istana17 Platform Privacy Notice

This page describes what we collect when you use istana17 and how we keep that data protected. We take your privacy seriously. When you open our app on Android, access us through your browser on iOS, or log in from desktop, we collect certain information to verify your identity, process your payments, and deliver our gaming service safely.

Our istana17 platform operates across multiple jurisdictions, and our privacy practices comply with the data-protection requirements of each region where we operate. We do not sell your personal data. We share it only with payment processors, regulatory bodies, and service providers who help us deliver istana17 to you securely.

If you have questions about how we handle your data, or if you wish to exercise your rights over your information, contact us using the details at the end of this policy. We respond to data requests within the timeframes required by local law.

What data we collect on istana17

We at istana17 collect information in several categories. When you register, we ask for your email address, a password of your choice, your full name, date of birth, phone number, and residential address. These details help us verify your identity and comply with anti-money-laundering regulations across the jurisdictions where we operate.

To verify your account before your first withdrawal, we ask you to upload a government-issued ID (passport, national ID card, or driver's license) and proof of address (utility bill, bank statement, or rental agreement). We scan these documents to confirm they match the information you provided during registration. After verification, we retain these documents in our secure system for as long as your account remains open, and for a period afterward as required by law.

We also collect transaction data. Every deposit, withdrawal, and bet is recorded in your account history. We track which payment methods you use (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), the amounts, and the timestamps. We collect device information—your phone model, operating system (Android or iOS), app version, and IP address—to detect fraud and improve our platform's performance. We also collect cookies and similar tracking technologies to remember your login state and user preferences.

How we use your data on istana17

We use your personal data for the following purposes. First, we verify your identity to comply with know-your-customer (KYC) and anti-money-laundering (AML) regulations. Second, we process your deposits and withdrawals through payment providers. We share your name, account details, and transaction amounts with mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and our banking partners (online payment, e-wallet, mobile banking, local payment) to ensure funds reach your account. These providers are bound by confidentiality agreements.

Third, we use your data to personalise your experience on istana17. We remember your login state on your phone so you don't have to enter your credentials every time you open the app. We track your game preferences and send you push notifications about new games or promotions you might enjoy—you can disable notifications in your account settings anytime.

Fourth, we use your data for fraud prevention and platform security. We analyse transaction patterns to detect unusual activity—coordinated betting, account takeover attempts, or money-laundering indicators. If we detect suspicious activity, we may suspend your account pending investigation. Fifth, we use your data to communicate with you. We send emails about account updates, payment confirmations, and support responses. We may also inform you about platform maintenance or service changes.

We do not sell or rent your data.

Your information is never sold to marketers or other third parties. We share it only with payment processors and regulatory authorities where required by law.

Third-party processors and data location

We at istana17 rely on third-party service providers to deliver our platform. Payment processors like online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet receive your transaction data when you deposit or withdraw. Banks like mobile banking, local payment, online payment, and e-wallet receive your account details and transfer instructions when you use virtual-account transfers. Cloud infrastructure providers host our servers and databases. These providers are located in multiple countries, including Indonesia, Singapore, and potentially other jurisdictions. Your data may be processed outside your home country.

We require all third-party processors to implement industry-standard security measures and to comply with applicable data-protection laws. We do not permit them to use your data for purposes beyond what we specify. If you are in Indonesia or another specific jurisdiction with data-residency requirements, we comply with local law regarding where your data may be stored and processed.

Our servers may be located in different time zones and jurisdictions than where you are. This means that your data may be transferred across borders for processing, backup, and platform operations. By using istana17, you consent to such transfers to the extent permitted by your local law.

Cookies and tracking technologies on istana17

We use cookies and similar technologies to enhance your experience on istana17. Session cookies remember your login state on your phone or browser so you don't have to re-enter your credentials for every page. Preference cookies store your settings—which games you've favourited, whether you prefer dark mode, your notification preferences. Analytics cookies help us understand how users interact with istana17—which games are most popular, where users encounter problems, how long sessions last. We use this information to improve our app and website.

You can control cookies through your browser or app settings. On Android, you can clear app data or disable tracking through device settings. On iOS, you can limit ad tracking in Settings. Disabling cookies may affect your ability to log in or remember your preferences, but it will not prevent you from using istana17. We do not track you across other websites or apps—our tracking is limited to the istana17 platform.

Your rights and data requests on istana17

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. You can download a copy of your account information through your istana17 account settings. You can update your name, email, or phone number anytime. You can request deletion of your account, which removes your gaming history and personal details from our active systems (though we may retain transaction records as required by law).

To exercise these rights, or to file a data complaint, contact us using the details below. We respond to verified requests within the timeframe specified by your local law. If you believe we've mishandled your data, you also have the right to lodge a complaint with your jurisdiction's data-protection authority.

Data retention and account closure on istana17

We at istana17 retain your personal data for as long as your account is active, and for a period afterward as required by law. Transaction records are typically retained for several years to comply with financial-reporting and anti-money-laundering regulations. If you close your istana17 account, we anonymise or delete most personal data within 30 days, though we may retain transaction records, account notes, and identity documents for the retention period required by local regulation.

If your account is suspended due to suspicious activity or breach of our terms, we retain your data pending the outcome of our investigation. Data relating to closed or suspended accounts is retained longer than data from active accounts, as it may be needed to respond to legal requests or to prevent fraud.

We at istana17 protect your privacy through encryption, access controls, and transparent data practices. Your data security is our responsibility.

istana17 data protection team

Security practices and data breach response

We at istana17 use industry-standard encryption to protect your data in transit and at rest. Your password is hashed and never stored in plain text. Your payment information is encrypted and processed through secure payment gateways. Our servers are protected by firewalls, intrusion-detection systems, and regular security audits.

We implement access controls so that only authorised istana17 staff can view your data. We conduct regular security training for our team and require all employees to sign confidentiality agreements. However, no security measure is non-specific info foolproof. If we detect a data breach that could affect your privacy, we will notify you and any relevant authorities as required by law.

To protect your istana17 account, we recommend that you use a strong, unique password and enable two-factor authentication through your account settings. If you suspect your account has been compromised, change your password immediately and contact our support team.

Policy updates and contact information

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. Material changes will be announced on our platform, and continued use of istana17 constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

If you have questions about our privacy practices, or to exercise your data rights, contact us through the support channel in your istana17 account, or send a written request to our registered address. We aim to respond to all data requests within 30 days. For users in Jakarta, Surabaya, Bandung, Medan, or other supported locations, our support team is available to assist you in English.

Your istana17 data journey in context

From registration to first session

Starting on istana17 begins with account registration. Visit our website or open our app on Android, or access us through your browser on iOS. Tap "Register," and provide your email, a strong password, and your phone number. We send a verification code to your email—enter it to confirm. Next, we ask for your full name, date of birth, and address. This information helps us comply with local regulations and prevent fraud. After registration, you can log in immediately and explore the lobby. However, you cannot place real bets until you've made your first deposit and completed identity verification. To verify your identity, upload a photo of your government ID and a selfie. Our team reviews these documents—this typically takes a few hours. Once verified, you're ready to deposit. Navigate to the deposit screen, select your payment method (DANA, OVO, GoPay, ShopeePay, LinkAja, QRIS, or a bank transfer), and enter your desired amount. If you choose a bank transfer to BCA, Mandiri, BRI, or BNI, we provide a unique virtual-account number. If you select an e-wallet, we open a payment gateway where you confirm the transaction in your DANA or OVO app. Within minutes, your deposit arrives in your istana17 account, and your balance updates. You're now ready to play. Navigate to Liga 1 matches, live-dealer tables, or slot games. Your first session begins once you place your first bet. We track all activity in your account history, and you can review your bets and balance at any time.

Payment options and processing windows

Our istana17 platform supports a wide range of payment methods tailored to Indonesian users. E-wallets like DANA, OVO, GoPay, ShopeePay, and LinkAja dominate our deposit traffic because they're instant and frictionless. You tap a button in your e-wallet app, confirm the amount, and your istana17 account is funded within seconds. Withdrawals to these same e-wallets follow the same speed—we initiate a transfer to your DANA or OVO account, and you see the funds minutes later. QRIS, Indonesia's unified QR code payment system, offers another avenue for both deposits and withdrawals, particularly for users without dedicated e-wallet accounts. Bank transfers through BCA, Mandiri, BRI, or BNI virtual accounts provide an alternative for players who prefer traditional banking. Deposits to these accounts involve you copying our virtual-account number, logging into your bank app, and submitting a transfer. Our system detects your deposit within minutes, though confirmation may extend slightly during peak hours or outside business hours. Withdrawals to your personal bank account follow a similar timeline—we initiate the transfer, and your bank processes it according to its standard schedule. During major holidays like Idul Fitri, Idul Adha, or Imlek, bank processing may take longer because institutions operate on reduced schedules. Our istana17 system tracks every transaction and notifies you at each stage—deposit received, verification complete, withdrawal initiated, withdrawal confirmed by your bank. We do not guarantee fixed processing times; instead, we operate transparently and communicate realistic windows based on each payment partner's capabilities.

Choosing a game category

New users on istana17 often wonder which category suits them best. Football betting appeals to fans following Liga 1, Piala AFF, or international tournaments. Our sportsbook offers markets across match outcomes, goal totals, player props, and in-play betting. Live-dealer games—blackjack, roulette, baccarat, Dragon Tiger—suit players who enjoy table gaming with a human dealer broadcast live on camera. These games move at varying speeds depending on the game type. Slot games like Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, and Mahjong Ways offer different pacing. Spins are fast, and outcomes are determined instantly. Esports markets including Mobile Legends, Free Fire, and PUBG Mobile appeal to players interested in competitive gaming. Each category has distinct rhythms and risk profiles. Players in Jakarta might diversify across all categories during a single session, or focus on one category depending on their mood and available time. Our istana17 lobby makes switching between categories seamless.

Service availability and jurisdiction

Our istana17 platform operates only in jurisdictions where online gaming is lawful. We do not offer our services in countries or regions where such activities are prohibited. Before you open an account, you bear responsibility for verifying that online gaming is legal where you are located and that your access to our platform complies with your local law. If you are in Indonesia, you should research the current legal status of online gaming in your specific jurisdiction—regulatory frameworks differ by province and can change. Our terms of service outline the jurisdictions where we cannot offer accounts; if you are unsure whether your location is supported, contact our support team and provide your city (Jakarta, Surabaya, Bandung, Medan, or elsewhere) so we can offer clear guidance. Once you've confirmed eligibility and opened an account, you can access istana17 via mobile app or web browser from anywhere, subject to technical availability. We aim to maintain uninterrupted service, but like all platforms, we occasionally perform maintenance or experience temporary outages. During these windows, gaming and other features may be briefly unavailable. We announce planned maintenance in advance so you can plan your gaming sessions accordingly. Our commitment is to provide transparent, reliable service wherever and whenever we are legally able to operate.