lunatogel.com Privacy Policy

This page describes what we collect when you use lunatogel.com and how we keep that data protected. We at lunatogel.com process personal information—your name, email, phone, government ID, bank account details, and betting history—only to verify your identity, process payments, settle wagers, and comply with local financial regulations. We do not sell your data to third parties, use it for marketing without consent, or retain it longer than required by law.

Our privacy commitments centre on transparency and security. We encrypt all data in transit using TLS 1.3 and store sensitive information on segregated servers with restricted access. Your account balance, betting history, and withdrawal requests are visible only to you and our compliance team when required for dispute resolution or regulatory audit. We retain your data for seven years after account closure, as mandated by Indonesian financial rules, then delete it permanently.

Our services are available only where local law permits. If you access lunatogel.com from a jurisdiction where online gaming is prohibited, you are responsible for verifying compliance with your local regulations. We do not knowingly serve users in restricted jurisdictions, and we reserve the right to suspend or close accounts that violate applicable law.

What we collect and why

We collect your personal data in stages. During account registration, we ask for your email, phone number, and full name. When you verify your account, we request a government-issued ID (KTP, passport, or driver's license), a selfie holding the ID, and proof of residence (utility bill or bank statement). We use this information to confirm your identity, prevent fraud, and comply with Know Your Customer (KYC) regulations required by Indonesian financial authorities.

When you deposit funds, we collect your payment method details—your DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account information. We do not store full card numbers or bank credentials; instead, we tokenize them so only a reference code is retained on our servers. Your actual payment details are held by our payment processors (third-party companies licensed to handle financial transactions) and are never visible to our staff.

We also collect your betting activity—which games you play, your stakes, your results, and your withdrawal requests. This data helps us detect unusual patterns (potential fraud or account compromise), calculate your account balance accurately, and settle disputes. We log your login times, IP addresses, and device information to monitor account security and identify unauthorized access attempts.

How we use your data

We use your personal information for five core purposes. First, identity verification: we cross-check your ID against fraud databases and government records to confirm you are who you claim to be. Second, payment processing: we share your payment details with our licensed payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and Indonesian banks) to execute deposits and withdrawals. Third, account security: we monitor login patterns and device changes to detect compromise and alert you if we spot suspicious activity.

Fourth, regulatory compliance: we retain your KYC documents and betting history to satisfy Indonesian financial authorities' audit requirements. If regulators request your account information, we provide it without notifying you (unless local law permits us to do so). Fifth, customer support: we use your account history to help resolve disputes, answer questions about your balance or withdrawal status, and investigate complaints.

We do not use your data for marketing, profiling, or selling to third parties. We do not share your betting history with other operators, advertisers, or data brokers. The only exceptions are: (a) payment processors who need your payment details to execute transactions, (b) regulatory authorities who request your data for compliance audits, and (c) law enforcement if legally compelled by court order.

Third-party processors and data location

Our servers may sit outside your jurisdiction—we operate data centres in Southeast Asia and may use cloud infrastructure hosted in other regions. Your data is encrypted in transit and at rest, so even if a server is physically located outside Indonesia, the data remains protected. We use third-party processors for specific functions: payment gateways (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) handle your deposits and withdrawals; email providers send you account notifications; and analytics services help us detect fraud patterns.

We require all third-party processors to sign data-processing agreements that bind them to the same confidentiality and security standards we maintain. They cannot use your data for their own purposes and must delete it when we request. If a processor is breached, we notify you within 72 hours and provide guidance on securing your account (password reset, two-factor authentication review).

KYC (Know Your Customer)

Identity verification process required by financial regulators. We collect your ID, selfie, and proof of residence to confirm you are not using a false identity or accessing from a restricted jurisdiction.

Data encryption

We use TLS 1.3 to encrypt data in transit (between your device and our servers) and AES-256 to encrypt data at rest (stored on our servers). This prevents interception or unauthorized access.

Data retention

We keep your account data for seven years after closure, as required by Indonesian financial law. After seven years, we delete all personal information permanently.

Your rights and how to exercise them

You have the right to access, correct, and delete your personal data. To request a copy of all data we hold about you, email our support team with your account ID and a photo of your government ID (for verification). We will compile your data export within 14 days. To correct inaccurate information (e.g., a misspelled name or outdated phone number), log into your account and update your profile, or contact support if the field is locked.

To request account deletion, contact our support team. We will close your account and delete all personal data within 30 days, except for information we are legally required to retain (betting history for regulatory audit, transaction records for tax purposes). After deletion, you cannot recover your account or access your betting history. Any outstanding balance will be withdrawn to your registered payment method before deletion.

You also have the right to object to data processing for marketing purposes. We do not use your data for marketing by default, but if you have opted into promotional emails, you can unsubscribe by clicking the "Unsubscribe" link in any email or updating your preferences in your account settings.

Cookies and tracking

We use cookies only for essential functions: session management (keeping you logged in), security (detecting unauthorized access), and fraud prevention (flagging unusual login patterns). We do not use cookies for marketing, analytics, or behavioural tracking. Our cookies expire when you log out or after 30 days of inactivity. You can disable cookies in your browser settings, but doing so may prevent lunatogel.com from functioning correctly.

Security practices and breach notification

We maintain industry-standard security practices: two-factor authentication (2FA) for account access, regular security audits by third-party firms, and staff training on data handling. We do not store passwords in plain text; instead, we hash them using bcrypt so even our staff cannot see your password. If we detect a data breach, we notify affected users within 72 hours, provide guidance on securing your account, and report the incident to relevant regulators.

Contact and jurisdiction

If you have questions about our privacy practices, contact our support team via email or the in-app chat. Our support operates during standard business hours and responds to privacy inquiries within 5 business days. This privacy policy is governed by the laws of the jurisdiction where lunatogel.com operates. If you are based in Jakarta, Surabaya, Bandung, Medan, or Semarang and have a dispute about data handling, you may escalate to local data protection authorities.

We may update this privacy policy periodically to reflect changes in our practices or regulatory requirements. We will notify you of material changes by email or in-app notification at least 30 days before the change takes effect. Your continued use of lunatogel.com after the update constitutes acceptance of the revised policy.