gogoal Casino & Sportsbook Data Care

This page describes what we collect when you use gogoal and how we keep that data protected. When you open an account, deposit funds via DANA or another payment method, or play games on our platform, we record certain information to verify your identity, process transactions, and detect fraud.

Our privacy commitment is straightforward: we collect only what we need, we protect it with encryption and secure storage, and we do not sell your personal data to third parties for marketing. We do share data with payment processors, banks, and regulatory authorities when required by law. This policy explains exactly what happens to your information on gogoal.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.

What Data We Collect on gogoal

When you register an account on gogoal, we collect your email address, legal name, date of birth, and national identity number. These details are mandatory for account creation and verification. We also collect your phone number and residential address during the KYC (know-your-customer) process. This information allows us to verify your identity and comply with financial regulations in the jurisdictions where we operate.

When you use gogoal, we log your activity: every game session, every deposit and withdrawal, every login attempt, and your IP address. We record the date, time, amount, and outcome of each transaction. For deposits via DANA, e-wallet, mobile banking, local payment virtual account, online payment, or other payment methods, we retain the transaction reference, payment provider details, and confirmation status.

KYC Data: We collect and verify identity information only for account security and regulatory compliance on gogoal. We do not use this data for marketing without your explicit consent.

We also collect technical data: your device type (mobile, desktop, tablet), browser type, operating system, and connection method (WiFi, mobile data). We use this information to optimise our platform, diagnose technical issues, and detect fraud or unauthorised access attempts.

How We Use Your Data

We use your personal data primarily for three purposes on gogoal: account verification, transaction processing, and fraud prevention. Your identity information allows us to confirm you are who you claim to be. Your deposit and withdrawal history allows us to process payments and maintain your account balance. Your activity logs allow us to detect suspicious behaviour, such as multiple failed login attempts or rapid balance changes that might indicate account compromise.

We also use your data for regulatory reporting. In jurisdictions where we operate, we must report suspicious transactions to financial-crime authorities. If we detect activity that matches money-laundering or fraud patterns, we are required by law to report it. This reporting does not require your consent; it is a legal obligation we undertake.

We retain your data for the duration of your gogoal account and for a specified period after you close it (typically three to seven years depending on local law). We do not delete your records unless you request deletion and we have no legal obligation to retain them.

Account Security and Two-Factor Authentication

We protect your gogoal account through encryption and secure password hashing. Your password is never stored in plaintext; we apply cryptographic hashing so even our internal team cannot read your password. When you log in, we verify your hashed password against our database. If you enable two-factor authentication (2FA), you receive a code via SMS or authenticator app, adding a second verification layer.

We strongly recommend enabling 2FA if you access gogoal from mobile devices or public networks. This prevents unauthorised access even if someone obtains your password.

Third-Party Processors and Data Sharing

We share certain data with third parties to operate gogoal. Payment processors (e-wallet, mobile banking, local payment providers, online payment, e-wallet, mobile banking, local payment) receive your deposit and withdrawal details to process transactions. These processors are bound by their own privacy policies and data-protection agreements with us.

We also work with email-service providers to send you account notifications and password-reset links. These providers access only your email address and are contractually obligated to protect your data.

Note: Our servers may be located outside your jurisdiction. By using gogoal, you consent to your data being transferred and stored in these locations, subject to our security protections.

Regulatory authorities and law-enforcement agencies may request your data as part of investigations. We comply with legally valid requests and do not refuse access based on user privacy objections. We do not proactively share data with authorities but will respond to legal demands.

Cookies and Tracking on gogoal

We use cookies to remember your login state and personalise your gogoal experience. Cookies are small text files stored on your device. When you visit our platform, your browser sends these cookies to our servers, allowing us to identify you without asking for your password repeatedly.

You can disable cookies in your browser settings, but this may affect your ability to log in or use certain gogoal features. We do not use cookies to track your behaviour outside our platform or to sell data to advertisers.

Data Handling Across Regional Payment Methods

Players in JakartaBandungSurabayaand Medan deposit via different payment methods, but our data-handling practices are consistent across all regions. Whether you fund your gogoal account via online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we apply the same encryption and verification standards.

During regional holidays like Idul FitriIdul Adhaand Imlekpayment processing may slow due to bank closures, but we continue to safeguard your data with the same protocols. Your transaction records remain encrypted and accessible only to authorised staff.

Your Rights Regarding Your Data on gogoal

You have the right to request a copy of the personal data we hold about you on gogoal. Contact our support team with a data-access request, and we will compile your information and send it to you. This process typically takes five to ten business days.

You also have the right to request deletion of your data, subject to legal retention requirements. For example, we may be required to retain your transaction history for financial-crime reporting purposes. If deletion is possible, we will inform you of any data we must retain and why.

You may correct inaccurate information in your account. If your registered name or address is incorrect, contact our support team and provide updated details. We will verify the correction and update our records.

  1. Request your data from gogoal

    Contact support and specify that you want a copy of all personal information we hold.

  2. We verify your identity

    We confirm you are the account holder before releasing any data.

  3. We compile and send your data

    We extract your information and send it to you in a standard format (typically CSV or JSON).

How Long We Keep Your Information

We retain your personal data for as long as your gogoal account is active. After you close your account, we continue to retain transaction records, login history, and identity information for a period of three to seven years (depending on local regulatory requirements) to comply with financial-crime reporting obligations.

We do not delete your archived data unless we are no longer legally required to keep it or unless you request deletion and we have no statutory obligation to retain it. This permanent retention supports dispute resolution and regulatory compliance.

Summary of Our Data Practices on gogoal

We at gogoal collect personal data—identity, contact details, transaction history—only for account verification, transaction processing, and fraud prevention. We protect this data with encryption and secure storage. We do not sell your data to third parties for marketing. We share data with payment processors, banks, and regulatory authorities as needed to operate and comply with law.

You have the right to request a copy of your data, correct inaccurate information, and request deletion subject to legal retention requirements. If you have concerns about how we handle your data, contact our support team via the channels listed on our About us page.

Legal and Jurisdiction

The following sections detail our legal framework and your data rights as a gogoal user.

Service availability

Service availability

We at gogoal provide our services only in jurisdictions where online gaming and our specific game offerings are permitted by local law. We do not offer our platform in regions where such activities are prohibited. Before you access gogoal, you are responsible for verifying that our services are legal and available in your location.

We maintain geographic access controls and payment-method restrictions based on regulatory compliance requirements. If our system detects access from a restricted jurisdiction, we may block your account, prevent deposits, or suspend withdrawals. These controls are a compliance measure we enforce consistently.

If you are uncertain whether gogoal services are available in your jurisdiction, contact our support team. We can provide factual information about regions where we operate without offering legal advice. In Indonesia and across Southeast Asia, gaming regulations vary by province and municipality. We recommend consulting with local legal counsel to verify compliance in your specific location.

Account eligibility

Account eligibility

To create an account on gogoal, you must be of legal age in your jurisdiction and comply with all applicable laws. We do not specify a single age threshold because the age of majority differs across jurisdictions. Your responsibility is to confirm that you meet your jurisdiction's legal minimum age before registering on our platform.

During account registration, you provide your date of birth and identity number. We verify this information subject to our standard compliance process. If your details fail verification or if your stated age appears to be below your jurisdiction's legal threshold, we will reject your account application.

We do not offer features such as account controls, account preferences, or responsible-gaming alerts as core platform tools. These are available in some jurisdictions but not required in all. We recommend that you set personal boundaries and manage your account activity responsibly before using gogoal.

Local-law responsibility

Local-law responsibility

Users are solely responsible for understanding and complying with the laws of their own jurisdiction. We provide services only where local law permits, but we cannot guarantee that every jurisdiction recognises our regulatory standing or permits all our offerings. You must conduct your own legal research before accessing gogoal.

In Indonesia, online gaming and sportsbook regulations are not fully codified at the national level. Local regulations may apply differently depending on your province or municipality. We recommend consulting with local legal counsel if you are uncertain whether your specific location permits access to gogoal.

By creating an account and using gogoal, you acknowledge that you have verified your jurisdiction permits access and that you accept full responsibility for any legal consequences of your use. We will not refund or reverse transactions based on a user's later claim that local law prohibits their activity.

Data and privacy scope

Data and privacy scope

Our privacy policy (this page) provides complete details about what personal data we collect, how we store it, and who may access it. When you use gogoal, we collect identity information (name, date of birth, national identity number), contact details (email, phone), and address. We use this data for account verification (KYC), fraud prevention, anti-money-laundering compliance, and regulatory reporting.

We also maintain logs of all game sessions, deposits, withdrawals, and login activity. This transaction data helps us detect suspicious activity, respond to account-recovery requests, and maintain audit trails for regulatory purposes. We retain this information for the duration of your account and for a specified period after account closure to comply with financial-crime reporting requirements.

We do not sell your personal data to third parties for marketing. We may share information with payment processors, bank partners, and regulatory authorities when required by law. You can request a copy of your personal data or ask for deletion by contacting our support team; responses are provided subject to legal retention requirements and may take several business days.

Contact for legal inquiries

Contact for legal inquiries

If you have questions about our privacy practices or data handling on gogoal, contact our support team through the channels listed on our About us page. We provide responses in English and other languages where available. For data-access requests or privacy concerns, our privacy team handles your inquiry. Response times depend on the complexity of your request and current support volume.

We aim to acknowledge all data-access requests within one to two business days and provide your data within five to ten business days. For general privacy questions, we aim to respond within three to five business days where possible. During peak periods or holidays, response times may extend beyond these targets.

If you believe we have mishandled your data or violated your privacy rights, you may also contact your local data-protection authority. We cooperate with data-protection authorities in jurisdictions where we operate and will respond to official inquiries and compliance orders.