angkasabola Casino & Sportsbook Data Care

This page describes what we collect when you use angkasabola and how we keep that data protected. We operate a gaming platform serving users across supported jurisdictions in Southeast Asia—offering slot tournaments, live-dealer tables, football and esports coverage, and payment integration with local rails including DANA, e-wallet, and mobile banking. Every piece of information you provide, from account setup through withdrawal review, is handled under strict data-handling practices.

Our approach to privacy is centred on transparency and user control. We do not sell your personal data to third parties for marketing purposes. We collect information only where necessary to operate your account, comply with local law, and prevent fraud. This policy explains each category of data, who processes it, how long we retain it, and what rights you hold over it.

We undertake to keep your data protected through encryption, access controls, and regular security audit. Your account verification, payment history, and withdrawal requests are reviewed by our compliance team under strict confidentiality agreements. If you have questions about how we handle your information, contact our support team during business hours.

What We Collect and Why

We collect information in three categories: identity data, transactional data, and behavioural data. Identity data includes your name, email, phone number, date of birth, and proof of address—required for account verification and compliance with anti-money-laundering regulation. When you deposit via DANAe-walletor bank transfer, we record the transaction amount, method, date, and reference number. This transactional history is essential for withdrawal processing and dispute resolution. Behavioural data—such as which games you play, tournament participation, and login times—helps us operate scheduled events fairly and detect unusual account activity.

We do not collect biometric data, health information, or browsing history outside angkasabola. We do not track you across other websites. When you reset your password or enable two-factor authentication, we store only the authentication method and verification timestamp, not the credential itself.

KYC Verification and Document Handling

Before your first deposit, we ask you to verify your identity by uploading a copy of your national ID or passport. This step is mandatory under Indonesian gaming law and applies to all users regardless of location. We store these documents in encrypted form and limit access to our compliance team. After 12 months of account inactivity, we delete identity images but retain a masked record for audit purposes. If you request account closure, we retain your data for seven years to meet regulatory obligation.

Payment Processing and Withdrawal Review

When you request a withdrawal, our finance team reviews the transaction to confirm funds match your deposit history and tournament activity. This review typically takes 24–48 hours. During review, we cross-check your registered mobile banking account, linked bank account (local payment, online payment, e-wallet, or mobile banking), or mobile wallet against your identity verification. We may ask for additional documentation if a withdrawal appears inconsistent with account history. All withdrawal records are logged and archived for seven years.

Cookies and Session Management

We use session cookies to keep you logged in and functional cookies to remember your preference (language, theme). These cookies do not track you across other sites. We do not use third-party advertising cookies. If you disable cookies, you will not be able to access your account.

Third-Party Processors and Data Sharing

We work with specialised vendors to run our platform:

• Payment processor: A regional fintech partner that handles local payment, online payment, e-wallet, and bank-account verification. They see your name, bank account number, and transaction amount only—not your password or two-factor code.
• Cloud hosting: Our servers are hosted on a regional provider with data centres in multiple countries, including facilities outside Indonesia. Your data may be replicated for backup and disaster recovery.
• Compliance and fraud screening: We use a third-party KYC service to screen names against sanctions lists and politically-exposed-person registries, as required by law.
• Customer support platform: Support tickets and chat logs are stored on a secure third-party helpdesk, accessible only to our customer-care team.

We do not share your data with Liga 1 broadcasters, esports tournament organisers, or other gaming platforms. We disclose data to law enforcement only when legally required—for example, if a court order or police investigation names your account specifically.

Your Rights

You have the right to access all personal data we hold about you. You can request a copy of your account record, including verification documents and transaction history, by contacting our support team via email or live chat. We will provide it within 14 days, free of charge.

You have the right to correct inaccurate data. If your registered name is misspelled or your phone number has changed, we can update it quickly; however, identity documents (passport, national ID) cannot be amended—you must upload a corrected copy.

You have the right to request deletion of your account and associated data, subject to legal holds. If your account contains an active withdrawal request or pending tournament payout, we cannot delete data until settlement is complete. After account closure, we retain transactional records for seven years as required by gaming regulation.

We do not sell or trade your information. Your data remains confidential and is used only to operate your account and comply with law.

Data Retention and Security

We retain identity and transactional data for seven years after account closure or your last activity, whichever is later. This period is set by Indonesian financial regulation and international anti-money-laundering standard. Behavioural data (game history, tournament entries) is deleted after 24 months of inactivity unless required for dispute resolution.

We protect your data through AES-256 encryption in transit and at rest, two-factor authentication on staff accounts, and quarterly penetration testing. We do not store your password in plaintext; we use industry-standard hashing. Your email address and phone number are masked in internal logs. If we discover a data breach affecting your account, we will notify you by email within 72 hours and offer identity-protection services where legally required.

Contact and Policy Updates

If you have a question about how we handle your data or wish to exercise any of the rights outlined above, contact our Data Protection Officer by email or through the angkasabola support portal. We respond to all privacy requests within 14 business days.

We may update this policy to reflect changes in our service, applicable law, or security practice. We will notify you of material changes by email. Your continued use of angkasabola after a policy update constitutes your acceptance of the revised terms. This policy took effect on the date shown in the footer of this page and was last updated on the same date.