Privacy Policy — liga78

liga78 ("we", "us", "our") operates an online sports betting and gaming platform at liga78.cam, serving players primarily located in Indonesia. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you register an account, place wagers, contact our support team, or otherwise interact with our services.

By creating an account on liga78 or using our platform in any capacity, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with these terms, you must discontinue use of the platform immediately.

This Privacy Policy is incorporated by reference into our Terms & Conditions and should be read alongside that document.

2.1 Identity of the Data Controller. For the purposes of applicable data protection laws, the data controller is the international operating entity behind liga78, registered under the licensing jurisdiction stated in our Terms & Conditions. Our registered business address and data protection officer contact details are available upon request by emailing [email protected].

2.2 Contact for Privacy Matters. All data protection enquiries, requests to exercise your rights under this policy, or privacy complaints should be directed to our support team at [email protected] with the subject line "Privacy Enquiry".

liga78 collects personal data from you at different stages of your interaction with the platform. The categories and purposes of data collection are set out below:

liga78 processes your personal data for the following specific purposes:

• Account Registration & Management: Creating your player account, authenticating login sessions, managing account settings, processing username/password changes, and facilitating self-exclusion requests.
• Age Verification & KYC: Confirming that you meet the 21+ age requirement and verifying your identity to comply with anti-money-laundering (AML) regulations and our licensing obligations.
• Payment Processing: Accepting deposits from your nominated bank account or e-wallet (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), processing withdrawal requests, and reconciling transaction records.
• Game Delivery & Settlement: Recording bet placements on sports events (BRI Liga 1, EPL, Champions League, badminton, MotoGP at Mandalika), togel draws, E-sports (Mobile Legends MPL, PUBG Mobile, Free Fire), casino games, and slots; calculating win/loss outcomes; and crediting winnings to your account balance.
• Responsible Gaming Monitoring: Tracking deposit frequency, session duration, loss patterns, and other behavioral indicators to identify players at risk of problem gambling. Implementing deposit limits, loss limits, session timers, and self-exclusion as requested or as required by our responsible gaming policy.
• Fraud Prevention & Security: Detecting multi-account abuse, collusion, bonus exploitation, chargeback fraud, and unauthorized account access. Monitoring IP addresses, device fingerprints, and betting patterns for suspicious activity.
• Customer Support: Responding to enquiries submitted via email or live chat, resolving account disputes, assisting with KYC submission, and providing technical troubleshooting.
• Marketing Communications (Opt-In): Sending promotional emails about new games, bonus offers, seasonal campaigns (Idul Fitri, Indonesian Independence Day on 17 August, Chinese New Year), and loyalty rewards. Marketing communications are sent only to players who have explicitly opted in and can be unsubscribed from at any time.
• Legal Compliance & Regulatory Reporting: Fulfilling obligations under international gaming licenses, AML regulations, tax reporting requirements, and responding to lawful requests from regulatory authorities or law enforcement agencies.
• Platform Improvement: Analyzing aggregated usage data to optimize site performance, improve user interface design, develop new features, and enhance the overall player experience.

Under GDPR and equivalent international data protection frameworks, liga78 relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you accepted when registering your account. This includes account creation, payment processing, game delivery, and withdrawal fulfillment.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC verification, AML reporting, age verification, tax obligations, and responses to regulatory or law enforcement requests.
• Legitimate Interests: Processing is necessary for liga78's legitimate business interests — fraud prevention, security monitoring, platform optimization, and internal analytics — provided those interests do not override your fundamental rights and freedoms.
• Consent: Where you have explicitly opted in to receive marketing communications, participate in surveys, or allow optional data collection (e.g., phone number), we rely on your freely given, informed, and revocable consent.

You have the right to withdraw consent at any time by updating your account preferences or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

6.1 No Sale of Personal Data. liga78 does not sell, rent, lease, or trade your personal information to third parties for their direct marketing purposes. Your data is not a revenue stream for us.

6.2 Service Providers. We share personal data with carefully vetted third-party service providers who assist us in operating the platform. These include:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and their respective gateway providers. These entities process deposit and withdrawal transactions on our behalf.
• Game Studios: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, Playtech, Ezugi, Habanero, Play'n GO, Red Tiger, Yggdrasil. These studios provide the games you play; they may receive anonymized or pseudonymized player session data for RTP calculation and game integrity audits.
• KYC & Verification Services: Third-party identity verification platforms that confirm the authenticity of submitted documents and cross-reference identity data against fraud databases.
• Cloud Hosting & Infrastructure: Secure data centers and cloud service providers that host liga78's servers, databases, and backup systems.
• Customer Support Tools: Live chat software providers and ticketing systems that facilitate our support operations.

All service providers are bound by strict data processing agreements that prohibit them from using your data for any purpose other than providing their contracted services to liga78. They are required to maintain equivalent or higher security standards than liga78 itself.

6.3 Legal Disclosures. liga78 may disclose your personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where required to do so by law or in response to a valid legal request. Examples include AML investigations, tax audits, court orders, and subpoenas.

6.4 Business Transfers. In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to delete your account if you do not wish your data to be transferred.

7.1 What Are Cookies? Cookies are small text files placed on your device by websites you visit. They allow the website to recognize your device on return visits and remember your preferences.

7.2 How liga78 Uses Cookies. We use cookies and similar tracking technologies (local storage, session tokens) for the following purposes:

• Essential Cookies: Required for core platform functionality — maintaining your login session, remembering your language preference, enabling deposit/withdrawal transactions. These cannot be disabled without breaking the site.
• Performance Cookies: Collect anonymous usage statistics to help us understand which pages are most visited, where users experience errors, and how we can optimize load times.
• Fraud Prevention Cookies: Track device fingerprints, IP addresses, and behavioral patterns to detect multi-account abuse, bonus exploitation, and unauthorized access attempts.
• Marketing Cookies (Opt-In): Track which promotional campaigns you clicked through, allowing us to measure the effectiveness of our marketing and tailor future offers. These are placed only if you have opted in to marketing communications.

7.3 Managing Cookies. You can control cookie preferences through your browser settings. Most browsers allow you to block third-party cookies, delete existing cookies, or be prompted before a cookie is placed. Note that blocking essential cookies will impair your ability to use liga78.

7.4 Do Not Track. Some browsers transmit Do Not Track (DNT) signals. liga78 does not currently respond to DNT signals because there is no industry-wide standard for interpreting them. Our cookie practices are governed by your explicit opt-in choices within your account settings.

liga78 employs industry-standard technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Sockets Layer) technology. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Database Encryption: Sensitive data fields — including passwords (hashed using bcrypt), payment methods, and KYC documents — are encrypted at rest within our databases.
• Access Controls: Personal data is accessible only to authorized liga78 employees and contractors who require it to perform their duties. Access is granted on a need-to-know basis and is logged for audit purposes.
• Multi-Factor Authentication (MFA): Administrative access to liga78 systems requires multi-factor authentication to prevent unauthorized access even if credentials are compromised.
• Regular Security Audits: liga78 undergoes periodic penetration testing and security audits conducted by independent third-party firms to identify and remediate vulnerabilities.
• Firewall & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for and block malicious traffic.
• Secure Data Centers: liga78's servers are hosted in Tier III or Tier IV data centers with 24/7 physical security, redundant power supplies, fire suppression systems, and biometric access controls.

While we implement robust security measures, no system is completely impenetrable. If we become aware of a data breach that affects your personal information, we will notify you and the relevant regulatory authorities in accordance with applicable data breach notification laws.

9.1 Retention During Active Account Period. While your account remains active, liga78 retains all personal data and transaction records necessary to operate your account, process payments, and comply with our legal and regulatory obligations.

9.2 Retention After Account Closure. When you close your account, liga78 retains your personal data for a minimum of five (5) to seven (7) years following the date of closure. This retention period is mandated by anti-money-laundering regulations, gaming license requirements, and tax laws applicable in our licensing jurisdiction.

9.3 What Is Retained? Post-closure retention includes: identity data (full name, date of birth, KTP/ID number), transaction history (deposits, withdrawals, bet records), KYC verification documents, correspondence with customer support, and responsible gaming records (self-exclusion status, limit configurations).

9.4 What Is Deleted? After the mandatory retention period expires, all personal data is securely and permanently deleted from liga78's production systems and backups. Aggregated, anonymized data that cannot be linked back to you (e.g., total bet volume across all players on a given day) may be retained indefinitely for business analytics.

9.5 Legal Holds. If your data is subject to an ongoing legal dispute, regulatory investigation, or audit, liga78 may extend the retention period until the matter is resolved, even if this exceeds the standard 5–7 year window.

Under GDPR and equivalent international data protection laws, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of all personal data liga78 holds about you. We will provide this in a structured, commonly used, machine-readable format (CSV or JSON) within 30 days of your request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. You can update most information directly via your account settings; for other changes, contact support.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. This right is not absolute; liga78 may be required to retain certain data to comply with legal obligations (AML retention, tax records) even after you request deletion. We will explain which data can be deleted and which must be retained.
• Right to Restriction of Processing: You may request that we stop processing your personal data (while still retaining it) in certain circumstances — for example, if you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: You may request a copy of your personal data in a portable format and have it transmitted directly to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests (e.g., fraud prevention analytics) or direct marketing. If you object to marketing, we will immediately cease sending promotional communications.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing opt-in), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: If you believe liga78 has violated your data protection rights, you may lodge a complaint with the data protection supervisory authority in your country of residence or in the jurisdiction where liga78 is established.

How to Exercise Your Rights: To exercise any of the above rights, email our support team at [email protected] with the subject line "Data Rights Request". Include your full name, registered email address, and a description of your request. We will respond within 30 days (or sooner if required by local law). There is no fee to exercise your rights unless your request is manifestly unfounded or excessive.

11.1 Cross-Border Processing. liga78 operates from an international licensing jurisdiction and partners with service providers located in multiple countries. Your personal data may be transferred to, stored in, and processed in jurisdictions outside Indonesia, including countries that may not have data protection laws equivalent to those in Indonesia or the European Union.

11.2 Safeguards for International Transfers. Where personal data is transferred outside Indonesia to countries without an adequacy decision from the European Commission (or equivalent Indonesian data protection authority), liga78 implements appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules for intra-group transfers
• Certification under recognized data protection frameworks (e.g., EU-U.S. Data Privacy Framework, if applicable)
• Explicit consent for specific transfers where legally permissible

You may request a copy of the safeguards we have implemented for international transfers by contacting our data protection team at [email protected].

liga78 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal data from anyone under the age of 21.

If we become aware that a user under the age of 21 has registered an account or provided personal information, we will immediately suspend the account, delete the associated personal data, and forfeit any winnings accrued during the underage period. No refund of deposits will be issued where the user knowingly misrepresented their age.

Parents or guardians who believe their child has provided personal information to liga78 should contact us immediately at [email protected] so that we can take appropriate action.

13.1 Right to Amend. liga78 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered players via email or via a prominent notice on the platform at least 7 days before the updated policy takes effect.

13.2 Continued Use as Acceptance. Your continued use of liga78 after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may request account closure before the effective date.

13.3 Policy History. Previous versions of this Privacy Policy are archived and available upon request by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the liga78 data protection team:

For urgent data security concerns (suspected account breach, unauthorized data access), please mark your message as "URGENT — SECURITY" in the subject line. Our security team prioritizes these requests and aims to respond within 1 hour during peak WIB hours.