Your privacy matters to imbajr. This Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information as a member of our platform.
imbajr ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every person who registers an account or interacts with our website. This Privacy Policy ("Policy") describes the data-processing practices of imbajr as a data controller — the entity that determines the purposes and means of processing your personal information.
This Policy applies to all personal data we hold about you, regardless of whether it was provided directly by you during registration, collected automatically through your use of the Platform, or received from authorized third-party sources such as payment processors and identity verification providers.
This Policy should be read alongside our Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy prevails.
Our primary user base is located in Indonesia, and this Policy is written with Indonesian-market players in mind. However, the data protection principles set out here reflect internationally recognized standards for responsible data governance applicable to online gaming platforms operating globally.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a living individual, directly or indirectly — including name, email address, device identifiers, and IP address. |
| "Processing" | Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, and deletion. |
| "Data Controller" | imbajr — the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of imbajr in accordance with our instructions and this Policy (e.g., payment gateway providers, KYC verification services). |
| "User" / "You" | Any individual who visits, registers with, or uses the imbajr Platform. |
| "KYC" | Know Your Customer — the mandatory identity and address verification process required before withdrawal requests are processed. |
| "Cookies" | Small text files placed on your device by the Platform to store session information, preferences, and behavioral analytics data. |
| "Sensitive Data" | A subset of personal data warranting heightened protection — including financial account details, identity document numbers, and responsible gaming self-exclusion records. |
imbajr collects the minimum personal data necessary to deliver our services securely and in compliance with applicable anti-money laundering (AML) and responsible gaming obligations. The categories of data we collect include:
3.1 Identity & Contact Data
3.2 Financial & Transaction Data
3.3 Technical & Device Data
3.4 Communication Data
3.5 Responsible Gaming Data
imbajr collects personal data through the following channels:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity & contact data |
| Identity verification (KYC) and age confirmation (21+) | Identity data, document scans |
| Processing deposits and withdrawals | Financial & transaction data |
| Anti-money laundering (AML) and fraud prevention | Identity, financial, technical data |
| Responsible gaming monitoring and intervention | Responsible gaming data, behavioral data |
| Customer support and dispute resolution | Communication data, transaction data |
| Platform performance and security monitoring | Technical & device data |
| Promotional communications (where consent given) | Identity, contact, behavioral data |
| Legal compliance and regulatory reporting | All categories as required by law |
imbajr does not use your personal data for purposes beyond those listed above without first obtaining your explicit consent or being required to do so by applicable law.
imbajr relies on one or more of the following lawful bases when processing your personal data:
imbajr does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following limited and controlled circumstances:
All third-party data processors engaged by imbajr are contractually bound to process personal data only in accordance with our instructions, maintain appropriate security standards, and prohibit onward transfer without our prior written consent.
imbajr retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of account plus 5 years after account closure |
| Transaction and financial records | 7 years from the date of each transaction (AML compliance requirement) |
| KYC documents (ID scans, selfies) | 5 years from the date of verification or account closure, whichever is later |
| Customer support communications | 3 years from the date of the last interaction |
| Technical and device logs | 13 months on a rolling basis |
| Responsible gaming records | Duration of self-exclusion plus 5 years, to prevent re-registration during exclusion periods |
| Marketing consent records | Until consent is withdrawn, plus 3 years as proof of consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized aggregate data (e.g., statistical reports on Platform usage) may be retained indefinitely for business analytics purposes.
imbajr implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:
imbajr uses cookies and similar tracking technologies to operate the Platform efficiently, maintain your session, and understand how users interact with our site. The cookies we use fall into the following categories:
Most web browsers accept cookies by default. You can configure your browser to refuse cookies or to alert you when cookies are being sent. Disabling strictly necessary cookies will prevent you from logging in and using the Platform's core features. Disabling functional and analytics cookies will not affect your ability to place bets or make transactions.
imbajr does not use third-party advertising cookies or allow advertising networks to set cookies on our pages. We do not participate in cross-site behavioral advertising.
As a user of the imbajr Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Right Type]":
imbajr will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases requiring additional investigation, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We may ask you to verify your identity before processing a data rights request to protect against unauthorized third-party requests.
The imbajr Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step in our KYC process, and any account found to belong to a person under 21 will be immediately closed, with all funds returned to the payment source.
If you are a parent or guardian and believe that your child has registered an account on imbajr, please contact us immediately at [email protected]. We will investigate and, where confirmed, promptly delete all personal data associated with the underage account.
imbajr operates on an internationally distributed infrastructure. As a result, your personal data may be transferred to, stored in, and processed in countries outside Indonesia, including our offshore operating jurisdiction and the locations of our cloud infrastructure providers.
Wherever personal data is transferred internationally, imbajr ensures appropriate safeguards are in place to protect it to a standard equivalent to that applied within our operating jurisdiction. These safeguards include contractual data protection clauses incorporated into our agreements with all third-party processors, access controls, and encryption requirements.
By using the Platform, you acknowledge and consent to the transfer of your personal data to the countries and processing environments described above, subject to the protections outlined in this Policy.
imbajr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our service offerings. When material changes are made, we will notify registered users via email and/or a prominent notice on the Platform at least 7 days prior to the updated Policy taking effect.
The "Last Updated" date displayed at the top of this page will be revised with each new version. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
Where a proposed amendment materially reduces your privacy rights or significantly expands the scope of data collection, we will seek your explicit consent before the change takes effect in respect of data already held about you.
If you have any questions, concerns, or complaints about how imbajr handles your personal data, or if you wish to exercise any of the rights described in Clause 11, please contact our Privacy team using the details below:
imbajr takes all privacy complaints seriously. Upon receiving a complaint, we will acknowledge receipt within 2 business days (08:00–24:00 WIB), assign a case reference number, and provide a substantive response within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
For general account and betting support, the same email address applies — our support team operates 24 hours a day, 7 days a week, including Indonesian public holidays, with native Indonesian-speaking agents available at all times.
Six core commitments that underpin our approach to privacy and data security across the Platform.
All data in transit between your device and imbajr servers is protected by 256-bit SSL/TLS encryption. Sensitive fields including ID numbers and bank details are also encrypted at rest on our servers.
Every withdrawal requires verified identity. Our KYC process confirms you are 21 or older and that your payment methods belong to you — protecting both you and the integrity of the Platform.
imbajr never sells, rents, or trades your personal information to third-party advertisers or data brokers. Your data is used solely to operate and improve the Platform services you have signed up for.
Access, correct, export, or request deletion of your personal data at any time. Submit your request to [email protected] and receive a substantive response within 30 calendar days.
imbajr does not use third-party ad-network cookies or cross-site behavioral tracking. Our cookies are limited to session management, fraud prevention, and anonymous performance analytics.
In the unlikely event of a data security incident affecting your personal information, imbajr commits to notifying you by email within 72 hours of becoming aware, with clear guidance on steps to take.
Our support team is available 24/7 to address data enquiries, help you exercise your rights, or clarify any aspect of this Privacy Policy.