Summary: ink89 collects only the personal data necessary to operate a secure, compliant online betting platform for Indonesian members. We do not sell your personal data to third parties. We use industry-standard security to protect your information, and you have clearly defined rights over any data we hold about you.
ink89 ("we", "us", "our", or "the Platform") operates the online sportsbook and casino platform accessible at https://ink89.ws. In the course of providing our services to members based primarily in Indonesia, we necessarily collect and process certain categories of personal data. This Privacy Policy sets out our practices in relation to that data, and should be read together with the ink89 Terms & Conditions.
We take our data protection obligations seriously. All personal data collected by ink89 is processed in a manner that is fair, lawful, and transparent. We collect only the data that is genuinely necessary for the purposes described in this Policy, and we retain it only for as long as those purposes require.
This Policy applies to all personal data processed in connection with:
- The registration and ongoing management of a member Account on the ink89 platform.
- Deposits and withdrawals processed via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (DANA, OVO, GoPay, ShopeePay, LinkAja).
- Wagering and gaming activity conducted on the ink89 sportsbook, live casino, and
slot products.
- Customer support interactions conducted via email at [email protected].
- Identity verification (KYC) procedures carried out to confirm member eligibility.
- Responsible gaming monitoring and intervention measures.
By registering an Account with ink89 or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
The following terms carry the meanings set out below throughout this Privacy Policy:
| Term |
Meaning |
| "Personal Data" |
Any information that identifies or could reasonably identify a living individual, including name, email address, date of birth, national identity number, IP address, payment details, and betting history. |
| "Processing" |
Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, and deletion. |
| "Member" / "You" |
Any individual who has registered an Account on the ink89 platform, or who is in the process of doing so. |
| "Account" |
The registered member account created on the ink89 platform through which services are accessed. |
| "KYC" |
Know Your Customer — the identity verification process required to confirm a Member's identity, age, and eligibility before withdrawals are processed. |
| "Third-Party Processor" |
Any external company or service provider engaged by ink89 to process Personal Data on our behalf, subject to data processing agreements that impose equivalent data protection obligations. |
| "Cookies" |
Small data files stored on a Member's device by the ink89 platform to facilitate session management, analytics, and personalization. |
| "IDR" / "Rp" |
Indonesian Rupiah — the sole currency in which ink89 Account transactions are denominated. |
ink89 collects the following categories of personal data in the course of providing its services:
Identity & Contact Data
- Full legal name as it appears on a government-issued identity document.
- Date of birth (used to verify that the Member is at least 21 years of age).
- Residential address in Indonesia (city, province, postal code).
- Email address used for Account registration and communications.
- Indonesian National Identity Card (KTP) number, or passport number where KTP is unavailable.
- Phone number, if provided voluntarily during registration or support interactions.
Financial & Payment Data
- Bank account details associated with BCA, BRI, BNI, Mandiri, or CIMB Niaga transfers, including account holder name and account number, solely for the purpose of processing deposits and withdrawals.
- E-wallet identifiers for DANA, OVO, GoPay, ShopeePay, and LinkAja — specifically the registered phone number or account name linked to the e-wallet.
- Transaction records including deposit amounts, withdrawal amounts, timestamps, and transaction reference numbers.
Gambling Activity Data
- Wagering history across all platform products — sportsbook markets (including BRI Liga 1, EPL, La Liga, Champions League fixtures, and mix parlay accumulator bets), live casino games, slot sessions, and Keno draws.
- Session duration, login timestamps, and activity patterns used for responsible gaming monitoring.
- Bonus activation and wagering-requirement completion records.
Technical & Device Data
- IP address at the time of login and during active platform sessions.
- Browser type, version, and operating system.
- Device type (desktop, mobile, tablet) and screen resolution.
- Geolocation data (country and region level only, derived from IP address — not precise GPS coordinates).
- Session cookie identifiers and similar tracking technology data as described in the Cookies section.
KYC Document Data
- Scanned or photographed copies of government-issued identity documents submitted during the KYC verification process.
- Proof-of-address documents (e.g., bank statements from BCA/BRI/BNI/Mandiri, utility bills).
- Selfie photographs, where requested by the ink89 compliance team to confirm document authenticity.
Communications Data
- Content of email correspondence submitted to [email protected], including support ticket history, complaint records, and responsible gaming requests.
What We Do Not Collect: ink89 does not collect full payment card numbers, CVV codes, or online banking credentials (username/password for internet banking portals). All payment card processing, where applicable, is handled entirely by certified third-party payment processors who do not share raw card data with ink89.
ink89 collects personal data through the following channels:
- Directly from you — when you complete the Account registration form, submit KYC documents, contact customer support via email, or voluntarily provide information during the deposit/withdrawal process.
- Automatically during platform use — technical and device data, session data, and gambling activity data are collected automatically as you navigate and use the ink89 platform. This collection is facilitated by server logs, cookies, and analytics tools.
- From third-party payment processors — transaction confirmation data (including payment reference numbers and status codes) is received from payment processing partners when you complete a deposit or withdrawal via a supported Indonesian bank or e-wallet. No raw financial credentials are transmitted to ink89 in this process.
- From identity verification partners — where ink89 engages a specialist KYC or identity verification service provider, that provider may return a verification status result along with limited identity data extracted from the documents you submitted.
- From fraud prevention and security tools — IP reputation services and device fingerprinting tools may provide supplementary data used to assess the security of login events and to detect multi-accounting or fraudulent activity.
ink89 processes your personal data exclusively for the purposes described below. We do not process personal data for any purpose that is incompatible with these stated objectives:
| Purpose |
Description |
| Account Management |
Creating, maintaining, and authenticating your ink89 Account, including password recovery and session management. |
| Service Delivery |
Processing deposits and withdrawals in IDR via BCA, BRI, BNI, Mandiri, CIMB Niaga, DANA, OVO, GoPay, ShopeePay, and LinkAja; settling sportsbook wagers; crediting casino winnings. |
| Identity Verification |
Confirming that you are at least 21 years of age, a resident of Indonesia, and the legitimate owner of the payment methods associated with your Account. |
| Fraud & Security |
Detecting and preventing multi-accounting, money laundering, bonus abuse, and unauthorized platform access. |
| Responsible Gaming |
Monitoring activity patterns to identify potential problem gambling behavior and triggering responsible gaming interventions where appropriate. |
| Customer Support |
Responding to inquiries, complaints, and escalated disputes submitted via [email protected]. |
| Legal Compliance |
Meeting obligations under applicable anti-money-laundering, know-your-customer, and platform-integrity requirements. |
| Platform Improvement |
Analyzing aggregated, anonymized usage data to improve the platform's performance, UX, and game offering. No individually identified data is used for this purpose. |
| Service Communications |
Sending transactional emails — deposit confirmations, withdrawal notifications, KYC status updates, and material changes to Terms & Conditions or this Privacy Policy — to your registered email address. |
Marketing Communications: ink89 may send promotional emails — including bonus offers, seasonal promotions tied to events such as Idul Fitri, Ramadhan, or Indonesian Independence Day, and new game announcements — only where you have provided explicit opt-in consent at registration or subsequently. You may withdraw this consent at any time by emailing
[email protected] with the subject line "Unsubscribe from Promotions".
ink89 processes your personal data under one or more of the following legal bases depending on the specific processing activity:
- Contractual necessity: The majority of processing activities — Account creation, payment processing, wager settlement, KYC verification — are necessary to perform the contract between ink89 and you as a registered Member. Without this processing, ink89 cannot provide the services you have contracted for.
- Legitimate interests: Fraud detection, security monitoring, multi-accounting prevention, and platform analytics are carried out on the basis of ink89's legitimate interest in operating a secure, fair, and commercially viable platform. These interests are balanced against your privacy rights and do not override them.
- Legal obligation: Certain data retention and disclosure activities are required by applicable law, including anti-money-laundering regulations and financial record-keeping requirements. ink89 will comply with lawful requests from competent authorities.
- Consent: Marketing communications and certain non-essential cookie categories are processed on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
ink89 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the minimum extent necessary:
- Payment processors: Transaction data is shared with the relevant payment processor (Indonesian bank or e-wallet provider) solely to facilitate the specific deposit or withdrawal transaction you have initiated. Each processor is bound by its own regulatory obligations and does not receive any data beyond what is required to execute the transaction.
- KYC verification providers: Identity document data is shared with specialist KYC verification service providers engaged by ink89 for the sole purpose of confirming your identity and eligibility. These providers operate under data processing agreements that prohibit any secondary use of the data.
- Game content providers: Certain technical session data (such as a pseudonymous session token and game round identifiers) is transmitted to game studio partners — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe — to operate their respective game products. These providers do not receive your full identity or financial data.
- Fraud prevention and security partners: IP address data and device fingerprinting data may be shared with specialized fraud-detection platforms to assess the risk profile of login events and transactions.
- Legal and regulatory authorities: ink89 will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by a valid legal obligation, court order, or regulatory request. ink89 will notify the affected Member of such disclosure where legally permitted to do so.
- Business transfers: In the event of a merger, acquisition, or sale of all or a material part of ink89's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy before they take effect.
Data Processing Agreements: All Third-Party Processors who handle Member personal data on behalf of ink89 are required to enter into formal data processing agreements that impose data protection obligations equivalent to those set out in this Policy and prohibit any processing of Member data outside the scope of the contracted service.
ink89 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category |
Retention Period |
| Identity & Contact Data |
For the duration of the active Account relationship, plus a minimum of 5 years following Account closure — to satisfy financial record-keeping and anti-money-laundering compliance obligations. |
| KYC Documents |
For the duration of the Account relationship, plus 5 years following closure. Documents may be retained for longer where required by a specific legal obligation or an ongoing regulatory investigation. |
| Transaction Records |
5 years from the date of each transaction, consistent with financial record-keeping requirements. |
| Gambling Activity Data |
For the duration of the active Account, plus 2 years following Account closure, for responsible gaming and dispute resolution purposes. |
| Technical & Device Data |
Up to 13 months from collection for analytics and security purposes. IP address logs are retained for up to 6 months for fraud and security investigation purposes. |
| Customer Support Records |
3 years from the date of the final support interaction, for dispute resolution and quality assurance purposes. |
| Marketing Consent Records |
For the duration of the consent and for 3 years following withdrawal, as evidence that the consent was properly obtained and subsequently withdrawn. |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with ink89's data destruction procedures. Anonymized data — from which individual Members cannot be re-identified — may be retained indefinitely for statistical and platform improvement purposes.
ink89 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:
- Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your Account authentication state, and enable core security features such as CSRF protection. These cookies cannot be disabled without preventing the platform from functioning correctly.
- Functional Cookies: These cookies remember your preferences — such as language settings, preferred deposit method, and last-played game categories — to provide a more personalized platform experience. Disabling functional cookies will not prevent access to the platform but will result in a less tailored experience.
- Analytics Cookies: Aggregated, anonymized data collected via analytics tools is used to understand how Members navigate the platform — which pages are most visited, where drop-offs occur, and how game categories perform. This data does not identify individual Members and is used solely to improve platform design and performance.
- Security Cookies: Device fingerprinting and bot-detection cookies are used to identify and block automated access attempts, protect against credential-stuffing attacks, and detect multi-account registrations.
Most web browsers provide controls to manage cookie preferences, including the ability to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your ink89 Account. Browser-level cookie controls are the primary mechanism for managing your cookie preferences on the ink89 platform.
No Third-Party Advertising Cookies: ink89 does not deploy third-party advertising tracking pixels or retargeting cookies that share Member behavioral data with advertising networks. Member gambling activity data is never used to build advertising profiles.
ink89 implements a multi-layered security architecture to protect your personal data from unauthorized access, disclosure, alteration, and destruction. Our key security measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the ink89 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms that your connection is secured.
- Segregated Data Storage: Member identity data, financial transaction records, and gambling activity logs are stored in separate, access-controlled database environments. No single system component has broad access to all categories of Member data.
- Access Controls: Access to Member personal data within ink89's operational systems is restricted on a strict need-to-know basis. Staff members access only the data categories required to perform their specific role. All internal data access is logged and audited.
- No Storage of Payment Credentials: ink89 does not store full payment card numbers, CVV codes, or internet banking login credentials. All payment processing is delegated to certified third-party processors who operate under their own PCI-DSS compliance frameworks.
- Two-Factor Authentication: Two-factor authentication (2FA) is available on all Member Accounts and is strongly recommended. Enabling 2FA significantly reduces the risk of unauthorized Account access resulting from compromised passwords.
- Breach Response: In the event of a personal data breach that poses a risk to Member rights, ink89 will notify affected Members promptly and without undue delay, providing details of the nature of the breach, the data affected, and the steps being taken to mitigate the impact.
Your Responsibility: The security of your Account also depends on the strength and confidentiality of your password. Use a unique password that is not shared with any other service. Do not share your Account credentials with any third party. If you suspect unauthorized access to your Account, contact
[email protected] immediately.
As a Member of the ink89 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered username:
Right of Access
Request a copy of all personal data ink89 holds about you, along with information on how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your Account profile or KYC records.
Right to Erasure
Request deletion of your personal data where processing is no longer necessary, subject to legal retention obligations.
Right to Restriction
Request that processing of your data be restricted to storage only, pending resolution of an accuracy dispute or objection.
Right to Portability
Request a machine-readable export of the personal data you have provided to ink89, for transfer to another service provider.
Right to Object
Object to processing carried out on the basis of ink89's legitimate interests, including direct marketing communications.
Right to Withdraw Consent
Withdraw consent for marketing emails or non-essential cookies at any time, without affecting prior lawful processing.
Right Against Automated Decisions
Request human review of any automated decision that produces a legal or similarly significant effect on your Account.
ink89 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or voluminous, this period may be extended by a further 60 days, with notification provided within the initial 30-day window. ink89 reserves the right to verify your identity before processing a data rights request to protect against fraudulent access to another Member's data.
Limitations on Erasure: The right to erasure is subject to ink89's legal obligations to retain certain categories of data — particularly KYC documents and financial transaction records — for the periods specified in the Data Retention section. Where retention is legally required, ink89 will advise you of the applicable obligation and the earliest date on which the data can be deleted.
The ink89 platform is strictly an adults-only service. Registration and use of the platform is prohibited for any person under 21 years of age. ink89 does not knowingly collect personal data from individuals under 21, and no part of the platform is designed or intended to attract underage users.
If ink89 discovers, at any point during the Account lifecycle, that a Member is under 21 years of age, the following actions will be taken immediately:
- The Member's Account will be suspended pending investigation.
- All funds in the Account will be frozen.
- Any winnings generated through gameplay will be forfeited.
- All personal data collected in connection with the Account will be deleted as soon as legally permissible.
- The matter will be referred to appropriate authorities where the circumstances warrant such referral.
Parents and guardians who believe their child may have registered an Account on ink89 are urged to contact us immediately at [email protected] so that the Account can be investigated and closed without delay.
The ink89 platform does not contain links to external third-party websites. All navigation within the platform is confined to ink89's own pages and services. Game content from studio partners — Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe — is delivered through integrated iframes or APIs rather than as links that navigate the Member away from the ink89 platform.
In the event that any third-party content or a third-party link does appear on the ink89 platform in the future, this Privacy Policy will apply only to data collected by ink89 itself. Any third-party website or service accessible via such a link operates under its own privacy policy, for which ink89 bears no responsibility.
ink89 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, legal requirements, or the services we offer. The most current version will always be published at https://ink89.ws/privacy-policy, with the effective date prominently displayed at the top of the document.
For material changes — those that substantively affect how your personal data is processed or that reduce your rights — ink89 will provide at least 14 days' advance notice via the email address registered to your Account and via a prominent in-platform notification. Your continued use of the platform following the effective date of any revision constitutes your acceptance of the updated Policy.
If you do not agree with a change to this Privacy Policy, you may close your Account by contacting [email protected] prior to the effective date of the revision. Upon Account closure, data will be retained only for the periods required by the applicable legal obligations described in the Data Retention section.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the ink89 data team using the details below:
- Email: [email protected] — use subject line "Privacy Inquiry" for general questions or "Data Rights Request" when exercising a specific right.
- Response Target: Initial acknowledgment within 24 hours; substantive response within 30 calendar days for data rights requests, and within 5 business days for general privacy inquiries.
- Languages: Inquiries may be submitted in English or Indonesian (Bahasa Indonesia). Responses will be provided in the language of your inquiry.
- Support Hours: The ink89 support team is available 24 hours a day, 7 days a week, including Indonesian public holidays.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all prior versions. Members registered before this date are bound by this Policy from its effective date onward.