citampi Platform Privacy Notice

This page describes what we collect when you use citampi and how we keep that data protected. We operate a gaming and sportsbook platform available to users in supported jurisdictions where local law permits. When you access our service via Android, iOS, or desktop — whether to check football odds on Liga 1 or Piala AFF, place live-dealer bets at our blackjack and roulette tables, or explore our slot games — you share certain information with us. We take that responsibility seriously and have structured our data practices to be transparent and fair.

Our commitment is straightforward: we collect only what we need to run the platform, verify your identity, process your payments (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and Indonesia's major banks), and settle your bets. We do not sell your data to third parties for marketing. We do not track your browsing outside citampi. We keep your personal information encrypted and access-controlled. This notice explains the detail.

If you have specific questions about your data, your rights, or how to request deletion or correction, our support team can help — reach them via the Help section in your citampi app or contact us directly. We respond within 48 hours to data requests.

What We Collect and Why

We collect different types of information depending on how you use citampi. At account creation, we ask for your name, email address, phone number, and date of birth. These are mandatory — we need them to verify your identity and ensure you meet age requirements for gaming in your jurisdiction. We also collect your username and password (encrypted).

When you make a deposit or withdrawal, we record the transaction details: payment method, amount, timestamp, and confirmation status. If you deposit via DANA or e-wallet, we see only that the payment was processed; we do not store your wallet credentials. For bank transfers and virtual accounts (mobile banking, local payment, online payment, e-wallet), we record the account number you provide and use it for settlement. We never store unencrypted card details.

As you use citampi, we log your activity: which markets you view, which games you enter, bet placement and settlement times. This helps us detect fraud, resolve disputes, and improve our service. We track your IP address and device type so we can spot unusual access patterns — if your account is accessed from a new city or device, we may ask for re-verification.

Account data: Name, email, phone, date of birth, identity document (during KYC). Encrypted and access-controlled.
Transaction data: Deposits, withdrawals, payment method, amounts, timestamps, settlement status. Retained for 7 years for compliance.
Gameplay data: Bets placed, markets viewed, game sessions, time spent. Used for fraud detection and player support.
Device and access data: IP address, device type, browser version, login times. Helps us secure your account and detect unauthorized use.

KYC and Identity Verification

Before your first withdrawal, we request identity verification (Know Your Customer). You upload a clear photo of your passport or national ID through the citampi app. Our system scans the document for authenticity and matches it against your provided name and date of birth. This process typically completes within one business day. We retain the document image for compliance — regulators in Jakarta and other jurisdictions require us to keep these records for at least five years. Once verified, you do not need to re-verify unless you change core details or we detect fraud risk.

Important: We never request your identity documents via email or outside the app. If someone claiming to be from citampi asks for your documents elsewhere, it is a scam. Always verify requests through your official citampi account.

How We Protect and Share Your Data

Our servers are hosted in data centres outside Indonesia, primarily in Singapore and Malaysia. This means your data leaves your local jurisdiction — we understand this may be a concern. We encrypt all data in transit (HTTPS/TLS) and at rest (AES-256). Access to your personal information is restricted to citampi staff who need it to serve you — our support team, compliance officers, and technical administrators. We do not grant access to marketing teams or third-party vendors unless strictly necessary.

We do share certain data with third parties, but only where required:

1

Payment processorsRequired

To process your DANA, e-wallet, or mobile banking deposits, we share your transaction details with those payment networks. We do not share your full personal data.
2

Identity verification servicesRequired

During KYC, we may use a third-party identity verification vendor. We send your document image and name only — not your account history or betting data.
3

Regulators and law enforcementRequired

If a regulator in Surabaya, Bandung, or another jurisdiction issues a legal order, we will disclose data as required by law.

Your Rights on citampi

You have the right to access your personal data, request correction if it is inaccurate, and ask us to delete it (subject to legal holds). You also have the right to data portability — we can export your account data in a portable format. If you wish to exercise these rights, contact our support team. We will respond within 30 days. Note that we may retain some data longer than your request if required by law or to resolve disputes. For example, transaction records are retained for seven years for tax and compliance purposes.

We do not use cookies for tracking across websites. Within citampi, we use session cookies only — these expire when you log out. If you disable cookies, some features may not work. We do not use third-party analytics that track you outside our platform. We use push notifications on Android and iOS to alert you to bet settlements, large wins, or account activity — you can disable these in your app settings without losing account access.

Our data practices comply with local laws where citampi operates. If there is a conflict between this notice and applicable law in your jurisdiction, local law takes precedence. We review this notice annually and will update it if our practices change materially. We will notify you via email if changes affect your rights.

If you have a data-protection concern that our support team cannot resolve, you may contact us in writing. Provide your account details, describe the issue, and state what remedy you seek. We will investigate and respond within 60 days.