cakra Platform Privacy Notice

This page describes what we collect when you use cakra and how we keep that data protected. When you register an account, fund your balance via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, or place a bet on Liga 1, live-dealer tables, or slots, we handle personal information according to this policy.

We collect only information necessary to verify your identity, process your payments, settle your bets, and comply with anti-money-laundering law. We do not sell your data to third parties. We do not use your betting history to profile you for marketing. Our servers may sit outside your jurisdiction, but we apply the same security and retention standards globally.

Read this notice to understand what data we hold, who can access it, how long we keep it, and what rights you have.

What Data We Collect on cakra

We collect data in three categories: registration, transaction, and behavioural.

Registration data: When you open a cakra account, we collect your email address, password hash, full name, date of birth, residential address, phone number (optional), and government ID or passport details. We also store the upload date and time of your identity documents for verification audit trails.

Transaction data: Every time you deposit, withdraw, or place a bet on cakra, we log the transaction. This includes date, time, amount, payment method used (e.g., DANA, e-wallet, mobile banking, local payment virtual account), your account balance before and after, and the bet or game category involved. For football bets on Liga 1 or Piala Indonesia, we log your selected market and odds. For live-dealer tables, we log your table name and stake amount. For slots, we log the game title and result.

Behavioural data: We track your login times, IP address, device type, browser used, and pages visited on our platform. We do not track your activity outside cakra. We use this data to detect fraud, investigate disputes, and improve our platform performance.

Note: We do not collect sensitive data such as biometric information, health records, or financial account details beyond the payment method routing information required to process your transfers.

How We Use Your Data on cakra

We use collected data for five purposes:

Account verification and KYC compliance: We verify your identity using your uploaded ID and address proof. We cross-check against fraud databases and sanctions lists to comply with anti-money-laundering law. This process is mandatory before your first deposit or withdrawal.
Payment processing: We share your name, address, and bank account details with our payment processors (the e-wallet and bank partners) only to execute your deposit or withdrawal request. We do not store credit card details; payment gateways handle those securely.
Bet settlement: We use your transaction log to settle bets. For football matches on Liga 1 or Champions League, we confirm the official result and credit or debit your account. For live-dealer games, we cross-reference the live stream with your stake record. For slots, we verify RNG outcomes against your bet.
Fraud prevention and account security: We analyze your login patterns, deposit frequency, and withdrawal requests to detect suspicious activity. If we spot anomalies (e.g., login from multiple countries within hours, sudden large withdrawal), we may request additional verification or suspend your account pending investigation.
Legal compliance: We retain your data to comply with local gambling regulations, anti-money-laundering law, and tax reporting requirements. We may disclose data to law enforcement or regulatory bodies if compelled by legal process.

We do not use your data for marketing, profiling, or behavioral targeting. We do not share your betting history with advertisers or data brokers.

We on cakra treat your data as an asset we hold on your behalf, not as a commodity we monetize.

cakra data principle

Third-Party Processors and Data Sharing

We do not sell your data. However, we share limited information with trusted third parties to operate cakra:

Payment processors: online payment, e-wallet, mobile banking, local payment, online payment, e-wallet gateways, and mobile banking, local payment, online payment, e-wallet bank partners receive your name, account number, and transaction amount to process deposits and withdrawals. Each partner operates under their own privacy policy.
Identity verification services: We use external KYC vendors to cross-check your identity against fraud and sanctions databases. These vendors receive only your name, ID number, and address—not your betting history or balance.
Hosting and infrastructure: Our servers and databases may be hosted on cloud providers (e.g., AWS, Google Cloud, Microsoft Azure) outside Indonesia. These providers sign data processing agreements committing them to the same confidentiality standards we enforce.
Law enforcement: If compelled by court order, warrant, or legal demand, we disclose data to law enforcement or regulatory authorities. We log all such disclosures and notify you when legally permissible to do so.

We do not share your data with other cakra users, social media platforms, or advertising networks.

How Long We Keep Your Data

We retain your data according to legal and operational requirements:

Active account: While your cakra account is open, we keep all your registration, transaction, and behavioural data indefinitely. You can review your full history anytime via your account dashboard.
Closed account: If you close your account, we retain your registration and transaction records for 7 years to comply with anti-money-laundering and tax law. We delete behavioural data (login logs, IP addresses) after 12 months.
Dispute resolution: If a dispute arises (e.g., you challenge a bet settlement or a payment), we retain all relevant data until the dispute is resolved, typically within 30 days. Complex disputes may extend this period.
Legal holds: If we receive a legal demand or court order, we preserve all data relevant to the investigation. We do not delete data subject to a legal hold until the order is discharged.

You may request deletion of your data subject to legal exceptions. Contact our support team with your account details and deletion request. We will respond within 10 business days.

Your Data Rights on cakra

Request a copy of all data we hold about you
Request correction of inaccurate personal details
Request deletion (subject to legal exceptions)

Limitations on Your Rights

We cannot delete data required by law (7-year KYC records)
We cannot alter transaction records (audit trail integrity)
We may deny requests if they would compromise security

Security Practices and Cookies on cakra

We protect your data using industry-standard encryption (TLS 1.3+) for all connections to cakra. Your password is hashed, not stored in plain text. Your identity documents are encrypted at rest and deleted 30 days after verification (we retain only the verification confirmation, not the image files).

Our servers operate in secure data centres with physical access controls, fire suppression, and redundant power. We perform quarterly penetration testing and annual security audits. If we discover a security breach affecting your data, we will notify you within 30 days and describe the remediation steps we have taken.

We use cookies to manage your session (login state) and to prevent fraud. Session cookies expire when you log out or after 24 hours of inactivity. We do not use tracking cookies to follow you across the internet. You can disable cookies in your browser, but doing so may break cakra features like account login or bet placement.

Jurisdiction and Contact Information

Our privacy policy is governed by the laws of the jurisdictions where cakra operates and where your data is processed. If our servers are hosted outside Indonesia (e.g., in Singapore or the Philippines), your data may be subject to that country's data protection laws in addition to Indonesian law.

If you are based in Jakarta, Surabaya, Bandung, Medan, or elsewhere and have questions about how we handle your data, or if you wish to exercise your data rights, contact our support team. Provide your account email, full name, and a clear description of your request. We will respond within 10 business days.

Important: Our privacy policy applies to cakra and does not extend to third-party payment processors or external KYC vendors. Review their privacy policies to understand their data practices.

Changes to This Privacy Notice

We may update this privacy notice from time to time to reflect changes in our practices or legal requirements. Material changes (e.g., new data sharing with third parties) will be announced via email to all account holders with at least 30 days' notice. Your continued use of cakra after the effective date of an update constitutes acceptance of the revised policy.