lebah Privacy Policy

This page describes what we collect when you use lebah and how we keep that data protected. Our privacy commitment is simple: we ask for only the information necessary to verify your identity, process your payments, and deliver our services—football betting, live-dealer tables, slot games, and esports markets. We do not sell your personal data to marketers, and we encrypt all sensitive information transmitted between your mobile device or browser and our servers.

When you open an account on lebah, we collect your name, email, date of birth, phone number, and residential address for identity verification. We also collect payment information—your preferred deposit method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account)—but we do not store your full payment credentials; instead, we use tokenised references so we never hold your raw card or account numbers. We also log your game activity and account history so you can review your complete transaction record at any time.

Our lebah platform operates in supported jurisdictions where online gaming is legally permitted. Our data practices comply with privacy regulations in those regions. This policy explains our collection, use, storage, and your rights regarding your data on lebah.

What Data We Collect on lebah

We collect information in three main categories. First, account information: your full name, email address, date of birth, phone number, residential address, and government-issued ID number (used for KYC verification only). Second, financial information: your chosen payment method (e-wallet provider or bank name), the amount and date of each deposit or withdrawal, and transaction status. We do not store complete payment card numbers or full bank account numbers; payment processors tokenise this data and return only a reference token to us. Third, activity information: which games you access, how long you play, when you log in and out, your device type (Android or iOS), IP address, and browser type.

We also collect optional communication data if you contact our support team—your email, chat messages, and any attachments you send. We retain support tickets to help resolve your questions and to maintain a record of our service interactions. We use cookies on our web browser version to remember your login preference and language choice; mobile app users do not see cookie notices because our app stores preferences locally on your device instead.

Account data

Name, email, date of birth, phone, address, ID number for identity verification.

Payment data

Deposit/withdrawal method and amounts; tokenised payment references (not full credentials).

Activity data

Games played, login times, device type, IP address, browser info, and session duration.

Support data

Chat messages, emails, and attachments sent to our support team.

How We Use Your Data on lebah

We use your data for four primary purposes. First, to verify your identity and comply with Know-Your-Customer (KYC) regulations in regions like Jakarta, Surabaya, Bandung, and Medan. Your government ID is compared against official records to confirm you are who you claim to be. Second, to process your deposits and withdrawals—we share your payment method and transaction details with our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet partners) so they can credit or debit your account. Third, to deliver our gaming service—your activity data helps us load the correct games, track your balance, and detect technical problems. Fourth, to prevent fraud and ensure account security—we monitor for suspicious login patterns, unusual withdrawal requests, or multiple account registrations from the same device.

We may also use your data to send you service notifications—account verification confirmations, deposit receipts, withdrawal status updates, or alerts about special promotions during holidays like Idul Fitri, Idul Adha, or Imlek. You can disable non-essential notifications in your account settings; service notifications (like withdrawal confirmations) cannot be disabled because they are necessary for account security. We do not send unsolicited marketing emails without your permission.

We at lebah use your data only to deliver our platform securely, comply with regulations, and keep your account safe. We never sell your information to third parties.

Third-Party Processors and International Data Transfer

We work with external partners to deliver our service. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and our bank partners online payment, e-wallet, mobile banking, local payment) receive your payment method and transaction data to complete deposits and withdrawals. Identity verification providers receive your name, date of birth, and ID number to confirm you are not on sanctions lists or flagged for financial crime. Our cloud hosting provider stores our server infrastructure and databases; your account data and game history are backed up on their servers for reliability and disaster recovery.

Our servers may sit outside your jurisdiction. Data transferred internationally is encrypted end-to-end so that transmission is secure. We require all third-party processors to sign data protection agreements committing them to the same privacy standards we maintain. We do not share your data with advertisers, analytics firms, or social media platforms. If a third-party processor requests your data beyond what is needed for our service, we will refuse unless you provide explicit written consent.

Your Rights and How to Access Your Data

You have the right to access your data on lebah at any time by logging into your account and reviewing your profile, transaction history, and game activity. You can also request a copy of all data we hold about you by contacting our support team in English. We will provide a machine-readable export of your account information within 14 business days. You have the right to correct inaccurate information—if your name or address is misspelled in our records, contact us and we will update it. You also have the right to request deletion of your account and personal data, subject to legal requirements that we retain records for financial compliance.

If you believe we have misused your data or violated your privacy rights, you may lodge a complaint with our privacy officer by emailing our support team. We will investigate your complaint and provide a response within 30 days. If you remain unsatisfied, you may file a complaint with the data protection authority in your country or jurisdiction.

How Long We Store Your Data

We store your account information for as long as your account is active, plus an additional period for compliance and dispute resolution. We retain transaction records (deposits, withdrawals, game activity) for at least seven years to comply with anti-money-laundering and tax regulations in supported jurisdictions. We delete support chat transcripts after two years unless they relate to an active dispute or investigation. Identity verification documents (copies of your ID and selfie) are retained for three years after account closure in case we need to re-verify your identity if you wish to reopen your account. If you request account deletion, we will remove your personal data from active systems but retain a minimal record (name, email, account closure date) for compliance purposes.

Security, Encryption, and Cookies

We encrypt all data transmitted between your device and our lebah servers using TLS (Transport Layer Security) protocol. Your login credentials are hashed so that we never store your plaintext password—even our staff cannot see it. We use industry-standard firewalls and intrusion detection to monitor for unauthorised access. We conduct regular security audits and penetration testing to identify vulnerabilities. If we discover a security breach that affects your data, we will notify you by email within 72 hours and explain what information was compromised and what steps we took to secure your account.

On our web browser version, we use cookies to store your login session and language preference. These are session cookies that expire when you close your browser; we also use persistent cookies that remember you for 30 days if you check "remember me" at login. We do not use third-party tracking cookies or sell cookie data. Mobile app users do not see cookies; instead, our app stores preferences in local device storage. You can disable cookies in your browser settings, but some features of lebah may not function properly if you do.

Contact and Policy Updates

If you have questions about this privacy policy or want to exercise your rights, contact our support team through your lebah account dashboard. We respond to privacy inquiries in English during operating hours. We may update this privacy policy at any time to reflect changes in our practices, new regulations, or technical improvements. When we make material changes, we will notify you by email and update the "last modified" date at the bottom of this policy. Continued use of lebah after a policy update constitutes your acceptance of the new terms.

Our privacy policy covers your use of lebah on all devices—Android app, iOS browser, desktop browser, and any future platforms we launch. This policy is governed by the laws of the jurisdictions where we operate. We do not make privacy commitments beyond what is stated in this policy, and we reserve the right to share your data with law enforcement or financial authorities if legally required to do so by court order or regulatory demand.