onetap Privacy Policy

This page describes what we collect when you use onetap and how we keep that data protected. Our privacy practices apply to all users accessing our platform — whether via web browser, Android app, or iOS mobile access — across supported jurisdictions including Jakarta, Surabaya, Bandung, Medan, and Semarang.

We collect personal data only to run our service: account registration details, payment information, gameplay activity, and communication logs. We do not sell your data to third parties. We store personal information on encrypted servers and limit access to authorized staff. We comply with applicable data protection laws and provide you with rights to request, correct, or delete your data.

Our commitment to your privacy is straightforward — we collect what we need to operate slots, live-dealer tables, sportsbook markets, and esports coverage, and we protect that data with industry-standard encryption and access controls. This policy explains the details.

Data We Collect at onetap

We also collect gameplay data: your betting history, tournament participation, account balance, and session timestamps. We use this data to maintain your leaderboard ranking, calculate winnings, detect fraud, and improve our platform. We do not use your gameplay data for marketing purposes without your consent.

When you contact our support team, we store your chat logs, emails, and dispute records. We use these to handle account recovery, resolve payment disputes, and train our support staff. We retain support records for at least two years to honor refund requests and dispute claims.

Our platform uses cookies and similar tracking technology. Cookies store your login session, language preference, and UI settings. We do not use cookies for advertising or third-party tracking. You can disable cookies in your browser settings, though this may affect your ability to access certain onetap features.

Third-Party Data Processors

We use third-party vendors to process payments, verify identity, and deliver email. Our payment processor handles card and bank transfer transactions; they do not store your payment details — we receive only a confirmation token. Our identity-verification vendor scans your ID and checks it against public databases; we retain only the verification result, not the photo itself. Our email service sends account notifications and support replies; they do not have access to your gameplay data.

These vendors operate under data-processing agreements that require them to protect your information and use it only for the services we request. Our servers may sit outside your jurisdiction — we comply with applicable data protection laws regardless of server location.

Personal data

Name, email, phone, address, ID photo, date of birth — collected during account registration.

Gameplay data

Betting history, tournament participation, account balance, session logs — used for leaderboards and fraud detection.

Payment data

Processed by external vendors; we do not store card details or bank credentials.

Support records

Chat logs and emails retained for two years to honor dispute claims and refund requests.

Your Rights and Our Commitments on onetap

You have the right to request a copy of all personal data we hold about you. You can also request correction of inaccurate data or deletion of data we no longer need to keep. To exercise these rights, contact our support team during business hours (Monday–Friday, 09:00–18:00 Jakarta time). We typically respond within 10 business days. If you are in a jurisdiction with specific data protection laws, we comply with those laws.

You have the right to withdraw consent for marketing communications. We do not send marketing emails without your consent; you can manage email preferences in your account settings. You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

We keep your data for as long as your account is active or as long as we need it to fulfill our legal obligations. After account closure, we retain personal data for seven years to comply with financial and anti-money-laundering regulations, then delete it. Gameplay data is retained for two years after your last transaction; support records are kept for two years after closure to honor dispute claims.

Data Security and Breach Notification

We use industry-standard encryption (TLS 1.2 or higher) to protect data in transit. Personal data at rest is encrypted using AES-256 or equivalent. Our servers are located in secure data centers with restricted physical and network access. We conduct regular security audits and penetration tests to identify vulnerabilities.

If we discover a data breach affecting your personal information, we will notify you within 30 days by email. We will also notify relevant authorities as required by law. Our notification will describe the breach, the types of data compromised, steps you can take to protect yourself, and how to contact us with questions.

We at onetap collect only the data needed to operate our service, protect that data with encryption and access controls, and give you the right to access, correct, and delete your information.

Policy Changes and Contact Information

We may update this privacy policy to reflect changes in our operations or applicable law. We will notify you of material changes by email and by updating the publication date on this page. Your continued use of onetap after we post changes constitutes your acceptance of the updated policy.

If you have questions about our privacy practices, want to access your data, or wish to lodge a complaint, contact our support team. We operate in English and Indonesian, Monday–Friday, 09:00–18:00 Jakarta time. You can reach us through the help section in your account dashboard or by email. We typically respond within 4 hours during business hours.

This policy was last updated on the date shown at the bottom of this page. We are committed to protecting your privacy and being transparent about how we use your data. If you do not agree with our privacy practices, you may choose not to use onetap. Services are available only where local law permits.