ins55 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "ins55" / "We" / "Us" / "Our" — The operator of the ins55 platform accessible at ins55.onl and all associated subdomains, mobile interfaces, and branded products.
• "You" / "Member" / "User" — Any individual who accesses, browses, registers, or transacts on the ins55 platform, whether as a registered account holder or an unregistered visitor.
• "Personal Data" — Any information that identifies or can be used to identify you as an individual, including your name, date of birth, email address, mobile number, Indonesian bank account details, e-wallet identifiers, IP address, device identifiers, and transaction history.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, transmission, disclosure, deletion, and any other handling of that data.
• "Third Parties" — External entities that receive or access your Personal Data in connection with the operation of the ins55 platform, including payment processors, KYC verification providers, game studios, and fraud prevention services.
• "Cookies" — Small data files placed on your device by the ins55 platform or third-party service providers integrated into the platform, used to recognize your device and improve your browsing experience.

ins55 acts as the data controller in respect of the Personal Data collected from members accessing the platform. As data controller, ins55 determines the purposes and means by which Personal Data is processed. ins55 is incorporated and licensed under the jurisdiction of its primary gaming authority and is subject to the data protection obligations of that jurisdiction.

For all data protection enquiries, requests relating to your rights under applicable privacy law, or concerns regarding how ins55 handles your Personal Data, please contact us directly:

Data Protection Contact: [email protected]

All data protection requests should include the subject line "Data Protection Request — [Nature of Request]" and will be acknowledged within 5 business days of receipt.

ins55 collects Personal Data across several distinct touchpoints during the account lifecycle. The categories of data collected are described in the table below:

3.1 — Data You Provide Voluntarily

Registration data, KYC documents, and communications data are provided by you voluntarily when you use the ins55 platform. Providing this data is a condition of accessing certain platform features, particularly account registration, identity verification, and transaction processing. Without this data, ins55 cannot operate a compliant, secure platform for your benefit.

3.2 — Data Collected Automatically

Technical data and gaming activity data are collected automatically through your interaction with the ins55 platform. This collection occurs through standard web server logging, session tracking, and our cookie implementation as described in Section 7 of this policy. You may limit certain automatic data collection by adjusting your browser settings, but doing so may affect the functionality of the ins55 platform.

ins55 uses the Personal Data it collects for the following specific purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent or as otherwise required by applicable law:

• Account Operations: To create, maintain, and administer your ins55 account, process your deposits and withdrawals in IDR via your nominated Indonesian payment methods, and deliver all gaming services to which you have subscribed.
• Identity Verification: To verify your identity and age (21+) in accordance with our KYC obligations, confirm the ownership of payment methods you register, and comply with applicable anti-money laundering (AML) requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering attempts, prohibited conduct, and other violations of our Terms & Conditions. This includes automated risk-scoring of transactions and behavioral analysis of gaming patterns.
• Responsible Gaming: To monitor account activity for indicators of potential gambling harm, enforce the responsible gaming controls you configure, apply self-exclusion restrictions, and fulfil our duty of care obligations to members who may be experiencing gambling-related difficulties.
• Customer Support: To respond to your support requests, resolve disputes, process complaints, and communicate with you regarding your ins55 account — including notifying you of important account events such as large withdrawals, password changes, and security alerts.
• Legal and Regulatory Compliance: To comply with the requirements of ins55's gaming licence, applicable international AML and data protection regulations, and any lawful requests from authorized regulatory or law enforcement bodies.
• Platform Improvement: To analyze aggregated and anonymized usage data to improve the ins55 platform experience, optimize game lobby layouts, enhance payment flow reliability, and develop new features that serve our Indonesian member base.
• Marketing Communications: To send you promotional offers, seasonal campaigns, and personalized bonus notifications where you have provided your consent to receive marketing communications. You may withdraw this consent at any time by contacting [email protected].

ins55 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing your registration data, financial data, and gaming activity data is necessary to deliver the services described in your agreement with ins55 under our Terms & Conditions. Without this processing, ins55 cannot provide you with a functional account or process your transactions.
• Legal Obligation: KYC identity verification, AML transaction monitoring, and retention of certain financial records are required by the regulatory framework under which ins55 is licensed. ins55 has no discretion in these processing activities.
• Legitimate Interests: Fraud prevention, platform security, responsible gaming monitoring, and platform analytics are conducted on the basis of ins55's legitimate interest in operating a safe, secure, and compliant gaming platform. We have assessed that these interests are not overridden by your interests or fundamental rights.
• Consent: Marketing communications and certain non-essential cookies are processed on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing or your ability to use the ins55 platform.

ins55 does not sell your Personal Data to any third party. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: Your financial data is shared with the Indonesian payment processors and e-wallet providers (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) solely for the purpose of executing your authorized deposit and withdrawal transactions. These providers are independently regulated and subject to their own privacy obligations.
• KYC and Identity Verification Partners: Your identity documents and verification images may be shared with our licensed third-party KYC verification service providers for the purpose of confirming your identity and age in compliance with our regulatory obligations. These providers operate under strict data processing agreements with ins55.
• Game Studio Partners: Aggregated and pseudonymized gaming session data is shared with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe for purposes of game performance analytics and regulatory compliance. These studios do not receive personally identifiable member data.
• Fraud Prevention and Security Providers: Technical data including IP addresses, device fingerprints, and transaction patterns may be shared with fraud prevention service providers to detect and prevent unauthorized access, money laundering, and other security threats.
• Regulatory and Law Enforcement Authorities: ins55 will disclose Personal Data to the relevant regulatory authority or law enforcement body where required to do so by law, court order, or as part of a lawful regulatory investigation. ins55 will notify you of such disclosures where legally permitted to do so.

ins55 uses cookies and similar tracking technologies on the platform to ensure functionality, analyze usage, and — where you have consented — deliver relevant promotional content. The categories of cookies we use are as follows:

7.1 — Strictly Necessary Cookies

These cookies are essential for the ins55 platform to function correctly. They enable core features including session authentication (keeping you logged in), security token validation, and fraud prevention checks. These cookies cannot be disabled without preventing your use of the platform.

7.2 — Performance and Analytics Cookies

These cookies collect aggregated, anonymized data about how members use the ins55 platform — which pages are visited most frequently, where members encounter errors, and which game categories generate the most engagement. This data is used solely to improve the platform experience and is not linked to your individual identity.

7.3 — Functional Cookies

These cookies remember your preferences — such as your preferred lobby view, notification settings, or language preferences — so that you do not need to reconfigure them on each visit. Disabling functional cookies will not prevent platform access but will require you to re-enter preferences on each session.

7.4 — Marketing Cookies

With your consent, ins55 may use cookies to track your interaction with promotional content on the platform and to avoid displaying promotions you have already seen or declined. These cookies require your explicit consent and can be disabled at any time by contacting [email protected] or adjusting your browser settings.

ins55 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligation. The following retention periods apply as a general guide:

Following expiry of the applicable retention period, ins55 will securely delete or irreversibly anonymize your Personal Data. Anonymized data (from which you cannot be identified) may be retained indefinitely for aggregate analytics purposes.

ins55 implements a layered approach to data security, applying technical and organizational measures appropriate to the sensitivity of the data being protected and the risks associated with its processing:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ins55 platform is encrypted using Transport Layer Security (TLS 1.2 or higher). This is the same encryption standard used by major Indonesian banks including BCA Mobile and Mandiri Online for internet banking sessions.
• Password Hashing: Your account password is never stored in plain text. ins55 applies a one-way cryptographic hash with individual salting to all stored passwords, ensuring that even in the unlikely event of a database breach, your original password cannot be recovered.
• Access Controls: Access to Personal Data within ins55's internal systems is restricted to staff with a legitimate operational need, on a strict least-privilege basis. All internal data access events are logged and subject to periodic audit.
• Two-Factor Authentication: ins55 offers two-factor authentication (2FA) to all members and strongly recommends its use. 2FA provides an additional layer of protection against unauthorized account access in the event your password is compromised.
• Intrusion Detection and Monitoring: ins55 operates 24/7 automated monitoring of its platform infrastructure for anomalous access patterns, potential intrusion attempts, and data exfiltration indicators. Security incidents are escalated to our incident response team immediately upon detection.
• Third-Party Security Assessments: ins55 requires all Third Parties with access to member Personal Data to maintain security standards commensurate with our own and to undergo periodic security assessments. Data processing agreements are in place with all Third Party processors.

As an ins55 member, you hold the following rights in relation to your Personal Data. These rights may be subject to certain limitations where ins55 has overriding legal obligations or legitimate interests that justify continued processing:

• Right of Access: You may request a copy of the Personal Data ins55 holds about you. ins55 will provide a structured, commonly used, machine-readable copy of your data within 30 days of a verified request.
• Right to Rectification: If any Personal Data ins55 holds about you is inaccurate or incomplete, you may request that it be corrected. You can update many data points directly from within your ins55 account dashboard; for data that cannot be self-updated, contact [email protected].
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected. Note that this right does not apply where ins55 is required to retain data by law or for the establishment, exercise, or defense of legal claims.
• Right to Restrict Processing: You may request that ins55 limit processing of your Personal Data to storage only while a dispute regarding its accuracy or the lawfulness of its processing is pending resolution.
• Right to Data Portability: You may request that Personal Data you provided to ins55 on the basis of consent or contractual necessity be transmitted to you or to a nominated third party in a structured, machine-readable format.
• Right to Object: You may object to ins55 processing your Personal Data on the basis of its legitimate interests. ins55 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where ins55 processes your Personal Data on the basis of your consent (specifically marketing communications and non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the rights listed above, submit a written request to [email protected] with the subject line "Data Rights Request — [Specific Right]". ins55 will respond within 30 days. Requests may require identity verification before being actioned.

The ins55 platform is strictly intended for adults aged 21 and above. ins55 does not knowingly collect Personal Data from any person under 21 years of age. The platform's age verification processes are specifically designed to prevent under-21 access at the point of account registration and at subsequent KYC verification checkpoints.

If ins55 becomes aware that Personal Data has been collected from a person under 21 without appropriate consent or in circumvention of our age verification controls, we will immediately suspend the associated account and delete the relevant Personal Data from our systems. If you are a parent or guardian and believe your child has registered an ins55 account, please contact us immediately at [email protected].

ins55 operates as an internationally licensed platform. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia where ins55's technology infrastructure, game studio partners, or KYC verification providers are located. These countries may not provide the same level of data protection as the jurisdiction in which you reside.

Where Personal Data is transferred internationally, ins55 ensures that appropriate safeguards are in place to protect that data, including:

• Data processing agreements incorporating standard contractual clauses or equivalent data transfer protections with all Third Party processors receiving data outside Indonesia.
• Restricting international transfers to jurisdictions assessed by ins55 as providing an adequate level of data protection relative to the sensitivity of the data being transferred.
• Applying encryption in transit for all cross-border data transfers, ensuring that Personal Data cannot be intercepted or read by unauthorized parties during transmission.

ins55 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the structure of the ins55 platform. Where changes are material — for example, where we introduce a new category of data processing or a new Third Party processor — ins55 will notify registered members via email to their registered address before the amendment takes effect.

The effective date displayed at the top of this document confirms the version currently in force. Your continued use of the ins55 platform following any amendment constitutes your acknowledgment of the updated policy. The most current version of this Privacy Policy is always available at ins55.onl/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by ins55, please contact our data protection team using the details below. We aim to respond to all data protection enquiries within 5 business days.

Data Protection & Privacy Enquiries: [email protected]

Subject Line Format: "Privacy Enquiry — [Nature of Enquiry]" or "Data Rights Request — [Specific Right]"

ins55 customer support is available 24 hours a day, 7 days a week, with Indonesian-speaking agents on every shift. If your enquiry relates to a data breach, urgent security concern, or time-sensitive data rights request, please mark your email "URGENT" in the subject line for prioritized handling.