istanaPrivacy Policy

This page describes what we collect when you use istana and how we keep that data protected. We take your privacy seriously, and we've written this policy to be transparent about our practices. We collect personal information only when necessary to operate our platform, process your payments, and comply with regional regulations.

Our approach is straightforward: we collect your email, identity documents, payment details, and account activity data. We use this information to verify your account, process deposits and withdrawals, and maintain our service. We do not sell your data to third parties, and we do not use your information for marketing purposes without your consent.

If you have questions about how we handle your data, how long we retain it, or what rights you have, this policy covers those topics. We've also included information about cookies, third-party processors, and how to contact us if you want to access or delete your information.

What Data We Collect on istana

We collect information in several categories. First, we collect account information: your email address, username, password (encrypted), and phone number. We use this to create and manage your istana account and to communicate with you about your account status.

Second, we collect identity information. Before your first withdrawal, we require you to upload a government-issued ID (passport or national ID card) and proof of residence (utility bill, bank statement, or rental agreement). We use this to verify your identity and comply with financial regulations. We store these documents securely and do not share them with third parties except as required by law.

Third, we collect payment information. When you deposit funds through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfer (mobile banking, local payment, online payment, e-wallet), we record the transaction details, amount, and timestamp. We do not store your full payment credentials—our payment processors handle that securely.

Fourth, we collect account activity data. We log your game sessions, tournament participation, withdrawal requests, and support interactions. We use this to detect fraud, resolve disputes, and improve our service. We also collect your IP address and device information so we can identify unauthorized access attempts.

Data minimization: We collect only the information we need to operate istana. We do not ask for your birth date, employment history, or social media profiles unless required by law.

How We Use Your Data

We use your data for specific purposes. We use your email and phone number to send you account notifications, withdrawal confirmations, and support responses. We use your identity documents to verify your account before processing withdrawals. We use your payment information to process deposits and withdrawals and to detect fraudulent transactions.

We use your account activity data to maintain our platform, detect abuse, and comply with financial regulations. We analyze this data in aggregate (not individually) to understand how our users interact with istana—for example, which slot games are most popular or what payment methods are most common. This helps us improve our service.

We do not use your data for marketing purposes without your explicit consent. We do not sell your data to third parties. We do not share your identity documents with anyone except our payment processors and, if required by law, with financial regulators.

Third-Party Processors and Data Transfers

We work with third-party processors to handle payments and identity verification. These processors may be located outside Indonesia. When we transfer your data to these processors, we ensure they have security standards equivalent to our own. We have data-processing agreements in place that require them to protect your information and use it only for the purposes we specify.

Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and our banking partners) handle your payment credentials directly. We do not see your full card numbers or bank account details. Our identity-verification processor may store your documents temporarily to verify your information, then delete them after verification is complete.

We may be required by law to disclose your data to government agencies, financial regulators, or law enforcement. We will comply with such requests to the extent required by law. We will not voluntarily disclose your data to third parties without your consent.

Data location: Our servers may be located outside Indonesia. By using istana, you consent to your data being transferred to and stored in these locations, subject to the security standards described in this policy.

How Long We Keep Your Data

We retain your account information for as long as your account is active. If you close your account, we retain your data for a minimum of five years to comply with financial regulations. After that period, we delete your personal information unless we are required by law to retain it longer.

We retain your identity documents for the duration of your account plus five years. We retain your payment transaction records for seven years to comply with banking regulations. We retain your account activity logs for two years unless we are investigating a dispute or fraud claim, in which case we retain them longer.

Your Rights on istana

You have the right to access your personal data. You can request a copy of all information we hold about you by contacting our support team. We will provide this information within a standard processing window.

You have the right to correct inaccurate data. If your email, phone number, or address has changed, you can update it in your account settings. If you believe we have incorrect identity information, contact our support team and we will review it.

You have the right to request deletion of your data, subject to legal and regulatory requirements. If you close your account and request data deletion, we will delete your personal information after the retention periods described above. We cannot delete data we are required by law to retain.

1

Access your dataRight 1

Request a copy of all information we hold about you by contacting support.
2

Correct inaccurate dataRight 2

Update your email, phone, or address in account settings, or contact support for identity corrections.
3

Request deletionRight 3

Request data deletion after account closure, subject to legal retention requirements.

Cookies and Tracking

We use cookies to maintain your login session and to remember your preferences (language, theme). These are essential cookies required for istana to function. We do not use cookies for tracking or advertising purposes.

We use basic analytics to understand how users navigate our platform—for example, which pages are most visited or where users encounter errors. This helps us improve our service. We do not use third-party analytics services that track you across other websites.

You can disable cookies in your browser settings, but this may prevent istana from functioning properly. We recommend keeping cookies enabled while using our platform.

Security and Data Protection on istana

We apply industry-standard encryption to protect your data in transit and at rest. Your password is encrypted and we never store it in plain text. Your payment information is encrypted and handled by secure payment processors. Your identity documents are stored on secure servers with restricted access.

We implement access controls so only authorized istana staff can view your personal data. We conduct regular security audits and penetration testing to identify vulnerabilities. If we discover a security breach, we will notify affected users and take steps to mitigate the impact.

We cannot guarantee absolute security—no online service can. However, we take reasonable steps to protect your data from unauthorized access, alteration, or disclosure.

Contact Us About Your Data

If you have questions about this privacy policy, want to access your data, or want to report a privacy concern, contact our support team through istana. We respond to privacy inquiries during standard business hours. We will address your request within a standard processing window.

This privacy policy applies to all users of istana, regardless of location. However, we only offer our services in jurisdictions where local law permits. If you are accessing istana from Jakarta, Surabaya, Bandung, Medan, or Semarang, this policy applies to you. If you are in a jurisdiction where we do not offer services, we will not process your account registration or data.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or by posting a notice on istana. Your continued use of istana after such changes constitutes your acceptance of the updated policy.