gatcha Platform Privacy Notice
This page describes what we collect when you use gatcha and how we keep that data protected. We at gatcha collect personal information only when you register, verify your account, deposit funds, or withdraw winnings. We use your data solely for account verification (KYC), fraud prevention, compliance with applicable law, and to process your transactions.
Our gatcha platform operates across desktop and mobile browsers. When you sign up, we collect your name, date of birth, email, phone number, and a photo of your identity document (national ID, passport, or driving licence). We also log your IP address, browser type, and device information for security purposes. All data is encrypted and stored on secure servers; we do not sell your personal information to third parties.
We at gatcha are committed to transparency about data handling. This privacy notice outlines what we collect, how we use it, who may access it, your rights regarding your data, and how to contact us if you have questions or concerns about privacy on our platform.
Data Collection & Use on gatcha
What we collect during account creation
When you register on gatcha, we collect your full name, date of birth, residential address, email address, and phone number. We also ask you to confirm your jurisdiction of residence—this is mandatory because our services are available only where applicable law permits. We collect no payment card details during signup; instead, payment information is handled directly by our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) and encrypted in transit.
During account verification (KYC), we require a photo of your identity document—national ID, passport, or driving licence. We use this to confirm your identity and ensure compliance with anti-fraud and anti-money-laundering regulations. Our gatcha system compares your document photo against our verification vendor's database; we do not store a raw copy of your document indefinitely but retain verification records for compliance audits. Verification typically completes within one business day.
How we use your data on gatcha
We at gatcha use your personal data for four primary purposes: account management, fraud prevention, legal compliance, and service communication. Account management includes processing your deposits and withdrawals, calculating your weekly cashback and tier status, and enabling you to log in securely. Your email and phone number allow us to send account notifications, promotion announcements, and verification codes.
Fraud prevention is critical to our gatcha platform. We log your IP address, browser fingerprint, and device type each time you log in. If we detect unusual activity—such as login from an unrecognized location, rapid withdrawals, or duplicate accounts—we flag the activity and may temporarily restrict your account pending review. Legal compliance means we maintain transaction records to satisfy anti-money-laundering reporting requirements and respond to legitimate law-enforcement requests.
We do not use your data for marketing to third parties. You may receive promotional emails from our gatcha team about new games, seasonal bonuses (e.g., Idul Fitri or Idul Adha offers), or Liga 1 and Piala Indonesia tournament events. You can opt out of these emails in your account settings under "Notifications." Opting out does not affect your ability to use our platform or receive transaction confirmations.
Third-party processors & data sharing
Our gatcha platform works with third-party vendors to deliver services. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and your bank if you use online payment, e-wallet, mobile banking, or local payment direct transfer) receive only your transaction data—no other personal information from your gatcha account. We share your data with these processors only to process your requested deposits and withdrawals.
We also work with identity verification vendors to complete KYC checks. We share your name, date of birth, and document photo with these vendors; they compare your information against their databases to confirm your identity. We do not authorize these vendors to use your data for any other purpose. Our verification partners are bound by confidentiality agreements.
We may disclose your data if required by law—for example, if a court order or regulatory authority requests it. We do not sell or rent your personal information to marketers, data brokers, or any commercial entity. Our gatcha servers may sit outside Indonesia, but all data is encrypted in transit and at rest, and we maintain the same security standards regardless of server location.
Cookies & device tracking on gatcha
Our gatcha platform uses cookies and similar tracking technologies to keep you logged in, remember your preferences (such as which sports or slot games you viewed last), and track site traffic for analytics. These are session cookies (deleted when you close your browser) and persistent cookies (which remain until expiry or deletion). You can disable cookies in your browser settings, but some gatcha features may not work properly without them.
We use analytics tools (such as Google Analytics) to understand how members use our gatcha platform—which pages they visit, which games they access, how long they stay. This data is anonymized: it tells us trends, not individual identities. You can opt out of analytics tracking in your browser or by adjusting your account settings. We do not track you across other websites; our tracking applies only to gatcha.id.
Your rights regarding your data on gatcha
You have the right to access your personal data on gatcha, correct inaccurate information, and request deletion of your data (subject to legal and compliance requirements). To exercise these rights, contact our support team with your request. We respond to data access requests within ten business days.
You may request that we delete your account and associated data, but we may retain transaction records for up to seven years to comply with anti-money-laundering regulations. If you request deletion, we will remove your name, email, phone, and identity document from our active systems as soon as legally possible. You retain the right to appeal any denial of a data deletion request.
If you believe our gatcha platform has misused your data or violated this privacy notice, you may file a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first at [email protected] so we can address your concern directly.
Data retention & account closure
We at gatcha retain your personal data as long as your account is active and for a period afterward as required by law. Transaction records are kept for seven years for compliance and audit purposes. If you close your account, we stop using your data for marketing or promotional purposes immediately, but we retain sufficient records to honor any pending withdrawals or dispute resolution.
If your gatcha account remains inactive (no login or activity) for three years, we may archive your data and eventually delete it, subject to legal retention obligations. We will send a notice to your registered email address before deleting archived accounts. Your balance, transaction history, and tier status remain accessible if you return within the three-year window.
Your Privacy on gatcha: Summary & Contact
Our gatcha privacy practice is built on three principles: collect only what we need, protect it with industry standards, and use it only for stated purposes. We collect your name, contact details, identity document, and transaction data. We use this data for account verification, fraud prevention, legal compliance, and service communication. We do not sell your data to third parties or use it for marketing outside our platform.
Cookies and analytics on gatcha help us understand how members use our platform and improve service. You can control cookie settings in your browser. Payment processors and identity verification vendors receive only the data needed to complete their services. All data is encrypted in transit and at rest, and optional two-factor authentication adds security to your login.
You have the right to access, correct, or request deletion of your personal data. Contact our support team if you have questions about privacy on gatcha or wish to exercise your rights. We respond to data requests within ten business days. If you are based in Jakarta, Surabaya, Bandung, Medan, or Semarang and have concerns about how your data is handled during account setup, deposits via DANA or e-wallet, or withdrawals during Idul Fitri or Idul Adha, our support team is available to assist.