barudak Privacy Policy

This page describes what data we collect when you use barudak and how we keep that data protected. We at barudak take your privacy seriously—we collect only what we need, we encrypt it securely, and we never sell your information to third parties. Whether you're betting on Liga 1 matches from Jakarta, playing live casino tables, or exploring our esports markets from Surabaya or Bandung, your personal details remain under our strict control.

Our privacy practices follow applicable data protection laws. We explain what information we gather during account signup, KYC verification, deposits (via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or Indonesian bank transfer), and gameplay. We also detail how we use that data, who may access it, and what rights you have over your own information.

If you have questions about how we handle your data or wish to exercise any of your privacy rights, our support team is available via email and live chat. We respond to data access requests and deletion requests within the timeframes specified by applicable law.

What Data We Collect at barudak

We at barudak collect data in several categories. First, account registration data: your full name, date of birth, email address, phone number, and password. Second, identity verification data: your government-issued ID (KTP, passport, or driver's license), proof of address (utility bill or bank statement), and any supporting documents needed to verify your identity and location. Third, payment data: the payment methods you link (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet account details, or bank account information) and transaction history showing deposits and withdrawals.

Fourth, gameplay data: your wagers, wins, losses, game history, bet amounts, and timestamps. Fifth, account activity: login times, IP addresses, device information, and browser type. Sixth, communication data: emails you send to our support team, live chat conversations, and any feedback or complaints you submit. We do not collect your full payment card numbers or banking passwords—we use secure tokenization where payment partners handle sensitive credentials directly.

How We Use Your Data on barudak

We use your data primarily to deliver our services. Your registration data and payment information enable us to set up your account, process deposits and withdrawals, and manage your balance. Your identity verification documents are used to confirm you are who you claim to be, meet anti-money-laundering (AML) regulations, and prevent fraud. Your gameplay data allows us to calculate your weekly cashback, track your tier progression, and ensure payouts are accurate.

We also use data for account security and compliance. Your IP address and device information help us detect unauthorized access attempts and prevent account takeovers. Your transaction history is retained for regulatory reporting and audit purposes. If you contact support, we use your communication data to resolve your issue and improve our service quality. We analyze aggregated, anonymized gameplay trends to understand game popularity and player engagement, but this analysis never identifies you personally.

We do not use your data for marketing without your explicit consent. If you opt into promotional emails during account setup, we may send you information about new games, seasonal promotions (e.g., offers around Idul Fitri, Idul Adha, Imlek, or Nyepi), or updates about Piala AFF and Liga 1 betting markets. You can unsubscribe from these emails at any time via a link in the message or by contacting support.

Third-Party Data Processors on barudak

We at barudak work with trusted third parties to deliver our service. Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment partners, and Indonesian banks like online payment, e-wallet, mobile banking, local payment) receive your payment method details and transaction information to authorize deposits and process withdrawals. These partners are bound by strict confidentiality agreements and use your data only to complete transactions.

Our cloud hosting provider stores our servers, which may be located outside Indonesia. While servers are physically outside your jurisdiction, our infrastructure uses encryption and access controls to protect data in transit and at rest. Our identity verification partner receives your KYC documents to perform automated and manual verification checks; they delete your documents after verification is complete and retain only a verification status flag.

We may disclose your data if required by law—for example, if a court orders us to share information, or if we receive a valid government request for AML or fraud investigation purposes. We do not sell or lease your data to marketers, advertisers, or data brokers under any circumstance.

At barudak, your data is not a product to be sold. It is a trust we hold on your behalf, encrypted, compartmentalized, and protected under strict policies.

Data Retention Policy at barudak

We retain your account data for as long as your barudak account remains open. If you close your account and request deletion, we delete personal data (name, contact details, device information) within 30 days. However, we retain financial transaction records, KYC verification status, and account history for up to seven years as required by Indonesian financial regulations and anti-money-laundering law.

We do not retain full copies of your identity documents after verification is complete. Your KYC documents are deleted from our systems after verification passes; we retain only a verification confirmation. Payment method details are tokenized and do not remain in plaintext on our servers.

Security and Encryption on barudak

We at barudak protect your data using industry-standard encryption. All data transmitted between your browser or app and our servers is encrypted using TLS (Transport Layer Security), version 1.2 or higher. Your password is hashed using a modern algorithm and is never stored in plaintext. Your account login is protected by multi-factor authentication on request, adding an extra security layer.

Our servers are housed in secure data centers with physical access controls. We perform regular security audits and penetration testing to identify and patch vulnerabilities. Our staff have access to data only on a need-to-know basis, and all access is logged and monitored. If we detect a data breach, we notify affected users within 72 hours as required by law.

Your Rights Over Your Data on barudak

You have the right to request access to all data we hold about you. Contact our support team, and we will provide a complete export of your account information, transaction history, and any personal details within 30 days. You have the right to request correction of inaccurate data—if your name or address has changed, update it via your account settings or contact support.

You have the right to request deletion of your account and associated personal data, subject to regulatory retention requirements. We will delete your account profile, login credentials, and device history; however, we must retain transaction records for seven years as required by law. You may also request that we restrict how we use your data (e.g., opt out of promotional emails). To exercise any of these rights, email us at [email protected] or use the account settings menu in your dashboard.

Cookies and Tracking on barudak

Our website and app use cookies to remember your login session, store your language preference, and track your gameplay session. These are essential cookies and do not require additional consent. We also use analytics cookies to understand how users navigate barudak—these help us optimize our platform and improve your experience. You can disable cookies in your browser settings, but doing so may prevent our platform from functioning properly.

International Data Transfers

Our servers may be located outside Indonesia, which means your data may be transferred across borders. We ensure that international transfers are protected by encryption and by contractual safeguards that require our service providers to meet Indonesian and international data protection standards. When you use barudak from Medan, Semarang, or any other Indonesian city, your data is encrypted in transit and at rest.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. Material changes (e.g., new data uses or third-party sharing) are communicated to you via email at least 30 days before taking effect. Your continued use of barudak after the effective date indicates your acceptance of the updated policy. If you do not agree to changes, you may close your account.

Contact Us About Your Privacy

If you have questions about our privacy practices, wish to access your data, or want to lodge a complaint, contact our support team at [email protected]. We respond to privacy inquiries within 5 business days. You may also submit a formal data access or deletion request via email, and we will process it according to applicable law. Our privacy team is committed to transparency and will address your concerns promptly.