galabetPrivacy Policy

This page describes what data we collect when you use galabet and how we keep that data protected. We understand that your personal information is sensitive — especially payment details and identity documents required for account verification. Our privacy practices are designed to be transparent, secure, and compliant with data protection standards applicable in our service regions.

When you open a galabet account, we collect information necessary to deliver our service: your email, name, date of birth, residential address, and identity document details (for KYC verification). We also collect transaction records — deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers; withdrawals; betting activity; and game outcomes. This data enables us to settle bets fairly, prevent fraud, comply with anti-money-laundering rules, and provide customer support.

We do not sell or share your personal information with marketing partners or data brokers. We do share transaction and identity data with payment processors, fraud-prevention services, and compliance partners only as necessary to deliver galabet services. This policy explains what we collect, how we use it, how long we keep it, and your rights regarding your data.

What Data We Collect on galabet

We collect several categories of data when you use galabet. Account information includes your email, username, full legal name, date of birth, residential address, phone number, and identity document details (national ID, passport, or other government-issued ID). Payment information includes transaction records — the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, bank name), amount, timestamp, and confirmation code. We do not store full payment card numbers; payment gateways handle that encryption.

Betting and gaming activity includes all wagers you place, game outcomes, settlement details, bonus claims, and cashback credits. Device and usage data includes your IP address, browser type, device model, and how you interact with galabet (pages visited, time spent, features used). Communication data includes emails and live-chat messages with our support team, including any disputes or account issues you report.

How We Use Your Data on galabet

We use your data for several core purposes. Service delivery: We need your email, name, and address to set up your account, process deposits and withdrawals, calculate tier status, and credit bonuses and cashback. Verification and compliance: We verify your identity through your government ID to prevent fraud and comply with anti-money-laundering (AML) regulations in our service regions. Settlement: We use transaction records and betting history to settle bets accurately and fairly.

Customer support: We use your account history, device information, and communication history to resolve technical issues, disputes, and account recovery requests. Fraud prevention: We analyse device data, transaction patterns, and IP addresses to detect and prevent fraudulent activity. Analytics: We use anonymous, aggregated data to understand how members use galabet — which sports are popular, which games attract most activity, whether our payment methods are functioning smoothly. This helps us improve our platform.

We do not use your data to profile you for marketing purposes or to sell to third parties. We do not contact you with unsolicited promotional emails or SMS unless you explicitly opt in.

Third Parties and Data Processors

We work with several third-party services to operate galabet. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive transaction data to process your deposits and withdrawals. These companies have their own privacy policies; we encourage you to review them. Fraud-prevention services receive your device IP, transaction amount, and frequency to flag suspicious patterns. KYC verification partners receive your name, date of birth, address, and ID document image to confirm your identity.

Payment gateways

Handle encrypted transmission of payment data. Do not retain card details on galabet servers.

Email and SMS services

We use third-party email and SMS platforms to send you account notifications, promotion updates, and support responses.

Hosting and security

Our servers may be hosted in jurisdictions outside Indonesia. Data is encrypted in transit and at rest.

Legal and compliance

We may share data with legal authorities if required by law or court order.

All third-party processors are contractually obliged to protect your data and use it only for the purpose we specify. We do not permit processors to sell or repurpose your data.

Data Retention on galabet

We retain your account information (name, address, ID document) for as long as your account is active, plus a minimum of 5 years after account closure for legal and tax compliance. Your transaction history (deposits, withdrawals, bets, settlements) is retained indefinitely — you have a right to view your full history at any time. Communications with our support team are retained for 2 years after the interaction concludes.

If you request account deletion, we anonymise your personal data but retain transaction records in encrypted form for legal compliance. You cannot delete transaction history as it is needed for dispute resolution and regulatory proof.

Your Rights and Data Access

You have the right to request a copy of all personal data we hold about you. Contact our support team via live chat or email, and we will provide a downloadable file of your account information, transaction history, and communication records within 10 business days. You also have the right to request correction of inaccurate data — for instance, if your residential address changed but our records were not updated.

You may request data deletion for information that is no longer necessary for service delivery, subject to legal retention requirements. You may withdraw consent for non-essential data processing (such as analytics) at any time, though this may affect your account functionality. To exercise any of these rights, contact our support team — they will verify your identity and process your request.

Security Practices on galabet

We encrypt all data in transit using TLS (Transport Layer Security) and at rest using industry-standard encryption algorithms. We store payment data separately from account data, and we do not retain full payment card numbers. Our servers undergo regular security audits, and we maintain cyber-liability insurance to protect member funds in the event of a breach.

Despite these measures, no system is non-specific info secure. If we discover a data breach, we notify affected members within 72 hours and explain what information was exposed and what steps we are taking. We also notify relevant authorities if required by law. We recommend that you use a strong, unique password and enable two-factor authentication if available on your account.

Jurisdiction and Policy Updates

Our services are available only where local law permits. We comply with data protection regulations applicable in the regions where we operate. Our servers may be hosted in jurisdictions outside Indonesia — this means your data may be processed and stored internationally, though it remains protected by our encryption and contractual safeguards.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on galabet and updating the "Last Updated" date. Continued use of galabet after notification constitutes acceptance of the updated policy. If you have questions about our privacy practices or wish to exercise your data rights, contact our support team — they are available via live chat (subject to verification response), email, or in-app messaging during business hours.

Related guides