abilawa Privacy Policy
This page describes what we collect when you use abilawa and how we keep that data protected. We operate our platform transparently, and we want you to understand exactly what happens to your personal information—from the moment you create an account through deposit, withdrawal, and gameplay.
We collect data only as needed to verify your identity, process your payments, settle game outcomes, and comply with applicable law. We do not sell your information to third parties, and we do not use it for marketing purposes beyond our own notifications. Our servers may sit outside your jurisdiction, but your data is encrypted and handled according to industry-standard security practices.
This policy applies to all users of abilawa, regardless of device (Android app, iOS browser, or desktop). If you have questions about how we handle your data, you can contact us via the Help section of our platform.
What Data We Collect on abilawa
When you create an abilawa account, we require your name, date of birth, contact phone number, email address, and residential address. This is our KYC (Know Your Customer) verification, a legal requirement that helps us prevent fraud and ensure compliance with regulations in your jurisdiction.
We also collect:
- Payment information: Your preferred deposit and withdrawal methods (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet). We store the last four digits of bank accounts or e-wallet identifiers, but never the full account numbers or passwords.
- Game history: Bets placed, cash-outs, and outcomes. We store this to settle disputes and calculate your account balance accurately.
- Device information: Your operating system (Android, iOS), app version, and device type. This helps us optimize the abilawa platform for your device.
- Session data: Login times, logout times, and duration of play. We use this to detect suspicious activity and protect your account.
- IP address and location: We record your approximate location via IP address to verify that you're in a jurisdiction where our services are available.
We do not collect your password in plain text. Instead, we hash it using industry-standard encryption, so even our staff cannot see it. If you forget your password, we send you a reset link via email; you set a new password yourself.
Data we collect
- Name, date of birth, phone, email, residential address (KYC verification)
- Payment method details (last 4 digits only, never full account numbers)
- Game history: bets, outcomes, cash-outs
- Device model, OS version, app version
- Login times and session duration
- IP address and approximate location
How We Use Your Data on abilawa
We use your data for these specific purposes:
- Account verification: We verify your identity once during signup and again when you request a withdrawal. This prevents unauthorized access and fraud.
- Payment processing: We send your deposit instructions and withdrawal confirmations via email and push notification. We share your payment method with our processor (a third-party payment service) so they can move money to and from your bank or e-wallet.
- Game settlement: We use your game history to calculate payouts, process refunds, and handle disputes if you question an outcome.
- Security monitoring: We track login patterns and session activity to detect fraud or account compromise. If we notice unusual activity (e.g., login from a new device after weeks of inactivity), we may freeze your account temporarily and ask you to verify your identity.
- Legal compliance: We may be required by law to disclose your data to authorities in your jurisdiction if they issue a formal request.
- Platform improvements: We analyze aggregated data (not linked to your name) to understand how users interact with abilawa—which games are popular, peak play times, payment method preferences—so we can improve our service.
We do not use your data to send marketing emails or promotional messages without your consent. We may send you operational notifications (deposit confirmations, withdrawal updates, security alerts), but these are not marketing—they're necessary for your account security and payment processing.
How We Share Your Data
We share your data only when necessary to provide abilawa's service or comply with law:
- Payment processor
- We share your payment method and transaction history with our payment processor so they can move funds between your bank/e-wallet and our merchant account. They use standard PCI-DSS encryption.
- Law enforcement
- We may disclose your data if required by a court order or formal legal request from authorities in your jurisdiction.
- Fraud prevention services
- We may share limited information (name, device, IP) with third-party fraud-detection services to protect our platform and other users.
- Cloud hosting provider
- We store your data on cloud servers operated by a third-party hosting company. These servers may be located outside your country. Your data is encrypted both in transit and at rest.
We do not sell your data to marketers, brokers, or advertisers. We do not trade your data for business development purposes. We do not share it with unrelated companies.
Your Rights Regarding Your Data on abilawa
You have the right to access, correct, or delete your personal data. To exercise these rights:
- Request access: Contact our Help team and ask to see all data we hold about you. We'll provide a copy within a standard response window.
- Request correction: If any information is incorrect (e.g., misspelled name, wrong phone number), we can update it. Log in to your account, go to Settings, and edit your profile. For payment methods, contact Help.
- Request deletion: You can request that we delete your account and associated data. However, we may retain records for a legal minimum period (typically 5–7 years) to comply with anti-money-laundering and gaming regulations.
- Object to processing: If you object to how we process your data, contact Help and explain your concern. We'll review it, though we may need to retain data if required by law.
To make any of these requests, use the Help section in the abilawa app or website. Provide your account email and a clear description of what you're asking for. We aim to respond within 10 business days.
Cookies and Tracking on abilawa
When you visit abilawa via browser (mobile or desktop), we use cookies to remember your login session, so you don't have to re-enter your credentials every time. These are called "session cookies" and they expire when you close your browser or log out manually.
We also use cookies to track your session duration, device type, and which games you access most often. This helps us understand user behavior and improve the platform. You can disable cookies in your browser settings, but this may prevent abilawa from working correctly (e.g., you'll be logged out immediately after closing the tab).
We do not use cookies to track you across other websites. We do not sell cookie data to advertisers. Our cookies serve only to operate abilawa and understand how our users interact with our platform.
How Long We Keep Your Data
We retain your personal data for as long as your account is active, plus a standard retention period afterward for legal compliance. Specifically:
- Active account: While you're a member of abilawa, we keep all your data to process transactions and maintain your account.
- After account closure: We retain your data for 5–7 years to comply with anti-money-laundering regulations and gaming licensing requirements in our operating jurisdictions.
- Game history: We store bet records and outcomes indefinitely (unless you request deletion) so you can dispute a game outcome if needed.
- Payment records: We retain deposit and withdrawal records for 7 years per standard financial compliance.
After the retention period, we securely delete or anonymize your data. Anonymized data (with names and identifiers removed) may be retained for statistical analysis to improve our platform.
How We Protect Your Data
We employ industry-standard security measures to protect your data from unauthorized access, alteration, or disclosure:
- Encryption: Data in transit is protected using TLS (Transport Layer Security), the same encryption standard used by banks. Data at rest on our servers is encrypted using AES-256.
- Access control: Only authorized abilawa staff can access your data, and only those with a legitimate business need (e.g., customer support, fraud investigation). All staff sign confidentiality agreements.
- Firewalls and monitoring: Our servers are protected by firewalls and continuous security monitoring to detect and block unauthorized access attempts.
- Regular audits: We conduct regular security audits and penetration testing to identify and fix vulnerabilities before attackers can exploit them.
However, no security system is perfect. We cannot guarantee absolute protection against sophisticated attacks or insider threats. If you suspect your account has been compromised, change your password immediately and contact our Help team.
Data Transfers Across Borders
Our servers may be located in countries outside your jurisdiction (e.g., your data may be stored in Singapore, Malaysia, or the United States). These countries may have different data protection laws than your home country. By using abilawa, you consent to your data being transferred to and stored in these locations.
We undertake to apply the same level of security and privacy protection to your data regardless of where it's stored. All transfers are encrypted, and we contractually require our hosting providers to follow data protection standards equivalent to or stricter than your local law.
How to Contact Us About Privacy
If you have questions or concerns about our privacy practices, or if you want to exercise your rights regarding your data, contact our Help team via the abilawa app or website. We respond to privacy inquiries in English within a standard response window.
Alternatively, you can reach out if you experience an issue during major holidays like Idul Fitri, Idul Adha, or Imlek—our privacy team remains available year-round, though response times may be slightly longer during peak holiday periods.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we'll notify you via email and push notification. Your continued use of abilawa after such changes constitutes your acceptance of the updated policy.
We last updated this policy in the current year. We review it annually to ensure it reflects our current data practices.
Privacy Summary
We at abilawa collect your personal data only as needed to verify your identity, process payments, settle game outcomes, and comply with applicable law. We encrypt all data in transit and at rest, restrict access to authorized staff only, and conduct regular security audits. We do not sell your data to third parties or use it for marketing without your consent. Your data may be stored on servers outside your jurisdiction, but it receives the same level of protection as if it were stored locally.
You have the right to access, correct, delete, or object to your data. To exercise these rights, contact our Help team via the abilawa app or website. We respond to privacy requests in English within a standard window. If you're in Jakarta, Surabaya, Bandung, Medan, or anywhere else where abilawa is available, your privacy is protected equally.
This policy reflects our current practices. We review and update it annually and notify you of material changes. Your continued use of abilawa means you accept this policy.