laku Platform Privacy Notice

This page describes what we collect when you use laku and how we keep that data protected. We at laku collect personal information from account registration, identity verification, payment processing, and gameplay activity. Our commitment is to use that data only for account management, regulatory compliance, fraud prevention, and service delivery — never to sell it to third parties or use it for purposes unrelated to your laku account.

We understand that your privacy matters. Whether you access laku via Android APK, iOS browser, or desktop, your data flows through our servers using encryption. This notice explains what we collect, how long we keep it, who can access it, and what rights you have. Our policy aligns with Indonesian data-protection practices and standard information-security conventions.

Our services are available only where local law permits. Users are responsible for verifying that access to and use of laku comply with their own jurisdiction's regulations.

What Data We Collect on laku

Account Registration and Identity Verification

When you create a laku account, we collect your email address, phone number, and a password hash. Before your first deposit and real-money activity, we require identity verification (KYC). You upload a government ID (driving license, passport, or national ID card) and proof of address (utility bill, bank statement, or official letter). We scan these documents using automated KYC checks and store the images encrypted on our servers.

We do not share KYC documents with third parties outside laku. We retain them for seven years per regulatory requirements, then securely delete them. If you request account closure, we keep your documents for dispute resolution and legal compliance, but no longer use them for account access or gameplay.

Payment and Transaction Data

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we log the transaction amount, timestamp, payment method, and settlement status. We do not store your full payment credentials — those are handled securely by the payment provider. For bank transfers, we record the destination account number (last four digits) and the bank name for reconciliation only.

We retain transaction records for one year for account reconciliation and dispute resolution. After one year, we archive older records for legal compliance but do not use them for active account management. Withdrawal requests follow the same logging; we track outbound transfers until they settle with the payment provider.

Gameplay and Betting Data

We log every game you play on laku — sportsbook selections (Liga 1, Piala AFF, Champions League, Premier League, MotoGP, badminton), live-dealer sessions (blackjack, roulette, baccarat, Dragon Tiger), slot spins (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports markets (Mobile Legends, Free Fire, PUBG Mobile). We record the game name, stake amount, bet details, result, payout, timestamp, and your balance at settlement.

We retain gameplay records for your account history and regulatory compliance. You can view your complete game history on laku any time. We use this data internally to detect fraud, unusual betting patterns, and account abuse — never to sell or share with marketers.

Device and Session Information

We log your device type (Android app or iOS browser), IP address, login timestamps, session duration, and browser fingerprint. This helps us secure your account — we flag logins from unfamiliar locations and require verification if needed. Session cookies store your login state; they expire on logout or after subject to verification of inactivity (iOS browser) or persist until you log out manually (Android app).

We do not use device data for marketing or third-party tracking. We delete session logs after 90 days unless they are tied to a security incident or investigation.

Communication and Support Data

If you contact laku support, we log your messages, support tickets, and resolutions. We retain support records for one year to track recurring issues and improve our service. We do not share support conversations with third parties unless legally required.

If you opt in to push notifications, we send alerts for draw results (Togel Market), draw schedules, new promotions, and withdrawal updates. You can disable notifications in your account settings any time. We do not use notification opt-ins for profiling or marketing to non-account users.

Our Data Protection and Your Rights

Encryption and Security Practices

We encrypt all data in transit to and from laku using HTTPS (TLS 1.2 or higher). Your login credentials, payment details, and KYC documents are encrypted at rest on our servers. Access to sensitive data is restricted to laku staff members with a need-to-know (fraud investigation, customer support, account verification). We do not have access to your password after you set it — we store only a hash.

We do not guarantee perfect security — no platform is immune to breaches. If we detect a security incident affecting your account, we notify you by email and provide guidance on password reset and account recovery. We do not ask for your password or 2FA codes via email or support messages.

Data Retention and Deletion

We keep your data only as long as necessary:

• Account data (email, phone, password hash): Retained for the lifetime of your account. If you close your account, we delete email and phone within 30 days but retain encrypted account identifiers for dispute resolution for one year.
• KYC documents: Retained for seven years per regulatory requirements, then securely deleted.
• Transaction records: Retained for one year; archived for compliance, then deleted after seven years.
• Gameplay history: Retained for your account lifetime. After account closure, archived for one year for disputes, then deleted.
• Session logs: Deleted after 90 days unless tied to security incidents.
• Support records: Retained for one year, then deleted.

Your Rights and Data Access Requests

You have the right to request a copy of all data we hold about you. Submit a data-access request via laku support, and we will provide a report within 14 business days. The report includes your account details, KYC documents, transaction history, and gameplay records. You can download this data in a portable format.

You also have the right to request deletion of non-essential data. For example, you can request deletion of gameplay history after account closure, subject to legal and compliance holds. Contact laku support with your request; we will review and respond within 14 business days.

Third-Party Processors and Sub-processors

We use third-party service providers for specific functions:

Payment processors

DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and Indonesian banks handle payment credentials and settlement. They are bound by their own privacy policies.

KYC providers

Third-party KYC platforms perform automated document scanning and verification. We do not share raw documents; we share only verification results.

Hosting and cloud services

Our servers may sit outside your jurisdiction (e.g., Asia-Pacific region). Data is encrypted in transit and at rest.

Fraud detection

We use standard fraud-detection services to identify suspicious account behavior. These services see transaction amounts and IP addresses, not gameplay details.

Policy Updates and Contact

We may update this privacy notice to reflect service changes or regulatory updates. Changes take effect 30 days after posting. We notify you by email if material changes affect your rights. If you have questions about our privacy practices, contact laku support via the Help menu in your account or email our compliance team. We respond within 14 business days.

Our services are available only where local law permits. Your use of laku constitutes acceptance of this privacy notice and our terms and conditionsFor more information about our platform, visit our About us page or consult our FAQ