Privacy Policy — elsa78

elsa78 is an internationally licensed and regulated online betting and gaming platform accessible at https://elsa78.asia. We provide sports betting, live casino, slot games, virtual sports, and capsa susun card games (a traditional Indonesian rummy-style card game) to registered members residing in Indonesia.

For the purposes of this Privacy Policy, "elsa78", "we", "us", and "our" refer to the operating entity behind the elsa78 platform and its authorised data processors. "You", "your", and "member" refer to any individual who registers an account on or otherwise interacts with the elsa78 platform.

elsa78 acts as the data controller in respect of the personal data you provide when registering and using the platform. Where we engage third-party service providers to process data on our behalf (for example, payment processors or KYC verification partners), those providers act as data processors under contractual obligations that mirror the protections set out in this policy.

If you have any questions about how elsa78 handles your data, our primary contact for privacy matters is: [email protected]. Please include "Privacy Enquiry" in your subject line so your message is routed to the appropriate team promptly.

elsa78 collects personal data in several categories depending on your relationship with the platform. The table below summarises the categories and specific data points we may hold:

elsa78 collects personal data through the following channels and interactions:

• Account Registration: When you complete the registration form on the elsa78 platform, you directly provide identity, contact, and age information.
• KYC Document Submission: When you submit identity documents (KTP, SIM, passport) and proof of address in response to a KYC request, we collect the information contained in those documents.
• Deposits and Withdrawals: Financial data is collected each time you initiate a deposit via a local Indonesian bank or e-wallet, or request a withdrawal. This includes the payment method reference and transaction metadata provided by the payment processor.
• Platform Usage: Technical and transaction data is captured automatically as you browse the platform, place bets, play casino games, or interact with support. This is collected via server logs, cookies, and session management technology.
• Customer Support Interactions: When you contact us via live chat, email, or WhatsApp, we record the content of that interaction for quality assurance and dispute resolution purposes.
• Promotions and Surveys: If you voluntarily participate in a promotional campaign or a member satisfaction survey, the information you provide in that context is collected and associated with your account.
• Third-Party Verification Partners: elsa78 may receive verification data from KYC and fraud-screening partners to whom we have submitted your identity documents. These partners confirm the authenticity of documents and check names against relevant watchlists.

elsa78 uses your personal data for the following specific purposes:

1. Account Management: To create, maintain, and administer your elsa78 account, including processing logins, updating profile information, and enforcing the single-account rule.
2. Identity and Age Verification: To confirm that you are at least 21 years of age and a resident of Indonesia, and to verify that the identity you have provided is genuine and consistent across all submitted documents.
3. Payment Processing: To receive your deposits and disburse your withdrawals via the local payment methods you have registered (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay).
4. Anti-Money Laundering (AML) Compliance: To monitor transaction patterns, flag suspicious activity, and fulfil reporting obligations under internationally recognised AML frameworks that apply to online gaming operators.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, match-fixing participation, and unauthorised access attempts.
6. Responsible Gaming: To monitor playing patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion orders you have requested, and to reach out proactively when responsible gaming concerns are identified.
7. Customer Support: To respond to your enquiries, process complaints, and resolve disputes relating to bets, transactions, or account access.
8. Platform Personalisation: To remember your preferences, display relevant promotions, and tailor your homepage experience based on the game categories and sports markets you engage with most frequently.
9. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email, SMS, or WhatsApp — but only if you have opted in to receive such communications. You may withdraw consent at any time.
10. Legal and Regulatory Obligations: To comply with requests from lawful authorities, court orders, or regulatory bodies with jurisdiction over elsa78's licensed operations.

elsa78 processes your personal data under one or more of the following lawful bases, each of which is noted against the relevant purpose described in Section 4:

• Contractual Necessity: Processing required to perform the contract between you and elsa78 — specifically, account management, payment processing, KYC verification, and the delivery of betting and gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML and counter-terrorism financing obligations, record-keeping requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in elsa78's legitimate interests where those interests are not overridden by your rights — specifically fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics used to improve the platform.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — specifically, the sending of optional marketing communications via email, SMS, or WhatsApp. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

elsa78 does not sell your personal data. We share data only in the limited circumstances described below, and only with parties who have agreed to maintain confidentiality and security standards equivalent to our own:

• Payment Processors: Indonesian bank transfer networks and e-wallet platforms (OVO, DANA, GoPay, ShopeePay) receive the minimum financial data necessary to execute your deposit or withdrawal transaction. elsa78 does not store full bank account numbers on its primary servers — these are tokenised by the payment processor.
• KYC and Identity Verification Partners: Regulated identity verification service providers receive your submitted documents solely to confirm authenticity and perform watchlist screening. These providers operate under strict data processing agreements.
• Fraud Detection and Security Providers: Technical data (IP address, device fingerprint, session metadata) may be shared with fraud-screening platforms to assess risk scores in real time. No personally identifiable information beyond what is strictly necessary is shared for this purpose.
• Game Content Providers: Studio partners (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive a pseudonymised player session identifier to facilitate gameplay and record RNG outcomes. These providers do not receive your full name, bank details, or contact information.
• Customer Support Infrastructure: Our live chat and ticketing systems are operated by contracted support platforms. These providers store chat transcripts and ticket histories under data processing agreements that prohibit them from using your data for any purpose other than delivering the support service to elsa78.
• Law Enforcement and Regulatory Authorities: elsa78 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required to do so by a valid legal order, court order, or equivalent mandatory legal process. Where permitted by law, elsa78 will notify you of such disclosures.
• Business Transfers: In the event of a merger, acquisition, restructure, or sale of assets involving elsa78, your personal data may be transferred to the successor entity, subject to that entity assuming the same privacy obligations as set out in this policy. You will be notified of any such transfer.

elsa78 uses cookies and similar technologies (local storage, session tokens) to operate the platform and improve your experience. The categories of cookies we deploy are:

elsa78 does not deploy advertising cookies, social media tracking pixels, cross-site behavioural tracking cookies, or any cookie that builds a profile of your activity outside the elsa78 platform.

You may manage or disable non-essential cookies at any time through your browser's privacy settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your elsa78 account. Guidance on managing cookies is available in the help section of all major browsers (Chrome, Firefox, Safari, Samsung Internet).

elsa78 applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• Transport Encryption: All data transmitted between your device and elsa78's servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit AES cipher suites. Our SSL certificate is maintained and renewed continuously.
• At-Rest Encryption: Sensitive personal data stored in elsa78's databases — including identity documents, payment method references, and KYC records — is encrypted at rest using AES-256.
• Access Controls: Access to personal data within elsa78's internal systems is restricted on a strict need-to-know basis. All staff with access to member data undergo background checks and are bound by confidentiality agreements.
• Multi-Factor Authentication: Administrative access to elsa78's data infrastructure requires multi-factor authentication. We encourage members to use strong, unique passwords for their own accounts.
• Intrusion Detection: elsa78's infrastructure is monitored 24/7 by automated intrusion detection systems that flag anomalous access patterns in real time. Security incidents are escalated immediately to our internal security team.
• Third-Party Audits: elsa78 engages independent security auditors on a periodic basis to conduct penetration testing and vulnerability assessments of the platform.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights or freedoms, elsa78 will notify affected members without undue delay and, where required, report the breach to the relevant supervisory authority within the applicable legal time frame.

While elsa78 takes all reasonable and technically practicable measures to protect your data, no internet transmission is 100% secure. You bear responsibility for maintaining the security of your own login credentials and for notifying us immediately if you suspect unauthorised access to your account.

elsa78 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods set out below:

After the applicable retention period expires, personal data is either securely deleted from elsa78's systems or anonymised so that it can no longer be linked to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

As an elsa78 member, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data elsa78 holds about you, along with information about how it is processed. We will provide this within 30 days of a verified request at no charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account holders may update certain information directly in Account Settings; KYC-related records require a support request.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to elsa78's overriding obligation to retain data for AML and dispute resolution purposes.
• Right to Restrict Processing: You may request that elsa78 restrict the processing of your data — for example, while a dispute about accuracy is resolved — without requesting full deletion.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your data in a structured, commonly used, machine-readable format (CSV or JSON) and, where technically feasible, to have it transmitted to another controller.
• Right to Object: You have the right to object at any time to processing of your data for direct marketing purposes. Upon receiving such an objection, elsa78 will immediately cease all marketing communications to you.
• Rights Related to Automated Decision-Making: elsa78 uses automated systems for fraud detection and responsible gaming monitoring. Where a significant decision about your account is made solely by automated means (for example, an automated account flag), you have the right to request human review of that decision.

elsa78 is an internationally operating platform. Some of the third-party service providers we use — including KYC verification partners, fraud detection platforms, and game content providers — may process data on servers located outside Indonesia. Where such transfers occur, elsa78 ensures that appropriate safeguards are in place, including:

• Data processing agreements requiring the recipient to maintain data protection standards at least equivalent to those in this Privacy Policy;
• Standard contractual clauses or equivalent transfer mechanisms recognised under applicable data protection frameworks;
• Transfers only to jurisdictions with adequate data protection regimes, or to providers certified under internationally recognised security standards (ISO/IEC 27001 or equivalent).

elsa78's primary servers are hosted in a secure data centre environment. Member data relating to Indonesian players is stored in a manner consistent with internationally recognised data residency and security best practices. If you require further information about specific transfer mechanisms used in relation to a particular service provider, please contact us at [email protected].

The elsa78 platform is strictly intended for adults aged 21 years and older. elsa78 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will promptly close the associated account, delete the data, and return any deposited funds to the payment source used.

If you have reason to believe that a minor has registered an account on elsa78 using false age information, please notify us immediately at [email protected]. Parents and guardians in Indonesia who are concerned about underage access to online gambling platforms are encouraged to use device-level parental control software to restrict access.

The elsa78 platform does not contain links to external websites for commercial or affiliate purposes. However, if any informational reference to an external resource is provided (for example, in a responsible gaming guidance context), please be aware that elsa78 has no control over the privacy practices or content of those third-party sites.

This Privacy Policy applies solely to data collected and processed by elsa78 in connection with the platform at https://elsa78.asia. We encourage you to review the privacy policies of any third-party service (such as your bank's mobile app, your e-wallet provider, or your mobile device's operating system) that you use in conjunction with elsa78, as those services operate under their own independent data policies.

elsa78 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify you by:

• Displaying a prominent notice on the elsa78 platform for at least 14 days prior to the change taking effect;
• Sending an email notification to the address registered on your account at least 14 days before the effective date; and
• Updating the "Last Updated" date at the top of this page.

Your continued use of the elsa78 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must close your account and cease using the platform before the effective date. Requests to close your account may be submitted to [email protected].

We encourage you to review this Privacy Policy periodically. The most current version will always be available at https://elsa78.asia/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way elsa78 handles your personal data, please contact our privacy team using any of the channels below. All privacy-related communications are treated with strict confidentiality and routed directly to our data protection team.

• Email: [email protected] — subject line: "Privacy Enquiry"
• WhatsApp: +62 811-0000-7878 (plain text only — not a clickable link)
• Support Hours: 24/7, including Indonesian public holidays — WIB (UTC+7)
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within 7 business days.

For formal data rights requests (access, erasure, rectification, portability, objection), please include your registered username and the email address associated with your elsa78 account so that we can verify your identity efficiently before processing your request.