puli Platform Privacy Notice

This page describes what we collect when you use puli and how we keep that data protected. We gather information to verify your identity, process your deposits and withdrawals through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet, and to operate our live-dealer tables, sportsbook, and slot games. Our privacy approach centres on clarity: we tell you what we collect, why we collect it, and who has access to it.

We do not sell your personal data to marketing firms or data brokers. We do not share your information beyond what is necessary to process your account, comply with financial regulations, or protect against fraud. We encrypt sensitive data in transit and at rest. If you have questions about how we handle your information, our support team responds via email and in-app messaging.

Our privacy notice applies to all users accessing puli from supported jurisdictions—Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, and other regions where local law permits online gaming. We undertake to be transparent about our data practices and to respect your rights under applicable privacy law.

What Data We Collect on puli

Account information

When you sign up for puli, we collect your email address, phone number, and full name. We use this information to create and verify your account, send you login codes, and contact you about account security. Your email and phone are your primary recovery channels—if you lose access to your account, we verify your identity via these contacts before resetting your password or updating your security details.

Payment and transaction data

We record every deposit and withdrawal on puli. When you transfer funds via DANA, e-wallet, mobile banking, local payment, or online payment, we log the transaction ID, amount, timestamp, and your e-wallet account identifier. For bank transfers through e-wallet, mobile banking, local payment, or online payment virtual accounts, we capture your bank account number (masked except the last four digits in our interface), transfer reference, and settlement date. We retain these records for accounting, fraud detection, and compliance with financial regulations.

Identity verification documents

For withdrawals above specified thresholds, we request a photo of your national identity card (KTP) or passport and proof of address (utility bill or bank statement). We collect these documents to comply with Know-Your-Customer (KYC) requirements under Indonesian financial law. We store images encrypted on our servers. We do not use these documents for any purpose outside identity verification and regulatory compliance. If your withdrawal is denied due to document issues, we explain the reason and offer guidance on resubmission.

Your puli data: We store your account data on encrypted servers. We do not share your personal information with third parties except payment processors (who handle your transactions), compliance partners (for financial regulations), and law enforcement when legally required.

Game activity and device data

We log your game activity on puli—which games you play, your wagers, your results, timestamps, and your device type (Android phone, iPhone, desktop browser). We use this data to calculate your account balance, detect suspicious patterns (such as rapid withdrawals after large losses), and improve our platform. We do not use your game history for marketing or selling to third parties. Your game activity remains private to your puli account and our internal operations team.

We also collect limited device information: your IP address, browser type, and operating system. This helps us prevent fraud, debug technical issues, and understand how users access puli from different regions—Jakarta, Surabaya, Bandung, Medan, and Semarang, for instance. We do not track your location in real time; we infer your general region from your IP address to ensure compliance with jurisdiction restrictions.

Cookies and session data

We use cookies to keep you logged into puli and to store your language preference. These cookies do not track you across other websites. We also create a session token each time you log in; this token expires when you log out or after a period of inactivity. Session tokens allow you to move between pages on puli without re-entering your password. We do not use third-party analytics cookies that would share your behaviour data with external firms.

How We Protect and Use Your Data

Data security on puli

We encrypt all data in transit using TLS (Transport Layer Security) protocol. When you log into puli or submit payment details, the connection between your device and our servers is encrypted. We store sensitive data—passwords, payment information, and identity documents—in encrypted form on our servers. We do not store credit card numbers; payment processors (DANA, e-wallet, mobile banking, etc.) handle card data directly. We restrict access to your personal data to puli staff who need it for account support, fraud investigation, or compliance work. Our team signs confidentiality agreements before accessing user data.

How long we keep your data

We retain your account information for as long as your puli account is active, plus seven years after account closure. This retention period complies with Indonesian financial record-keeping requirements. We retain transaction records (deposits, withdrawals, game history) for seven years for audit and compliance purposes. Identity verification documents (KTP photos, address proofs) are retained for seven years and then securely deleted. If you request account deletion, we anonymise your personal data while keeping transaction records required by law.

Your rights regarding your puli data

You may request access to your personal data by contacting our support team. We provide a summary of information we hold on you within ten business days. You may request corrections if any data is inaccurate—for example, if your email or phone number has changed. You may request deletion of your account, though we retain transaction records as required by law. If you dispute a transaction, we investigate and provide documentation from our logs. You are not entitled to withdraw your consent for data collection necessary to operate your puli account; without this data, we cannot process deposits, verify your identity, or comply with financial regulations.

Data access: Request your account data summary via support; we respond within 10 business days.
Data correction: Update email, phone, or name in your account settings. Contact support for other changes.
Account deletion: Request closure via support. Transaction records retained for seven years per law.
Dispute resolution: We investigate transaction disputes using our encrypted logs and respond with findings.

Third-party processors and servers

We use payment processors (e.g., local payment, online payment, e-wallet) to handle deposits and withdrawals. These processors receive only the information necessary to complete your transaction—your account identifier, transfer amount, and transaction timestamp. We do not control how these processors use your data beyond the transaction itself; you should review their privacy policies. Our servers may be located outside Indonesia to ensure platform stability and backup redundancy. Data stored abroad remains subject to our privacy commitments and applicable Indonesian law. We do not transfer your data to countries with weak privacy protections.

Compliance and legal requests

We may disclose your personal data to comply with legal requests—court orders, tax inquiries, or investigations by financial regulators. We do not voluntarily share data with law enforcement; we respond only to valid legal demands. We notify you of legal requests where possible, though legal constraints may prevent notification in some cases. We do not share data for marketing, affiliate promotions, or any commercial purpose unrelated to operating puli or meeting legal obligations.

Our privacy notice reflects how we actually collect, store, and protect your data on puli. We do not use complex language or hidden clauses. We handle your email, payment information, and identity documents with encryption and restricted access. We retain records for compliance purposes and delete them after the required period. If you have questions about your data or wish to exercise your privacy rights, contact our support team via email or in-app messaging. We respond within standard business windows and provide transparent explanations about how we use your information.