karamba Privacy Policy for account and payment data

karamba introduction

This page describes what we collect when you use karamba and how we keep that data protected for account login, KYC checks, payment review, and withdrawal handling. We provide our casino and sportsbook service only where applicable law permits.

We start from the account flow: email verification, phone login, KYC document upload, two-factor authentication, and a selected payment method. Our mobile path supports Android installation guidance, iOS browser access, stable network use, and QRIS scan-and-pay top-ups when that option is shown in the account wallet.

We apply this policy to data linked with football and tournament coverage, live-dealer tables, slot categories, esports markets, wallet top-ups, virtual-account transfers, support notes, and account security events. Our policy also covers payment names such as e-walletmobile banking, local payment, online payment, e-wallet, mobile bankinglocal paymentonline payment, e-wallet, and mobile banking when those details appear in our account records.

Details

We collect account data that you provide to karamba, including your email, phone number, login identifiers, password reset records, KYC details, and contact messages. We may also collect device data, browser type, IP information, session logs, and security signals when you access our platform from Jakarta, Surabaya, Bandung, or another location.

We use your data to operate account access, review KYC documents, process payment references, answer support questions, monitor login risk, handle password reset requests, and maintain internal records. Our review may compare a deposit source with a withdrawal destination when the names, wallet numbers, bank details, or recent account changes need clarification.

We keep game activity data for account history and service operation. Our records may show football selections related to Liga 1, Piala AFF, Champions League, Premier League, MotoGP, badminton, live-dealer tables such as blackjack, roulette, baccarat, and Dragon Tiger, slot titles such as Aviator and Mahjong Ways, and esports markets such as Mobile Legends, Free Fire, and PUBG Mobile.

We share selected data with third-party processors when we need account hosting, payment routing, verification checks, fraud screening, analytics, customer support tools, or message delivery. Our processors receive only the data needed for their assigned task, and we expect them to handle it under confidentiality and data-protection duties.

Our servers may sit outside your jurisdiction, and our processors may handle data in more than one country. We use standard security practices, access controls, and review logs to reduce unauthorised access risk, but we do not describe any system as perfect or absolute.

• We collect identity and contact data for account verification and support.
• We collect payment references for deposit matching and withdrawal review.
• We collect device and session data for login security and risk checks.
• We collect game and wallet history for account records and dispute handling.

We use cookies and similar tools to keep you logged in, remember basic preferences, detect unusual sessions, and measure service performance. Our cookies may support Android installed access and iOS browser access, but you can adjust browser settings if you want to limit some cookie functions.

Policy

We keep personal data only for as long as we need it for account operation, legal records, payment review, dispute handling, fraud prevention, and internal audit. Our retention period may differ by data type because KYC records, support notes, wallet references, and login logs serve different account purposes.

We respect your rights to request access, correction, deletion, or restriction where applicable law gives those rights. Our response may require identity confirmation before we change account records, because payment history, KYC detail, and withdrawal destinations must remain traceable and accurate.

We may decline or delay a request when we must keep data for legal compliance, account dispute review, payment investigation, security monitoring, or fraud prevention. Our explanation will use practical terms and will not ask for private wallet or bank passwords.

1. We ask you to send the request from the verified account contact when possible.
2. We may ask for identity confirmation before releasing or changing data.
3. We review payment-linked data carefully when DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, or local payment records are involved.

We protect account access by supporting password reset checks, two-factor authentication where available, device review, and manual withdrawal review when account signals change. Our team may pause a withdrawal review if recent login changes, mismatched ownership, unclear KYC data, or jurisdiction questions require clarification.

We use contact data to send service messages about account verification, payment status, withdrawal review, security notices, and policy updates. Our messages are service-led and may refer to account tools, live-dealer tables, sportsbook categories, or wallet routes only when that information is relevant to your account.

We provide our services only where local law permits. Our users are responsible for checking whether access and use comply with their own jurisdiction’s law before opening or using an account.

We keep contact options inside the account help area and related policy pages. Our support team may ask for your account identifier, verified contact detail, payment reference, device context, or a short issue summary so we can review the request without collecting unnecessary private credentials.