stalePrivacy Policy

This page describes what we collect when you use stale and how we keep that data protected. When you open an account on our platform, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), and place bets on football, live-dealer games, slots, or esports, we collect information necessary to verify your identity, process your payments, and manage your account. We treat all personal data with care and follow industry-standard security practices.

Our privacy commitment covers what we collect, how we use it, who has access to it, and what rights you have over your information. We do not sell your data to third parties. We share information only with payment processors, identity verification providers, and legal authorities when required by law. Our servers may be located outside your jurisdiction, but we apply consistent data protection standards across all regions where stale operates.

We review and update this Privacy Policy periodically to reflect changes in our practices or applicable law. If you have questions about how we handle your data, our support team responds in English and Indonesian.

What We Collect on stale

We collect information in several categories when you use stale. Account information includes your name, email address, phone number, date of birth, and account username. Identity verification information includes a copy of your national ID, driver's license, or passport, which we request before your first withdrawal to comply with anti-money-laundering standards.

Payment information includes the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account details for mobile banking, local payment, online payment, e-wallet), your transaction history, and account balances. We do not store full credit card numbers or bank account numbers; instead, we tokenize this data so only the payment processor can decrypt it. Behavioral information includes your login times, games played, bets placed, game results, and withdrawal requests—the data we need to manage your account and calculate payouts.

We also collect technical information—your device type, browser version, operating system, IP address, and cookies—to understand how you use stale and to detect fraud or unauthorized access attempts. This information helps us identify suspicious activity, such as attempts to access your account from an unusual location or device.

Cookies on stale: We use cookies to remember your login session and your language preference. Cookies persist for a limited time and expire when you log out or after a period of inactivity. You can disable cookies in your browser settings, though this may limit your ability to use stale.

How We Use Your Information on stale

We use your account information to verify your identity, process your deposits and withdrawals, and maintain your account security. When you transfer funds via mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, or a bank virtual account (online payment, e-wallet, mobile banking, local payment), we verify that the payment method matches your registered name and account details. This verification prevents fraud and money-laundering schemes.

We use your behavioral information—games played, bets placed, results—to calculate payouts, track your account history, and resolve disputes. If you have a question about a past bet or withdrawal, we review your history to provide accurate information. We also use this data to detect fraud, such as collusion between players or attempts to exploit our betting system.

We use your technical information to improve stale's performance, debug errors, and enhance security. We analyze which features are used most, which games attract the most players, and where technical problems occur. We use IP address and device information to detect unauthorized login attempts and to flag accounts that may have been compromised.

Third-Party Processors and Data Sharing

We share your information with third-party service providers only when necessary to operate stale. Payment processors—companies that handle online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers—receive your payment information to process transactions. These processors are contractually obligated to keep your data confidential and secure.

We work with identity verification providers who verify your national ID during account setup. These providers use automated matching and manual review to confirm that your ID is authentic and matches your submitted information. We do not store copies of your ID documents; the verification provider does, under their own security protocols.

We may disclose your information to legal authorities—police, tax agencies, or courts—when required by law or when we have a good-faith belief that disclosure is necessary to protect our legal rights or the safety of others. We do not proactively share data with government agencies but comply with valid legal requests.

Your data may be processed outside your jurisdiction

Our servers and processors may be located in countries other than Indonesia or your country of residence. When you use stale, you consent to the transfer and processing of your data in these locations. We apply the same data protection standards regardless of server location.

Your Rights on stale

We give you control over your information on stale. You can request a copy of all personal data we hold about you by contacting our support team. We will compile your information and send it to you in a standard format within 30 days. You can also request corrections to your account information—if your registered address or phone number is incorrect, you can update it directly in your account settings or contact support.

You can request deletion of your personal data, subject to legal and operational constraints. We may retain some information (such as transaction history and ID documents) for anti-fraud compliance and tax purposes, even after account deletion. We will explain which data we can delete and which we must retain when you submit a deletion request.

You can also request that we stop using your data for marketing purposes or for non-essential analytics. We will honor these requests and will not contact you for marketing reasons if you opt out. Note that opting out does not affect our use of data for account management, fraud detection, and compliance.

How We Protect Your Data on stale

We use industry-standard encryption to protect your data in transit and at rest. All communication between your browser and our servers uses TLS (Transport Layer Security) protocol, so your login credentials and payment information are encrypted when transmitted. We hash passwords so even stale staff cannot see your plain-text password. If you forget your password, you cannot recover it; instead, you reset it by verifying your email or security question.

We limit access to personal data within stale—only staff who need it for account management, fraud detection, or customer support can view it. We audit access logs regularly to detect unauthorized data requests. We also maintain backups of our database in secure, encrypted storage, so we can recover your data if our primary servers experience data loss.

Data Retention on stale

We retain your account information, payment history, and betting records for the duration of your account and for a minimum of two years after account deletion. This retention period allows us to comply with tax regulations, resolve disputes, and investigate fraud. After two years, we delete or anonymize your data, subject to any legal requirements to retain it longer.

We retain identity verification documents (ID copies) for seven years to comply with anti-money-laundering requirements. Even after account deletion, these documents are kept in encrypted storage accessible only to compliance staff. After the retention period, we securely destroy these documents.

Contact Our stale Support Team

If you have questions about this Privacy Policy, how we use your data, or how to exercise your rights, contact our support team. We respond to privacy inquiries in English and Indonesian. You can reach us through your stale account dashboard or by emailing our support address listed in your account settings.

Our services are available only in jurisdictions where local law permits. If you are based in Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, or elsewhere in supported regions, this Privacy Policy applies to your use of stale. If your jurisdiction has specific privacy laws (such as data protection regulations), we comply with those requirements in addition to this policy.

This Privacy Policy is effective as of its publication date and may be updated periodically. We will notify you of material changes via your registered email address. Your continued use of stale after an update constitutes your acceptance of the revised policy.