warung Platform Privacy Notice

This page describes what we collect when you use warung and how we keep that data protected. We take privacy seriously and operate under clear principles: we collect only what is necessary for account management, payment processing, and regulatory compliance. We do not sell your data to third parties, and we do not share personal information beyond what is legally required or operationally essential.

When you register on warung, we collect your email, name, date of birth, phone number, and address. When you deposit or withdraw, we process payment information through secure payment gateways (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet). We also collect account activity logs — bets placed, games played, deposits, and withdrawals. This data is encrypted and stored on servers we control or trust.

Our policy covers data collection, use, retention, your rights, and how to contact us with privacy questions.

What We Collect on warung

We collect personal data in two categories: account registration and transactional activity. At registration, we require your email address (used for login and password resets), full name, date of birth, phone number, and address. We verify your email by sending a confirmation link — you must click it to activate your account. We collect this data to create your account, contact you about account issues, and comply with anti-money-laundering regulations.

When you deposit or withdraw on warung, we collect payment method details and transaction history. For digital wallet payments (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet), we do not store your wallet credentials — payment processing is handled by the payment provider directly. For bank transfers (mobile banking, local payment, online payment, e-wallet), we record the transaction reference and your bank account holder name for verification.

When you use warung for football betting (Liga 1, Piala Indonesia, Piala AFF, Champions League), live-dealer games, slots, or esports markets (Mobile Legends, Free Fire, PUBG Mobile), we log your activity: bets placed, amounts, outcomes, and timestamps. We also collect your device information (IP address, browser type, operating system) for security purposes — to detect unauthorized access attempts and prevent fraud.

Our warung data retention practice

We retain your account information for as long as your account is active, plus seven years after closure (to meet regulatory and dispute-resolution requirements). Transaction logs and activity history are kept for seven years. Device logs and security data are retained for one year. Email communications between you and our support team are archived for two years.

If you request account deletion, we remove your personal information from our active systems, but we retain transaction records necessary for anti-money-laundering compliance and dispute resolution. We cannot delete historical activity logs during the seven-year retention window, even if you close your account.

Encryption

We encrypt all data in transit (using HTTPS) and at rest (using AES-256). Your password is hashed using a strong algorithm — we cannot reverse it, even if our systems are compromised.

Access control

Only authorized warung staff access your data, and only for account support, payment processing, or compliance. Staff sign confidentiality agreements.

Third-party processors

Our servers may sit outside your jurisdiction. Payment processors (mobile banking, local payment, etc.) and our hosting provider are contractually bound to protect your data under the same standards we apply.

Your Rights and Our warung Commitments

We process your data lawfully. We collect your information only with your consent (granted when you register), and we use it only for the purposes stated in this notice: account management, payment processing, fraud prevention, and regulatory compliance. We do not use your data for marketing without your explicit opt-in. We do not share your data with advertising networks or data brokers.

You have rights over your data. You can request a copy of all personal information we hold on your warung account by contacting our support team. You can request correction of inaccurate data. You can request deletion of your account (though transaction records will be retained per retention policy above). To exercise these rights, send a written request via email with your account ID and a proof of identity. We respond within 30 days.

Our warung cookie and tracking policy

We use cookies to maintain your login session on warung. These are essential session cookies — without them, you cannot stay logged in. We do not use advertising cookies or behavioral tracking cookies. We do not allow third parties to set cookies on our platform (except payment providers and our hosting infrastructure).

You can disable cookies in your browser, but this will prevent you from using warung. We also use server-side session tokens (stored in memory, not on your device) to manage your connection. These tokens expire after subject to verification of inactivity for security.

warung contact and updates

If you have questions about our privacy practices, contact our support team via in-app chat or email. We respond to privacy inquiries within 10 business days. We may update this policy periodically — material changes are announced via email to all active accounts, with at least 30 days' notice before the new policy takes effect.

Our warung platform operates across supported jurisdictions including Jakarta, Surabaya, Bandung, and Medan. This privacy notice applies to all users regardless of location, though local law may grant additional rights in your jurisdiction. If you believe we have violated your privacy rights, you may lodge a complaint with your local data protection authority.

We remain committed to protecting your data. We conduct annual security audits and maintain incident response procedures. Our staff receive data protection training. We do not store unnecessary data, and we delete old logs according to our retention schedule. If you have suggestions for improving our privacy practices, we welcome your feedback — contact our team at any time.