krabby Casino & Sportsbook Data Care

This page describes what we collect when you use krabby and how we keep that data protected. We operate across multiple jurisdictions where online gaming is legally available, and our data practices reflect the regulatory requirements of each region we serve.

When you create a krabby account, verify your identity, deposit via DANA, e-wallet, mobile banking, local payment, online payment, or other methods, or place bets on Liga 1, Piala AFF, or live casino tables, we collect information about you. We use this data only for the purposes outlined here—account verification, fraud prevention, payment processing, and service improvement. We do not sell your data to advertisers or third parties unrelated to gaming operations.

Our commitment is transparency. You have the right to access, correct, and delete your data in accordance with applicable privacy law. This policy explains exactly what we collect, who has access, how long we keep it, and how to exercise your rights.

What Data We Collect on krabby

We collect several categories of information to operate krabby. Account data includes your email address, username, and password (hashed securely). Identity data includes your full name, date of birth, and government-issued ID details. We request a photo of your ID and a selfie during verification to confirm you are who you claim to be.

We also collect payment data. When you deposit or withdraw via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we record the payment method, amount, and transaction ID. We do not store your full payment credentials (e.g., card numbers or mobile money PINs) on our servers; our payment processors handle that securely.

We collect betting activity to maintain your account balance

Your game history, bet amounts, odds, and outcomes are stored so we can settle your account fairly and provide transaction history. This data is essential for account integrity.

Behavioural data includes your login timestamps, device information (phone model, OS version), IP address, and browser type. We use this to detect suspicious activity, prevent unauthorised access, and improve our platform's performance across different devices and networks.

How We Use Your Data on krabby

We use your identity and payment data primarily for Know Your Customer (KYC) verification. This is a regulatory requirement to prevent money laundering, fraud, and account takeover. We verify that you are a real person of legal age and eligibility in your jurisdiction before we allow deposits or withdrawals.

We use your email to send account notifications—login alerts, withdrawal confirmations, and verification requests. You can adjust notification preferences in your krabby account settings. During key periods like Idul Fitri, Idul Adha, or Imlek, we may also send promotional notifications if you've opted in.

We analyse aggregate (anonymised) betting data to understand which games are popular, detect technical issues, and improve odds accuracy. We do not use individual betting data for marketing purposes or to target you with ads.

Account Verification
We use your ID photo and selfie to confirm your identity and prevent fraud. These documents are stored securely for the duration of your account.
Payment Processing
Your payment method details are shared with our payment partners (mobile banking, local payment, online payment, etc.) only to process your deposit or withdrawal.
Fraud Prevention
We monitor your IP address, login patterns, and betting behaviour to detect suspicious activity and protect your account from unauthorised access.
Legal Compliance
We may disclose your data to legal authorities if required by law or court order in your jurisdiction.

Third-Party Processors and International Data Transfer

We share your data with carefully selected third parties. Our payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking) receive only the minimum data required to process your transaction. Our fraud prevention vendor may access anonymised betting patterns. Our hosting provider may access encrypted account data to maintain our servers.

Our servers may sit outside your jurisdiction (e.g., a user in Jakarta may have data processed in another region). When we transfer your data internationally, we ensure it remains protected by equivalent security measures and contractual safeguards. We comply with applicable data protection regulations in each jurisdiction we serve.

Your Rights and Data Retention

You have the right to access your personal data held by krabby. Submit a request through our support channels, and we'll provide you with a copy of your information within the timeline required by applicable law (typically 30 days). You also have the right to correct inaccurate data—update your email, address, or other information through your account settings or contact us directly.

You have the right to request deletion of your personal data, subject to legal and regulatory exceptions. For example, we may retain your ID photo and betting history for fraud prevention and regulatory reporting even after you close your account. We'll honour deletion requests for non-essential data (e.g., promotional preferences) promptly.

How Long We Keep Your Data on krabby

We retain identity and payment data as long as your account is active, plus a retention period (typically two to five years post-closure) to comply with regulatory requirements and fraud prevention obligations. Betting history and transaction records are kept for regulatory reporting and dispute resolution purposes. Anonymised data used for service improvement may be kept indefinitely.

If you close your account on krabby, we anonymise or delete most personal data within 90 days, except where we're legally required to retain it longer. Your ID documents and transaction records may be retained for the full regulatory period.

Cookies and Tracking on krabby

We use cookies to keep you logged in, remember your preferences, and track how you use krabby. Session cookies (which expire when you close your browser) are essential for functionality. Persistent cookies help us remember your login and preferences across visits.

We also use analytics tools (e.g., Google Analytics) to understand user behaviour in aggregate. These tools set cookies that track page views and user journeys. You can disable analytics cookies through your browser settings without losing access to krabby's core features.

Contact us about your data anytime

If you have questions about our privacy practices or want to exercise your data rights, reach out through our support channels. We respond in English during business hours.

Security and Data Protection on krabby

We use industry-standard encryption (SSL/TLS) to protect your data in transit. Your password is hashed so that even we cannot read it—if you forget it, you reset it yourself. Identity documents and payment data are encrypted at rest on our servers.

Our team members have access to your data only on a need-to-know basis. Employees sign confidentiality agreements and are trained in data protection. We regularly audit our security practices and respond to any breaches according to applicable law.

Jurisdiction and Legal Basis

Service availability

We at krabby offer our services only in jurisdictions where online gaming and sportsbook operations are legally permitted under applicable local law. Our service availability is jurisdiction-restricted, meaning access is limited to regions where we hold appropriate regulatory permissions or where local law does not prohibit our operations. We do not offer krabby in jurisdictions where online gaming is prohibited or where we have not obtained necessary compliance clearance.

When you access krabby, you are confirming that you are located in or accessing from a jurisdiction where our services are legally available. We monitor access patterns and reserve the right to restrict access from prohibited jurisdictions. If we detect activity from a restricted region, we may suspend your account pending review.

Different jurisdictions have different regulatory frameworks. In some regions, online gaming is fully legal and regulated. In others, only specific game types (e.g., sports betting but not casino) are permitted. We structure our service offerings to comply with each jurisdiction's requirements. If your jurisdiction's laws change or if we determine your location is restricted, we may limit or terminate your access without prior notice.

Our payment partners also operate under regulatory constraints. If your payment method's jurisdiction conflicts with our service availability, a transaction may be declined. We are not liable for payment failures resulting from third-party restrictions or compliance requirements.

Account eligibility

Eligibility to use krabby is determined by applicable law in your jurisdiction. We do not impose a universal age threshold; instead, we defer to local legal requirements. However, we require all users to verify their identity through our Know Your Customer (KYC) process before we process any deposits, withdrawals, or bets.

During KYC verification on krabby, we collect a government-issued ID photo and a selfie. We review these documents to confirm your identity, age, and legal eligibility under applicable law. If we cannot verify your eligibility—for example, if your documents are unclear, if we determine you do not meet local age requirements, or if you are listed on exclusion registries—we will not allow you to proceed.

Duplicate accounts, fraudulent accounts, or accounts opened under false identity are not permitted. If we detect multiple accounts under the same individual, we reserve the right to close all accounts and withhold balances pending investigation. If you provide false information during registration or verification, we may suspend your account indefinitely.

We reserve the right to request additional documentation or information at any time if we have reason to believe there is a compliance issue. Failure to respond to such requests within a reasonable timeframe may result in account suspension or closure.

Local-law responsibility

You acknowledge that you are solely responsible for understanding and complying with the laws of your own jurisdiction regarding online gaming and sports betting. We provide no legal advice and make no representation that krabby is legal in your location. It is your obligation to verify local laws before accessing our platform.

Different jurisdictions have different rules regarding online entertainment. In some regions, online gaming is fully legal; in others, it is restricted or prohibited entirely. Some jurisdictions permit sports betting but not casino games. Some regulate specific payment methods or game types. You must research your local laws and determine whether you are legally permitted to use krabby.

If your jurisdiction's laws prohibit online gaming or if local authorities take action against you for using krabby, that is not our liability. We provide the platform in good faith for use only where it is legally permitted. By creating an account on krabby, you confirm that you have verified local law permits your access and use of our services.

We do not provide ongoing monitoring of legal changes in every jurisdiction. If laws change in your region after you open an account, we may have a lag in detecting that change. You are responsible for staying informed of legal changes that affect your use of krabby and for notifying us if your jurisdiction status changes.

Data and privacy scope

We collect personal data during account creation, verification, and ongoing use of krabby. This includes your name, email, phone number, government ID information, payment details, betting activity, and device information. We collect this data to comply with KYC regulations, prevent fraud, process payments, maintain account integrity, and improve our service.

Our privacy practices are detailed in this policy. In summary, we protect your data using industry-standard encryption and access controls. We do not sell your personal data to third parties for marketing purposes. We may share it with payment processors, fraud prevention services, and legal authorities if required by law or court order in your jurisdiction.

Your government ID documents, selfies, and financial information are stored securely and encrypted. We retain them as long as necessary for compliance and fraud prevention, typically for the duration of your account plus a regulatory retention period. You may request access to, correction of, or deletion of your data in accordance with applicable privacy law and this policy.

Payment data is processed by our payment partners (DANA, OVO, GoPay, ShopeePay, LinkAja, QRIS, BCA, Mandiri, BRI, BNI). These partners have their own privacy policies and data handling practices. We are not responsible for their data practices; however, we require them to meet minimum security standards as per our processor agreements. If you have concerns about payment data handling, contact us or your payment provider directly.

Contact for legal inquiries

If you have privacy questions, data access requests, or compliance concerns, contact krabby support through the in-app channels or via our website contact form. We have English-speaking support staff available during business hours. Standard response times are one business day for straightforward inquiries and three to five business days for complex privacy or legal matters.

When you contact us regarding your data, provide clear details about your request. If you're requesting access to your personal information, specify which categories of data you'd like to see (e.g., betting history, identity documents, payment records). This helps us respond accurately and quickly.

For data subject access requests, deletion requests, or complaints related to privacy, we will respond within the timeframe required by applicable law in your jurisdiction (typically 30 days). We maintain records of all requests and take them seriously. If we cannot fulfil a request (e.g., because we're legally required to retain the data), we'll explain our reasons.

If you believe krabby has violated your privacy rights, you have the right to lodge a complaint with the appropriate data protection authority in your jurisdiction. We recommend attempting to resolve the issue with us first through our support process, but you are entitled to pursue formal complaints or legal proceedings if necessary. We will cooperate fully with any regulatory investigation into our data practices.