gambar Platform Privacy Notice

This page describes what we collect when you use gambar and how we keep that data protected. We take data privacy seriously. When you register, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), and play on our platform, you share personal information with us. Our privacy policy explains what information we collect, how we use it, and what rights you have.

We do not sell your personal data to advertisers or marketing companies. We share information only where required by law — for anti-fraud verification, anti-money-laundering compliance, or regulatory requests from authorities. Our servers process your data using encryption standards that meet industry best practices.

This is a plain-language summary. If you have specific questions about how gambar handles your information, our support team is available via email and in-app chat to clarify any section of this policy.

What data we collect on gambar

When you create an account on gambar, we collect your email address, password, full name, date of birth, and phone number. During identity verification (KYC), we request a photo of your national ID card, passport, or driver's licence. We scan this photo against government databases to confirm your identity and age. We do not store the ID image itself on our main servers; it is processed by our identity-verification partner and then securely deleted after verification is complete.

When you make a deposit, we collect information about your payment method. If you deposit via DANA or e-wallet, we see your wallet identifier and the amount. If you use bank transfer (mobile banking, local payment, online payment, e-wallet, mobile banking), we see your bank account number and the transfer amount. We do not store full credit card numbers or bank passwords — payment processing happens through encrypted channels managed by payment processors, not our servers.

During gameplay, we log every spin, every bet, every win or loss, and the timestamp. We also record your IP address (the numerical identifier assigned to your device on the internet), your device type (Android or iOS), and your approximate location based on your IP. This data helps us detect fraud and understand which regions are accessing gambar.

We use cookies and local-storage technology on your device to remember your login session, language preference, and gameplay settings. Cookies are small text files stored on your device; you can disable them in your browser settings, though some gambar features may not work as smoothly without them.

Data minimisation: We collect only information necessary for account security, regulatory compliance, and platform operation. We do not ask for unnecessary personal details, and we delete data we no longer need.

How we use your data on gambar

We use your email address to send account notifications: login alerts, deposit confirmations, withdrawal status updates, and password-reset links. We use your name and date of birth to verify your identity against government records during KYC. We use your phone number for optional two-factor authentication (2FA) — a security feature that sends you a one-time code when you log in from a new device.

We use your payment information to process your deposits and withdrawals. Our payment processors (external companies that handle card and wallet transactions) see your deposit details; we do not store these details on our main servers. We use your gameplay history to calculate your account balance, record your game statistics, and generate your account statement.

We use your IP address and device information to detect fraud. If we notice login attempts from unusual locations or devices, we flag them as suspicious and require additional verification. We also use this data to comply with legal requirements: anti-money-laundering (AML) regulations require us to monitor account activity for suspicious patterns and report them to authorities if necessary.

We analyse gameplay data in aggregate (never at the individual account level) to improve game performance, detect technical bugs, and understand which games are most popular. This helps us optimise our platform. We do not use your data for marketing emails or promotional outreach unless you explicitly opt in.

Third-party processors and data sharing

Our identity-verification system is run by an external company that compares your ID photo against government databases. This processor sees your name, date of birth, ID photo, and ID number temporarily during verification. Once verified, the processor deletes the ID image and returns only a pass/fail result to us. We require this processor to meet strict data-protection standards and to delete your data after verification is complete.

Our payment processors (for local payment, online payment, e-wallet, mobile banking, local payment, online payment, and bank transfers) handle the actual movement of money. They see your payment method and the transaction amount, but not your full account history. We do not share your gameplay data with payment processors.

Our email service provider sends emails on our behalf (login alerts, withdrawal confirmations). They have access to your email address and the content of emails we send you. We require them to use encryption and to delete email records after a set period.

We may share data with law enforcement, tax authorities, or financial regulators if required by law. For example, if authorities in Jakarta, Surabaya, Bandung, or Medan request information about an account related to a legal investigation, we comply with that request. We will notify you of such a request unless the law forbids notification.

Identity verification: Third-party processor checks your ID against government records; ID image deleted after verification.
Payment processing: e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, bank processors see transaction data only.
Email delivery: Email service provider sends notification emails on our behalf; data deleted after retention period.
Law enforcement: We comply with legal requests for account data; notification given unless law forbids it.

Data retention and account deletion on gambar

We retain your account data (email, name, date of birth, gameplay history, deposit/withdrawal records) for as long as your account is active. If you close your account, we retain this data for five years to comply with financial regulations and anti-money-laundering requirements. After five years, we delete or anonymise the data so it cannot be linked to you personally.

You may request deletion of your account at any time by contacting our support team. We will close your account and cease gameplay activity. However, we must retain financial records for the five-year period required by law. You may request access to all data we hold about you; our support team can provide a downloadable file containing your personal information.

If you request account deletion during a holiday period such as Idul Fitri, Idul Adha, or Imlek when financial processing is limited, we will process your request when operations resume. We do not delete data from closed accounts before the five-year retention period expires, even if you request it, because financial regulation requires us to keep these records.

International data transfers on gambar

Our servers may be located outside your country. Our primary infrastructure may be in Singapore, the Netherlands, or another jurisdiction outside Indonesia. When we transfer your data to these locations, we use encrypted channels (TLS 1.2 or higher) to protect it in transit. We ensure that our servers meet international data-protection standards equivalent to or exceeding Indonesian requirements.

By using gambar, you consent to your data being processed outside Indonesia. We take all reasonable steps to protect your data during international transfer. If you are uncomfortable with this, you have the right to request deletion of your account as described above.

Security measures protecting your data on gambar

We use TLS 1.2 encryption for all communication between your device and our servers. This means data in transit (as it travels across the internet) is encrypted and cannot be intercepted. Your password is hashed (converted into a one-way cryptographic code) before storage, so even our administrators cannot see your plaintext password.

We require authentication for access to data: staff members cannot view account data without logging in with credentials specific to their role. We use firewalls and intrusion-detection systems to prevent unauthorised access to our servers. We regularly scan our systems for security vulnerabilities and patch them when found.

If we suffer a data breach (unauthorised access to our servers), we notify affected users within 10 business days as required by law. We also report the breach to relevant authorities. We maintain data-backup copies so that if our primary servers are damaged, we can restore your account data without loss.

Your rights regarding your data on gambar

You have the right to access your personal data. You may request a complete file of all information we hold about you; our support team will provide it in a standard format (PDF or CSV) within 10 business days. You have the right to correct inaccurate data: if your registered name is misspelled or your email is wrong, contact us and we will update it.

You have the right to delete your data, subject to legal retention requirements. As described above, we must retain financial records for five years, but we will delete other data (ID photos, cookies, gameplay logs older than the required period) when you request it. You have the right to opt out of non-essential communications: if you do not want promotional emails or non-critical notifications, you can adjust your preferences in your account settings.

You also have the right to lodge a complaint with your data-protection authority if you believe we have violated your privacy rights. In Indonesia, you may file a complaint with the Office of the Personal Data Protection Authority once it is formally established.

Cookies and tracking on gambar

We use cookies to store your login session, so you do not have to enter your password every time you refresh the page. We use cookies to remember your language preference and gameplay settings. We also use cookies to track which games you play most, helping us understand user behaviour so we can improve our platform.

You can control cookies in your browser settings. Most browsers allow you to disable cookies entirely, though this may prevent gambar from functioning smoothly. You can also delete cookies manually after each session. We do not use third-party tracking (analytics companies or advertising networks) on gambar, so the cookies we set are under our direct control.

Contact us about privacy on gambar

If you have questions about how we handle your data, or if you wish to exercise your rights (access, correction, deletion, opt-out), contact our support team via email or in-app chat. We respond to data-access requests within 10 business days. For urgent privacy concerns, you may escalate to our Data Protection Officer, whose contact details are provided by our support team upon request.

This privacy notice may be updated as our platform evolves or as regulations change. We will notify you of material changes via email to your registered address. Continued use of gambar after an update constitutes acceptance of the new policy.

Summary: Privacy on gambar

We collect personal information to verify your identity, process payments, and provide a secure gaming experience. We encrypt your data in transit and at rest. We do not sell your information to advertisers. We share data only with necessary third parties (payment processors, identity-verification services) or when required by law. You have rights over your data: access, correction, deletion (subject to retention periods), and complaint.

Your privacy matters to us. If you have any concerns about how we handle your data or want to exercise your privacy rights, our support team is available to help. This privacy notice applies to all users of gambar, regardless of whether you access from Jakarta, Surabaya, Bandung, Medan, or another region in a supported jurisdiction.