arenadewa Platform Privacy Notice

This page describes what we collect when you use arenadewa and how we keep that data protected. We operate an online entertainment platform serving account holders in supported jurisdictions. When you create an account, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, or engage with our sportsbook, live casino, or game offerings, we process personal information according to the practices outlined below.

Our commitment is transparency. We do not sell your data to third parties for marketing purposes. We do not use your account activity to manipulate odds or outcomes. We encrypt all sensitive information in transit and at rest. We comply with anti-money-laundering (AML) regulations and know-your-customer (KYC) requirements in every jurisdiction where we operate.

Access to arenadewa services is available only where local law permits. You remain responsible for verifying that your use of our platform complies with your jurisdiction's applicable regulations. If you have questions about this privacy notice or our data practices, contact our support team via in-app messaging or email.

What Data We Collect at arenadewa

We collect data in two categories: information you provide directly, and information generated by your use of arenadewa.

Information you provide: When you create an account, we collect your email address, full name, date of birth, and a copy of your national identity document (KTP, passport, or equivalent). This information is required for account verification and compliance with KYC regulations. We store this data encrypted on our servers.

When you deposit funds, we collect payment details appropriate to your chosen method. If you deposit via DANA, e-wallet, mobile banking, local payment, or online payment, we collect transaction confirmation data but do not store your wallet credentials. If you transfer via e-wallet or direct bank deposit to mobile banking, local payment, online payment, or e-wallet, we collect your bank account information (name, account number, routing codes) for deposit settlement and withdrawal processing. This data is encrypted and stored separately from your core account profile.

Information generated by your activity: We log every hand of poker you play, every sportsbook prediction on Liga 1, Piala Indonesia, Piala AFF, or other markets, every spin of a slot game, and every live casino table session. We record your win/loss outcomes, your account balance changes, your tier progression, and your withdrawal requests. We store your IP address, browser type, and device model when you log in. We track your session duration, the time of day you access arenadewa, and which payment methods you use. This data helps us detect fraud, improve our platform, and understand aggregate usage patterns—it does not identify you as an individual unless combined with your account profile.

How We Use Your Data

We use your data for five primary purposes:

• Account administration: We verify your identity, process deposits and withdrawals, calculate your tier level, and manage your account balance and loyalty rewards.
• Regulatory compliance: We maintain records for AML and KYC purposes. If we suspect illegal activity, we report to relevant authorities as required by law.
• Fraud prevention: We analyze payment patterns, IP addresses, and account behavior to detect and prevent unauthorized access, money laundering, and account takeover attempts.
• Platform improvement: We analyze aggregate usage data to optimize our game selection, payment infrastructure, sportsbook coverage (Liga 1, Piala AFF, MotoGP, badminton), and customer support.
• Communication: We send you account updates, promotion notifications, tier advancement confirmations, and support responses. You can manage notification preferences in your account settings.

We do not use your data to sell targeted advertising to third parties. We do not share your hand history with other players without your consent. We do not modify odds or outcomes based on your account history. We do not rent or sell your email address, phone number, or identity information to marketers.

Third-Party Data Processors

We work with trusted third parties to deliver our service. These processors handle your data only on our behalf and are contractually bound to protect it.

Payment processors

Companies managing mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and direct bank transfers to online payment, e-wallet, mobile banking, local payment. They see your transaction details but not your game history or account balance.

Data centre operators

Companies hosting our servers and databases. Your data may be stored in jurisdictions outside Indonesia; we encrypt it before transmission to these facilities.

AML/compliance vendors

Third-party firms that verify identity documents and screen accounts for regulatory compliance. They receive your identity information and behavioral data.

Customer support platforms

Systems managing in-app messaging and email. Support staff access your account data to resolve issues but are trained on confidentiality obligations.

We do not permit third-party processors to use your data for their own purposes. Any processor that violates these terms loses access to arenadewa systems. We audit processor contracts annually to ensure compliance.

Cookies and Tracking Technologies

We use cookies to maintain your login session, remember your language preference, and track your navigation within arenadewa. Cookies are small text files stored on your device. We use session cookies (deleted when you close your browser) and persistent cookies (retained for up to one year).

Our cookies do not contain personally identifying information. They contain a unique session identifier that links to your account profile on our servers. When you log out or your session expires, session cookies are deleted. You can disable cookies in your browser settings; doing so may prevent you from accessing arenadewa.

We do not use third-party tracking pixels or analytics providers that track you across unrelated websites. We do not participate in retargeting or behavioral advertising networks. We analyze aggregate usage on arenadewa only—we do not track your activity outside our platform.

How Long We Retain Your Data

We retain account data (email, identity information, payment details) for the lifetime of your arenadewa account plus seven years after account closure. This retention period complies with AML and tax audit requirements in jurisdictions where we operate.

We retain transaction records (deposits, withdrawals, game outcomes, loyalty point calculations) for seven years after the transaction date, even if your account is closed. These records are encrypted and stored separately from your active account profile. After seven years, transaction records are deleted unless we are required by law to retain them longer.

If you request account closure, we stop processing new transactions immediately. Your account data remains accessible to you for 30 days; after that, you can request permanent deletion of non-essential data. However, we retain transaction records and identity verification documents for the full retention period to comply with regulatory requirements.

Your Rights Regarding Your Data

We recognize that your data belongs to you. You have the right to:

• Access: Request a copy of all personal data we hold about you. We provide this within 30 days of your request.
• Correction: Ask us to correct inaccurate information in your account profile, such as an incorrect name or address.
• Deletion: Request deletion of non-essential data. We cannot delete regulatory-required records (identity verification, AML screening, transaction history), but we can delete optional data such as communication preferences or optional profile fields.
• Portability: Request a machine-readable copy of your account data for transfer to another service.
• Objection: Object to specific uses of your data. For example, you can opt out of promotional emails or disable certain tracking features.

To exercise these rights, contact our support team via in-app messaging or email. Include "Data Request" in your subject line and specify which right you are exercising. We will confirm receipt within 48 hours and respond within 30 days.

How We Protect Your Data on arenadewa

We employ industry-standard security practices to protect your information:

• Encryption in transit: All data transmitted between your device and our servers uses TLS (Transport Layer Security) encryption. This includes login credentials, payment details, and game history.
• Encryption at rest: Sensitive data stored on our servers—such as identity documents and banking information—is encrypted using AES-256 encryption.
• Access controls: Only authorized arenadewa employees with a specific business need can access your personal data. All access is logged and audited.
• Password security: We store passwords using bcrypt hashing, which makes them unrecoverable even to our staff. If you forget your password, you can reset it via email.
• Two-factor authentication: We offer optional 2FA via email or authenticator apps, adding a verification step when you log in from an unrecognized device.
• Regular audits: We conduct quarterly security audits and penetration tests to identify and patch vulnerabilities.

Despite these measures, no online service is entirely secure. If you suspect unauthorized access to your arenadewa account, contact support immediately. We will investigate, reset your password, and review your recent activity.

Data Storage and Jurisdiction Compliance

Our servers are located in jurisdictions where data protection regulations are well-established. Your data may be stored outside Indonesia. By using arenadewa, you consent to your data being stored and processed in these jurisdictions. We ensure equivalent data protection standards regardless of where your data is physically stored.

If you are located in a jurisdiction with specific data protection laws (such as GDPR-equivalent regulations), we comply with those laws to the extent applicable to our operations. If there is a conflict between our privacy practices and your jurisdiction's requirements, your jurisdiction's law takes precedence. Contact us if you believe our practices violate your local regulations.

Contacting Us About Privacy

If you have questions about our privacy practices, wish to exercise your data rights, or believe your data has been misused, contact our privacy team via in-app messaging or email. Include "Privacy Inquiry" or "Data Request" in the subject line. We will acknowledge your inquiry within 48 hours and respond substantively within 30 days.

We update this privacy notice periodically to reflect changes in our practices or applicable law. We will notify you of material changes via email and in-app notification at least 30 days before they take effect. Your continued use of arenadewa after such notification constitutes your acceptance of the updated terms.

This privacy notice is effective as of the date published in your account settings. We remain committed to protecting your data and operating arenadewa with transparency and respect for your privacy in all supported jurisdictions.