lotuspelangi Privacy Policy

Digital payment adoption across the region has made personal data — names, contact details, payment identifiers — a routine part of any online account. This page describes what we collect when you use lotuspelangi and how we keep that data protected, who we share it with, and what rights you hold over the information you provide to us. Our policy applies to every member, whether they access our platform from Jakarta, Surabaya, Bandung, Medan, or Semarang, and regardless of which payment channel they use.

We write this policy in plain language because we believe you should be able to read it without a legal background. Where a technical term is unavoidable, we explain it in context. Our policy is not a static document — we review and update it when our data practices change, when we add new payment processors, or when applicable law requires an amendment. We publish the date of the most recent revision at the bottom of this page and notify members of material changes through their registered contact method.

By creating an account on lotuspelangi and using our services, you confirm that you have read this policy and that you understand how we handle your personal data. If you have questions that this page does not answer, our support contact options are listed on our About us page. Our FAQ page also covers common data and account queries in a question-and-answer format.

What We Collect and How We Use It on lotuspelangi

We collect personal data in two ways: data you provide directly when you register and transact, and data we collect automatically when you use our platform. Both categories are described below. We collect only what we need to operate our service, verify your identity, process your transactions, and communicate with you about your account and active promotions.

Data you provide to us

We collect your full name, date of birth, national identity number, registered email address, and phone number when you open an account on lotuspelangi. We collect your payment method details — including the account or wallet identifier associated with DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet — when you make a deposit or register a withdrawal method. We do not store full card numbers or full bank account numbers on our own servers; payment credentials are handled by our payment processor partners under their own security standards.

We collect identity documents — typically a national ID scan — as part of our KYC verification process. These documents are used solely to confirm your identity and are not shared with third parties except where required by applicable law or by the payment processor conducting the verification. Once verification is complete, we retain the document record for the period required under our data retention policy.

Personal data: Any information that identifies or can identify you — name, national ID number, email, phone number, payment identifiers.
KYC document: An identity document submitted during account verification; retained for the period required by our data retention policy and applicable law.
Session data: Automatically collected data including IP address, device type, browser version, and session timestamps; used for security monitoring and fraud prevention.
Cookie: A small file stored on your device that helps us maintain your login session and remember your platform preferences between visits.

Data we collect automatically

We collect session data automatically when you access lotuspelangi. This includes your IP address, device type, operating system, browser version, and the timestamps of your login and logout events. We use this data for security monitoring, fraud detection, and to maintain the integrity of our platform. We do not use session data to build advertising profiles or to sell your information to third-party marketers.

We also collect activity data — the game categories you access, the deposit and withdrawal channels you use, and the promotions you opt in to. We use this data to calculate your tier status, your weekly cashback eligibility, and your rollover progress. During high-activity periods such as Piala AFF tournament windows or Idul Fitri campaign cycles, this activity data determines which promotional credits are applied to your account.

How we use your data on lotuspelangi

We use your personal data for five purposes: to verify your identity and maintain your account, to process deposits and withdrawals through your chosen payment channel, to calculate and apply promotion eligibility, to communicate with you about your account status and active campaigns, and to comply with applicable legal obligations. We do not use your data for any purpose beyond these five without your explicit consent.

Our servers may sit outside your jurisdiction. When your data is transferred across borders, we apply contractual safeguards with our hosting and processing partners to ensure that your data receives a standard of protection consistent with our policy. We do not transfer your data to jurisdictions that do not provide an adequate level of protection without putting appropriate safeguards in place first.

Third-party processors and our lotuspelangi data commitments

We share your data with a limited set of third-party processors: our payment gateway partners who handle mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment transactions; our KYC verification provider; our hosting infrastructure provider; and our customer communication platform. Each processor is bound by a data processing agreement that restricts them to using your data only for the purpose for which it was shared. We do not sell your personal data to any third party.

We may disclose your data to law enforcement or regulatory authorities if we receive a valid legal request. In such cases, we will notify you where we are legally permitted to do so. We will not disclose your data in response to informal requests or requests that do not meet the legal threshold applicable in the relevant jurisdiction.

We collect only what we need, share only with processors bound by contract, and retain only for as long as the law or our service requires.

lotuspelangi editorial team

Cookies on lotuspelangi

We use cookies to maintain your login session, remember your language and display preferences, and monitor platform performance. We do not use third-party advertising cookies. Session cookies are deleted when you close your browser. Preference cookies persist until you clear them or until they expire according to the schedule set in your browser. You can disable cookies in your browser settings, but doing so may affect your ability to stay logged in or to access certain features of our platform.

Your Rights Under Our lotuspelangi Privacy Policy

We recognise that you hold rights over your personal data. You may request a copy of the personal data we hold about you, ask us to correct inaccurate data, or ask us to delete data that we no longer have a legal basis to retain. You may also ask us to restrict processing of your data while a correction or deletion request is under review. To exercise any of these rights, contact us through the support options listed on our About us page, including your account reference and a description of your request.

We aim to respond to data rights requests within a standard review window. Where a request is complex or where we need to verify your identity before acting, we will notify you of the extended timeline and the reason for it. We do not charge a fee for standard data rights requests. If a request is manifestly unfounded or repetitive, we reserve the right to charge a reasonable administrative fee or to decline the request, with written reasons provided.

Right of access — request a copy of the personal data we hold about your lotuspelangi account.
Right to correction — ask us to update inaccurate or incomplete personal data on file.
Right to deletion — request removal of data we no longer have a legal basis to retain, subject to our legal obligations.
Right to restriction — ask us to pause processing while a correction or deletion request is under review.
Right to object — object to processing based on our legitimate interests where your situation warrants it.

Our full account terms are available on our Terms page. Our legal notice, covering intellectual property and platform liability, is on our Legal notice page. We update this privacy policy when our data practices change; the revision date at the bottom of this page reflects the most recent update. If you have a question about how we handle a specific type of data — for example, how we process a GoPay or e-wallet transaction record — our FAQ page is the first place to check.