goaloo Privacy Policy

This page describes what we collect when you use goaloo and how we keep that data protected. We at goaloo take your privacy seriously. When you create an account, log in on your phone, deposit funds via DANA, e-wallet, mobile banking, or any other method, or withdraw your balance, we collect information necessary to verify your identity, process your transactions, and secure your account.

Our commitment is to handle your data transparently and securely. We explain what we collect, why we collect it, who has access to it, and how long we keep it. We do not sell your personal information to third parties. Our servers may sit outside your jurisdiction, but we apply standard encryption and access controls to protect your data.

If you have questions about this policy or want to exercise your rights over your data, you can contact us using the details at the end of this page. Our privacy practices comply with standard data-protection principles, and we undertake to respond to data requests and concerns promptly.

What data we collect at goaloo

We collect different types of data depending on how you use goaloo. During account signup, we collect your email address, phone number, full name, date of birth, and identity document number or passport information. This data is used for one-time account verification and to comply with anti-money-laundering regulations.

When you deposit funds, we record your payment method, the amount, the date and time, and the outcome (successful or failed). If you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we store a record of that transaction on our servers. We do not store your full card numbers or wallet credentials—payment processors handle that data directly.

When you play games on goaloo, we log your game selections, stakes, results, and balance changes. When you withdraw, we record your withdrawal amount, destination payment method, and processing status. Your login history, including IP address, device type, and login timestamp, is also recorded for security purposes.

How we use your data on goaloo

We use your data for several purposes. First, we verify your identity to comply with local regulations and anti-money-laundering requirements. Second, we process your deposits and withdrawals—without your payment details, we cannot move funds between your mobile banking wallet, bank account, or our platform. Third, we maintain your transaction history so you can review your account activity anytime.

We also use your data for account security. We monitor for unusual login patterns, detect potential fraud, and enable two-factor authentication if you choose it. We use your email and phone number to send you account notifications—for example, when a withdrawal is pending or when your login happens from an unusual location. We also use your data to respond to your support requests if you contact us with questions about your account.

Finally, we use aggregated and anonymized data to improve our platform. We analyze which games are popular, which payment methods are used most frequently, and how users navigate goaloo. This analysis does not identify you personally—it helps us understand trends across all account holders in Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, and other regions.

Who has access to your data

Within goaloo, your data is accessible only to staff members who need it to perform their job—for example, our support team sees your name and account history when you contact us, and our compliance team sees your identity verification documents. We limit access strictly and require all staff to sign confidentiality agreements.

Third-party service providers may access your data to perform specific functions. Payment processors handle your transaction data to route deposits and withdrawals. Our hosting provider stores your account data on secure servers. Our email service provider handles notifications we send you. We require all third-party providers to sign data-protection agreements and apply industry-standard security practices.

We do not sell your data to advertisers, marketers, or other commercial entities. We may disclose your data if required by law—for example, if a government agency issues a legal demand for account information. We will inform you of such disclosures whenever legally permitted to do so.

Data retention and your rights

We retain your account data for as long as your account is active and for a reasonable period after you close it, to fulfill regulatory requirements and handle any outstanding transactions. Your transaction history remains in our system indefinitely for compliance purposes. If you want to know what data we hold about you, or if you want us to delete or correct your data, you can submit a data-access request by contacting us using the details at the end of this page.

You have the right to request a copy of your personal data, request correction of inaccurate data, and request deletion of data where legally permitted. In some jurisdictions, you may have the right to data portability—the right to receive your data in a machine-readable format. We will respond to data-access and deletion requests within a reasonable timeframe, typically within thirty days.

If you want to delete your goaloo account entirely, you can request account closure. We will securely delete your personal data after a holding period to ensure no outstanding transactions remain. Some data may be retained longer if required by law or regulation.

Security and cookies on goaloo

We protect your data using industry-standard encryption, secure password handling, and access controls. Your account password is hashed—we don't store it in plain text. Your payment data is encrypted in transit and at rest. We use SSL/TLS certificates to encrypt data between your phone and our servers, so your transactions are protected when you log in or deposit via QRIS, e-wallet, or bank transfer.

Our servers may be located outside your jurisdiction. Data transfers between your phone and our international servers are encrypted, so your data remains protected regardless of physical server location. We undertake to apply the same security standards across all server locations.

Cookies and tracking

When you use goaloo on your phone or browser, we use cookies to remember your login session, your language preference, and your account settings. These are strictly necessary cookies—they don't track you across other websites. We do not use tracking cookies or third-party analytics that follow you outside goaloo.

You can disable cookies in your browser settings, but some goaloo features may not work correctly if you do. Our app on Android stores session tokens locally to keep you logged in, which improves user experience without requiring you to re-enter credentials every time you open the app.

Changes to this privacy policy

We may update this policy if our practices change or if regulations require it. We will notify you of significant changes by email or by posting a notice on the goaloo website. If you disagree with our updated policy, you may close your account. Continuing to use goaloo after policy updates means you accept the new terms.

Your jurisdiction and our service area

This privacy policy applies to all users of goaloo. Our services are available only where local law permits. If you are in a jurisdiction where online gaming is restricted, your access to goaloo may be blocked or limited. We recommend you verify your own jurisdiction's laws before accessing our platform.

We collect and process data in accordance with applicable laws in jurisdictions where we operate. If you are located in Indonesia or another jurisdiction where goaloo is available, this policy governs how we handle your data. If you have privacy concerns specific to your jurisdiction, you may contact us or consult local privacy regulations.

We at goaloo remain committed to protecting your privacy, handling your payment data securely, and respecting your rights over your personal information. When you deposit via mobile banking, local payment, or any supported method, when you play games or check your balance, and when you withdraw to your original payment account, your data is safeguarded by encryption, access controls, and responsible data practices. If you have any concerns or questions about how we handle your information, please contact us using the details in our help section.