Reference

How we protect your account and your data

When you open an account with istana168, we handle your personal information and payment details according to the laws that apply where you are.

Data encrypted on every depositWithdrawal verification in real timeSupport 24/7 for account access questions
istana168 How we protect your account and your data
GET LEGAL ANSWERS

How to reach our compliance team

Your questions about account rights, data handling and policy details go to one team, available around the clock. We respond to account access requests, data deletion inquiries and jurisdiction questions through the same channels where you reach everyday support. Players in Medan, Semarang and across Indonesia can open a ticket, email or chat without delay.

Team online

Live Chat

Open the chat widget in the bottom-right of the lobby. Our compliance team responds within 2 minutes during peak hours, under 10 minutes at off-peak.

Email Support

Send your legal question to [email protected]. We log every email and reply with a case number within 24 hours.

Account Settings

Go to Settings > Legal & Data in your account. File a data request, review your retention timeline or request closure directly from the page.

HOW WE OPERATE

Data security, cookies and your account control

We encrypt all login sessions using HTTPS. Cookies on istana168 track your play history and remember your payment preference (DANA, OVO, GoPay or QRIS) so you don't re-enter them every time.

SSL Encryption

Every deposit, withdrawal and login happens over HTTPS. Your payment details never touch our servers; they go straight to DANA, OVO, GoPay or QRIS gateways.

Cookie Policy

We use session cookies to keep you logged in and functional cookies to remember your language, payment method and bet size. Analytics cookies help us spot when our site is slow.

Data Retention

Your account data stays with us for 7 years after closure if law requires it, otherwise 30 days. Transaction records are kept for tax and fraud-prevention compliance.

Account Security

Two-factor authentication is available in Settings > Security. Enable it to add an SMS code step before any withdrawal. You can revoke active sessions from your device list.

Unauthorized Access

Report suspicious logins or fraudulent transactions immediately via live chat. We freeze the account, log all activity and respond to your claim within 48 hours.

Data Export Request

Open Settings > Legal & Data and click 'Download my data'. We compile your profile, play history, deposits and withdrawals into a file within 5 business days.

Common questions about your account and privacy

Yes. We operate under the laws that apply where local law permits. Depends on local law regarding which regional rules govern your account. If you're unsure whether access is available where you are, open the account flow and we'll show you the jurisdictions we serve.

We keep deposit and withdrawal records for 7 years to meet tax and anti-fraud rules. Your play history stays in your account for as long as it's open. After you close your account, we delete transaction details within 30 days unless law requires longer storage.

Yes. Go to Settings > Legal & Data to request a download of your profile, play history and all transactions. Account closure is immediate; your data is deleted after 30 days unless we're required to keep it by law.

No. We never see or store your payment details. DANA, OVO, GoPay and QRIS process the transaction on their own secure servers. We only store the fact that a deposit succeeded and the amount you sent.

Report it immediately in Settings > Security or via live chat. We lock your account, review all logins and transactions, and work with you to reverse any unauthorized activity within 48 hours.

Our compliance team is in live chat 24/7, or email [email protected]. You can also file a request directly in Settings > Legal & Data. Every question gets a case number and a response within 24 hours.

We use cookies for login sessions, payment memory and analytics. You can disable non-essential cookies in your browser settings, but login and security cookies must stay on for your account to work.