Privacy Policy indocair – Data Protection & Your Privacy

1 Introduction

Welcome to the indocair Privacy Policy. This document is designed to give every indocair platform user a clear and transparent understanding of how we handle your personal information — from the moment you register an account through to every interaction you have with our services.

Indocair is an online betting and gaming platform operating for players in Malaysia. We understand that your trust depends not only on the quality of games we offer, but also on how we safeguard the privacy and security of your personal data.

This Privacy Policy applies to all users accessing the indocair.win website, the official indocair mobile app, and all related services provided by our platform. By using any indocair service, you consent to the collection and use of information as described in this document.

We encourage you to read this Privacy Policy carefully. If you have any questions, the indocair support team is available to assist you via 24-hour Live Chat.

2 Information Collected

Indocair collects various categories of information for different purposes. The information we collect can be divided into three main categories:

A. Information You Provide Directly

• Full name as shown on a valid identification document.
• An active and reachable email address.
• A mobile phone number registered in Malaysia.
• Date of birth for age verification (18 years and above required).
• Current residential address.
• Bank account or digital wallet details for deposit and withdrawal purposes.
• Copy of identity document such as MyKad or passport for the KYC process.

B. Automatically Collected Information

• Your device's IP address at the time of accessing the platform.
• The type and version of browser used.
• Your device's operating system.
• Platform usage data including pages visited and duration of visit.
• Wagering and game transaction logs.
• Cookie and related tracking technology information.

C. Information From Third Parties

• Verification information from licensed KYC service providers.
• Payment verification data from the payment gateway providers used.
• Fraud prevention information from security service providers.

3 How We Use Your Data

Indocair uses the information collected solely for lawful and stated purposes. Below is a detailed description of how your data is used:

• Account management: Processing registration, verifying your identity and managing your player account from day one to the present.
• Transaction processing: Ensuring your deposits and withdrawals are processed accurately, securely and within the promised timeframe.
• Service provision: Providing access to all indocair platform features including slots, sports betting, bingo and other games.
• Legal compliance: Fulfilling KYC, AML (Anti-Money Laundering) and reporting obligations as required by the relevant authorities.
• Platform security: Detecting and preventing fraud, unauthorised access, account misuse and other unlawful activities.
• Service communications: Sending important account-related notifications, transaction confirmations and security updates.
• Marketing (with consent): Sending you promotions, bonus offers and new game information where you have given consent to receive marketing communications.
• Product improvement: Analysing aggregated usage patterns to enhance the gaming experience and improve the platform interface.

4 Information Sharing

Indocair does not sell, rent, or disclose your personal information to third parties for commercial purposes. However, there are certain situations where we may need to share your information:

• Authorised service providers: We share necessary information with third-party service providers that help us operate the platform — including payment gateway providers such as DuitNow, FPX, Touch 'n Go eWallet and GrabPay, as well as KYC service providers. All parties are bound by strict confidentiality agreements.
• Legal requirements: indocair is required to disclose player information to the relevant authorities if ordered by a court or required by applicable law, including in investigations related to money laundering or criminal activity.
• indocair rights protection: In cases of legal disputes or proven fraud, we may disclose relevant information to lawyers, courts, or the appropriate authorities.
• Business transfers: Should indocair be involved in any merger, acquisition, or asset transfer, user information may be transferred as part of that transaction, subject to the same or stricter Privacy Policy.

5 Data Security

Indocair continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your browser and indocair's servers is encrypted using the latest TLS protocol, rendering any interception attempt completely ineffective.
• Firewall and intrusion detection systems: indocair servers are protected by multi-layered firewalls and an IDS/IPS system that monitors abnormal traffic in real time.
• Role-based access control: indocair staff may only access player data as required by their specific role. All access is logged and monitored on a regular basis.
• Two-Factor Authentication (2FA): Players are encouraged and given the option to enable 2FA to protect their accounts from unauthorised access.
• Regular security testing: indocair conducts regular security audits, penetration testing, and vulnerability assessments to identify and address any risks.
• Secure data backup: Data is regularly backed up to a secure, separate location to ensure service continuity in the event of a system failure.

While no security system can be guaranteed 100% perfect, indocair takes all reasonable and up-to-date measures to protect your data from unauthorised access, disclosure, alteration, or destruction.

6 Cookies & Tracking Technologies

Indocair uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: These cookies are required for core platform functionality, including login sessions and transaction security. The platform cannot operate properly without them.
• Functional Cookies: Saving your preferences such as language, display settings and login details so you don't have to re-enter them on every visit.
• Analytics Cookies: Helping us understand how players use our platform so we can continuously improve the user experience.
• Security Cookies: Used to identify trusted devices and detect suspicious activity to protect your account.

You can manage cookie usage through your browser settings. However, disabling certain cookies may affect the functionality and user experience on the indocair platform.

7 Your Rights Over Personal Data

As an indocair player, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the indocair support team via Live Chat or our official email. We will verify your identity before processing any request related to your personal data.

8 Data Retention

Indocair retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. Retention periods vary by data category:

• Active account data: Retained for as long as your account remains active on the indocair platform.
• KYC and identity verification data: Retained for a minimum of 5 years from the date of verification, in accordance with AML compliance requirements.
• Transaction records: Retained for a minimum of 5 years for audit, dispute resolution, and tax compliance purposes.
• Communication logs: Retained for 2 years for customer support and complaint resolution purposes.
• Marketing data: Retained until you withdraw consent or request deletion.
• Closed accounts: Basic data is retained for 7 years after account closure in accordance with legal requirements, then deleted or anonymized.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised using industry-standard procedures.

9 Cross-Border Data Transfers

In operating the indocair platform, your personal data may be processed on servers located in various locations. Where your data needs to be transferred outside Malaysia, indocair ensures that:

• The recipient country or region provides an equivalent or higher level of data protection.
• Appropriate data transfer agreements have been implemented with receiving parties, including recognised standard contractual clauses.
• Such data transfers are necessary for the performance of the contract between you and indocair, or to comply with legal requirements.

Indocair ensures that any cross-border data transfer is carried out in compliance with applicable legal requirements and with adequate safeguards in place.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Live Chat button on the indocair platform.
• Email: [email protected] — we will respond to your enquiry within 1 to 2 business days.

For requests relating to personal data rights such as access, correction, or deletion, please clearly state the type of request and include sufficient identification details for us to verify your identity before processing the request.

If you are not satisfied with indocair's response to your complaint, you have the right to refer the matter to the relevant data protection authority in Malaysia.