ineffa Casino & Sportsbook Data Care
This page describes what we collect when you use ineffa and how we keep that data protected. We collect your email, phone number, government ID, and payment details (bank account numbers or e-wallet credentials) to operate our platform, verify your identity, and process deposits and withdrawals. We store this information encrypted and do not sell it to third parties outside legal compliance requirements.
Our data handling reflects our core commitment: transparency about what we ask, why we ask it, and who can access it. When you fund your account via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), we receive payment confirmation but do not store your wallet or banking credentials on our servers. Your personal and financial data remain encrypted at rest and in transit.
We operate in supported jurisdictions where local law permits wagering. Your data rights vary depending on your location; this policy sets out our general practice. If you are in a jurisdiction with specific data-protection laws, those laws may override or supplement our policy. Contact our support team if you have questions about your rights.
What we collect and why
We collect data in several categories. First, account registration: we ask for your full name, date of birth, email address, and phone number. We use this to create your account, verify your identity during KYC, and contact you about your account (deposit confirmations, withdrawal updates, support tickets). Second, identity verification: we collect a government-issued photo ID (KTP, passport, or driver licence) and proof of residence (utility bill, bank statement, or lease agreement). We use this to confirm you are who you claim to be and to comply with anti-money-laundering regulations. Third, payment data: we collect the payment method you select (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual-account details). We use this to process deposits and withdrawals.
Fourth, gameplay data: we log your wagers, bet amounts, market selections, match or game outcomes, and account balance. We use this to settle wagers accurately, track your account balance, and generate your transaction history. Fifth, device and network information: we collect your IP address, device type, browser version, and network connection details. We use this to detect fraud, ensure platform security, and comply with legal requests. Sixth, customer-support communications: if you contact our support team, we retain your messages, attachments, and our responses. We use this to resolve disputes and improve our support process.
We do not collect data we do not need. For example, we do not ask for your salary, family composition, or employment history. We collect only what is necessary to operate ineffa, verify your identity, process payments, and comply with law.
How we use your data on ineffa
We use your data to deliver ineffa's core functions: account opening, KYC verification, deposit processing, wager settlement, withdrawal processing, and customer support. We also use data for security: we monitor for fraud, detect duplicate accounts, and investigate suspicious activity. If we detect a potential breach, we contact you immediately and take corrective action. We also use data for legal compliance: we submit KYC documents and transaction records to financial regulators, tax authorities, and law enforcement when required by law or valid court order. We do not retain this data longer than necessary—typically 5–7 years for financial records and 2–3 years for support tickets.
We use your data to improve ineffa: we analyse aggregate usage patterns (e.g., "Liga 1 betting is most popular in Jakarta and Bandung") to guide feature development. However, this analysis is aggregated and anonymous; we do not identify individual players in our reports. We also use your email and phone to send you notifications: deposit confirmations, withdrawal updates, bonus offers, system maintenance notices, and security alerts. You can opt out of marketing emails in your account settings, but we will continue sending transactional emails (e.g., withdrawal confirmations) because you need these to manage your account.
Data storage and security on ineffa
We store your personal data on encrypted servers located in Asia-Pacific regions. Our servers may sit outside your jurisdiction; if you are in a jurisdiction with strict data-localization requirements, contact our support team to discuss your options. All data is encrypted at rest using AES-256 encryption; encryption keys are stored separately and accessible only to our infrastructure team. Data in transit is encrypted using HTTPS with TLS 1.2 or higher. Your password is hashed using bcrypt; we do not store plaintext passwords.
We restrict access to personal data. Only our compliance team can view KYC documents and identity information. Only our finance and operations teams can view payment details. Our support team can see your email, phone, and account balance to help resolve issues, but cannot view your ID or payment credentials. All data access is logged and audited monthly. If we detect unauthorized access, we investigate and take corrective action immediately.
We conduct quarterly security audits by independent third-party firms to test for vulnerabilities. Any reported security flaw is patched within 48 hours. We also maintain a data-breach response plan: if a breach occurs, we notify affected users within 72 hours and work with regulators to ensure compliance.
Your rights regarding data on ineffa
You have the right to access, correct, or delete your personal data. Contact our support team with a data-subject request and we will provide a copy of your data within 30 days. You can correct any inaccuracies yourself in your account settings (email, phone, address), or contact us for assistance. You can also request deletion of non-essential data, though we must retain financial records and KYC documents for legal compliance (typically 5–7 years). Once the legal retention period expires, we delete the data unless you request earlier deletion and legal compliance permits.
You have the right to data portability: we can export your account history, wagers, and transaction records in a machine-readable format (CSV or JSON). You have the right to object to marketing emails: adjust your notification settings in your account dashboard. You do not have the right to object to transactional emails (e.g., withdrawal confirmations) because these are necessary for account management. You have the right to lodge a complaint with a data-protection authority in your jurisdiction if you believe we have mishandled your data.
We at ineffa keep your data encrypted, compartmentalized, and protected under strict internal policies. We do not sell your information. Your account remains yours alone.
Cookies and tracking on ineffa
We use cookies to store your login session, remember your language preference, and track your behaviour on ineffa to improve platform performance. Session cookies expire when you log out. Preference cookies (e.g., language selection) persist for one year unless you clear them. Performance cookies track page load times, button clicks, and error rates; this data is aggregated and used to identify and fix slow features.
We do not use cookies for advertising. We do not sell your browsing data to advertisers. We do not track you across other websites. If you disable cookies in your browser, ineffa will still function, but you will need to re-enter your login information each session. For more information on how cookies work, see your browser's help documentation or visit a third-party privacy resource.
Data transfers and legal disclosure
We operate in supported jurisdictions where local law permits wagering. If you are outside these jurisdictions, we may restrict or close your account. We do not knowingly collect data from minors; if we discover a user is underage, we immediately close their account and retain no data. We comply with legal requests from law enforcement and regulatory authorities. If we receive a subpoena, court order, or regulatory demand for your data, we comply unless prohibited by law. We will attempt to notify you of legal requests when possible, though in some cases law may prohibit such notification.
If ineffa is acquired, merged, or enters bankruptcy, your data may be transferred as part of that transaction. We will notify you via email of any such change and provide an opportunity to request deletion before the transfer occurs. Your data will remain subject to this privacy policy unless the new owner issues a separate policy and you consent to it.
Contact and policy updates
If you have questions about our privacy practices, contact our support team via email, phone, or in-app chat. We respond to privacy inquiries within 30 days. We may update this privacy policy to reflect changes in our practices or legal requirements. If we make material changes, we will notify you via email and ask for your consent if the change affects your rights. Minor updates (e.g., correcting typos) do not require notification. Continued use of ineffa after a policy update means you accept the new terms.
We are committed to protecting your data while operating ineffa across supported regions including Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta. Your personal information powers our ability to process your DANA, e-wallet, mobile banking, and bank-transfer deposits, settle Liga 1 and Piala Indonesia wagers accurately, and support you throughout your account lifecycle. If you ever feel your privacy has been compromised, contact us immediately so we can investigate and take corrective action.
Platform security layers
We at ineffa protect all account data, financial transactions, and gameplay information using industry-standard encryption and security protocols. Every connection between your phone or computer and our servers uses HTTPS with TLS 1.2 or higher, ensuring login credentials, deposit details, and personal information remain encrypted during transmission. When you deposit via DANA, OVO, GoPay, ShopeePay, LinkAja, or QRIS, your e-wallet password or PIN never enters our system; instead, we receive a secure token from the payment provider that authorizes the transfer. For bank transfers via BCA, Mandiri, BRI, and BNI virtual accounts, we use encrypted connections; your banking login is never stored on our servers. Your ineffa account password is hashed using bcrypt, a military-grade algorithm that prevents even our administrative staff from viewing plaintext passwords. Two-factor authentication (2FA) is available in your account settings and adds a second verification step when you log in from new devices. Session tokens expire after subject to verification of inactivity, forcing you to re-authenticate for sensitive actions like withdrawals or profile changes. All server logs are encrypted at rest and retained only for compliance and fraud investigation; non-essential logs are purged after 90 days. Our infrastructure runs on redundant cloud servers with automatic failover, so if one data centre experiences downtime, your account and funds remain secure on backup systems. We conduct quarterly security audits performed by independent third-party cybersecurity firms and respond to any reported vulnerabilities within 48 hours. All server updates and patches are applied during off-peak hours to minimize disruption. If you notice suspicious activity on your ineffa account—unauthorized login attempts, unexpected withdrawals, or unfamiliar wagers—contact our support team immediately and we will freeze your account pending investigation. We also employ a dedicated fraud-detection system that monitors for unusual patterns such as rapid successive deposits, withdrawal to unusual destinations, or geographic anomalies; our system can temporarily halt your account if high-risk activity is detected.
Game fairness and RTP
We at ineffa ensure fairness across two distinct game types. For RNG-driven games—slots like Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, and Mahjong Ways, plus live-dealer games like blackjack, roulette, baccarat, and Dragon Tiger—we use certified random-number generators audited annually by independent gaming laboratories. These generators are seeded from atmospheric entropy and external randomness sources, ensuring each spin or card deal is statistically independent and cannot be predicted or replayed. The RTP (return-to-player) percentage for each game is displayed prominently: typically 95–non-specific info for slots and 96–non-specific info for live-dealer games. RTP represents a long-term statistical measure; over a very large sample of plays, the collective payout ratio converges toward that percentage. Individual sessions show significant variance above or below RTP due to natural luck fluctuations—this is normal and expected. For real-world-event games—football (Liga 1, Piala Indonesia, Champions League, Premier League), esports (Mobile Legends, Free Fire, PUBG Mobile), and tennis (WTA Tour)—outcomes are determined by actual events, not algorithms. We settle wagers based on official tournament records and cannot influence results. Our odds-setting process is systematic: we analyse team strength, historical performance, and market demand to calculate fair odds, then adjust them as betting volume shifts. We do not adjust odds unfairly to favour the house; instead, we price matches to reflect genuine probability and manage our risk through balanced betting books. If you observe an impossible outcome—such as a slot result violating stated RTP or a sports wager settling against official records—report it immediately to our compliance team with evidence, and we will investigate and correct any system error. All RNG games undergo annual third-party testing, and results are available on request.
KYC verification process
We at ineffa require Know Your Customer (KYC) verification before your first withdrawal to comply with Indonesian financial regulations and prevent fraud, underage access, and money laundering. When you register an ineffa account, you provide your full name, date of birth, email, and phone number. Before withdrawing, we request government-issued photo ID (KTP, passport, or driver licence) and proof of residence such as a utility bill, bank statement, or lease agreement dated within the last three months. We also ask for a real-time selfie to confirm you are the person in your ID document. Our KYC team reviews documents manually and uses automated image analysis to verify document authenticity and cross-check your details against public records. Review typically takes one business day; if a document is unclear or missing required information, we request resubmission via your dashboard—you can reupload immediately and we re-review within 24 hours. Once approved, your KYC status remains valid indefinitely; you do not reverify for each withdrawal. Your documents are encrypted and stored separately from gameplay logs, accessible only to our compliance team under strict access controls. We never sell personal information to third parties except as required by Indonesian law or valid court order. If you suspect your identity has been misused on ineffa, contact our support team immediately and we will audit your account activity and freeze it pending investigation. Users outside Indonesia should verify eligibility with our support team before registering, as our services are available only in supported jurisdictions where local law permits. We maintain a data-retention policy: KYC documents are retained for 7 years after account closure to comply with financial regulations.
User feedback and review channels
We at ineffa collect player feedback through in-app surveys, email support tickets, community forums, and independent review platforms. We encourage honest reviews on third-party sites and gaming forums; reading multiple sources provides balanced perspective on user experience rather than relying on isolated high or low ratings. A single five-star review praising our Liga 1 odds should be weighed against several three-star reviews mentioning withdrawal delays or customer-service gaps. Conversely, a few one-star complaints about losses during specific matches or slots sessions reflect natural variance, not platform unfairness. We do not fabricate, purchase, or manipulate reviews on any platform. Our goal is to address legitimate complaints transparently: if a player reports a missing deposit, we investigate our records and either explain the delay or process corrective action. If a player disputes a wager settlement, we cross-check against official records and either affirm settlement or issue a refund if we made an error. We publish a monthly operational summary on our website detailing average customer-support response times, complaint categories, and resolution rates—this transparency lets you verify our claims against real data. If you encounter a problem on ineffa—delayed deposit, incorrect settlement, poor customer service—report it through our in-app support form, email, or phone. We aim to respond within 24 hours and resolve issues within 48–72 hours depending on complexity. We also actively solicit feature requests: recent additions like expanded QRIS support and LinkAja integration were implemented based on user feedback from high-adoption regions including Jakarta, Bandung, Medan, and Yogyakarta. Your suggestions directly shape our product roadmap and operational priorities.