capcom Platform Privacy Notice

This page describes what we collect when you use capcom and how we keep that data protected. We collect personal information only to operate our platform securely, process your payments, verify your identity, and comply with financial regulations. We do not sell your data to third parties, nor do we use it for marketing without your explicit consent.

Our servers may be located outside Indonesia; however, we encrypt all data in transit and at rest using industry-standard protocols. We comply with applicable data-protection laws and international standards for handling financial and personal information. You have the right to request a copy of your data, request corrections, or ask for deletion subject to legal retention requirements.

The sections below explain our data practices in detail. If you have questions about how we handle your information on capcom, contact our support team through your account settings or email us directly.

What data we collect on capcom

When you create an account on capcom, we collect your full name, email address, phone number (optional), date of birth, and residential address. This information is required to verify your identity and process deposits and withdrawals through local payment methods (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet).

We also collect information about your activity on capcom: which games you play, your betting history, deposit and withdrawal records, login timestamps, and device information (operating system, browser type, IP address). This data helps us detect fraud, prevent money laundering, and improve our platform performance.

During account verification (KYC), we ask you to upload government-issued identification (national ID, passport, or driver's licence) and proof of residential address (utility bill, bank statement, or rental agreement). We store these documents securely and use them only to verify your identity. We do not share these documents with third parties unless required by law.

Third-party data processors

We work with trusted third parties to operate capcom. These include:

• Payment processors: We share payment information (name, bank account, e-wallet ID) with payment gateways to process deposits and withdrawals. These processors are licensed and comply with PCI-DSS (Payment Card Industry Data Security Standard).
• Identity verification providers: We may use third-party services to verify your identity documents during KYC. These services receive your ID scan and address proof but do not retain them after verification.
• Live-dealer studios: Our live-dealer tables are streamed from licensed gaming studios. These studios do not collect your personal data; they only receive your game outcomes and betting actions in real time.
• Fraud and compliance tools: We use anti-money-laundering (AML) and fraud-detection services to screen accounts against international sanctions lists and identify suspicious activity patterns. These tools process your name and address but do not store it beyond the screening result.
• Email and SMS providers: We send account notifications, password resets, and withdrawal confirmations via email and SMS through certified providers. These providers have access to your email and phone number but use it only to deliver our messages.

All third-party processors are bound by data-protection agreements and may not use your information for any purpose other than the service they provide to us.

Cookies and tracking on capcom

We use cookies (small text files stored on your device) to remember your login session, store your preferences, and analyse how you use capcom. We use both session cookies (deleted when you close your browser) and persistent cookies (stored for up to 12 months).

Our cookies serve these purposes:

• Session management: keeping you logged in so you do not have to re-enter your password each time you navigate.
• Security: storing your 2FA tokens and session ID to prevent unauthorised access.
• Analytics: understanding which games and betting markets are popular, and where users experience technical problems.
• Advertising: if you consent, we may use cookies to show capcom ads on third-party websites (retargeting). You can opt out of retargeting in your account settings.

We do not use third-party cookies for tracking behaviour across unrelated websites. You can disable cookies in your browser settings, but this may affect capcom functionality (e.g., you may be logged out after each page refresh).

Your rights and data retention on capcom

You have the right to:

• Request your data: Contact us through your account settings, and we will provide a download of all your personal data in a standard format within 30 days.
• Correct inaccuracies: If your stored name, address, or other information is wrong, you can update it directly in your account settings. Changes to sensitive data (name, date of birth) require identity re-verification.
• Request deletion: You can request that we delete your account and associated data. However, we must retain your transaction history, ID documents, and financial records for 7 years to comply with anti-money-laundering regulations and tax law.
• Opt out of marketing: We will not send promotional emails or SMS unless you explicitly consent. You can withdraw consent anytime by clicking "Unsubscribe" on any marketing email or adjusting your notification settings in capcom.
• Dispute processing: If you believe we are processing your data unlawfully, you can lodge a complaint with the relevant data-protection authority in your jurisdiction.

Retention period

We retain account data and transaction history for a minimum of 7 years to comply with financial regulations. After account closure, we delete non-financial personal data within 30 days unless legal holds apply.

Access requests

We respond to data access requests within 30 days. You can request this through your account or by contacting support directly.

Cross-border transfers

Your data may be transferred to servers or processors outside Indonesia. All transfers are encrypted and subject to data-protection agreements.

Automated decisions

We may use automated tools (fraud detection, bonus eligibility) to make decisions about your account. You can request human review of any automated decision.

Security practices and jurisdiction notice

We employ multiple security layers to protect your data on capcom. All communications are encrypted with TLS 1.3. Our servers use firewall protection, intrusion detection, and regular security audits. Employee access to sensitive data is logged and monitored. We conduct penetration testing and vulnerability scanning quarterly.

Our servers are located in multiple jurisdictions (including Singapore, Malta, and the Philippines) for redundancy and compliance. Data transfer between locations is always encrypted. We maintain data residency options for users who prefer Indonesian server storage, although this may affect platform performance.

If capcom experiences a data breach, we will notify affected users within 72 hours by email and provide guidance on protective steps. We maintain cyber-liability insurance and incident-response procedures to minimise harm.

We remain committed to transparent data handling and your privacy. This policy is updated periodically; we will notify you by email if material changes occur. Your continued use of capcom after updates constitutes acceptance. If you have privacy questions or concerns, our support team is available in English and regional languages during business hours.