kue68 Privacy Policy

Introduction

kue68 is Indonesia's leading online betting and casino platform, serving millions of members across the archipelago with sportsbook wagering, live dealer games, slot titles, and togel (Indonesia's traditional numbers lottery). Operating at the scale and trust level that kue68's membership base demands requires a rigorous and transparent approach to the handling of personal data.

This Policy has been written to be clear and accessible. We have used plain English wherever possible, reserving formal legal language for clauses where precision is genuinely required. If you have questions about any section of this Policy, please contact us using the details in Section 14.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which together form the legal framework governing your relationship with kue68.

Definitions

Personal Data We Collect

kue68 collects personal data in the following categories:

3.1 Registration & Account Data

• Full legal name (as it appears on your government-issued identification)
• Date of birth
• Residential address in Indonesia (city, province, postal code)
• Email address
• Mobile telephone number
• Username chosen by the Member
• Account password (stored in hashed, non-reversible form — we never store plaintext passwords)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (KTP for Indonesian nationals, or valid passport for non-nationals)
• Proof of residential address (e.g., utility bill or bank statement dated within three months)
• Selfie photograph holding the identification document
• Proof of payment method ownership (e.g., screenshot of e-wallet or bank account in the Member's registered name)

3.3 Financial & Transaction Data

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, and BSI transactions
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions
• Deposit and withdrawal history, including amounts (in IDR), dates, and processing status
• Wagering history (game type, stake, outcome, timestamp) for audit, dispute resolution, and responsible gaming purposes

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Page interaction logs (pages visited, clicks, scroll depth) for platform improvement and fraud detection

3.5 Communications Data

• Live chat transcripts between Members and kue68 support agents
• Email correspondence with kue68 (including dispute submissions)
• Responses to surveys or promotions (where voluntarily provided)

How We Collect Personal Data

kue68 collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or respond to a promotion.
• Automatically during use — through server logs, session cookies, and analytics tools when you browse and interact with the Platform.
• From payment providers — transaction confirmations and status updates received from your bank or e-wallet provider when you initiate a financial transaction.
• From KYC verification partners — identity verification status and document authenticity signals returned by kue68's certified KYC service providers.
• From fraud prevention services — device fingerprinting and risk scoring data from kue68's fraud detection systems, used to identify suspicious access patterns.

Purposes & Legal Basis for Processing

kue68 processes personal data only where there is a clear, lawful basis for doing so. The table below summarises our primary processing activities:

kue68 will not process your personal data for any purpose that is materially different from those listed above without first providing you with a clear notice and, where required, obtaining your explicit consent.

Sharing Your Personal Data

kue68 does not sell your personal data. We share data only in the limited circumstances described below, and only to the minimum extent necessary:

6.1 Service Providers (Data Processors)

kue68 engages carefully selected third-party service providers who process personal data on our behalf and under our documented instructions. These include:

• Payment processors — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja), solely for the processing of deposits and withdrawals.
• KYC verification providers — certified identity verification specialists who confirm document authenticity and perform liveness checks.
• Fraud and security vendors — providers of device fingerprinting, IP reputation, and anomaly detection services.
• Cloud infrastructure providers — hosting, database, and content delivery network providers on whose infrastructure the Platform runs.
• Game content providers — studios such as Evolution Gaming, Pragmatic Play, and others who supply the live casino, slot, and other game environments. These providers receive only the session token and anonymous player identifier required to operate the game; they do not receive your full registration details.

All Data Processors are bound by contractual agreements requiring them to process data solely on kue68's instructions, to implement appropriate technical and organisational security measures, and to delete or return data upon termination of the service relationship.

6.2 Legal Disclosure

kue68 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or serious harm.

6.3 Business Transfers

In the event that kue68 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, personal data held by kue68 may be transferred to the acquiring entity. Members will be notified of any such transfer and of any material change to the applicable privacy terms at least 30 days in advance.

Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. kue68 uses cookies and similar tracking technologies (such as local storage and pixel tags) to operate the Platform securely and efficiently.

7.2 Types of Cookies We Use

kue68 does not use third-party advertising cookies or retargeting pixels on the Platform. You may manage functional and analytics cookies through your browser settings. Disabling strictly necessary or fraud-prevention cookies may impair Platform functionality or prevent login.

Data Retention

kue68 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

At the end of the applicable retention period, data is securely deleted or permanently anonymised such that it can no longer be attributed to any individual.

Security Measures

kue68 has implemented a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and kue68's servers
• AES-256 encryption at rest for all databases containing personal and financial data
• Hashed password storage using bcrypt — plaintext passwords are never stored
• Multi-factor authentication available to all Members and mandatory for kue68 administrative staff
• Role-based access controls limiting internal access to personal data to personnel with a documented operational need
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• 24/7 security monitoring with automated alerting on anomalous access patterns
• Dedicated security team responsible for incident response, with documented breach notification procedures

Your Privacy Rights

As a Member of kue68, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at the details in Section 14. We will respond within 5 business days of receiving a verified request.

Please note that some rights are subject to limitations. For example, kue68 cannot delete data that we are legally required to retain for AML or audit purposes, even where a deletion request is received. We will always explain the basis for any limitation when responding to your request.

Minors

kue68 is strictly an adults-only platform. Access is limited to individuals aged 21 and over. kue68 does not knowingly collect personal data from individuals under the age of 21. Age is verified during account registration and, where required, through the KYC process.

If kue68 becomes aware that personal data has been collected from an individual under 21 years of age, the account will be immediately suspended, the data will be deleted, and any funds held will be returned to the source payment method following verification. If you have reason to believe that a minor has registered on the Platform, please notify us immediately at [email protected].

International Data Transfers

kue68's primary server infrastructure is located in the Asia-Pacific region. Some of our third-party service providers — including game content studios and cloud infrastructure providers — may process personal data in jurisdictions outside Indonesia. In all such cases, kue68 ensures that appropriate safeguards are in place, including contractual data processing agreements that require the receiving party to apply a standard of data protection equivalent to that described in this Policy.

Where personal data is transferred to a game provider such as Evolution Gaming or Pragmatic Play, only the minimum data necessary to establish and operate the game session is transferred — typically an anonymised session token. Full registration and financial data is not shared with game content providers.

Changes to This Privacy Policy

kue68 may update this Privacy Policy from time to time to reflect changes in our data practices, in the services we offer, or in applicable law. When we make material changes, we will notify you by email to the address registered on your account and/or by displaying a prominent notice on the Platform for at least 14 days prior to the change taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to report a privacy concern, please contact the kue68 Privacy Team using the details below. All privacy-related requests must be submitted in writing. We will acknowledge receipt within 2 business days and provide a full response within 5 business days.

When submitting a privacy request, please include your registered username and, where required for identity verification, a copy of your government-issued identification. This is necessary to ensure that we respond to the correct individual and do not disclose personal data to an unauthorised party.