gemilanghoki Platform Privacy Notice

This page describes what we collect when you use gemilanghoki and how we keep that data protected throughout your membership. Our privacy practices apply to every account holder who accesses our platform—whether you are browsing football markets for Liga 1 or Piala AFF, funding your account through DANA or e-wallet, or reviewing your withdrawal history through mobile banking or local payment virtual accounts.

We at gemilanghoki take data protection seriously. Our policy sets out the categories of personal data we collect, the purposes for which we use that data, the third-party processors we engage, and the rights you hold over your information. We write this notice in plain language so you understand exactly what happens to your data when you interact with our platform.

We update this privacy notice when our data practices change or when legal requirements in our operating jurisdictions require us to revise our approach. We notify members of material changes through email and in-account notifications. By continuing to use gemilanghoki after we publish an update, you acknowledge the revised notice.

What We Collect and How We Use It on gemilanghoki

We collect personal data from you at several points during your membership on gemilanghoki. At registration, we collect your email address, phone number, and the password you create. During identity verification, we collect a copy of your government-issued ID—national ID card, passport, or driver's license—along with a selfie photograph. When you make a deposit or withdrawal, we collect your payment method details, including your e-wallet account identifier for DANA, e-wallet, mobile banking, local payment, or online payment, your e-wallet scan data, or your bank account number for mobile banking, local payment, online payment, or e-wallet virtual-account transfers.

We also collect technical data automatically when you access gemilanghoki. Our servers log your IP address, device type, browser version, operating system, and session timestamps. We use this technical data to maintain platform security, detect unusual account activity, and improve our service. We do not use technical data to build advertising profiles or sell it to third parties.

How We Use Your Data on gemilanghoki

We use your registration data to create and maintain your account, send you account notifications, and communicate promotional offers you have opted into. We use your identity verification documents to confirm your identity, verify your eligibility to access our services, and comply with anti-money-laundering requirements. We use your payment data to process deposits and withdrawals, reconcile transactions, and investigate payment disputes.

We use your gameplay activity data—which game categories you access, how frequently you play, and your account tier progression—to calculate your weekly cashback, determine your tier level, and apply seasonal promotions. During major events like Liga 1 season or Piala Indonesia, we may use your activity data to identify eligible members for event-specific promotions. We do not use your gameplay data to build external advertising profiles.

We use technical data—IP address, device type, session logs—to detect and prevent fraud, identify unusual account activity, and maintain platform security. If our security systems flag your account for review, we may use this technical data to investigate and, if necessary, suspend your account pending verification. Members in Jakarta, Surabaya, Bandung, Medan, and Semarang are subject to the same data practices as all other members—we do not apply different data handling based on your city or region.

Third-Party Processors and Data Transfers

We engage third-party processors to operate certain functions of gemilanghoki. Our payment processors—the companies that facilitate mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank virtual-account transfers—receive the minimum data necessary to complete your transaction. We do not share your full identity documents with payment processors; we share only the account identifiers and transaction amounts required to process your deposit or withdrawal.

Our servers may sit outside your jurisdiction. When we transfer your data across borders, we apply appropriate safeguards consistent with applicable data protection frameworks. We do not transfer your data to jurisdictions that lack adequate data protection standards without implementing contractual protections. If you have questions about where your data is stored or processed, contact our support team through your account dashboard.

Cookies and Tracking on gemilanghoki

We use cookies and similar tracking technologies on gemilanghoki to maintain your session, remember your preferences, and collect technical data about how you navigate our platform. Session cookies expire when you close your browser. Persistent cookies remain on your device for a set period and help us recognise you on return visits without requiring you to log in again.

We do not use third-party advertising cookies. We do not allow external advertising networks to place tracking cookies on gemilanghoki. The cookies we use are limited to those necessary for platform operation, security, and performance measurement. You can manage cookie preferences through your browser settings, but disabling certain cookies may affect your ability to log in or use account features.

Your Rights and Our gemilanghoki Data Retention Policy

You hold several rights over the personal data we hold about you on gemilanghoki. You may request a copy of the data we hold, ask us to correct inaccurate information, or request deletion of your data where we are not legally required to retain it. To exercise any of these rights, contact our support team through your account dashboard with a clear description of your request. We will respond within a reasonable timeframe and may ask you to verify your identity before processing your request.

We retain your personal data for as long as your account remains active and for a period after closure as required by our legal and regulatory obligations. Identity verification documents are retained for the period required by anti-money-laundering regulations in our operating jurisdictions. Transaction records are retained for the period required by financial record-keeping obligations. After the applicable retention period, we securely delete or anonymise your data.

If you believe we have handled your data incorrectly, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first so we can attempt to resolve your concern directly. Our support team is available through your account dashboard, and you can also review our full Terms and Conditions for the broader framework governing your account. Our services remain available only where local law permits—verify your jurisdiction's regulations before opening an account on gemilanghoki.

• Request a copy of your personal data held by gemilanghoki
• Ask us to correct inaccurate or incomplete information
• Request deletion of data we are not legally required to retain
• Object to processing where we rely on legitimate interests as our legal basis
• Withdraw consent for optional data uses, such as promotional communications