rajapolsPrivacy Policy
This page describes what we collect when you use rajapols and how we keep that data protected. Our commitment is to handle your information transparently—we explain what we collect, why, and who may access it. We do not sell your data to marketers, and we do not share your account details with third parties except where required by law or necessary to process your deposits and withdrawals.
When you open an account on rajapols, you provide us with personal information: your email, phone number, national ID, and proof of address. We use these details only for account verification (KYC), payment processing, and fraud prevention. If you bet on Liga 1 or deposit via DANA, e-wallet, or mobile banking, we record those transactions securely and retain them for the periods required by Indonesian regulation.
Our servers may sit outside your jurisdiction, but we apply the same data protections regardless of location. You have the right to request a copy of all data we hold about you, to correct inaccuracies, and to ask us to delete information once it is no longer needed. This policy sets out how you can exercise those rights and how to contact us if you have concerns.
What Data We Collect on rajapols
Account Registration
We collect your email address, a password you choose, and your phone number when you register. We use your email to send account notifications (login alerts, password resets, withdrawal confirmations). We store your password in encrypted form; we never read or share it. Your phone number is optional but used for two-factor authentication and urgent account recovery if you lose email access.
Identity Verification (KYC)
Before you can withdraw funds from rajapols, we require identity verification. You upload a scan of your national ID (KTP) and a proof-of-address document (utility bill, bank statement, or rental agreement). We examine these documents to confirm your identity and prevent money laundering and fraud. Once verified, we store these scans securely on encrypted servers. We retain them for at least five years as required by Indonesian financial regulation, then delete them unless we are legally obliged to keep them longer.
Transaction and Betting Data
We log every deposit, withdrawal, bet, and game result on rajapols. When you fund your account via DANA, e-wallet, mobile banking, local payment, or a bank virtual account, we record the amount, timestamp, and payment method. When you place a bet on Piala AFF or any other market, we log the bet amount, odds, outcome, and your resulting balance change. This data is stored in our transaction database and is accessible to you anytime via your account dashboard. We use this data to settle disputes, detect fraud, and comply with anti-money-laundering rules.
- Your transaction history
- We retain all bets and deposits for seven years; withdrawals are kept for ten years to comply with financial reporting requirements.
- Device and IP data
- We log the IP address, device type, and browser you use when you log into rajapols. This helps us detect unauthorized access and prevent account takeover.
- Cookies and analytics
- We use cookies to keep you logged in and to track how you navigate the platform. We do not sell this analytics data; we use it only to improve the rajapols experience.
Payment Processor Data Sharing
When you deposit via online payment, e-wallet, or a bank virtual account, we share your name, account number, and transaction amount with the payment processor. We do not control how those processors use your data, but we require them to protect it under confidentiality agreements. When you withdraw, we pass your bank details (account number and name) to our payment partner so they can transfer funds to you. We never store your full bank credentials on rajapols; we only retain the last few digits for identification.
Communication and Support Data
When you contact our support team via live chat, email, or phone, we keep a record of the conversation. We use these records to resolve your issue, train our staff, and improve our service. If you report a technical problem (such as a failed withdrawal during Idul Fitri week), we log the details so we can investigate. We may retain support transcripts for up to two years unless they contain sensitive information (passwords, full card numbers), which we delete immediately.
We never collect sensitive payment details
We do not store credit card numbers, full bank account numbers, or mobile banking/local payment password hashes. All payment processing is handled by trusted third-party providers who comply with PCI-DSS (Payment Card Industry Data Security Standard).
Your Rights and Our Commitments on rajapols
Access and Portability
You have the right to request all data we hold about you on rajapols. Contact our support team with your account email and a copy of your ID. We will compile your information (account details, transaction history, KYC documents) and send it to you within 30 days in a machine-readable format. You can then download it or transfer it to another service if you wish.
Correction and Deletion
If your name, email, or phone number on rajapols is incorrect, you can update it directly in your account settings. If you find inaccuracies in your transaction history, contact support and we will investigate. If a withdrawal to your BCA account was recorded with the wrong amount or timestamp, we will review our logs and correct the record if the error is ours.
You may request deletion of non-essential data after your account is closed. We cannot delete transaction records (we are required to keep them for regulatory reasons), but we will anonymize your personal details where possible. If you have an outstanding balance or a dispute with rajapols, we may retain your data until the matter is resolved.
Third-Party Processors
We work with several service providers to run rajapols: payment processors (for e-wallet, mobile banking, local payment, and bank transfers), cloud hosting providers, and security vendors. We have data-processing agreements with each of them that require them to protect your information and use it only for the services we have contracted them for. Our cloud infrastructure may be based outside Indonesia, but we apply the same encryption and access controls regardless of server location.
Data Retention and Deletion
We keep your personal data only as long as necessary. After your account is closed, we retain your name, ID number, and email for 10 years (as required by Indonesian financial regulations). Transaction records are kept for 7–10 years depending on type. Payment processor data (such as online payment transaction receipts) may be stored longer by the processor themselves, which we do not control. KYC documents are deleted after five years unless we are under legal investigation.
Security Practices
We encrypt all data in transit (using HTTPS) and at rest (on our servers). Our staff access personal information only when necessary and under strict confidentiality agreements. We use firewalls, intrusion detection, and regular security audits to protect rajapols. However, no system is non-specific info secure; if we discover a data breach, we will notify you and relevant authorities within the timeframes required by law.
Your Contact Rights
If you wish to exercise any of these rights—access, correction, deletion, or complaint—contact our support team via the rajapols website or email. We will respond within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Indonesian data protection authority or relevant regulator in your jurisdiction. Our services are available only where local law permits; if you have privacy concerns specific to your region, verify the applicable framework before using rajapols.
Policy Changes
We may update this privacy policy to reflect changes in technology or regulation. We will notify you of material changes via email or a notice on the rajapols homepage at least 30 days before the new policy takes effect. Continued use of rajapols after that date means you accept the updated policy. If you do not agree with changes, you can close your account and request deletion of non-regulatory data.