afaf Casino & Sportsbook Data Care

This page describes what we collect when you use afaf and how we keep that data protected. We collect information necessary to run our platform—account registration details, payment information, betting history, and technical logs. We use this information to verify your identity, process your deposits and withdrawals, settle your bets, and respond to your support inquiries. We do not sell your data to third parties or use it for marketing outside afaf.

Our services are available only where local law permits. We process data in compliance with applicable privacy regulations in the jurisdictions where we operate. If you access afaf from a jurisdiction where our services are not lawful, you should not provide us with your information.

If you have questions about how we handle your data, contact our support team. We can clarify any section of this policy and provide you with copies of data we hold about you upon request.

What Data We Collect on afaf

When you register on afaf, we collect your full legal name, date of birth, email address, and phone number. We require this information to verify your identity and determine your eligibility to use our platform in your jurisdiction. We store these details securely in our account database.

We also collect information related to your account activity on afaf:

• Payment data: When you deposit or withdraw, we record the payment method (QRIS, e-wallet, mobile banking, local payment virtual account, etc.), transaction amount, timestamp, and transaction reference number. We do not store full payment card details or wallet passwords.
• Betting history: We record every bet you place on afaf—the game type (live Blackjack, Liga 1 match, slot machine, number draw), the amount wagered, the outcome, and the settlement timestamp.
• Account activity logs: We track login timestamps, password changes, device information (IP address, browser type, operating system), and support interactions.
• KYC documents: For account verification, we collect government-issued ID images and proof-of-address documents. We store these securely in an encrypted document vault.

We collect this information automatically through your use of afaf. We do not ask you for optional demographic data or conduct surveys. We do not collect location data beyond what your IP address reveals (used for jurisdiction verification).

How We Use Your Data

We use the information we collect for specific operational purposes:

• Account verification: We verify your identity using your name, date of birth, and ID documents to confirm you are eligible to use afaf.
• Payment processing: We use your payment method information to process deposits, withdrawals, and transaction reconciliation through online payment, e-wallet, mobile banking, local payment, online payment, and other payment partners.
• Bet settlement: We record your betting history to calculate payouts, track your balance, and resolve disputes about bet outcomes.
• Fraud detection: We analyze your account activity for signs of unauthorized access, collusion, or suspicious betting patterns. If we detect violations, we may freeze your account pending investigation.
• Support and account recovery: We use your contact information to respond to your inquiries, send account notifications, and help you recover access if you forget your password.
• Legal compliance: We retain betting records, payment logs, and account details to meet regulatory and tax obligations in the jurisdictions where we operate.

We do not use your data to send you marketing emails or promotional messages unless you have explicitly opted in. Even then, you can opt out at any time by adjusting your account settings or replying to any message.

Data Protection and Encryption

We protect your data through encryption and access controls. All data transmitted between your device and our servers is encrypted using SSL/TLS (HTTPS). Your password is hashed using bcrypt with salt rounds exceeding industry standards; we never store passwords in plain text. Sensitive payment information is encrypted using AES-256 and stored in isolated vaults accessible only to payment-processing staff.

Our servers are hosted in data centres with physical security controls (CCTV, access logs, climate control). We conduct security audits quarterly and maintain a vulnerability-disclosure policy. We maintain offsite encrypted backups of all account data to ensure we can recover your information if our primary systems fail.

However, no online service is completely secure. We encourage you to use a strong, unique password and to enable any additional security features we offer (if available). If you suspect unauthorized access, change your password immediately and contact our support team via email or phone.

Third-Party Data Processors

We use third-party processors to operate afaf. These processors are bound by confidentiality agreements and process your data only as instructed:

• Payment processors: e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment handle payment authentication and fund settlement. They receive only the minimum data needed to process your transaction (amount, account identifier, timestamp).
• Hosting and cloud providers: Our servers and databases are hosted by cloud infrastructure providers. We encrypt sensitive data before uploading to ensure the provider cannot access plaintext information.
• Email and communication services: We use third-party email providers to send account notifications, password resets, and support responses. These emails contain only non-sensitive account information (login status, transaction confirmation, support reference number).
• Analytics and monitoring: We use monitoring tools to track platform performance and uptime. These tools receive only aggregated, non-identifying data (page load times, error counts, user counts by region).

We do not permit any processor to use your data for their own marketing or retain it after their service to us ends. We review processor compliance annually and terminate relationships with processors who violate our data-protection standards.

Your Rights Regarding Your Data

You have the right to request a copy of all data we hold about you. Contact our support team with "data request" in the subject line. We provide a machine-readable file containing your account information, transaction history, and any documents we store. We typically respond within 10 business days (longer if your request is complex).

You have the right to request correction of inaccurate data. If your name, date of birth, or contact information is incorrect on our records, contact support and we will update it promptly.

You have the right to know if your data has been compromised. If we detect an unauthorized breach affecting your information, we notify you via email and in-app alert within 24 hours and provide guidance on securing your account.

Cookies and Tracking

We use cookies to improve your experience on afaf. Cookies are small files stored on your device that help us remember your preferences and keep you logged in between sessions. We use two types of cookies:

• Essential cookies: These are required for afaf to function. They maintain your login session, remember your account preferences, and prevent fraud. You cannot opt out of essential cookies.
• Preference cookies: These remember your settings (language, theme). You can opt out by adjusting your browser settings.

We do not use tracking pixels or third-party cookies for advertising purposes. We do not build a profile of your browsing history outside afaf. If you delete cookies from your device, you will be logged out and may need to re-enter your login information on your next visit.

Data Retention and Deletion

We retain your data for different periods depending on the type:

• Account registration data: Retained for as long as your account is active, plus 7 years after closure (for tax and audit purposes).
• Betting history: Retained indefinitely to support dispute resolution and regulatory compliance.
• Payment records: Retained for 7 years to comply with financial record-keeping regulations.
• KYC documents: Retained for 7 years after account closure.
• Support chat logs: Retained for 2 years unless you request earlier deletion.
• Activity logs (IP addresses, login timestamps): Retained for 1 year.

We destroy data securely—encrypted files are overwritten with random data multiple times before final deletion. We do not retain data longer than necessary, except where law requires it.

International Data Transfers

Our servers may be located outside your jurisdiction. If our data centres are in a different country, your data is still encrypted and protected under the same security standards we describe above. When we transfer data internationally, we use encryption to ensure it remains protected in transit and at rest, regardless of the destination country.

By using afaf, you acknowledge that your data may be transferred, stored, and processed outside your home country, subject to the encryption and protection measures described in this policy. If you do not consent to international data processing, you should not register on afaf.

Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or applicable law. We notify you of material changes via email and in-app alert at least 14 days before the new policy takes effect. Continued use of afaf after the effective date constitutes acceptance of the updated policy. If you do not agree with any change, you may close your account and request a data download before the change takes effect.

Contact Us About Data Protection

If you have questions about how we handle your data, concerns about data security, or requests to access or delete your information, contact our support team:

• In-app chat: Open your account menu and select Help. Ask about privacy or data requests.
• Email: Send inquiries to our support address with "privacy" in the subject line.
• Phone: Call our support line during business hours if you need to speak directly with our compliance team.

We log all data-protection inquiries and respond within 10 business days. For urgent privacy concerns, email with "urgent privacy" in the subject line and we will escalate your request to our management team for faster resolution.

Summary of Our Data Commitments

We collect only information necessary to operate afaf. We encrypt all data in transit and at rest. We do not sell your information to third parties or use it for external marketing. We retain data only as long as required by law and operational necessity. We respond to your data requests (access, correction, deletion) within 10 business days. We notify you immediately if your data is compromised. Your privacy matters to us, and we treat your information with the security and respect it deserves.

If any aspect of our data practices is unclear, contact our support team. We are here to answer your questions and address your concerns about how we handle your information on afaf.