Data Minimization
We ask only for details needed to verify your identity, run your account and process DANA, OVO, GoPay and QRIS deposits. No email selling, no lead-gen lists.
LEGAL REFERENCE
Your privacy comes first at candubola
We handle your account details, payment history and gaming activity with the same care we put into our live tables and slot lobbies. This privacy policy shows exactly...
Data ProtectionPayment SecurityAccount PrivacyTransparent PolicyYour Control
How we safeguard your information
candubola collects personal information — your name, email, phone number, payment method and gameplay records — to run your account, process deposits via DANA, OVO, GoPay and QRIS, and deliver our live casino and sportsbook services in supported regions. We encrypt all transactions, store payment data on secure servers and never sell your details to third parties. Your data remains yours; we
use it only to verify your identity, manage your account balance, prevent fraud and improve our service. Where local law permits, we may share anonymised gameplay stats with our game providers to keep our lobbies running smoothly.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
REVIEW SIGNALS
Trust signals behind our privacy promise
Encrypted Payment Tunnels
Every DANA, OVO, GoPay and QRIS transaction travels through bank-grade SSL encryption. Your payment data never touches our servers in plain text; it moves directly to our payment partners.
Annual Security Audits
Third-party security firms audit our data storage, login systems and payment flows yearly. Audit reports are available to regulatory bodies in supported Indonesian jurisdictions.
Transparent Data Retention
We keep your gameplay records for seven years to comply with local betting regulations. Your account can be deleted anytime; historical data is purged within 30 days of request.
Cookie & Tracking Clarity
candubola uses session cookies to keep you logged in and analytics cookies to track how you navigate our lobby. You control all non-essential cookies from the settings tab.
Vendor Privacy Standards
Game providers, payment processors and analytics tools we partner with sign strict data-handling agreements. Pragmatic, Evolution and PG Soft titles all operate under our privacy framework.
Compliance with Local Law
Our privacy practices align with Indonesian data protection requirements and e-commerce regulations. We reserve the right to share data with authorities where law permits.
BENCHMARKED
How our privacy policy stacks up
Gameplay Privacy
Your slot spins, live table sessions and sportsbook bets are logged on your account only. We don't broadcast your play history to other players or third-party sites.
Payment Method Protection
Payment credentials are tokenized — your bank details never stored locally. QRIS scans and OVO links are refreshed regularly to prevent old tokens from lingering.
Right to Access & Deletion
Email us anytime to download your full data file or request account deletion. We deliver your data within 10 days and purge your account within 30 days of confirmation.
Third-Party Transparency
All vendors who touch your data — payment partners, game studios, analytics platforms — are listed in our extended privacy addendum. You can request their exact contact info.
Policy Update Notifications
We email you whenever this privacy policy changes materially. You have 14 days to review new terms; continued login means acceptance, or you can request account closure.
Dispute Resolution Path
Privacy complaints first go to our internal team. If unresolved, you can escalate to the relevant Indonesian data protection authority in your supported region.
SERVICE CONTEXT
What defines our privacy framework
01
Account-Level Data Ownership
Your gameplay history, account balance and payment records live in your candubola account. You see everything, control sharing settings and can export or delete anytime.
02
Session-Based Login Security
We track login locations and device fingerprints to flag unusual access attempts. Two-factor authentication via SMS or email adds a second layer when you sign in from new devices.
03
Payment Method Tokenization
DANA, OVO, GoPay and QRIS credentials are never stored in plaintext. Tokens expire and rotate regularly, so even if our database were breached, payment details stay safe.
04
Automated Fraud Detection
We monitor deposit and withdrawal patterns in real time. Unusual activity — like a login from a new country followed by a large withdrawal — triggers verification before processing.
05
Gameplay Data Pseudonymization
Live table footage and slot session logs are tagged with anonymous IDs, not your name or account number. This lets our teams review gameplay without exposing personal details.
06
Regular Privacy Audits
We run internal privacy checks quarterly and hire independent auditors annually. Results are shared with regulators in supported Indonesian jurisdictions to ensure ongoing compliance.
Privacy questions answered
We collect your name, email, phone number, date of birth, address and payment method to verify your identity and process DANA, OVO, GoPay or QRIS deposits. We also log your gameplay history, account balance and login activity to run your account securely and detect fraud.
Payment credentials are encrypted end-to-end and tokenized — your bank details never stored locally. All transactions flow through our payment partners' secure gateways. We use SSL encryption, fraud monitoring and regular security audits to keep your payment data safe.
Yes. Email our privacy team or use the Account Settings menu to request a data export or account deletion. We deliver your data file within 10 days and fully purge your account within 30 days of confirmation, including gameplay records and payment history.
Only you can access your full account history. Our support team can view anonymised gameplay data to help with technical issues. Game providers see only aggregated gameplay stats — not your individual session details — to improve their titles.
We share data only with payment processors, game studios and analytics platforms needed to run your account and deliver our live casino and sportsbook. All partners sign strict data-handling agreements. We never sell your details to marketers or data brokers.
We retain account data for seven years to comply with Indonesian gambling regulations. After account deletion, most data is purged within 30 days. Payment records linked to fraud investigations may be kept longer where local law requires.
We email you whenever our policy changes materially. You have 14 days to review and accept new terms. Continued login means you accept the changes; if you disagree, you can request account closure and full data deletion at any time.