bangjef Privacy Policy

This page describes what we collect when you use bangjef and how we keep that data protected. We at bangjef handle your personal information—email address, phone number, payment details, and identity documents—with encryption and strict access controls. Our commitment is transparent: we explain every step of data collection, storage, and use so you understand what happens to your information on our platform.

When you open a bangjef account, verify your identity, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, or withdraw winnings, we process personal and financial data. We use this information only for account security, fraud prevention, regulatory compliance, and service delivery. We do not sell your data to advertisers or third parties unrelated to gaming and payment processing.

Our data handling spans multiple jurisdictions—your account may be backed by servers outside your country, but we enforce the same encryption and access standards globally. This policy outlines your rights, our obligations, and how to contact us if you have privacy concerns.

What data we collect and why

We collect data in stages. At account registration, we ask for email address, password, and phone number. These are used for account authentication, password recovery, and two-factor authentication (2FA) if you enable it. We never share your password; it is hashed before storage and inaccessible to our staff.

When you deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), your payment method information is transmitted directly to our payment partners' encrypted gateways. We do not store raw card numbers or wallet credentials. We record only the transaction amount, timestamp, and method category (e.g., "mobile banking deposit", "local payment transfer") for accounting and dispute resolution.

Before your first withdrawal, we perform Know Your Customer (KYC) verification. We request government-issued ID (passport, national ID card, or driver's licence), proof of address (utility bill or bank statement dated within three months), and confirmation of your date of birth. We use automated identity-checking software and manual review to verify authenticity and cross-check against sanctions lists and fraud databases. This data is retained for the duration of your account and for five years after account closure (mandated by anti-money-laundering regulations).

How we use your data and how long we keep it

We use your personal information for four core purposes: account management, fraud and security, regulatory compliance, and customer support. Account management includes login verification, password resets, and account preference updates. Fraud and security includes monitoring for suspicious activity (rapid logins from different regions, unusual withdrawal patterns) and flagging accounts for manual review. Regulatory compliance includes KYC verification and AML screening mandated by law. Customer support includes responding to inquiries about your account, transactions, or games via the in-app help button.

We retain email, phone, and password hashes for the lifetime of your account. KYC documents (ID, proof of address) are retained for five years after account closure. Transaction records are retained for five years for audit and dispute resolution. If you request account deletion, we remove your account from active systems but retain anonymised transaction records (date, amount, method, but no name or ID) for regulatory purposes.

We do not use your data for marketing emails, promotional messaging, or third-party advertising unless you explicitly opt in. If you have received unsolicited marketing, it may be from a third party; do not click links in unsolicited emails claiming to be from bangjef. Contact our support team immediately to report phishing attempts.

Third-party processors and data sharing

We partner with vendors to deliver bangjef services securely. Payment processors (e.g., online payment, e-wallet, bank acquirers) receive transaction data to settle deposits and withdrawals. Identity-verification partners receive ID scans and demographic data to confirm your identity. Fraud-detection services receive login patterns and transaction history to identify suspicious activity. Email and SMS providers send notifications on our behalf (account warnings, deposit confirmations) using your contact details. All vendors sign data-processing agreements requiring them to encrypt data, restrict access, and delete it once processing is complete.

We do not sell data to marketing firms, data brokers, or advertisers. We do not share your information with unrelated third parties except as required by law—if a regulator or court issues a legal directive, we comply with disclosure orders after attempting to notify you (unless legally prohibited from doing so).

Your rights and data access

You have the right to request access to your personal data held by bangjef. You can ask to see all email, phone number, ID documents, transaction records, and any notes our support team has recorded about your account. Submit an access request via the contact form below, and we will provide a complete data export within 30 days.

You have the right to request corrections if your data is inaccurate—e.g., if your name is misspelled on your KYC record. We will correct errors within 15 days. You have the right to request deletion of your account data, subject to legal-retention requirements. KYC documents and transaction records must be retained for five years per law; however, we will delete optional data (profile picture, account notes) upon request once the retention period expires.

If you believe we have mishandled your data, you may lodge a complaint with your local data-protection authority. We will investigate complaints and respond within 30 days. You also have the right to data portability—we can export your account data in a machine-readable format (e.g., CSV) for transfer to another service.

Cookies and tracking technologies

We use cookies on bangjef to maintain your login session, remember your preferences, and measure site performance. Session cookies expire when you log out; persistent cookies remain for up to one year to speed up future logins. We do not use cookies for tracking across unrelated websites. We do not sell cookie data to third parties.

We use analytics tools (not named to avoid vendor bias) to understand how users navigate our platform—which games are popular, where users encounter friction, page load times. Analytics data is anonymised (no individual identifiers) and aggregated (millions of actions summed). This helps us improve bangjef for all users in Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta equally.

You can disable cookies in your browser settings, but some bangjef features (login persistence, account settings) may not work correctly. We recommend allowing essential cookies while blocking advertising cookies if your browser supports granular control.

How we protect your data

All data transmitted to bangjef is encrypted using TLS 1.2 or higher—the same standard used by banks and payment processors. Data at rest (stored on our servers) is encrypted using AES-256. Your password is hashed using bcrypt, making it irreversible even if our databases are compromised. Access to user data is restricted to authorised staff (account support, fraud team, compliance) and logged for audit purposes.

We undergo annual security audits by independent third parties. Our servers are hosted on secured infrastructure with firewalls, intrusion detection, and regular patching. We do not store sensitive data on unencrypted devices or transmit it over unencrypted channels.

If a data breach occurs, we will notify affected users via email within 30 days, explain what data was exposed, and describe the steps we are taking to prevent recurrence. We will also notify regulatory authorities if required by law.

International data transfers

bangjef servers may be located outside your country. Your data may be transferred to, processed in, and stored in jurisdictions other than where you live. We encrypt all data before transfer and do not transmit unencrypted information across borders. Our servers comply with data-protection standards equivalent to your jurisdiction's requirements, even if local law is less stringent.

If you are in a jurisdiction with strong data-protection laws (e.g., requiring local data residency), contact our support team before opening an account to discuss your specific requirements.

Contact us about privacy

If you have questions about bangjef's privacy practices, wish to exercise your rights (access, correction, deletion, portability), or want to report a breach or mishandling of your data, use the contact form below or email the address listed on our About us page. We will respond to all privacy inquiries within 30 days.

For data-access requests or deletion requests, include "DATA REQUEST" in the subject line. For breach reports or complaints, include "PRIVACY COMPLAINT" in the subject line. Provide as much detail as possible so we can investigate promptly and accurately.

Your name

Email address

Subject Select a reason … Data access request Data deletion request Data correction request Privacy complaint Report potential breach Other privacy question

Message

Send privacy inquiry

Changes to this privacy policy

We may update this privacy policy periodically to reflect changes in our practices or applicable law. When we make material changes (e.g., new data collection or sharing practices), we will notify you by email and update the "last updated" date below. Your continued use of bangjef after notification affirms your acceptance of the revised policy.

Last updated: 30 May 2026. Previous versions are available upon request via the contact form above.

Our terms and conditions govern your use of bangjef separately from this privacy policy. If any conflict arises between the two, the terms and conditions take precedence on account-usage matters, and this privacy policy governs data handling. For legal or compliance questions beyond privacy, see our legal notice