legobet Platform Privacy Notice

This page describes what data we collect when you use legobet and how we keep that data protected. When you create a legobet account, log in from your phone, deposit through DANA or e-wallet, or withdraw funds, we collect personal information. We describe below what we collect, how we use it, who may access it, and your rights regarding your data on legobet.

We are committed to transparent data handling. We do not sell your information to marketers or data brokers. We do not share your account activity with game publishers or tournament operators without your explicit consent. We encrypt data in transit and at rest. This notice explains our commitments and the mechanics of how legobet handles your information.

What Data We Collect on legobet

Account Information

We collect your email address, full name, date of birth, and phone number when you sign up for legobet. We also collect a copy of your government-issued ID (passport, national ID card, or driver's licence) for Know Your Customer (KYC) verification. We review these documents within 24 hours to prevent fraud and comply with anti-money-laundering regulations. We store your ID photo on encrypted servers separate from your account profile.

Payment Information

When you deposit to your legobet account via QRIS, e-walletmobile banking, local payment, online payment, or bank transfer to e-wallet, mobile banking, local payment, or online payment, we collect payment confirmation data: the amount, the payment method, a transaction reference, and your confirmation timestamp. We store this information to reconcile deposits and enable withdrawals to return to your original payment method. We do not store your full bank account numbers or card data — payment processors handle those directly.

Activity Data

We collect your account login history (date, time, device), your balance at each transaction, and your betting or gaming activity on legobet (stakes placed, markets selected, outcomes, settlement results). We use this data to prevent fraud, investigate disputes, and detect patterns of problem use. We do not sell this data to third parties. We do not share your gaming history with other sportsbooks or casinos.

We keep your legobet account data encrypted and separated from unrelated systems — your ID verification is isolated, your payment data is isolated, and your betting history is isolated.

Device and Connection Data

We log your device type (Android phone, iPhone, desktop), your IP address, your approximate location (city or region level, never precise GPS), and connection speed. We use this to detect account takeover attempts, prevent fraud across multiple accounts, and optimise our platform for common device types. We do not track your physical location outside of legobet.

Our Data Protection Policy on legobet

Third-Party Processors

We use third-party payment processors to handle deposits and withdrawals. These processors do not retain your payment information on our behalf — they operate under their own privacy policies. We use cloud hosting providers (Amazon Web Services) to store encrypted account and transaction data. These providers are contractually obligated not to access or use your data for their own purposes. We do not share your account activity with game publishers, slot providers, or tournament operators without your consent.

Data Retention and Deletion

We retain your account data for as long as your legobet account is active. If you close your account, we retain transaction records for 5 years to comply with financial regulations. We retain your ID photo for 2 years after account closure or KYC expiry. After these periods, we securely delete your data. You can request deletion of your account by contacting our support team via live chat or email during business hours. We will process account closure requests within 5 business days.

Cookies and Tracking

We use cookies on legobet to maintain your login session, remember your preferences (such as language and notification settings), and detect fraud. We do not use cookies to track you across external websites. We do not sell cookie data to advertisers. You can disable cookies in your browser settings, but doing so will prevent you from staying logged into legobet.

Your Rights Regarding Your Data on legobet

You have the right to access all data we hold about you on legobet. You can request a copy of your account information, transaction history, and login history by emailing our support team. We will provide this data within 14 days in a readable format. You have the right to correct inaccurate information — if your phone number or email has changed, update it in your legobet account settings or contact support. You have the right to request deletion of your account and associated data after retention periods end.

International Data Transfers

Our legobet servers are located in Singapore, the United States, and Indonesia. Your data may be transferred between these jurisdictions for backup and account recovery purposes. We ensure that data transfers meet or exceed Indonesian data protection standards. If you are in Jakarta, Surabaya, Bandung, Medan, or other regions where legobet operates, your data may transit internationally but remains encrypted during transfer.

Jurisdiction and Legal Requests

We comply with lawful requests from Indonesian government agencies and law enforcement. If we receive a legal order to disclose account information, we will do so only to the extent required by law. We will notify you of such requests unless prohibited by law. Our legobet service is jurisdiction-restricted — we serve only regions where online gaming is legally permitted under local law.

Contact and Support

If you have questions about how we handle your data on legobet, contact our support team via live chat (response within 1–2 hours during business hours), email (response within 24 hours), or phone. We are available roughly 9 AM to midnight Indonesia time daily. During major holidays like Idul Fitri, Idul Adha, and Imlek, response times may extend, but we keep emergency contact channels open for data protection requests. You can also request a data subject access request (DSAR) in writing, and we will respond within 30 days.