eduplay Platform Privacy Notice

This page describes what we collect when you use eduplay and how we keep that data protected. We at eduplay take privacy seriously—your personal information is used only for account verification, fraud prevention, regulatory compliance, and service delivery. We do not sell your data to marketers or share it beyond what is necessary to operate our platform.

When you register on eduplay, deposit funds via DANA, e-wallet, mobile banking, or bank transfer, or place selections on Liga 1 markets, live-dealer tables, or slot games, we collect specific information about you. This notice explains what we collect, why, how long we keep it, and what rights you have to access or delete it.

Our privacy practices apply to all access methods—Android app, iOS browser, and desktop. Your data is encrypted in transit and at rest. We comply with applicable data-protection regulations in the jurisdictions where we operate.

What information we collect on eduplay

We collect information in three categories when you use eduplay. First, we collect identity data: your full legal name, email address, phone number, date of birth, and government-issued ID (KTP, passport, or driving licence). We require a clear photo of your ID and a selfie holding it for identity verification (KYC—Know Your Customer).

Second, we collect account activity data: your login history, selections placed, amounts wagered, settlement outcomes, and account balance. We also collect payment data: the payment method you use (e-wallet provider name, virtual account number), deposit and withdrawal amounts, and transaction dates. We do not store full credit-card numbers or complete bank credentials—we retain only enough information to process and verify transactions.

Third, we collect technical and behavioural data: your device type (Android or iOS), app version, IP address, approximate location (city-level), browser type, pages visited, session duration, and crash reports. We use cookies and similar tracking technologies on the browser version of eduplay to remember your login preferences and display settings. You can disable cookies in your browser settings, though this may affect platform functionality.

How we use your data on eduplay

We use your identity data to verify your account, prevent fraud, and comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations. We cross-check your ID against fraud databases and sanctions lists to ensure you are not a prohibited user. This protects both you and our platform.

We use your account activity and payment data to settle your selections, process your deposits and withdrawals, and maintain accurate records for regulatory compliance. We also use this data to detect suspicious patterns—if we notice unusual activity (e.g., rapid deposits and withdrawals, selections during hours of service disruption), we investigate to protect your account.

We use your technical data to improve platform performance, fix bugs, and understand how users interact with eduplay. We analyze aggregate data (not individual data) to optimize the mobile app experience, reduce load times, and plan new features. We also use technical data for security—if we detect login attempts from unusual locations or devices, we may flag your account and contact you to confirm it was you.

Third-party data processors and storage

We at eduplay work with trusted third-party service providers to operate our platform. Our payment processors (handling DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers) receive payment data necessary to execute transactions. Our hosting provider stores our servers and databases. Our anti-fraud and KYC verification vendor checks your ID against fraud lists and sanctions databases. These vendors are contractually bound to keep your data confidential and use it only for the services we engage them for.

Our servers may sit outside your jurisdiction. Data transfers across borders are protected by encryption and contractual safeguards. We comply with applicable cross-border data-transfer regulations.

We may share your data with local authorities, banking regulators, or law enforcement if legally required. We do not volunteer such disclosures—we respond only to lawful requests accompanied by appropriate legal process. When legally possible, we notify you of such requests.

KYC (Know Your Customer)

The identity verification process we require before your account can deposit funds—typically involves government ID and a selfie for fraud prevention.

AML (anti-money-laundering)

Regulations we comply with to prevent our platform from being used for illicit financial activity; we monitor account activity for suspicious patterns.

Encryption

A security method we use to scramble your data in transit (over the internet) and at rest (in our databases) so only authorized systems can read it.

Your rights and data access on eduplay

You have the right to access, correct, or request deletion of your personal data, subject to legal and regulatory retention requirements. To exercise these rights, contact our customer support team via in-app help menu or email. We will verify your identity and provide a written response within 30 days.

We retain account data and transaction records for at least seven years after account closure for regulatory compliance, even if you request deletion. Identity documents and KYC records are retained for fraud-prevention purposes. Account activity logs may be retained longer for audit and dispute-resolution purposes.

You have the right to lodge a complaint with your local data-protection authority if you believe we have mishandled your data. Our privacy practices follow applicable regulations in the jurisdictions we serve, including those governing players in Jakarta, Surabaya, Bandung, and Medan.

Cookies and tracking on eduplay browser

When you access eduplay via a web browser, we use cookies to remember your login session, language preference, and betting slip history. These cookies expire after you log out or after a period of inactivity. Essential cookies are necessary for the platform to function; you cannot disable them without losing access.

We also use analytics cookies to track page visits, session duration, and user flows. These help us understand which features are popular and where users encounter problems. Analytics data is aggregated; we do not track individual user behaviour beyond what is necessary to improve the platform.

You can disable non-essential cookies by adjusting your browser settings, but this may affect platform performance. We do not use third-party tracking pixels or retargeting cookies to follow you across the internet.

Mobile app permissions and data on Android and iOS

Our Android APK and iOS app request certain device permissions to function properly. On Android, we may request permission to access your device's notification settings so we can send you push alerts about match results, settlement confirmations, and account activity. We do not access your photo gallery, contacts, or calendar without explicit consent for a specific feature.

On iOS, we use the Keychain (Apple's secure storage) to safely store your login session so you don't have to enter your password on every app launch. We also collect crash reports and app performance data to fix bugs and improve stability. This data is encrypted and sent only to our development team.

You can revoke app permissions at any time through your device settings. If you disable push notifications, you will not receive alerts about match results or account activity—you'll need to open the app manually to check updates. Disabling location permission may limit certain features, such as jurisdiction verification or localized promotions during Liga 1 or Piala AFF tournaments.

Security measures and data breach notification

We at eduplay implement industry-standard security measures to protect your data. All data in transit is encrypted using TLS (Transport Layer Security). Our databases are encrypted at rest and protected by firewalls and access controls. We conduct regular security audits and penetration testing to identify and fix vulnerabilities.

If we discover a data breach that compromises your personal information, we will notify you within 72 hours via email or in-app notification. We will also notify relevant regulatory authorities as required by law. Our notification will explain what data was affected, what steps we are taking to secure it, and what steps you can take to protect yourself.

You should immediately change your eduplay password if you suspect unauthorized account access. If you believe your identity has been compromised, contact local authorities and your bank. Do not share your login credentials with anyone, and enable biometric or PIN authentication on your mobile device to add an extra security layer.

Jurisdiction-restricted service and data transfers

Our services on eduplay are available only where local law permits. If we detect that your account is being accessed from a prohibited jurisdiction, we may restrict access or close your account. In such cases, your data is retained as required by applicable law.

We do not knowingly collect data from users under the age of legal majority in their jurisdiction. If we discover you are underage, we will close your account and restrict access to any remaining balance. Contact our support team if you believe your account has been closed in error.

Contact us and privacy updates

If you have questions about our privacy practices, wish to exercise your data rights, or want to report a data breach, contact our customer support team via in-app chat, email, or the help centre. We will respond to all privacy enquiries within 30 days. You can also contact your local data-protection authority if you believe we have violated your privacy rights.

We may update this privacy notice from time to time to reflect changes in our operations or applicable law. Significant changes will be communicated via email or an in-app notification. Your continued use of eduplay after such notice constitutes acceptance of the updated privacy notice.

The most current version of our privacy notice is always available on this page. We recommend reviewing it periodically, especially before major events like Idul Fitri or Idul Adha when special promotions or data-collection practices may change.