gatotkaca Platform Privacy Notice
This page describes what we collect when you use gatotkaca and how we keep that data protected. We collect account information, payment details, and betting history to operate our service securely and comply with local regulations. Your data is encrypted, stored securely, and never sold to third parties outside our payment and compliance partners.
We recognize that privacy is central to trust. When you open an account on gatotkaca, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts, or place a bet on Liga 1, Piala AFF, or esports markets, we collect information necessary to verify your identity, process your payments, and settle your account. We explain exactly what we collect, how long we keep it, and what rights you have to access or delete your data.
Our privacy commitments apply across all gatotkaca platforms — Android app, iOS browser, and desktop. Whether you log in from Jakarta, Surabaya, Bandung, or Medan, your data is handled according to the same protections outlined here.
What we collect on gatotkaca
When you open an account on gatotkaca, we collect your full name, email address, phone number, and date of birth. We use these details to create your login, send account notifications, and process password resets. We do not share your email or phone number with third parties outside our email and SMS service providers.
For deposits and withdrawals, we collect payment method information. If you deposit via DANA, e-wallet, mobile banking, local payment, or online payment, we collect a token representing your wallet ID — not your full wallet password or PIN. If you deposit via bank virtual account (e-wallet, mobile banking, local payment, online payment), we generate a unique virtual account number tied to your gatotkaca profile and store your bank transfer records. This information is encrypted and accessible only to our payment processors and compliance team.
We collect identity documents (national ID card, passport, or driver's license) during KYC verification. We photograph or upload your ID, extract your name and date of birth to verify your account, then store the image securely in a separate database accessible only to our compliance team. We keep this data for five years to meet regulatory requirements, then delete it.
We collect betting history — the games you play, your stakes, your results, and your balance changes — to operate gatotkaca and generate your account statements. We use this data to settle payouts, detect fraud, and provide customer support. Your betting history is linked to your account but not shared outside gatotkaca except to law enforcement if legally required.
We do not sell your data
Your account information, payment details, and betting history are never sold to advertisers, data brokers, or third-party marketing companies. We share data only with payment processors, compliance partners, and law enforcement where legally required.
Cookies and device tracking on gatotkaca
Our gatotkaca Android app and iOS browser use cookies to remember your login session. These cookies store your session token, not your password or payment details. Cookies expire after a set period of inactivity, and you can clear them manually in your browser or app settings.
We collect device information — your operating system (Android or iOS version), device model, and app version — to troubleshoot technical issues and optimize performance. We do not use this data to track you across other websites or apps. We do not use advertising trackers on gatotkaca.
Push notifications on the Android app send alerts about your account activity, game results, and promotions. You can disable notifications in your app settings at any time. We do not track whether you open a notification — we only know whether you receive it.
How we use your data
We use your data for four purposes: operating gatotkaca (processing bets, settling payouts, managing your account), verifying your identity (KYC and anti-fraud checks), complying with law (responding to legal requests, reporting to tax authorities), and improving our service (analyzing technical performance, detecting bugs, testing new features).
We do not use your data for profiling or automated decision-making that would significantly affect you. If we detect suspicious activity on your account, a compliance officer may review your transaction history and contact you directly — you have the right to respond and contest any findings.
Third-party processors and data location
We use third-party processors for specific functions. Our payment processors handle e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and bank virtual account transactions. Our email service provider sends account notifications. Our SMS provider sends authentication codes. Each processor is contractually bound to protect your data and use it only for the service they provide.
Our servers may sit outside your jurisdiction. We store account data in datacentres across Southeast Asia, including facilities in countries outside Indonesia. Data in transit between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security). Data at rest is encrypted using AES-256 encryption. We do not transfer data to jurisdictions with weaker data protection standards without your explicit consent.
Key takeaways
- We collect your name, email, phone, and date of birth to open your gatotkaca account.
- We collect payment tokens and virtual account numbers; we never store full wallet passwords or PINs.
- We encrypt all data in transit and at rest using industry-standard encryption.
- We keep KYC documents for five years, then delete them; betting history is kept as long as your account is active.
- We never sell your data to advertisers or data brokers; we share it only with processors and law enforcement where required.
Your rights and data requests on gatotkaca
You have the right to access your personal data. Log into your gatotkaca account, open the account settings, and download a copy of your profile information, KYC status, and transaction history. We provide this data in a standard format within three business days.
You have the right to correct or update your data. If your name, email, or phone number has changed, update it in your account settings. If you need to update your KYC documents (e.g., after a name change or document renewal), contact our support team via live chat or email, and we will guide you through the process.
You have the right to delete your data, subject to legal limits. Once your gatotkaca account is closed and all pending transactions are settled, you can request deletion of your personal information. We will delete your account details, betting history, and KYC documents except where we are required by law to keep them (e.g., tax or anti-money-laundering records). We typically delete data within 30 days of your request.
You have the right to object to certain uses of your data. If we contact you with promotions and you wish to opt out, reply to the message or update your notification preferences in your account settings. If you object to specific data processing (e.g., device tracking), contact us and we will review your request.
How long we keep your data
We keep your account credentials (name, email, phone) for as long as your gatotkaca account is active, plus three years after closure for fraud investigation purposes. We keep your betting history for as long as your account is active, plus five years after closure for regulatory compliance. We keep your KYC documents for five years from the date of verification, then delete them. We keep payment records (deposit and withdrawal confirmations) for as long as your account is active, plus seven years for tax and regulatory compliance.
If your account is dormant (no activity) for two years, we may delete some temporary data (such as cached session tokens) while keeping essential records. We will notify you before deleting any data from a dormant account.
Contact us about privacy on gatotkaca
If you have questions about how we handle your data, how to access your privacy settings, or how to submit a data request, contact our privacy team via live chat, email, or phone. We respond to privacy inquiries within three business days.
If you believe we have violated your privacy rights or have not honoured your data request, you have the right to lodge a complaint with your local data protection authority. gatotkaca operates in supported jurisdictions with privacy laws that protect your rights to access, correct, and delete your data.
We maintain this policy to reflect our actual data practices. We review and update it annually, and notify all account holders of material changes via email and account notification.