Privacy Policy
Your rights over personal data, encryption methods, data retention timelines and how to request access or deletion from your rjabandot account.
LEGAL REFERENCE
Your privacy is how we run our lobby
We collect and protect your personal data—account credentials, payment method details, gaming history—to deliver the live tables, slots and sportsbook you access from your phone or desktop. This...
Data encryptedQRIS protectedNo third-party salesYour control alwaysIndonesia compliant
What we collect and why
When you open an account with rjabandot, we collect your name, email, phone number, date of birth and identity verification documents as required by law in supported regions. We also log your betting history, game session timestamps, account balance, and withdrawal requests. Payment-method data—your DANA account identifier, OVO phone number, GoPay card token, or QRIS merchant reference—is retained only to process transactions
and prevent fraud. We do not store full card numbers or sensitive banking credentials on our servers; payment processors handle encryption. Your location data is captured for responsible account-access rules specific to Indonesia.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
PLAYER SUPPORT
Get help with your privacy
Team online
Privacy Request
Submit a data access or deletion request via our account settings panel. We respond to verified requests within 14 working days, as required under Indonesian data law.
Account Security
Report account compromise or suspicious activity to our support team. We freeze your account immediately and guide you through recovery without data loss.
Contact Our Team
Email [email protected] with questions about this policy, data handling or compliance. Response times average 24 hours during business days.
PLATFORM TRUST SIGNALS
How we maintain your trust
Encryption Standard
All data in transit uses TLS 1.2 or higher. Account passwords are hashed with bcrypt; payment tokens are tokenized and never stored in plain text.
Regular Audits
We commission third-party security reviews quarterly to verify encryption, access controls and data isolation. Audit reports are available upon legal request.
Staff Training
Our team completes annual data-protection training. Access to personal data is role-limited; only support staff handling account issues see customer names.
Incident Response
If a breach occurs, we notify affected users and authorities in supported regions within 72 hours. We maintain a public incident log updated monthly.
Legal Compliance
We comply with Indonesian data-protection law and respect GDPR requirements for users in supported regions. Policy updates are posted 30 days before they take effect.
Transparency Report
We publish an annual transparency report detailing government data requests, account suspensions and policy changes. Reports are free to download.
SIDE BY SIDE
Privacy across our brand pages
Terms of Service
Account opening rules, prohibited conduct, deposit and withdrawal terms, and dispute resolution—separate from privacy but linked in compliance.
Cookie Policy
Session cookies track your lobby browsing; analytics cookies measure traffic patterns. We do not use tracking pixels for third-party ad retargeting.
Payment Security
How DANA, OVO, GoPay and QRIS transactions are tokenized, fraud-checked and logged. Data minimisation: we request only the token, never card details.
Account Settings
You can update name, email, phone and gaming preferences in your account. Deletion requests must go through our privacy team, not via the app.
Responsible Play
Account limits, session timeouts and Account closure options are managed in-app. Your privacy during these actions is protected identically to gaming data.
Affiliate Program
If you refer friends, we share referral performance data with you but never expose referred users' personal data or gaming history to you as an affiliate.
SERVICE CONTEXT
What defines our privacy stance
01
Data Minimisation
We ask for only the information needed to open your account, process payments and comply with law. No optional surveys; no profiling beyond account activity.
02
Retention Limits
Closed-account data is deleted within 90 days unless law requires archival. Live gaming logs are kept for 7 years to support dispute resolution and audits.
03
Payment Token Safety
Your DANA, OVO, GoPay and QRIS details are tokenized by certified payment gateways. We never see your full account credentials; tokens expire after transaction.
04
Third-Party Limits
We share data only with payment processors, fraud-detection vendors and law-enforcement bodies in supported regions when legally compelled. No marketing partners.
05
User Control Always
You can download your full data record, opt out of marketing emails and request permanent account deletion. No data hostage scenarios; your move, anytime.
06
Indonesia-First Design
Policy language reflects Indonesian law; support is available in Bahasa Indonesia and English. We follow Bank Indonesia and OJK guidance on payment security.
Privacy questions answered
Personal data tied to your account is deleted 90 days after closure. Gaming transaction logs are archived for 7 years for legal and fraud-investigation purposes, but are not linked to your name or contact details.
Yes. Log into your account, go to Privacy Settings, and select 'Download My Data'. We generate a complete export in PDF format within 48 hours and email it securely to your registered address.
No. We receive a token from the payment processor; the token lets us process future transactions without storing your actual account credentials. Tokens are renewed regularly and expire after use.
We do not sell personal data, gaming history or email addresses. We share data only with payment processors, fraud-detection services and authorities in supported regions when legally required.
We notify all affected users and relevant authorities in supported regions within 72 hours. We maintain cyber insurance and publish incident details on our transparency report within 30 days.
Yes. Submit a deletion request via your Privacy Settings or email [email protected]. We verify your identity, delete active account data within 14 days, and archive logs only as required by law.
We comply with local data laws in supported regions. If you're in a GDPR-covered territory, you gain GDPR rights. Contact our privacy team to confirm your jurisdiction-specific protections.