rapelay Privacy Policy

Payment processors like DANA and e-wallet handle data differently from traditional bank virtual accounts, and we at rapelay treat each separately. This page describes what we collect when you use rapelay, how we protect that data, and which third-party processors touch your information at each step—from account creation through deposits via mobile banking or local payment, withdrawals, and live-dealer gameplay.

We do not sell your data. We do not share it with unrelated marketing partners. Our commitment is transparency: you understand what we collect, why, and how long we keep it. If you have questions after reading this policy, contact our support team via in-app chat or email.

This policy applies to all users of rapelay across supported jurisdictions in Indonesia, including account holders in Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta. We frame our service as available only where local law permits, and this privacy commitment applies consistently regardless of your location within supported regions.

What We Collect and Why

We at rapelay collect personal data in several categories. At registration, we collect your full legal name, date of birth, email address, and mobile phone number. We use this data to create and secure your account, verify your identity, and send you important notifications about account status, deposits, withdrawals, or security alerts.

When you request a withdrawal, we collect your intended destination payment method (the account or wallet to which funds should be returned). We verify this information matches your account to prevent fraud and to comply with anti-money-laundering regulations. We may also request identity verification documents (a photo of your national ID, a bank statement, or a selfie for facial recognition) for withdrawals above certain thresholds or if our compliance system flags unusual activity.

We also collect behavioral data: which games you play, your session timestamps, your account balance at various points, and whether you use live-dealer tables or esports markets. We use this data to improve our service, understand which features are most used, and detect fraudulent patterns. We do not profile you for marketing purposes; we use this data internally only.

Identity Data

Full name, date of birth, email, phone; used for account security and regulatory compliance.

Transaction Data

Deposits, withdrawals, amounts, payment methods, timestamps; used for account crediting and fraud detection.

Behavioral Data

Games played, session duration, balance changes; used to improve service and detect fraud.

How Payment Processors Handle Your Data

We at rapelay do not process payments ourselves. We partner with established payment processors for each method. When you deposit via mobile banking or local payment, your transaction flows through their systems; they collect your wallet balance, transaction ID, and timestamp. When you transfer via a online payment or e-wallet virtual account, your bank processes that transfer; the bank and our processor see the transaction details and the destination account.

Each processor has its own privacy policy. We provide links to their policies on our deposit page so you can review how they handle your data. We at rapelay do not control their data practices. We require all processors to maintain encryption, not store sensitive payment credentials unnecessarily, and comply with Indonesian financial regulations. We regularly audit processor access to our systems.

During high-volume periods, such as around Idul Fitri or major Liga 1 tournament events, payment processors may experience delays. These delays do not affect how your data is stored; they affect only how long a deposit takes to credit. Your data remains encrypted in our systems throughout.

Your Rights on rapelay

We at rapelay recognize your right to access, correct, and request deletion of your personal data. If you want to review what we hold about you, contact our support team with your account details. We will provide a complete data export within ten business days. If you notice inaccurate information (for example, a misspelled name or outdated phone number), you can correct it in your account settings or request our team to update it.

If you request deletion of your account, we will delete your personal data within thirty days. We retain transaction records for seven years as required by Indonesian anti-money-laundering regulations; these are retained separately and are not linked to your account. You may withdraw consent for behavioral data collection at any time through your account preferences, though this does not retroactively delete previously collected data.

Cookies and Tracking on rapelay

We at rapelay use cookies to keep you logged in, remember your session preferences, and detect fraud. Session cookies expire when you close your browser. Persistent cookies (such as a "remember me" token) may last up to one year. We do not use third-party advertising cookies; we do not track you across other websites for marketing. We use analytics cookies to measure page load times, crash rates, and feature usage. These analytics do not identify you personally; they show us aggregate trends only.

You may disable cookies in your browser settings. Disabling cookies will prevent you from logging in to rapelay, so we do not recommend this. Instead, you may delete cookies periodically or use your browser's incognito mode to avoid persistent cookie storage.

How We Protect Your Data

We at rapelay encrypt all data in transit (using TLS/SSL) and at rest (using AES-256 encryption). Our servers are located in secure data centres with physical access controls, redundant power supplies, and fire suppression. We maintain regular backups so that if a server fails, we can restore your account without data loss.

We limit data access to rapelay staff on a need-to-know basis. Our support team sees only the account information necessary to assist you; our compliance team sees only transaction and verification data. We conduct background checks on all staff with data access, and we log all sensitive data access for audit purposes. If we detect unauthorized access, we notify you immediately.

Despite these measures, no system is perfectly secure. We do not guarantee that a determined attacker cannot breach our systems. If a breach occurs, we will notify affected users within seventy-two hours, detail what data was exposed, and explain what steps we are taking to secure the data.

How Long We Keep Your Data

We at rapelay retain your account data (name, email, phone, KYC documents) for the lifetime of your account plus five years after deletion or dormancy, in case you decide to reactivate. We retain transaction records for seven years as required by Indonesian law. Behavioral data (session logs, game history) is retained for two years. After the retention period, we delete the data securely or anonymize it so it cannot be linked to you.

Contact Us and Policy Updates

If you have questions about our privacy practices or wish to exercise your data rights, contact our support team at [email protected] or via in-app chat. Our team responds within two business days. For complex requests (such as a full data export), we may need up to ten business days.

We may update this privacy policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use of rapelay after notification indicates acceptance of the updated policy. This policy was last updated on the date shown below, and we review it quarterly to ensure it reflects our actual practices.

We at rapelay remain committed to protecting your data and operating transparently. Thank you for trusting us with your information.