ion55 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

ion55 acts as the Data Controller in respect of all Personal Data collected through the ion55 platform, including data submitted during account registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and general platform usage.

As Data Controller, ion55 is responsible for ensuring that all Personal Data it collects and processes is handled in accordance with applicable data protection principles: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

If you have any questions or concerns about how ion55 handles your Personal Data, you may contact our Data Protection team using the details provided in Clause 16 of this Policy.

ion55 collects the following categories of Personal Data, grouped by the context in which they arise:

ion55 does not collect Special Category data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless strictly required for KYC verification and only to the extent permitted by applicable law.

ion55 collects Personal Data through the following primary channels:

• Direct submission: When you register an account, complete KYC verification, initiate a deposit or withdrawal, contact our support team, or respond to a promotional communication, you provide data directly to ion55.
• Automated technologies: When you access and interact with the ion55 platform, our systems automatically collect Technical Data and Usage Data through server logs, cookies, pixel tags, and similar tracking technologies. See Clause 10 for full details of our cookie practice.
• Third-party providers: ion55 may receive data about you from identity verification partners, payment processors (including local Indonesian banks and e-wallet operators), fraud detection services, and game studios — but only where such sharing is necessary to deliver the ion55 service or to meet our compliance obligations.
• Publicly available sources: In limited circumstances relating to AML and fraud screening, ion55 may cross-reference data from publicly available registers or databases to verify the accuracy of the information you have provided.

ion55 processes your Personal Data on the following legal grounds, depending on the purpose of the processing:

ion55 uses the Personal Data it collects exclusively for the following purposes:

• Account creation and management: To register your ion55 account, verify your identity and age (you must be 21 or older), and maintain your Member profile.
• Service delivery: To process deposits and withdrawals through your chosen local payment channels (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja), settle sportsbook bets, provide access to slot games and live casino products, and deliver all other features of the ion55 platform.
• KYC and AML compliance: To verify your identity documents, assess transaction risk, and report to the relevant authorities where required by our licensing obligations.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through our 24/7 live chat team.
• Fraud and security: To detect and prevent fraudulent activity, unauthorised account access, cheating, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling, enforce self-exclusion requests and deposit limits, and contact you proactively if our systems flag a concern.
• Personalisation: To tailor the platform experience — including game recommendations, promotional offers, and content — to your preferences and gaming history, where you have not opted out of personalisation.
• Marketing communications: To send you promotional emails, in-platform notifications, and bonus offers — but only where you have consented to receive such communications. You may opt out at any time by contacting our support team.
• Platform improvement: To analyse aggregated Usage Data, identify technical issues, and develop new features that enhance the ion55 experience for all Members.

ion55 does not sell, rent, or otherwise trade your Personal Data to unaffiliated third parties for their own marketing or commercial purposes. We share your data only in the following circumstances and with the following categories of recipient:

• Payment processors: Local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data necessary to process your deposit and withdrawal transactions.
• KYC and identity verification partners: Certified identity verification service providers receive your identity documents and biographic data solely to conduct age and identity checks on ion55's behalf.
• Game studio providers: International game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive a unique session token and stake data necessary to operate game rounds. They do not receive your full identity profile.
• Fraud and security vendors: Specialist fraud detection platforms receive Technical Data and transactional signals to assist ion55 in identifying and preventing fraudulent activity.
• Regulatory and law enforcement authorities: Where required by our licensing jurisdiction or by a lawful authority order, ion55 will disclose the minimum necessary Personal Data. ion55 will notify you of any such disclosure where legally permitted to do so.
• Professional advisors: ion55's legal counsel, auditors, and compliance advisors may access your data on a strictly confidential basis where necessary to provide their professional services to ion55.

All third parties with whom ion55 shares Personal Data are contractually required to maintain appropriate technical and organisational security measures and to use the data solely for the purpose for which it was shared.

ion55 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law or regulatory obligation. The following retention schedule applies as a general guide:

Upon expiry of the applicable retention period, ion55 will securely delete or anonymise your Personal Data in a manner that prevents reconstruction of your identity.

ion55 implements a comprehensive set of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include but are not limited to:

• TLS/SSL Encryption: All data transmitted between your browser and the ion55 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encryption at Rest: Sensitive Personal Data — including identity documents and financial data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within ion55's systems is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all staff with data access privileges.
• Intrusion Detection: ion55 operates continuous network monitoring and intrusion detection systems to identify and respond to security threats in real time.
• Security Audits: ion55 commissions periodic independent security audits and penetration tests to identify and remediate vulnerabilities in our platform infrastructure.
• Staff Training: All ion55 employees and contractors with access to Personal Data receive mandatory data protection and information security training on joining and annually thereafter.

While ion55 takes all reasonable precautions, no internet-based system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that your own devices are secured with up-to-date antivirus and operating system software.

ion55 uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve your user experience, and — where you have consented — to deliver personalised content and measure the effectiveness of our promotions. The following categories of cookies are used:

You may manage your cookie preferences at any time through your browser settings. Please note that disabling Strictly Necessary cookies will impair platform functionality. Withdrawing consent for Analytics or Marketing cookies will not affect your ability to use the core ion55 gaming service.

As an ion55 Member, you hold the following rights in relation to your Personal Data. ion55 will respond to all valid data rights requests within 30 calendar days of receipt:

• Right of Access: You have the right to request a copy of the Personal Data ion55 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. You may update basic account information directly through your Member profile.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to overriding legal obligations — for example, ion55 is required to retain certain transaction records for a minimum of five years under AML regulations.
• Right to Restriction: You have the right to request that ion55 restricts processing of your data — for example, while the accuracy of your data is being contested.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing of your Personal Data where ion55 relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact ion55's Data Protection team via live chat or by email at [email protected] (plain text — not a clickable link). We may request documentary proof of identity before processing your request to protect against unauthorised data access.

The ion55 platform is strictly for adults aged 21 years or older. ion55 does not knowingly collect Personal Data from any person under the age of 21. If we become aware that Personal Data has been collected from a person under 21, we will immediately close the relevant account, void all associated wagers, forfeit the account balance in accordance with our Terms & Conditions, and permanently delete the minor's data from our systems.

Parents and guardians who believe that a minor may have registered with ion55 are encouraged to contact our support team immediately via live chat. ion55 takes underage gambling extremely seriously and cooperates fully with responsible gaming organisations and regulatory authorities on this matter.

For guidance on parental controls and tools to prevent minors from accessing online gaming platforms, please visit our Responsible Gaming page.

The ion55 platform may display informational references to third-party services such as game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, and others) and payment partners (BCA, BRI, BNI, OVO, DANA, and others). These references are provided for informational context only. ion55 does not link to external websites in a manner that would transfer you away from the ion55 platform and does not control the privacy practices of any third-party organisation.

To the extent that any third-party service operates its own interface within the ion55 platform (for example, a live game session hosted by Evolution Gaming), the relevant game provider's own privacy notice may apply to data processed within their hosted environment. ion55 recommends reviewing the privacy documentation of any third-party provider whose services you use.

ion55 is an internationally licensed gaming platform, and some of the service providers and technology partners we use to deliver the ion55 service may process your Personal Data in jurisdictions outside Indonesia. Where such transfers occur, ion55 ensures that adequate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include:

• Standard contractual clauses approved by a competent data protection authority and incorporated into agreements with the relevant service provider.
• Binding corporate rules applicable within an international group of companies.
• A determination that the destination jurisdiction provides an adequate level of data protection based on an assessment conducted by ion55 or a competent authority.

You may request further information about the specific safeguards in place for any international data transfer by contacting ion55's Data Protection team at the details provided in Clause 16.

ion55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the services we offer. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — ion55 will notify registered Members by email to the address on file, or through a prominent notice displayed within the ion55 platform, at least 14 days before the change takes effect. Your continued use of the ion55 platform after the effective date of an amended Policy constitutes your acceptance of the revised Privacy Policy.

For non-material changes (such as typographical corrections or clarifications that do not alter the substance of our data practices), ion55 may update the Policy without advance notice, though the effective date will always be updated to reflect the revision.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ion55 processes your Personal Data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the ion55 platform. Indonesian-speaking agents are available at all times. Please identify your enquiry as a "Data Protection" or "Privacy" matter so that it is routed to the correct team.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Policy Enquiry" and include your registered account username to help us locate your records. Allow up to 5 business days for email responses to data rights requests.

For all other ion55 enquiries, including account, payment, and gaming questions, please visit our FAQ page or contact our general support team via live chat. For information about responsible gaming tools and self-exclusion, please visit our Responsible Gaming page.