User Data Protection Updated 2026

Indowd Privacy Policy – Malaysia User Data Protection

Your privacy is our priority. This document clearly explains how indowd collects, stores, uses, and protects your personal information at all times.

Indowd Privacy Commitment

Six core pillars that ensure your personal data is always protected on our platform.

256-bit SSL Encryption

Every data transfer between your device and indowd servers is secured with industry-grade 256-bit SSL encryption — the same standard used by leading banking institutions.

Strict Access Control

Access to users' personal data is restricted to authorized staff only, with audit logs recording every access to ensure full accountability.

No Data Selling

Indowd has never and will never sell, rent, or share your personal information with third parties for marketing or commercial purposes without your explicit consent.

Secure Storage

Your data is stored in high-security data centers with frequent backup systems, ensuring your information is never lost and always securely accessible.

Guaranteed User Rights

You have full rights to access, correct, transfer, and request deletion of your personal data — and we will process every request within the stipulated timeframe.

Breach Notification

In the event of any security incident involving your data, indowd is committed to notifying affected users within the timeframe required by law.

01 Introduction

Welcome to the indowd Privacy Policy. This document explains how indowd ("we", "Platform", "indowd") collects, uses, discloses, and protects your personal information when you use our website at indowd.onl, the indowd mobile app, or any of the services we offer.

We understand that entrusting personal information to any online platform is a significant decision. That is why we have written this policy in clear, plain language — not confusing legal jargon — so you know exactly what happens with your data.

By using the indowd platform, you agree to the data collection and usage practices described in this document. If you have any concerns or questions, our team is ready to assist.

Note: This Privacy Policy forms part of Terms and Conditions indowd and should be read in conjunction with that document.

02 Information We Collect

Indowd collects several categories of information depending on how you interact with our platform. Below is a comprehensive summary of the data we collect:

Data Category Examples of Information Primary Purpose
Identity Information Full name, date of birth, identity card number KYC verification & age eligibility
Contact Information Email address, phone number Account communications & support
Financial Information Bank account number, payment method Deposit & withdrawal processing
Usage Data Betting history, games played, session duration Service & security improvement
Technical Data IP address, device type, web browser, operating system Security & fraud detection
Location Data General geographic location based on IP Geographic regulatory compliance
We only collect information that is genuinely necessary to provide a safe and responsible service. Data that is no longer needed will be deleted according to the established retention schedule.

03 How We Use Your Data

The personal information we collect is used for the following purposes, all on a valid legal basis:

  • Account Management: Creating, verifying, and maintaining your user account, including the mandatory KYC process and age verification.
  • Transaction Processing: Processing deposits, withdrawals, and any other financial transactions securely and accurately.
  • Service Delivery: Enabling you to access all features of the indowd platform, including games, sports betting, promotions, and the VIP programme.
  • Security & Fraud Prevention: Detecting and preventing suspicious activity, fraud, money laundering, and platform abuse.
  • Customer Support: Providing technical assistance and addressing your enquiries more effectively when we have context about your account.
  • Service Communications: Sending important notifications related to your account, security, terms changes, and platform updates.
  • Platform Improvement: Analysing usage patterns in aggregate to improve the user experience and develop new features.
  • Legal Compliance: Fulfilling reporting obligations and compliance requirements with the relevant authorities.
Marketing: We will only send you marketing communications if you have given your consent. You may withdraw this consent at any time through your account settings.

04 Information Sharing & Disclosure

Indowd does not sell your personal information. However, there are limited situations where we may need to share your information with certain parties:

  • Service Providers: Third-party companies that assist us in operating the platform, such as payment processors, identity verification providers, and cloud infrastructure suppliers — all bound by strict confidentiality agreements.
  • Relevant Authorities: When required by law, court order, or regulatory authority directive, we may be required to disclose certain information.
  • Fraud Prevention: Information may be shared with fraud prevention agencies or financial institutions to help detect and prevent illegal activity.
  • Business Restructuring: In the event of a merger, acquisition, or asset sale, user information may be transferred as part of the business transaction, with appropriate notice provided.
Our Commitment: In all data-sharing scenarios, indowd ensures that recipients are held to data protection standards equivalent to or higher than those we apply ourselves.

05 Data Security

We invest seriously in security infrastructure to ensure your data is always protected. The key security measures we implement include:

  • End-to-End Encryption: All data transmitted between your device and our servers is protected with TLS 1.3 protocol and AES-256 encryption.
  • Two-Factor Authentication (2FA): Available to all user accounts to add an extra layer of security during login.
  • 24/7 Monitoring: Our security monitoring system operates around the clock to detect threats and suspicious activity in real time.
  • Regular Security Audits: Penetration testing and independent security audits are conducted regularly by qualified third-party security experts.
  • Internal Access Controls: indowd staff can only access data necessary for carrying out their duties, with every access logged for audit purposes.
  • Data Backup: Your data is automatically backed up to multiple secure locations to ensure continuity of service.
While no security system is 100% perfect, indowd takes all reasonable steps in line with industry best practices to ensure your data is protected as thoroughly as possible at all times.

06 Cookies & Tracking Technologies

Indowd uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session management, security, and stability. These cookies cannot be disabled.
  • Performance Cookies: Helping us understand how users interact with the platform for improvement purposes, using aggregated data that does not identify individuals.
  • Functional Cookies: Saving your preferences such as language, display settings, and game preferences so you don't need to reset them each time.
  • Security Cookies: Used to detect and prevent fraud and suspicious bot activity on our platform.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the indowd platform.

07 Your Rights as a User

As an indowd user, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right to Access

You may request a copy of all personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete information in your profile.

Right to Deletion

You may request deletion of your personal data, subject to legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for portability purposes.

Right to Restriction of Processing

You may request a temporary restriction on the processing of your data under certain circumstances.

To exercise any of the rights above, please contact our privacy team via the support email. We will process each request within 30 calendar days from the date of receipt.

08 Data Retention Period

Indowd retains your personal data only for as long as necessary for the purposes stated in this policy, or for as long as required by applicable law. In general:

  • Active Account Data: Retained for as long as your account remains active on the indowd platform.
  • Data After Account Closure: Certain records such as transaction history and KYC information are retained for a minimum of 5 years after account closure to comply with anti-money laundering legal obligations.
  • Technical Log Data: Access logs and security logs are retained for 12 months before being automatically deleted.
  • Marketing Data: Retained until you withdraw consent, after which it will be deleted within 30 days.

Once the retention period expires, data is securely deleted or anonymized in accordance with industry-standard procedures.

09 Cross-Border Data Transfers

In the course of its operations, indowd may process or store user data on servers located in various geographical locations. Any such data transfers are carried out with appropriate safeguards, including:

  • Data processing agreements that comply with international data protection standards.
  • Security risk assessment for each jurisdiction involved.
  • Standard contractual clauses that ensure an equivalent level of data protection is maintained across all locations.
Regardless of where your data is processed, the level of protection we provide remains consistent with the standards set out in this Privacy Policy.

10 Children's Policy

Indowd services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children or minors below the stipulated age limit.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware of such a situation are urged to contact us immediately.

11 Privacy Policy Amendments

Indowd reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When significant changes occur, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending notifications via registered email for material changes.
  • Displaying a clear notice on the platform when you log in for the first time after an amendment.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the platform after any amendments take effect will be considered acceptance of the revised policy.

12 Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, please contact our team through the following channels:

We are committed to responding to all privacy-related inquiries within 72 hours on business days, and within 30 days for more complex rights exercise requests.

We are here for you. Privacy is not merely a legal obligation for us — it is part of our commitment to building a platform that Malaysia users can truly trust.

Your Data Is Safe. Time to Play!

Create your indowd account today and enjoy a safe, fair, and exciting betting experience. Your privacy is protected with us at all times.

Bahasa Melayu