istanagoalPrivacy Policy

This page describes what we collect when you use istanagoal and how we keep that data protected. We understand that privacy matters, especially when you're providing personal information to open an account, make deposits via DANA, e-wallet, mobile banking, local payment, or online payment, or withdraw your funds. Our commitment is to be transparent about what data we collect, who has access to it, and how long we keep it.

We at istanagoal collect only the information we need to verify your identity, process your transactions, comply with anti-money-laundering laws, and improve our service. We encrypt all data in transit and at rest. We never sell your personal information to third parties. If you access istanagoal from Jakarta, Surabaya, Bandung, Medan, or anywhere else within our supported jurisdictions, these privacy practices apply to you.

This policy covers our Android APK, iOS browser access, and desktop site. By using istanagoal, you consent to our data practices as described here.

What data we collect at istanagoal

We collect several categories of data when you open and use an istanagoal account:

• Identity data: Your full name, date of birth, email address, phone number, and government-issued ID number. We require a clear photo of your ID and a selfie for know-your-customer (KYC) verification.
• Address data: Your residential address, verified through a recent utility bill or government-issued address document. This is part of our KYC process.
• Payment data: When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we receive and store your payment method reference. We do not store full payment card numbers or passwords.
• Transaction history: Records of all deposits, withdrawals, bets, and game activity on your istanagoal account.
• Device and usage data: Information about the device you use to access istanagoal (Android or iOS), your IP address, browser type, and pages visited. This helps us optimize our app and detect fraud.
• Communication data: Records of any support tickets, live chat conversations, or emails you send to our istanagoal team.

How we use your data on istanagoal

We use the data we collect at istanagoal for specific, legitimate purposes:

• Account verification: We verify your identity and address to comply with KYC and anti-money-laundering (AML) regulations. This typically takes under one hour.
• Payment processing: We use your payment method reference to process deposits and withdrawals. We never share your full payment details with third parties.
• Fraud prevention: We analyze transaction patterns and device data to detect and prevent fraud, account abuse, or underage access.
• Service improvement: We review aggregated (anonymized) usage data to improve istanagoal features, game performance, and customer experience.
• Legal compliance: We may disclose data to law enforcement, regulators, or courts if required by law. We'll notify you unless we're prohibited from doing so.
• Support: We use your communication data to respond to support requests and resolve account issues.

Third-party processors and data location

We work with third-party service providers to deliver istanagoal. These processors include payment gateways (mobile banking, local payment, online payment, e-wallet, mobile banking, and banks), cloud hosting providers, customer support platforms, and anti-fraud services. We share only the data necessary for these providers to do their work. They're bound by contracts to keep your data confidential and use it only for istanagoal purposes.

Our servers may be located outside your jurisdiction. By using istanagoal, you consent to your data being transferred to and processed in these locations, subject to international data protection standards. We maintain security practices that meet or exceed industry standards regardless of server location.

We do not sell your data to advertisers or other businesses. We may share aggregated, anonymized statistics (e.g., "thousands of active players accessed Liga 1 betting during the season") with business partners, but this data cannot identify you personally.

Your rights regarding your data on istanagoal

You have the following rights regarding your data:

• Right to access: You may request a copy of all personal data we hold about you on istanagoal. We'll provide this within 30 days.
• Right to correction: If your data is inaccurate, you may request we correct it. You can update most information directly in your istanagoal account settings.
• Right to deletion: You may request we delete your data, subject to legal and operational constraints (e.g., we retain transaction records for seven years to comply with AML requirements).
• Right to data portability: You may request your data in a portable format (e.g., CSV) so you can move it elsewhere.
• Right to object: You may object to certain data uses, such as direct marketing emails. We'll honor this unless we have a legal obligation to retain the data.

To exercise any of these rights, contact our support team via live chat, email, or the Contact section of this site. We'll verify your identity and respond within 30 days.

Security of your data on istanagoal

We take data security seriously. All data transmitted to and from istanagoal is encrypted using industry-standard TLS (Transport Layer Security) protocols. Your password is hashed and never stored in plain text. We use multi-factor authentication to protect high-risk transactions like withdrawals.

Our data centers employ physical security measures, including restricted access and surveillance. We conduct regular security audits and penetration testing. If we discover a data breach, we'll notify affected users within 72 hours and take steps to minimize harm.

While we employ strong security measures, no system is completely secure. We encourage you to use a strong, unique password and enable two-factor authentication on your istanagoal account. Never share your password or login codes.

Special categories of data

Your government-issued ID photo may contain sensitive information (your face, address). We treat this as highly sensitive data and limit access to authorized staff only. We use your ID photo only for KYC verification and do not use it for any other purpose, such as marketing or analytics.

If you're accessing istanagoal during Idul Fitri, Idul Adha, Imlek, or other holidays, we continue to apply the same privacy protections. Our support team may respond more slowly during peak holiday periods, but data security practices remain unchanged.

Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our practice, technology, or law. When we make material changes, we'll notify you via email and display a notice on istanagoal. Your continued use of istanagoal after such notification means you accept the updated policy.

We encourage you to review this privacy policy periodically to stay informed about how we protect your data.

Contact us about privacy at istanagoal

If you have questions about how we handle your data, concerns about privacy, or wish to exercise any of your rights, contact our support team. You can reach us via live chat within the istanagoal app, through our website contact form, or by email. We respond to privacy inquiries within five business days during standard hours.

istanagoal services are available only in jurisdictions where local law permits. Your use of istanagoal confirms that you've read and understood this privacy policy and consent to our data practices.