LEGAL REFERENCE

Your privacy is how we keep rajalaba running.

We collect and protect only what you give us to open an account, process your DANA, OVO, GoPay and QRIS payments, and deliver the games you play. This...

Data ProtectionPayment SecurityAccount PrivacyIndonesia-CompliantTransparency First
rajalaba Your privacy is how we keep rajalaba running.

What we collect and why we keep it.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

PLAYER SUPPORT

Questions about your privacy? We're here.

Team online

Email Support

Send your privacy concerns to [email protected]. We respond within 48 hours and can explain exactly how we hold or use your data.

Account Settings

Log into your rajalaba account and visit Privacy Controls to review what we've collected, download your data, or request corrections.

Data Deletion Request

Contact us via email with your account ID. We'll confirm your identity and process permanent deletion within 30 days if you choose to leave.

WHY VISITORS TRUST US

How we earn your trust with this policy.

Third-Party Audit

Our data handling practices are reviewed annually by an independent security firm. Reports confirm compliance with GDPR-adjacent standards and Indonesian data protection frameworks.

Encryption Standard

All personal data and payment information travels over TLS 1.3 encryption. Stored data is encrypted at rest using AES-256, the same standard banks use.

Indonesia-First Legal Posture

We've structured this policy to align with Indonesian regulations and the practical expectations of QRIS, DANA, OVO and GoPay partner networks in supported regions.

Transparent Cookie Use

We use cookies to remember your login, language preference and gameplay history. You can disable non-essential cookies in your browser settings without losing core functionality.

Public Policy Updates

We notify you by email when this policy changes. You'll always see the update date at the bottom of the page and have 30 days to review before changes take effect.

Breach Notification Protocol

If we discover unauthorized access to your account, we notify you within 24 hours with details of what was accessed and the steps we've taken to secure your data.

How our policy compares to other gaming brands.

Data RetentionWe keep your record only as long as you're active or required by law. Most platforms retain indefinitely; we delete within 90 days of final request.
Payment Partner TransparencyWe list exactly which payment processors touch your DANA, OVO, GoPay or QRIS data. Competitors often obscure this behind terms like 'trusted partners'.
Third-Party SharingWe share data only with payment processors and regulators in supported regions. We do not sell to advertisers, data brokers or analytics firms.
Cookie GranularityYou can toggle individual cookie categories in your account settings. Most sites force you to accept all or lose functionality entirely.
Dispute Resolution PathOur policy includes a clear escalation: email support → account team → independent arbitrator. Competitors often lack this middle step.
Breach Response SpeedWe commit to 24-hour notification and 48-hour remediation for suspected account compromise. Industry average is 30–60 days.
Annual Public AuditWe publish a summary of our yearly security audit. Most platforms keep audit findings private or don't commission them at all.

What defines our approach to your privacy.

Account Verification Only

We ask for ID, email and phone to prove you're real and comply with regional law. We don't ask for unnecessary personal details or family information.

Payment Data Isolation

Your QRIS, DANA, OVO and GoPay credentials never sit on our servers. We tokenize them so only the payment partner holds the actual account details.

Gameplay Privacy

Your game history, session logs and betting records are yours alone. We don't aggregate or anonymize them for sale to game developers or marketing firms.

Vendor Contracts

Every third party we work with signs a data processing agreement. Breaches by vendors trigger mandatory notification and potential termination.

Regional Compliance

We follow local data residency rules for Indonesia. Your data stays in-country where possible and crosses borders only for encrypted backup.

Right to Access & Export

Open your account, go to Settings → Data Export and download everything we have on you in a standard format within 7 days.

Privacy questions answered.

We retain your account record for seven years for tax and regulatory compliance. After that, personal identifiers are purged. You can request full deletion by emailing [email protected]; we complete it within 30 days and confirm in writing.

No. Your rajalaba account history, QRIS transactions and gameplay stay with us. We never share or sell your data to competitors or third-party platforms without your written consent.

We don't store full payment credentials. When you link a payment method, we tokenize it with your provider's encryption. Only the token is saved on our servers, so a breach of our systems doesn't expose your actual account details.

Yes. Log into your account, go to Settings → Privacy Controls → Data Access. You'll see every field we hold: name, email, phone, verification status, transaction history and gameplay logs. Export it anytime.

We monitor for unusual activity 24/7. If we detect a breach, we notify you by email within 24 hours with exact details of what was accessed. We'll also lock your account and walk you through recovery.

No. Our cookies are first-party only and stay on rajalaba.app. They remember your login and preferences but don't follow you to other sites. You can disable all cookies in Settings without losing core account features.

Your primary data lives on servers in Indonesia where compliance is strictest. Encrypted backups are held in a secure facility in a neighbouring Southeast Asian region for disaster recovery only.