liga1001 Platform Privacy Notice

This page describes what we collect when you use liga1001 and how we keep that data protected under encryption, access controls, and regular security audits. We collect personal information only to operate your account, process deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers, and to comply with Know Your Customer (KYC) regulations that apply across Indonesia.

We do not sell your data to advertisers, brokers, or third parties for marketing purposes. We do not share your account details with unrelated businesses. Our data handling is governed by Indonesian data-protection standards and our own internal privacy commitments, which exceed minimum legal requirements in several areas—including encrypted storage of sensitive documents, limited employee access, and annual third-party audits of our data workflows.

If you have questions about how we handle your information or wish to request access to your data, you can contact us via your account support channel. We respond to all data requests within 14 business days.

What We Collect and Why

When you register on liga1001, we collect your full legal name, date of birth, email address, phone number, and residential address. We use this information to create and verify your account, to confirm your identity during Know Your Customer checks, and to contact you about account security, deposits, withdrawals, or changes to our service. We also collect transaction history—every deposit, withdrawal, wager, and game outcome—to calculate your weekly cashback, track your account tier, and detect fraudulent activity.

We collect IP addresses and device identifiers to monitor for account takeover attempts and to enforce our regional access restrictions. Our systems log timestamps of every login, withdrawal request, and high-value transaction. This data is retained for a minimum of three years to comply with Indonesian financial regulations; after three years, we delete logs unless we are required by law to retain them longer (for example, if you are under investigation for fraud).

Document retention: We encrypt and store copies of your government ID and proof-of-address documents for Know Your Customer compliance. These documents are accessible only to our compliance team and are deleted 7 years after your account closure, in line with Indonesian regulatory timelines.

When you contact our customer support team via in-app chat or email, we record those conversations to improve our service quality and to resolve disputes. Support logs are retained for one year and are not shared with external parties unless we receive a lawful request from Indonesian authorities or a court order.

How We Protect Your Data on liga1001

All communication between your device and our servers is encrypted using TLS 1.2 or higher, the same standard used by banks. Your password is hashed using bcrypt and is never stored in plaintext; even our system administrators cannot retrieve your original password. If you forget your password, we send you a secure reset link valid for subject to verification; clicking the link allows you to create a new password.

We store sensitive data—your ID document, payment method tokens, and transaction history—on encrypted servers located in data centres with 24/7 physical security and redundant power supplies. Our servers sit outside your jurisdiction; specifically, they are hosted in Singapore and Malaysia, both of which have strong data-protection laws. If you object to this geographic placement, you may request that we delete your account and all associated data; we process such requests within 30 days.

We employ role-based access controls: only employees with a business need to access customer data can do so, and their access is logged and audited monthly. We conduct annual penetration testing (simulated cyberattacks) to identify security gaps; any vulnerabilities we discover are patched immediately. We also maintain cyber insurance covering data-breach notification costs and customer compensation if our systems are compromised.

Third Parties and Data Sharing on liga1001

We use third-party processors for specific functions:

  • Payment processors: DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank partners process your deposits and withdrawals. We share only your name, account number, and transaction amount with these providers; we do not share your password, ID document, or game history.
  • Compliance and identity verification: We use licensed KYC vendors to verify your government ID. These vendors process your document temporarily (typically within 24 hours) and delete it from their systems once verification is complete.
  • Fraud detection: We subscribe to third-party fraud-detection services that flag suspicious login patterns and transaction anomalies. These services receive anonymized IP addresses and login timestamps but do not receive your personal identity or financial data.
  • Cloud hosting and backups: Our servers are hosted by regional data-centre operators. These operators have access only to encrypted data files; they cannot decrypt your information without encryption keys held separately by liga1001.

We do not share your data with marketing companies, advertising networks, or data brokers. We do not allow our staff to sell or discuss member information. We do share aggregated, anonymized statistics with research partners (for example, "non-specific info of members in Jakarta deposit via mobile banking") to help understand market trends, but these reports contain no individual identifiers.

Your data on liga1001 is encrypted at rest, encrypted in transit, and accessible only to personnel who need it to operate your account. We do not sell it, broker it, or hand it to advertisers.

liga1001 editorial team

Your Rights and Our liga1001 Commitments

You have the right to request access to all personal data we hold about you. You may request that we correct inaccurate information (for example, if your registered address is outdated). You may also request deletion of your data, subject to certain exceptions: we retain transaction records for regulatory compliance and must keep your ID documents for seven years after account closure.

To exercise these rights, log into your liga1001 account and navigate to Settings > Privacy & Data. You will see options to download a copy of your data, request corrections, or submit a deletion request. We respond to all such requests within 14 business days. If you are not satisfied with our response, you may file a complaint with the Indonesian Data Protection Authority; we will cooperate fully with any investigation.

Cookies and Tracking on liga1001

We use cookies to remember your login status, language preference, and account settings. These are functional cookies necessary for the platform to operate; they do not track you across other websites. We do not use tracking cookies or third-party analytics that build profiles of your browsing behaviour. If you disable cookies in your browser, you will need to log in each time you visit liga1001, but the platform will continue to function.

Changes to Our Privacy Policy

We may update this privacy notice if our practices change or if Indonesian law changes. We will notify you of material changes by email and by displaying a notice on your account dashboard for 30 days before the change takes effect. Your continued use of liga1001 after 30 days constitutes acceptance of the updated policy. If you disagree with any change, you may close your account and request deletion of your data.

Contacting Us About Your Data

If you have privacy concerns or questions about how we handle your information, you can reach our data protection team via your account support dashboard. You may also email [email protected] (we respond within 7 business days). Our team is available to members across Jakarta, Surabaya, Bandung, Medan, and Semarang and can conduct conversations in English or Indonesian.

We at liga1001 treat your personal information with the care we would want applied to our own data. Our privacy commitments are not negotiable—encryption, access limits, and deletion rights are built into our operations from day one. If you ever feel your data is mishandled, we encourage you to reach out immediately and to escalate to the Indonesian Data Protection Authority if our response is unsatisfactory. Your trust is the foundation of our service.