karutaPrivacy Policy

This page describes what we collect when you use karuta and how we keep that data protected. We collect personal information—your name, email, phone number, ID document, and payment details—only to verify your account, process deposits and withdrawals, and comply with local law. We do not sell your data to advertisers or data brokers. We do not use your transaction history to profile you for marketing.

Our servers may sit outside your jurisdiction, but we apply the same data-protection standards regardless of where your information is stored. We encrypt sensitive data in transit and at rest. We limit access to your information to employees and contractors who need it to operate karuta. If we experience a data breach, we notify you within 30 days and describe what happened and what steps we took to secure your account.

This policy covers what we collect, how we use it, who we share it with, how long we keep it, and your rights. If you have questions about your data on karuta, contact our support team.

What We Collect on karuta

We collect information in three categories: account data, transaction data, and technical data. Account data includes your email, password hash, full legal name, date of birth, national ID number (KTP or passport), phone number, and proof of address. We collect this when you register and verify your account. We do not collect this information from third parties; you provide it directly.

Transaction data includes every deposit, withdrawal, wager, and settlement on karuta. We record the amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), timestamp, and outcome. We keep this data for seven years to comply with financial regulations and to help you review your account history.

Technical data includes your IP address, device type, browser version, and pages you visit on karuta. We collect this automatically via cookies and server logs. We use it to detect fraud, troubleshoot technical issues, and understand how users navigate our platform. We do not use it to track you across other websites.

How We Use Your Data on karuta

We use your account data to verify your identity, prevent fraud, and process your deposits and withdrawals. We use your transaction data to settle wagers, generate your account statement, and respond to disputes. We use your technical data to maintain platform security, detect unauthorized access, and improve our mobile app and live-dealer streams.

We do not use your data for marketing unless you opt in. We do not send promotional emails or SMS unless you have explicitly requested them. You can disable marketing communications at any time in your account settings.

We may use aggregated, anonymized data (e.g., "many active users in Jakarta accessed live blackjack in January") for business analytics and product development. This data cannot identify you individually.

Third Parties and Data Sharing on karuta

We share your data with payment processors (the companies that operate mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) to process your deposits and withdrawals. We share your data with our hosting provider to store your account information securely. We share your data with law enforcement or regulators only if required by law or court order.

We do not sell your data to third parties. We do not share your data with advertisers, data brokers, or marketing firms. Our payment processors and hosting providers are bound by confidentiality agreements and may only use your data to provide services to karuta.

We at karuta keep your transaction history private and share it only with payment processors and regulators where required by law.

Cookies and Tracking on karuta

We use cookies to keep you logged in, remember your preferences, and detect fraud. These are essential cookies; without them, karuta would not function. We do not use cookies to track you across other websites or to build a profile of your browsing habits outside karuta.

You can disable cookies in your browser settings, but this will prevent you from logging into karuta. We do not use third-party analytics tools (Google Analytics, Facebook Pixel) that track users across the web.

Data Retention on karuta

We keep your account data (name, ID, address) for as long as your account is active, plus seven years after closure. We keep your transaction data for seven years to comply with financial regulations. We keep technical data (IP logs, device information) for 90 days, then delete it. If you request account deletion, we anonymize your personal data but retain transaction records for regulatory compliance.

Your Rights Regarding Your Data on karuta

You have the right to access your data. You can download your account statement, transaction history, and personal information from your karuta account dashboard at any time. You have the right to correct inaccurate data—if your name or address is wrong, contact our support team and we will update it. You have the right to delete your account and request that we anonymize your personal data, though we will retain transaction records for seven years as required by law.

You have the right to data portability. If you want to export your transaction history in a standard format, we can provide it. You have the right to lodge a complaint with your local data-protection authority if you believe we have mishandled your data.

Contact and Updates on karuta

If you have questions about how we handle your data on karuta, contact our support team. We respond to data-protection inquiries within 14 days. We may update this privacy policy at any time. If we make material changes, we will notify you via email and on our site. Your continued use of karuta after a change means you accept the updated policy.

Our services are available only where local law permits. If you are in Jakarta, Surabaya, Bandung, Medan, or Semarang, your data is subject to Indonesian data-protection standards and our privacy commitments. We do not transfer your data outside the region without your consent, except where necessary to process payments or comply with law.