Privacy Policy

1. Overview

galaqq operates an online gaming platform designed primarily for players residing in Indonesia. As part of delivering a secure, fair, and personalized gaming experience, we necessarily process certain personal data about our players, visitors, and prospective members. We take our data-protection obligations seriously and have built our data-handling practices around the core principles of transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

This Policy applies to all personal data collected through the galaqq website (galaqq.cam), any associated mobile-optimized interfaces, and all communications between you and our support team — regardless of whether you are a registered player or a visitor browsing the Platform without an Account.

2. Definitions

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, date of birth, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transmission, and deletion.
• "Data Controller" means galaqq, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third-party entity that Processes Personal Data on behalf of galaqq, such as a payment service provider or cloud infrastructure partner.
• "Account" means your registered player account on the galaqq Platform.
• "KYC" (Know Your Customer) means the identity and age verification procedure conducted by galaqq prior to withdrawal processing or at the Company's discretion during Account review.
• "Cookies" means small text files stored on your device by a web browser that allow the Platform to recognize your device and remember preferences or session state.

3. Data We Collect

galaqq collects the following categories of Personal Data, depending on your interaction with the Platform:

Category	Examples	When Collected
Identity Data	Full name, date of birth, nationality, government-issued ID number (KTP/SIM/passport)	Registration & KYC
Contact Data	Email address, Indonesian mobile number, city of residence (e.g., Jakarta, Surabaya, Bandung)	Registration
Financial Data	Bank account number, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet ID (OVO, DANA, GoPay), transaction history	Deposit & withdrawal
Gaming Activity Data	Bet history, game sessions, win/loss records, bonus usage, wagering patterns	Ongoing platform use
Technical Data	IP address, device type, browser type, operating system, session timestamps, referring URL	Automatic (every visit)
Communication Data	Support chat transcripts, email correspondence, feedback submissions	Customer support interactions
KYC Documents	Scanned copy of government-issued ID, proof-of-address document (utility bill, bank statement dated within 90 days)	KYC verification

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification.

4. How Data Is Collected

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you when you register an Account, complete the KYC process, make a deposit or withdrawal request, interact with our customer support team, or participate in promotions.

4.2 Automatically

When you visit or use the Platform, we automatically collect Technical Data through server logs, cookies, and similar tracking technologies. This data is collected regardless of whether you are logged in to an Account.

4.3 From Third Parties

We may receive Personal Data about you from:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) confirming transaction status and account ownership.
• Identity verification service providers that assist with KYC document authentication.
• Fraud detection and anti-money-laundering screening services.
• Analytics and marketing attribution partners (in anonymized or aggregated form where possible).

5. Lawful Basis for Processing

galaqq processes your Personal Data under one or more of the following lawful bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions, including Account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, KYC requirements, and fraud prevention.
• Legitimate Interests: Processing that serves galaqq's legitimate business interests — such as fraud detection, platform security, service improvement, and responsible gaming monitoring — where those interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit prior consent. You may withdraw consent at any time by contacting us at [email protected].

6. How We Use Your Data

galaqq uses your Personal Data for the following purposes:

1. Account Management: Creating and maintaining your player Account, verifying your identity and age (21+), and managing login security.
2. Transaction Processing: Facilitating deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay), and maintaining accurate transaction records denominated in IDR.
3. Game Delivery: Providing access to sports betting markets (including BRI Liga 1, EPL, Champions League), live casino, slots, and togel (Indonesia's traditional numbers lottery) games.
4. Regulatory Compliance: Meeting our KYC, AML, and responsible gaming obligations, including age verification for all players (21+ requirement strictly enforced).
5. Fraud & Security: Detecting and preventing unauthorized access, fraudulent transactions, and other security incidents.
6. Customer Support: Respond ing to your queries, resolving technical issues, and providing guidance in English and Indonesian as needed.
7. Responsible Gaming: Monitoring your gameplay patterns to identify potential problem-gambling indicators and offering self-exclusion, deposit limits, and session time-outs.
8. Bonuses & Promotions: Administering welcome bonuses, reload offers, seasonal promotions (Idul Fitri, Ramadhan, Indonesian Independence Day), and loyalty programs, including tracking Wagering Requirements.
9. Service Improvement: Analyzing aggregated usage data to improve platform performance, optimize user experience, and develop new features.
10. Marketing Communications: Sending promotional emails, SMS notifications, and in-platform messages about new games, bonuses, and special events — only where you have consented to receive such communications.

7. Data Sharing and Disclosure

galaqq does not sell your Personal Data to third parties. We may share your Personal Data with the following categories of recipients under strict contractual confidentiality obligations:

7.1 Payment Service Providers

We share Financial Data with licensed payment processors and banking partners (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, and GoPay) to facilitate deposits and withdrawals. These entities process Personal Data only as necessary to execute transactions and are bound by their own data-protection obligations.

7.2 Identity Verification Providers

We share Identity Data and KYC Documents with third-party KYC service providers to authenticate government-issued IDs (KTP, SIM, passport) and proof-of-address documents. These providers act as Data Processors under our instruction and do not retain your data beyond the verification period.

7.3 Game Providers

When you play live casino or slot games, minimal session data (username, Account ID, balance updates) is shared with licensed game studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Pocket Games Soft, and Spribe to enable gameplay. Game providers process this data under their own privacy policies and industry-standard security protocols.

7.4 Cloud Infrastructure & Technical Partners

We use secure cloud hosting and content-delivery-network (CDN) services to store data and serve the Platform globally with low latency. All data is encrypted at rest and in transit using 256-bit SSL/TLS.

7.5 Fraud Detection & AML Screening Services

We share relevant Personal Data with fraud-prevention and anti-money-laundering screening services to protect both the Company and our player community from financial crime.

7.6 Legal & Regulatory Authorities

We may disclose Personal Data where required by law, court order, or regulatory directive, or where disclosure is necessary to protect the rights, property, or safety of galaqq, our players, or the public.

7.7 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or asset sale, Personal Data may be transferred to a successor entity, subject to the same data-protection obligations set out in this Policy.

8. Data Retention

galaqq retains Personal Data for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

• Active Accounts: Personal Data is retained for the duration of your Account's active status plus an additional 6 months following Account closure to address any post-closure queries or disputes.
• Transaction Records: Financial Data and transaction logs are retained for 7 years from the date of transaction to comply with Indonesian tax and financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for 7 years following Account closure to meet AML regulatory obligations.
• Marketing Consent: Consent records are retained indefinitely or until consent is withdrawn, whichever is sooner.
• Technical Data: Server logs and Technical Data are typically retained for 90 days, except where longer retention is required for fraud investigation or legal proceedings.

Following the applicable retention period, Personal Data is securely deleted or anonymized such that it can no longer be attributed to an identifiable person.

9. Security Measures

galaqq employs industry-standard technical and organizational security measures to protect Personal Data against unauthorized access, accidental loss, alteration, and disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) 1.2 or higher.
• Encryption at Rest: Sensitive Personal Data stored in our databases is encrypted using AES-256 encryption standards.
• Access Controls: Personal Data is accessible only to authorized personnel on a need-to-know basis. All staff with access to Personal Data are bound by confidentiality obligations.
• Multi-Factor Authentication (MFA): Administrative access to sensitive systems requires MFA verification.
• Regular Security Audits: We conduct periodic vulnerability assessments, penetration testing, and third-party security audits to identify and remediate potential weaknesses.
• Incident Response Plan: In the event of a data breach, we maintain a documented incident-response procedure to contain the breach, assess the impact, notify affected individuals (where required by law), and report to relevant authorities.

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. You acknowledge that the provision of Personal Data to galaqq is done at your own risk.

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device by your web browser when you visit a website. Cookies enable the website to recognize your device on subsequent visits and remember certain preferences or session state.

10.2 Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for the operation of the Platform, including session management, authentication, and security functions. You cannot opt out of essential cookies without losing core platform functionality.
• Functional Cookies: These cookies remember your preferences (language selection, currency display) and provide enhanced features. Disabling these cookies may limit your experience but does not prevent Platform use.
• Analytics Cookies: We use analytics cookies to understand how visitors interact with the Platform, which pages are most popular, and where performance improvements can be made. Analytics data is aggregated and anonymized wherever possible.
• Marketing Cookies: These cookies track your browsing activity across websites to deliver targeted advertising. Marketing cookies are set only with your prior consent and may be disabled via your browser settings.

10.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling essential cookies will prevent you from accessing key features of the Platform, including login and secure transaction processing. For instructions on managing cookies in popular browsers, consult your browser's help documentation.

11. Your Rights

You have the following rights in relation to your Personal Data, subject to applicable law:

• Right of Access: You may request a copy of the Personal Data we hold about you. We will provide this information free of charge within 30 days of a verified request.
• Right of Rectification: You may request correction of inaccurate or incomplete Personal Data. You can update certain Account details directly via the Platform settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent (where consent is the lawful basis); (c) you object to processing; or (d) the data was unlawfully processed. This right is not absolute and may be overridden by legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your Personal Data in certain circumstances, such as while we verify the accuracy of disputed data.
• Right to Data Portability: You may request a copy of your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days and may request additional information to verify your identity before processing your request.

12. Protection of Minors

The galaqq Platform is strictly available only to individuals aged 21 years or older. We do not knowingly collect Personal Data from persons under 21. If you are under 21, you must not register an Account or provide any Personal Data to galaqq.

If we become aware that we have inadvertently collected Personal Data from a person under 21, we will immediately delete that data and terminate any associated Account. Parents or guardians who believe their child has provided Personal Data to galaqq should contact us immediately at [email protected].

13. Cross-Border Data Transfers

galaqq's primary operations are based in a jurisdiction outside Indonesia. Accordingly, your Personal Data may be transferred to, stored in, and processed in countries that may have different data-protection standards from those in Indonesia. Where we transfer Personal Data internationally, we ensure that:

• The receiving jurisdiction provides an adequate level of data protection as recognized by applicable law; or
• We implement appropriate contractual safeguards (such as Standard Contractual Clauses) to protect your data; or
• The transfer falls within a statutory derogation (such as necessity for contract performance or with your explicit consent).

By using the Platform, you acknowledge and consent to the cross-border transfer of your Personal Data as described in this section.

14. Changes to This Privacy Policy

galaqq reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, legal requirements, or business operations. Where changes are material, we will provide notice via the email address registered to your Account or through a prominent notice on the Platform at least 14 days before the updated Policy takes effect.

The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data-processing practices, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Rights Request"
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days and to formal Data Subject Access Requests within 30 days as required by applicable law.

For general customer support inquiries unrelated to privacy, please use the same email address with an appropriate subject line. Our support team operates 24/7 in both English and Indonesian.