indox Platform Privacy Notice
This page describes what we collect when you use indox and how we keep that data protected. We collect personal information only to operate our platform, process your deposits and withdrawals, verify your identity, and comply with local regulations. We do not sell your data to third parties, and we do not use it for marketing purposes beyond your indox account.
Our indox privacy practices apply to all users, whether you access our platform from Jakarta, Surabaya, Bandung, Medan, Semarang, or Yogyakarta. We store your data on secure servers and encrypt sensitive information during transmission. If you have questions about how we handle your data, contact our support team.
Read this notice before opening an indox account.
What data we collect on indox
When you register on indox, we collect your legal name, national ID number, email address, and phone number. We use this information to create your account and verify your identity before your first withdrawal. We also collect your date of birth to confirm you are at least 18 years old.
During deposits and withdrawals on indox, we collect transaction details: the amount, the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), and the date and time. We use this information to process your request, prevent fraud, and comply with financial regulations. We also collect your proof-of-address document—a utility bill, bank statement, or government certificate—to verify your residential location.
When you play games on indox, we record your predictions, stakes, and outcomes. We use this data to settle your account, calculate your balance, and detect unusual patterns that may indicate fraud or system abuse. We do not use your game history for any other purpose.
We collect only what we need to operate indox
We do not ask for your mother's maiden name, your employment history, or your social media profiles. We collect your legal name, ID number, email, phone, and address—nothing more.
How we use your data on indox
We use your personal information for the following purposes:
- Account creation and management: We use your name, ID, email, and phone to create and maintain your indox account.
- Identity verification: We verify your national ID and proof of address before allowing withdrawals.
- Payment processing: We use your payment details to process deposits and withdrawals via mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, or local payment.
- Fraud prevention: We analyze your account activity to detect and prevent fraudulent transactions.
- Legal compliance: We retain your data to comply with financial regulations and anti-money-laundering requirements.
- Customer support: We use your contact information to respond to your inquiries and resolve account issues.
Third-party processors and data sharing on indox
We share your data with third-party service providers only when necessary to operate indox. These processors include payment gateways (for online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet transactions), identity-verification services, and cloud-hosting providers. We require all processors to maintain the same level of data protection as we do. We do not share your data with marketing companies, data brokers, or any other third party without your explicit consent.
Our indox servers may be located outside your jurisdiction. By using our platform, you consent to the transfer of your data to these locations. We maintain encryption and security standards regardless of server location.
We do not sell your data. We do not share it with advertisers. We use it only to operate indox and comply with law.
Your rights and data retention on indox
You have the right to access, correct, or delete your personal data on indox. To exercise these rights, contact our support team with your account details and a description of your request. We respond to most data-access requests within five business days. We may retain your data longer if required by law or to resolve disputes.
We retain your indox account data for as long as your account is active. After you close your account, we retain transaction records and identity documents for seven years to comply with financial regulations. We delete other personal information within 30 days of account closure, unless we are required by law to retain it longer.
Cookies and tracking on indox
Our indox platform uses cookies to maintain your session, remember your preferences, and detect fraud. We use session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for up to one year). You can disable cookies in your browser settings, but this may prevent indox from functioning properly.
We do not use cookies to track your activity outside indox. We do not share cookie data with third parties for advertising purposes.
We encrypt sensitive data in transit and at rest
On indox, all communication between your device and our servers uses HTTPS encryption. Your password is hashed and never stored in plain text. Your payment details are encrypted and accessible only to authorized staff.
Data security and breach notification
We implement industry-standard security measures to protect your indox data. Our servers use firewalls, intrusion detection, and regular security audits. We limit access to your data to authorized staff only. We require all staff to sign confidentiality agreements.
If we discover a data breach that affects your indox account, we will notify you by email or phone within 72 hours. We will describe the nature of the breach, the data affected, and the steps we are taking to prevent future incidents. We will also provide guidance on how you can protect your account.
Changes to our indox privacy notice
We may update this privacy notice at any time. When we make material changes, we publish the updated notice on this page with an effective date and notify users by email. Continued use of indox after the effective date constitutes acceptance of the updated notice.
Contact us about privacy on indox
If you have questions about our indox privacy practices, want to access or delete your data, or believe we have mishandled your information, contact our support team via email, live chat, or phone. Our team responds to most privacy inquiries within five business days. We take all privacy concerns seriously and will investigate any complaint.