lapak Casino & Sportsbook Data Care

This page describes what we collect when you use lapak and how we keep that data protected. We take your privacy seriously because your trust is essential to our service. When you open an account, deposit funds, place bets on Liga 1 or Champions League matches, or play live-dealer tables, you share information with us. We explain here what that information is, why we need it, and how we use it.

Our privacy practice centres on transparency and security. We collect only what's necessary — your email, payment details, identity documents for verification, and betting activity. We don't sell your data to advertisers. We don't use your information for marketing unless you opt in. We encrypt sensitive data and store it securely on protected servers. We comply with data protection laws in the jurisdictions where we operate.

If you have questions about how we handle your data after reading this policy, contact our support team. They can clarify what we collect, how we use it, and what rights you have.

What we collect when you use lapak

We collect information in several categories. First, account information: your email address, password, and chosen username. We need these to create and manage your lapak account. Your email is how we contact you about your account — password resets, security alerts, and support responses.

Second, identity information for verification. When you open a lapak account, we ask for your full name, date of birth, and identity document (KTP or passport). We also ask for a selfie holding that document. We collect this to verify you are who you claim to be and to comply with anti-money-laundering regulations. This verification protects both you and us against fraud.

Third, payment information. We collect the payment method you use to deposit — whether that's DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or a bank account (mobile banking, local payment, online payment, e-wallet). We don't store your full credit card or bank account number. Our payment processor handles that securely. We record only the last few digits and the payment method type so we can match withdrawals to your original deposit method.

Fourth, activity logs. We record every bet you place, every slot spin, every live-dealer session. We log your account login times, IP address, and device type. We record your betting outcomes and account balance changes. We keep these logs for regulatory compliance and to detect fraud or abuse.

Fifth, communication data. If you contact our support team, we keep a record of your questions, our responses, and any attachments you send. We use these records to improve our support and resolve disputes.

We do not collect location data without consent

We use your IP address to detect fraud and ensure you're in a supported jurisdiction, but we don't track your physical location or movement patterns.

How we use your data on lapak

We use account information (email, password, username) to let you log in and manage your account. We use it to send you critical security alerts — for example, if someone tries to log in from an unusual device, we notify you. We use your email for password resets and support responses.

We use identity information to verify your account and comply with anti-money-laundering laws. We're required by law to confirm your identity before you can withdraw funds. We store your KTP or passport image encrypted and securely. We never share it with advertisers or third parties outside our compliance team.

We use payment information to process your deposits and withdrawals. We match your withdrawal destination to your verified identity. We use it to detect fraud — if someone tries to withdraw to an account that doesn't match your identity documents, we flag and reject it.

We use activity logs to settle bets fairly. If you dispute a bet outcome, we review the logs to confirm what happened. We use logs to detect account abuse — for example, multiple accounts from the same person, bonus farming, or unusual betting patterns. We use them for regulatory reporting. Indonesian authorities may request our records, and we comply as required by law.

We use communication records to respond to your support requests and improve our service. If you report a problem with a withdrawal or a bet settlement, we keep your case notes so we can follow up accurately.

Third-party processors and data sharing on lapak

We use third parties to process payments. Our payment processor handles transactions securely, but they see only what's necessary — your payment method, amount, and transaction ID. They don't see your full betting history or account activity beyond the payment itself.

We may use a third-party identity verification service to confirm your KTP or passport. That service sees only your document image and name — not your betting history or account balance. Once verification is complete, we don't share additional data with them.

We may use analytics services to understand how lapak is used — for example, which browser or device is most common among our users. These services see only aggregated, anonymized data. They don't see your personal name, email, or betting activity.

Our servers may be located outside Indonesia. This means your data may be stored on international servers. Those servers are protected by encryption and access controls. We comply with data protection laws regardless of where our servers sit.

We do not sell your data to advertisers or marketing firms. We do not share your email with third parties for marketing purposes. We do not allow other companies to profile you based on your betting activity. The only exceptions are: law enforcement if legally required, payment processors to process your transactions, and regulatory authorities if required by law.

Cookies and tracking on lapak

We use cookies to keep you logged in and to remember your preferences (such as preferred language or theme). These are necessary for the platform to work. We also use analytics cookies to understand how the site is used — which pages are visited most, where users drop off, etc. We use this to improve lapak's speed and usability.

Third-party services (like our analytics provider) may set cookies on your device. You can disable cookies in your browser settings, but this may break some lapak features like login persistence.

Your rights regarding your data on lapak

You have the right to request a copy of all data we hold about you. Contact our support team and we will provide your personal information, account history, and betting logs in a readable format.

You have the right to request correction of inaccurate data. If your name or email is wrong in your account, contact us and we'll fix it.

You have the right to request deletion of your data, subject to legal requirements. We may be required to keep your betting records for regulatory or tax purposes, so full deletion may not be possible. We'll explain what can be deleted and what must be retained.

You have the right to close your lapak account anytime. When you close your account, we stop collecting new data. We retain historical data for regulatory compliance, but we don't use it for marketing or other purposes.

If you believe we've misused your data, you can contact our support team or lodge a complaint with the data protection authority in your jurisdiction.

Data subject access request: You can request a copy of all data we hold about you. We typically respond within 30 days.
Data correction: You can ask us to correct inaccurate information in your account. Contact support with details of what's wrong.
Account closure: You can close your lapak account anytime. We'll stop using your data for new activity but retain records as required by law.
Data breach notification: If we discover your data has been compromised, we'll notify you and authorities as required by law.

Data security and encryption on lapak

We protect your data with encryption. Sensitive information — payment details, identity documents, passwords — is encrypted at rest and in transit. This means even if someone intercepts the data, they can't read it without the encryption key.

We use secure server infrastructure. Our servers are behind firewalls and access controls. Only authorized lapak staff can access customer data, and they only access it when necessary for account management, fraud detection, or support. We don't grant personal data access to marketing or product teams.

We maintain security logs. We monitor who accesses customer data, when, and why. We audit these logs regularly to detect unauthorized access.

We require strong passwords. When you create your lapak account, we encourage a password of at least 8 characters with mixed case and numbers. We don't force password changes, but we recommend updating your password if you suspect it's been compromised.

We offer two-factor authentication (2FA). When enabled, 2FA requires a code from your phone in addition to your password when you log in. This protects your account even if someone learns your password.

Changes to our lapak privacy policy

We may update this privacy policy if our practices change. If we make a material change — for example, if we start sharing data with a new third party — we'll notify you by email. We'll give you time to review the change and opt out if you disagree. Minor clarifications or formatting changes won't require notification.

Contact us about lapak privacy

If you have questions about this privacy policy or how we handle your data, contact our English-speaking support team. They can explain our practices in detail, help you exercise your rights, or escalate your concern to our privacy officer.

Our policy covers lapak's use of data across all our game categories — football sportsbook (Liga 1, Piala Indonesia, Piala AFF, Champions League), live-dealer tables, slots, and esports. The same privacy principles apply whether you're betting on a football match in Jakarta or playing blackjack from Surabaya — your data is collected, protected, and used the same way.

We believe transparent data practices build trust. This policy is our commitment to you: we collect only what we need, we protect it securely, and we use it only for the purposes we describe. If we fall short, contact us and we'll work to fix it.