istana168 Casino & Sportsbook Data Care
This page describes what we collect when you use istana168 and how we keep that data protected. Our platform serves football sportsbook users (Liga 1, Piala AFF, Champions League), live-dealer players (blackjack, baccarat, roulette, Dragon Tiger), slot gamers (Aviator, Sweet Bonanza, Gates of Olympus), esports bettors (Mobile Legends, Free Fire, PUBG Mobile), and card-game players. To operate istana168 securely and comply with anti-money-laundering rules, we collect and process personal information on a basis you agree to when you register.
We treat your data as sensitive and confidential. We do not sell your information to third parties. We do not share your payment details with external processors except where necessary to complete your deposits or withdrawals through QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet. We use encryption and secure servers to protect your account and transaction history. This policy outlines our practices.
Our services operate in supported jurisdictions where local law permits. If you access istana168 from a region where gaming is prohibited, we reserve the right to restrict or close your account. Your use of istana168 signifies acceptance of this privacy policy.
What We Collect and How We Use Data on istana168
Account and identity information
When you register on istana168, we collect your full legal name, date of birth, email address, phone number, and residential address. We use this information to verify your identity, prevent fraud, and comply with anti-money-laundering (AML) and counter-terrorism-financing (CTF) regulations. We may request government-issued ID (passport, driver's license, national ID card) to confirm your identity, particularly before your first withdrawal.
We retain your account information for as long as your istana168 account remains active, plus an additional 5 years after closure for regulatory and dispute-resolution purposes. We do not sell or share your identity data with third parties except where required by law or court order.
Payment and transaction data
We record every deposit and withdrawal you make on istana168 — the date, time, amount, payment method, and recipient account. We store this data to track your activity, settle disputes, and comply with financial regulations. When you deposit via QRIS, e-wallet, mobile banking, local payment, online payment, or e-wallet, your wallet or bank app processes the transaction; we receive confirmation that funds arrived. We do not store your mobile wallet password or bank account credentials — your bank or wallet provider secures that information.
For bank transfers to mobile banking, local payment, online payment, or e-wallet, we collect the receiving account number and name. We use this only to process your withdrawal request and do not share it with unrelated parties.
Data we collect on istana168
- Legal name, date of birth, email, phone, residential address
- Government ID photo and verification status
- Deposit and withdrawal history with payment methods and amounts
- Betting and gaming activity — sport selections, game sessions, account balance changes
- IP address and device type for security and fraud detection
- Browser cookies and tracking pixels for platform performance
Gaming and betting activity
We log every football bet you place on Liga 1, Piala AFF, Piala Indonesia, Champions League, and other tournaments. We record your live-casino sessions (blackjack, baccarat, roulette, Dragon Tiger), slot plays (Aviator, Sweet Bonanza, Fortune Tiger, Mahjong Ways), and esports bets (Mobile Legends Pro League, Free Fire Pro League, PUBG Mobile). We store this data to settle bets, display your account history, and detect patterns consistent with fraud or collusion.
Your gaming history is visible only to you and to our compliance team in case of disputes. We use your activity data internally to monitor platform integrity but do not share bet details with third parties.
Device and technical information
When you access istana168 via browser or mobile app, we collect your IP address, device type (smartphone, tablet, desktop), operating system, and browser version. We use this data to authenticate your login, prevent account takeover, and troubleshoot technical issues. We may flag logins from unusual locations and request additional verification.
We use cookies and tracking pixels on istana168 to remember your preferences, track page navigation, and measure platform performance. Cookies are small text files stored on your device and do not contain sensitive data like passwords or payment details. You can disable cookies in your browser settings, though doing so may degrade your istana168 experience.
Your Rights and Our Commitments on istana168
Your data rights
You have the right to request a copy of all personal data we hold about you on istana168. Contact our support team through your account dashboard and we will provide a download of your information within 30 days. You also have the right to request deletion of your account and associated data, except where we must retain information for legal, regulatory, or dispute-resolution purposes (typically 5 years post-closure).
If you identify an error in your istana168 account data — incorrect name, address, or phone number — notify us immediately. We will correct verified errors within 5 business days. You may also request correction of your gaming history if we have made a documented settlement error.
Third-party processors and data sharing
We use third-party service providers to run istana168 securely. These include payment processors (for QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers), cloud hosting providers, identity-verification vendors, and fraud-detection services. We contractually require these processors to protect your data and use it only for the purposes we specify.
We do not sell your personal data to marketing companies, data brokers, or advertisers. We share data with government agencies only when compelled by law or court order. During major events like Liga 1 finals, Piala AFF tournaments, Champions League rounds, Idul Fitri, Idul Adha, or Imlek holidays, our data protection practices remain unchanged.
Security and encryption on istana168
We encrypt all data transmitted between your device and our servers using HTTPS/TLS protocol. Your password is hashed — meaning we store only an encrypted version, not the plain text. We do not hold your funds in our operational bank accounts; instead, we maintain segregated trust accounts where your balance is protected from our creditors.
We monitor istana168 for suspicious activity — unusual login patterns, rapid withdrawals, collusion with other accounts — and may temporarily restrict your account pending verification. We use multi-factor authentication (MFA) to protect account access; you can enable this in your settings.
Data retention and deletion
We retain your istana168 account data while your account is active. After you close your account, we keep personal information for 5 years to comply with financial regulations and resolve any disputes. After 5 years, we delete or anonymise most personal data, though transaction records may be archived longer for audit purposes.
If you request permanent deletion before the 5-year period ends, we will close your account immediately and flag it for eventual purge. However, we cannot delete data we are legally required to retain — such as AML records.
Contact and policy updates
If you have questions about this privacy policy or how we handle your data on istana168, contact our support team via the help section in your account dashboard. We respond to data-protection enquiries within 7 business days.
We may update this privacy policy from time to time. Changes will be posted on this page, and your continued use of istana168 signifies acceptance of any revisions. We will notify you of material changes via email if they significantly alter how we use your data.