alpacuanPrivacy Policy

This page describes what we collect when you use alpacuan and how we keep that data protected. We recognize that your personal information—email address, payment details, gameplay history—is sensitive, and we take responsibility for storing it securely and using it only for purposes you've agreed to.

Our privacy commitments apply across all alpacuan services: our mobile app, our web interface, and our payment integrations with DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and direct bank transfer options through mobile banking, local payment, online payment, and e-wallet. We operate under Indonesian data-protection principles and comply with relevant regulations governing fintech and online gaming in supported jurisdictions.

If you have questions about how we handle your data or wish to exercise your privacy rights, our support team can assist you through in-app chat or email.

What Data We Collect on alpacuan

When you create an alpacuan account, we collect your full name, email address, date of birth, and phone number. These details are necessary for account verification and compliance with anti-money-laundering regulations. We also collect your IP address and device type when you access alpacuan, which helps us identify and prevent fraudulent logins.

Once you fund your alpacuan account, we record the payment method you used, the amount transferred, and the timestamp. We do not store your full payment credentials—for example, we do not retain your complete GoPay PIN or bank-account number. Instead, we store a tokenized reference that lets us process future transactions without re-entering those sensitive details.

Your gameplay data is logged comprehensively: every bet you place, every hand of blackjack you play, every spin of a slot game, and every sportsbook wager. We record the game type, your stake, the outcome, your balance before and after, and the exact timestamp. This data helps us operate the platform reliably and investigate disputes if you ever question a result.

Data We Do Not Collect

We do not collect your location data (GPS) unless you explicitly grant permission on your phone. We do not use your camera, microphone, or contacts. We do not track your browsing history outside of alpacuan. We do not sell your personal information to third parties for marketing purposes. Our focus is on the minimum data needed to run the service and comply with regulation.

If you choose not to provide optional information—such as a phone number beyond what's required—alpacuan continues to function. However, we may ask you to verify additional details before processing a large withdrawal, at which point you'll need to provide documentation.

How We Use Your Data on alpacuan

We use your email address to send you account notifications: login confirmations, deposit receipts, withdrawal confirmations, and password-reset instructions. We do not send marketing emails unless you've explicitly opted in. You can manage your notification preferences in your alpacuan account settings at any time.

Your payment details are used to process deposits and withdrawals. When you withdraw via e-wallet or mobile banking, we send your account identifier and the withdrawal amount to those providers' servers. When you withdraw via bank transfer to local payment or online payment, we share your bank account number with our payment processor. We choose trusted processors that comply with Indonesian payment-industry standards.

Your gameplay data is used for three core purposes: to calculate your balance and results in real time, to generate your account history and transaction records, and to detect and prevent fraud or collusion. If we notice suspicious patterns—such as impossible odds or coordinated multi-account betting—we investigate and may suspend accounts pending review.

Third Parties and Data Sharing

We share your data with third parties only when necessary to operate alpacuan or to comply with law. Our payment processors (fintech providers and banks) receive your payment details to execute transactions. Our hosting provider stores your account data on secure servers. Our anti-fraud vendor analyzes betting patterns to detect suspicious activity. Each processor signs a data-protection agreement with us.

We do not share your data with marketing agencies, data brokers, or unaffiliated advertisers. If authorities in Jakarta, Surabaya, or any other jurisdiction request your data through valid legal process—such as a warrant—we comply. We will notify you of such requests when legally permitted.

Your Security Rights on alpacuan

We encrypt communication between your phone and our servers using industry-standard TLS protocols. Your password is hashed using a strong algorithm and never stored in plaintext. We enforce two-factor authentication via SMS for logins and high-value transactions. These measures protect your account even if someone learns your password.

We undertake regular security audits and penetration testing to identify weaknesses. If we discover a data breach affecting alpacuan, we will notify affected users within a reasonable timeframe and describe the breach transparently. We maintain cyber-liability insurance to cover potential damages.

Your data is a trust relationship with alpacuan—we hold it securely and use it only for the purposes you've authorized.

Cookies and Tracking on alpacuan

Our alpacuan app and website use cookies to maintain your login session and remember your preferences (such as language and theme). These are functional cookies necessary for the service to work. We do not use cookies for tracking your behavior across other websites or for building advertising profiles.

If you access alpacuan via a mobile browser, your browser may set cookies. You can disable cookies in your browser settings, but doing so may prevent alpacuan from functioning properly. Our app does not rely on cookies; it uses secure tokens instead.

Your Data Rights and Contact Information

You have the right to request a copy of all data we hold about you on alpacuan. You can request correction of inaccurate information (such as a misspelled name). You can request deletion of your account and associated data, subject to regulatory retention requirements. You can withdraw consent for specific uses—for example, opting out of promotional emails. To exercise these rights, contact our support team via in-app chat or email.

We will respond to data-access requests within ten business days. Deletion requests may take longer if we must retain your data for legal or operational reasons, which we will explain when you request it.

Data Processing During Seasonal Events

During high-traffic periods like Liga 1 playoffs or Piala Indonesia tournaments, we process larger volumes of gameplay and payment data. Our infrastructure scales to handle this load, and our processors may temporarily increase data processing on geographically distributed servers. Your data remains encrypted in transit and at rest. We notify you in advance if major infrastructure changes occur.

We also adjust data retention temporarily during holidays like Idul Fitri, Idul Adha, Imlek, and Nyepi, when support response times may extend. Non-critical data requests are queued and processed in order once normal operations resume.

Jurisdiction and International Data Transfer

alpacuan is based in Indonesia and operates primarily for Indonesian users. Our servers may be located within Indonesia or in neighboring Southeast Asian countries. If your data is transferred internationally, we ensure the receiving jurisdiction provides adequate data protection—equivalent to Indonesian standards or better. We use standard contractual clauses approved by relevant authorities to govern international data transfers.

Our services are available only where local law permits. If you access alpacuan from a jurisdiction where online gaming or data processing is restricted, you use the service at your own risk, and we are not responsible for compliance failures in that jurisdiction. Users are responsible for verifying that their access complies with local law.

Summary: Our alpacuan Privacy Commitment

We collect minimal personal data—your name, email, date of birth, phone number, and payment information—only to operate alpacuan and comply with regulation. We encrypt your data, restrict access to authorized staff, and do not sell or share your information for marketing. Your gameplay history is logged but kept private to you and our compliance team.

We share data with payment processors, hosting providers, and fraud-detection vendors as necessary to run the platform. We comply with lawful government requests. You can request a copy of your data, correct inaccuracies, or delete your account by contacting our support team. We retain gameplay records for five years after account closure for regulatory purposes, but non-essential profile data can be deleted sooner upon request.

If you have privacy concerns or wish to exercise your data rights, reach out via in-app chat or email. Our support team will direct your request to our privacy officer for formal handling. This privacy policy applies to all alpacuan services available where local law permits. We will update this policy if our practices change and will notify you of significant changes.

• Contact our support team via in-app chat for privacy questions
• Request data access, correction, or deletion through your account settings
• Disable promotional emails in your notification preferences
• Review your transaction history anytime to see what we've recorded

Thank you for trusting alpacuan with your personal information. We work continuously to earn and maintain that trust through transparent practices and strong security measures.