delapan Privacy Policy

This page describes what we collect when you use delapan and how we keep that data protected. When you create an account, deposit funds, or place a wager on our platform, you provide us with personal information—email, identity documents, payment details, and transaction history. We treat this data as sensitive and encrypt it throughout storage and transmission. We do not sell your data to third parties and do not use it for marketing outside delapan without explicit consent.

Our data handling complies with standard privacy practices and applicable data-protection law. We hold your information on secure servers located in regional data centres. We process payment data through encrypted channels managed by external payment providers (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment); we do not store card or wallet credentials on our systems. Your transaction history—all bets, settlements, and withdrawals—is encrypted and retained for audit and dispute-resolution purposes.

Read this policy to understand what data we collect, who may access it, how long we retain it, and your rights to request deletion or correction. If any term is unclear, contact our support team before creating an account.

What Data We Collect on delapan

We collect information in several categories. Account Information includes your full name, date of birth, email address, phone number, and physical address (street, city, postal code). We require this during registration and verify it via Know Your Customer (KYC) documents—a copy of your national ID, a selfie holding the ID, and proof of address (utility bill, bank statement, or lease agreement). This verification is mandatory before first withdrawal.

Payment Information is collected when you deposit or request a withdrawal. You provide your chosen payment method (DANA account, e-wallet username, mobile banking-linked bank, local payment virtual account, etc.), but we do not store your login credentials or payment card numbers. Payment providers handle that data securely; we receive only transaction confirmations and settlement notifications.

Transaction Data includes every bet you place, every settlement result, and every withdrawal request. We log the time, amount, market type (Liga 1 fixture, live-draw game, casino table, slot spin), odds or game rules applied, and final payout. This data is retained indefinitely for audit, dispute resolution, and fraud prevention.

Device and Usage Data is collected via standard web analytics. We log your IP address, browser type, device model, and pages visited. We use this to detect fraud, prevent account abuse, and monitor platform stability. We do not track your activity outside delapan.

Personal identifiers: Name, date of birth, ID number; collected during registration; verified before first withdrawal.
Contact information: Email, phone, address; used for account recovery, support, and regulatory notices.
Payment method: Provider name, account username (but not credentials); logged for reconciliation.
Betting history: Every wager, settlement, and payout; retained indefinitely for disputes and compliance.

How We Use Your Data on delapan

We use personal information for operational purposes. Account authentication relies on your email and password; two-factor authentication (2FA) uses your phone or authenticator app. Payment processing requires your deposit/withdrawal details and address for Know Your Customer compliance. Settlement and dispute resolution require your transaction history to verify bet accuracy and payout calculations.

We use your data for fraud detection and prevention. We scan patterns—for example, multiple accounts from the same IP address, repeated failed login attempts, or unusual withdrawal timings—to identify potential abuse. If we detect suspicious activity, we may temporarily lock your account and require reidentification before unlocking.

We use your data for legal compliance. Indonesian data-protection law and gaming regulations require us to retain KYC documents, transaction records, and account logs. We provide this data to regulatory authorities only when compelled by law or court order.

We do not use your data for direct marketing (email campaigns, SMS promotions) unless you explicitly opt in. You can withdraw marketing consent at any time via your account settings. We do not sell your data to third-party marketers, data brokers, or advertising networks. Third-party payment providers may process your data per their own privacy policies; we encourage you to review those policies independently.

We at delapan treat your payment data as sensitive. We do not store credentials; we route all transactions through encrypted channels managed by payment providers.

delapan data protection practice

Third Parties and Data Processors

We work with external partners who may access your data. Payment Providers (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive your payment instructions and settlement confirmations. We do not control their data handling; review their privacy policies separately. Hosting Providers store our databases and backups on secure servers in regional data centres. These providers are bound by confidentiality agreements and process data only as instructed by us.

We may share data with Law Enforcement only when required by court order, subpoena, or mandatory disclosure statute. We do not proactively share data with police or regulatory bodies. If we receive a legal request, we notify you unless prohibited by law, and we provide only the minimum data required.

We do not sell data to marketers, brokers, or advertisers. We do not transfer data to jurisdictions with weaker privacy protections without explicit user consent. Our data remains within regional servers accessible from Jakarta, Surabaya, Bandung, and Medan unless you explicitly authorise transfer.

How Long We Keep Your Data

We retain Personal Information (name, address, ID number) as long as your account is active. After you close your account, we retain KYC documents for seven years to comply with Indonesian financial-crime regulations. Transaction Data (bets, settlements, withdrawals) is retained indefinitely for dispute resolution and audit purposes. You cannot request deletion of transaction data once a market settles because this would undermine our ability to defend disputes.

Device and Usage Data (IP logs, browser history) is retained for 90 days and then automatically deleted. Email logs and support correspondence are retained for three years or until dispute resolution is complete, whichever is longer.

Your Rights and Data Requests

You have the right to access your data. Log into your delapan account to view your personal information, KYC documents, transaction history, and account settings. You can download a complete copy of your transaction history via the account dashboard.

You have the right to correct inaccurate data. If your registered name, email, or address is incorrect, update it via account settings. If you submitted incorrect KYC documents, contact our support team to resubmit. We will re-verify and update your profile.

You have the right to request deletion of personal data, subject to legal limits. You can request deletion of your email, phone, or address once all active wagers have settled and your account balance is zero. We cannot delete transaction history or KYC documents due to regulatory retention requirements. Submit deletion requests via FAQ or support contact.

You have the right to opt out of marketing. Uncheck "Marketing emails" in your account settings to stop receiving promotional messages. This does not affect transactional emails (settlement notices, withdrawal confirmations).

Cookies and Tracking Technology

We use cookies to maintain your login session and remember your preferences (time zone, language, favourite markets). Essential cookies are required to use delapan; you cannot opt out of these. Analytical cookies help us understand how you navigate the platform so we can improve usability. You can disable analytics cookies via your browser settings without affecting delapan functionality.

We do not use third-party tracking pixels, advertising cookies, or retargeting tags. We do not share cookies with advertisers or data brokers.

Data Security and Encryption

We encrypt all data in transit using TLS 1.2+ protocols. This means that when you enter your password or payment details, the information is encrypted before leaving your device and decrypted only on our secure servers. We do not transmit unencrypted payment data over public internet.

We encrypt data at rest using industry-standard algorithms. Database servers are housed in secure data centres with physical access controls, fire suppression, and power redundancy. Our staff access is restricted to authorised personnel on a need-to-know basis. We undergo regular security audits and penetration testing to identify vulnerabilities.

However, we cannot guarantee absolute security. If our servers are breached despite these measures, we will notify you within 48 hours and provide guidance on account recovery. See our terms and conditions for liability limits.

Jurisdiction and Data Location

We operate from regional centres in Jakarta, Surabaya, Bandung, and Medan. Your data is stored on servers within these regions unless you explicitly authorise storage elsewhere. We comply with Indonesian data-protection practices and legal frameworks. If we expand to new regions in future, we will update this policy and notify you.

Our services are available only where local law permits. If you access delapan from a jurisdiction where online gaming is prohibited, we may suspend your account and hold your data pending legal review. You are responsible for verifying compliance with your own jurisdiction's law.

Changes to This Policy and Contact Information

We may update this privacy policy at any time. Changes take effect 14 days after publication on this page. If changes affect how we use your data, we will notify you via email. Continued use of delapan after the effective date constitutes acceptance of updated terms.

If you have questions about this policy, how we handle your data, or wish to submit a data request (access, correction, deletion), contact us via the live-chat widget in your account, email our support team, or use the contact form at our FAQ page. We respond to data requests within 14 business days. If you remain dissatisfied with our response, you may escalate to the relevant Indonesian data-protection authority.