papas Platform Privacy Notice

This page describes what we collect when you use papas and how we keep that data protected. When you create an account on our platform, register for live-dealer tables, or make a deposit through DANA, e-wallet, mobile banking, local payment, or bank transfer, we collect certain personal and financial information. We use this data only to operate our service, verify your identity, process your transactions, and respond to support requests — we never sell your data to third parties outside our payment processors and regulatory partners.

We at papas undertake to keep your personal information secure using industry-standard encryption and secure storage practices. Your account details, transaction history, and game records remain private. We do not share your betting activity, game choices, or account balance with other users or external marketers. This notice outlines what data we collect, how we use it, who has access to it, and what rights you have under Indonesian data-protection law.

Our privacy commitments apply across all papas platforms — desktop, mobile app, and live-dealer studios in Jakarta and Surabaya. If you have questions about how we handle your data or wish to exercise your privacy rights, our support team can assist during business hours.

What Data We Collect on papas

We collect personal information during account registration: your legal name, date of birth, email address, phone number, and physical address. We collect this information so we can verify your identity, comply with banking regulations, and contact you regarding your account. We also collect government-issued ID photos (KTP, passport, or driver's license) and proof-of-address documents (utility bill, bank statement, or rental agreement) as part of our KYC process.

When you fund your papas account, we collect financial information: your payment method, account number or wallet ID, transaction amounts, and timestamps. We collect this data from you and from your payment processor (DANA, e-wallet, mobile banking, local payment, online payment, or your bank) to process deposits and withdrawals. We also collect IP address, browser type, and device information when you access our platform, so we can detect fraud and troubleshoot technical issues.

We collect transaction records for every bet, hand, spin, or withdrawal on papas. These records include timestamps, game outcomes, bet amounts, and resulting balances. We retain these records permanently to support dispute resolution, regulatory compliance, and account history transparency. We do not collect biometric data, health information, or any personal details beyond what is necessary to operate our service and comply with Indonesian banking law.

How We Use Your Data on papas

We use your personal information primarily to operate papas and serve you as an account holder. We use your name, email, and phone number to create and manage your account, send you transaction confirmations, and respond to your support requests. We use your KYC documents to verify your identity and comply with Indonesian banking regulations that require account holders to be verified before accessing live-dealer tables and making deposits.

We use your financial information to process deposits and withdrawals, settle game outcomes, and maintain your transaction history. We use IP address and device information to detect fraud, identify unauthorized access attempts, and prevent account takeover. If you contact our support team during business hours from our Jakarta or Medan offices, we may review your account data to investigate your issue — for example, if you dispute a settlement, we pull session logs to verify the outcome.

We use your data to comply with legal obligations. If a regulatory authority or law enforcement agency in Indonesia requests your information, we disclose it as required by law. We do not voluntarily share your data with third parties except payment processors, banking partners, and regulatory agencies. We do not use your data for marketing, advertising, or any purpose unrelated to operating papas.

Data Processing and Third Parties

Our papas servers may sit outside Indonesia — for example, in Singapore or Malaysia — to ensure uptime and performance. Your personal data may be transferred to these offshore locations for processing. You acknowledge that data transferred outside Indonesia may be subject to different legal protections than Indonesian law provides. However, we apply the same encryption and security standards regardless of server location.

We use third-party payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking) to process your deposits and withdrawals. These processors receive your payment information to complete transactions, and they maintain their own privacy policies. We do not control how these processors use your data — we only share the minimum information necessary to process your transaction. We do not authorize payment processors to use your data for marketing or any purpose beyond transaction settlement.

Your Rights and Data Requests on papas

You have the right to request access to your personal data stored on papas. Contact our support team with your account email, and we will provide a summary of the personal information we hold about you within standard business hours. You also have the right to request correction of inaccurate information — for example, if your registered address is outdated, we can update it upon your request and verification.

You have the right to request deletion of your account and associated data, subject to limitations. We must retain certain transaction records for regulatory compliance and dispute resolution, typically for a standard retention period. However, we can delete non-essential personal information (such as your phone number or address) upon request, provided deletion does not interfere with our legal obligations or your account's active status.

If you believe we have violated your privacy rights or misused your data, you can file a complaint with Indonesian data-protection authorities. You can also contact our support team to lodge a complaint internally. We take privacy violations seriously and will investigate your complaint within standard business hours from our offices in Jakarta, Surabaya, Medan, or Bandung.

Cookies and Tracking Technologies on papas

Our papas platform uses cookies to store your login session, remember your language preference, and track your navigation across pages. These cookies are essential for the platform to function — without them, you would need to re-enter your password every time you visit. We do not use cookies for marketing, profiling, or third-party tracking. You can disable cookies in your browser settings, but doing so may limit papas functionality.

We may use analytics tools (such as Google Analytics) to understand how users navigate our platform, which pages are most popular, and where technical issues occur. These tools collect anonymized data — they track page visits and click patterns but do not link this data to your personal identity. If you wish to opt out of analytics tracking, you can disable analytics cookies in your browser or request an opt-out from our support team.

Data Retention and Account Closure on papas

We retain your personal information and transaction records as long as your papas account is active. Once you close your account, we retain your data for a standard retention period to support dispute resolution and regulatory compliance. After this period expires, we delete non-essential personal information but retain anonymized transaction records as required by Indonesian banking law.

We do not delete data prematurely, even upon request, if deletion would violate our legal obligations or prevent us from investigating disputes. For example, if you close your account during an active dispute with our support team, we retain all relevant data until the dispute is resolved. Once the retention period expires, we securely delete your personal data or anonymize it so it can no longer be linked to your identity.

If your account is suspended due to violation of our terms, we retain your data indefinitely to prevent account re-opening under false pretenses. This protects our platform from fraud and abuse. If you wish to appeal an account suspension, our support team can explain the specific data we retain and why.

Our papas Commitment to Data Security

We protect your data using industry-standard encryption, secure storage, and access controls. Your personal information is encrypted in transit (using HTTPS) and at rest (using AES-256 or equivalent). We restrict access to your data to papas staff who need it to serve you — for example, our support team may access your account data to resolve disputes, but customer-service staff do not access your data for any other purpose.

We conduct regular security audits and maintain backup systems to ensure data availability in case of system failure. We do not guarantee absolute security — like any online platform, papas faces potential security risks from hacking, unauthorized access, or data breach. However, we undertake to respond promptly to any security incident and notify affected users as required by law.

Updates to Our papas Privacy Notice

We may update this privacy notice periodically to reflect changes in our data practices, regulatory requirements, or operational procedures. We notify you of material changes via email at least 30 days before they take effect. If you disagree with an update, you can close your account before the new policy applies. Continued use of papas after the effective date constitutes acceptance of the updated privacy notice.

Our papas privacy practices are designed to keep your personal data secure and separate from third parties. If you have questions about our privacy practices, our data handling, or how to exercise your rights, contact our support team during Jakarta business hours. We respond in Indonesian or English and aim to clarify your privacy questions within standard response windows.