to help 678id improve the Platform. | Consent |
| Marketing | Tracking which promotions and game categories you have engaged with, to enable 678id to show you relevant offers. No third-party ad networks are used. | Consent |
You may withdraw consent for non-essential cookies at any time by adjusting your browser settings to block or delete cookies. Note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your account. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.
678id retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following standard retention periods apply:
| Data Category | Standard Retention Period | Basis for Retention |
|---|---|---|
| Identity and KYC documents | 5 years from account closure | AML regulatory obligation |
| Financial transaction records | 5 years from transaction date | AML regulatory obligation |
| Account activity and gaming history | 3 years from account closure | Dispute resolution; Legal obligation |
| Customer support correspondence | 2 years from last interaction | Legitimate interests (dispute resolution) |
| Marketing preference data | Until consent is withdrawn + 90 days | Consent |
| Technical / analytics data (pseudonymised) | 13 months from collection | Legitimate interests (platform improvement) |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming obligation |
At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is technically used in preference to deletion, the resulting data set is not considered Personal Data and is excluded from the rights described in Clause 10.
As a Member of the 678id platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include sufficient information to verify your identity. 678id will respond within 30 calendar days of receiving a valid, verified request.
The 678id platform is strictly intended for adults aged 21 and over. 678id does not knowingly collect Personal Data from individuals under the age of 21. Registration by minors is prohibited, and 678id applies KYC age-verification procedures precisely to enforce this restriction.
If you believe that a minor has registered an account on the 678id platform or has submitted Personal Data through any channel, please contact our support team immediately at [email protected]. Upon confirmation, 678id will promptly close the account, delete the associated Personal Data, and return any deposited funds to the originating payment method.
678id implements a multi-layered technical and organisational security programme designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key measures include:
While 678id takes every reasonable step to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying 678id immediately if you suspect unauthorised access to your account.
The 678id Platform may contain references to third-party game studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — whose game clients are embedded within the Platform. While 678id selects its game content partners carefully, those studios operate their own privacy policies in relation to any data collected within their game environments.
678id does not control and is not responsible for the data-handling practices of third-party game studios or any other external entity. If you have concerns about how a third-party studio handles data within its game client, please review that studio's own privacy policy or contact them directly. 678id's Privacy Policy applies solely to data collected and processed by 678id itself through the Platform.
With your consent, 678id may send you promotional communications including bonus offers, game announcements, seasonal campaigns (such as promotions tied to Idul Fitri, Ramadhan, Indonesian Independence Day, and other cultural occasions), and product updates. These communications may be delivered via email, SMS, or WhatsApp message to the contact details registered on your account.
You may opt out of marketing communications at any time by:
Opting out of marketing communications does not affect transactional communications — including deposit confirmations, withdrawal notifications, KYC status updates, and account security alerts — which are sent on a contractual or legal-obligation basis and cannot be disabled while your account is active.
678id reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data-handling practices, or the services we offer. When a material change is made, 678id will notify Members via a platform notification or by email to the address registered on their account, with a minimum of seven (7) days' notice before the revised policy takes effect.
The "Effective Date" displayed at the top of this document will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated policy. If you do not accept a material change, you must stop using the Platform and contact our support team to close your account.
For all privacy-related queries, data rights requests, or complaints about how 678id handles your Personal Data, please contact us through one of the following channels:
678id will acknowledge receipt of all data protection correspondence within three (3) business days and will aim to provide a substant ive response within thirty (30) calendar days. Where a complaint cannot be resolved to your satisfaction through our internal process, you have the right to escalate your complaint to the relevant data protection supervisory authority or to 678id's international gaming licence regulator.
678id gives you full visibility and control over your personal information. Here is a quick reference to the tools and rights available to every Member.
Your KYC documents are encrypted at rest and used solely to confirm your eligibility. They are never shared with advertisers or data brokers.
Bank details for BCA, BRI, BNI, Mandiri, and e-wallets like OVO and DANA are stored in encrypted form and never exposed in plain text within the Platform.
Unsubscribe from promotional emails, SMS, or WhatsApp campaigns at any time — one click, instant effect. Transactional messages continue unaffected.
Request a full export of your account data in machine-readable format. 678id will deliver your data package within 30 days of a verified request.
678id combines world-class data protection with a premium gaming experience — live casino, sportsbook, slots, and more. Your privacy is built in from the ground up.
Questions about this policy? Email us at [email protected] · Response within 3 business days · 21+ only