At yagoal, protecting the personal data of our players is a fundamental obligation, not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and safeguard it, and what rights you hold as a data subject.
Your Privacy Matters: yagoal does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We collect only what is necessary to operate the Platform, comply with our legal obligations, and deliver a safe, personalized gaming experience to players across Indonesia.
This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, and transmitted by yagoal ("the Company", "we", "us", "our") in connection with the operation of the gaming platform accessible at https://yagoal.cam (the "Platform"). It applies to all registered players, prospective players who have initiated but not completed registration, and visitors who browse the Platform without registering an account.
This Policy is intended to be read in conjunction with yagoal's Terms & Conditions, which are incorporated herein by reference. Where this Policy and the Terms & Conditions overlap on matters of data handling, this Policy shall be the governing document.
yagoal's primary market is Indonesia, and a significant proportion of our player base consists of individuals resident in cities including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and Makassar. Where relevant, this Policy references data handling practices applicable to Indonesian players, including the use of local banking institutions such as BCA, BRI, BNI, and Mandiri for deposit and withdrawal processing.
By accessing the Platform or registering an Account, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree to this Policy, you must not use the Platform.
yagoal collects the following categories of Personal Data in the course of providing its Services:
yagoal applies the principle of data minimization — we collect only the Personal Data that is genuinely necessary for the purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where age and identity verification incidentally reveals such information through official identity documents submitted for KYC.
The majority of the Personal Data yagoal holds is provided directly by you during the registration process, the KYC verification submission, deposit and withdrawal requests, customer support interactions, and voluntary participation in promotional campaigns or surveys.
When you access and use the Platform, certain technical data is collected automatically through server logs, browser cookies, local storage, and similar technologies. This includes IP addresses, session duration, pages visited, and device fingerprinting data used for fraud detection purposes.
In certain circumstances yagoal may receive Personal Data about you from trusted third-party sources, including:
yagoal processes your Personal Data for the following specific, explicit, and legitimate purposes:
| Purpose | Categories of Data Used |
|---|---|
| Account creation and management | Identity, Contact, KYC |
| Age verification (21+ compliance) | Identity, KYC Documents |
| Processing deposits and withdrawals via local Indonesian banks | Financial & Payment |
| AML and fraud prevention screening | Identity, Financial, Technical |
| Customer support and dispute resolution | Identity, Contact, Gaming History |
| Delivering personalized promotions and bonus offers (with consent) | Contact, Behavioral & Gaming |
| Responsible gaming monitoring and self-exclusion enforcement | Identity, Gaming, Behavioral |
| Platform security and technical integrity | Technical & Device |
| Legal and regulatory compliance | All categories as required |
| Platform analytics and product improvement | Technical, Behavioral (anonymized or aggregated where possible) |
yagoal processes Personal Data on the following legal bases, consistent with internationally recognized data protection principles:
yagoal does not sell your Personal Data to third parties. We share Personal Data only in the following limited circumstances, and only to the minimum extent necessary:
We engage trusted third-party service providers who process Personal Data on our behalf under strict written contracts that mandate data protection obligations equivalent to those in this Policy. These include:
When you play casino games from licensed studios such as Pragmatic Play, Pocket Games Soft, Evolution Gaming, NetEnt, Microgaming, or Spribe, certain anonymized or pseudonymized gameplay data is transmitted to those game providers' servers to enable game functionality. Game providers are bound by their own data processing agreements with yagoal and may not use this data for purposes beyond game operation.
yagoal may disclose Personal Data to law enforcement, regulatory authorities, courts, or government agencies where required by applicable law, court order, subpoena, or regulatory investigation. This includes but is not limited to responses to requests from the licensing authority, AML authorities, or Indonesian law enforcement conducting authorized investigations.
In the event of a merger, acquisition, corporate restructuring, or sale of assets, Personal Data held by yagoal may be transferred to the successor entity, provided that the successor entity agrees to be bound by this Privacy Policy or an equivalent replacement policy with no materially weaker protections.
yagoal's primary servers and data centers are located outside Indonesia in jurisdictions that may not offer the same level of data protection as Indonesian law or internationally recognized data protection standards. By using the Platform, you acknowledge and consent to the transfer of your Personal Data to these jurisdictions.
Where we transfer Personal Data internationally, we implement appropriate safeguards including:
yagoal uses cookies and similar tracking technologies (web beacons, pixels, local storage) to deliver core Platform functionality, remember your preferences, analyze traffic patterns, and serve targeted promotional content. Cookies are categorized as follows:
These cookies are strictly necessary for the Platform to function correctly. They enable you to log in, maintain session state, and navigate between pages. You cannot opt out of essential cookies without making the Platform unusable.
These cookies remember your preferences (language, currency display format, favorite game categories) to enhance your user experience. Disabling functional cookies may reduce personalization but will not prevent Platform access.
We use analytics cookies to understand how users interact with the Platform — which pages are visited most frequently, how long sessions last, where users encounter errors, and which games are most popular. This data is typically aggregated and anonymized. We may use third-party analytics services for this purpose.
With your consent, we place marketing cookies that track your activity across sessions and enable us to deliver targeted promotional offers, display personalized game recommendations, and measure campaign effectiveness. You may opt out of marketing cookies through your browser settings or the cookie consent banner displayed on first visit.
Most modern browsers allow you to refuse or delete cookies through browser settings. Note that blocking essential cookies will impair Platform functionality, and blocking analytics or marketing cookies may result in a less personalized experience but will not prevent you from using core betting and gaming services.
yagoal retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, accounting, or reporting obligations. Specific retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data (active accounts) | Duration of account relationship |
| Transaction records (deposits, withdrawals, bets) | 7 years from transaction date (AML requirement) |
| KYC documents | 7 years from account closure |
| Customer support transcripts | 3 years from interaction date |
| Marketing consent records | 3 years from consent withdrawal |
| Session logs and technical data | 90 days (unless flagged for fraud investigation) |
| Closed or self-excluded accounts (core identity data) | Minimum 7 years to enforce self-exclusion and prevent re-registration |
At the end of the applicable retention period, Personal Data is securely deleted or anonymized such that it can no longer identify an individual.
yagoal implements industry-standard technical and organizational measures to protect Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
While yagoal employs rigorous security measures, no internet-based service can be guaranteed to be 100% secure. You also have a responsibility to protect your Account credentials and to report any suspected unauthorized access immediately to our support team.
As a data subject, you hold the following rights with respect to your Personal Data held by yagoal:
You may request a copy of all Personal Data yagoal holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
You may request deletion of your Personal Data, subject to our legal obligation to retain certain records for AML compliance (7 years).
You may request that we temporarily restrict processing of your Personal Data while we verify accuracy or assess a complaint.
You may request that we transfer your Personal Data to another service provider in a machine-readable format, where technically feasible.
You may object to processing based on legitimate interests or direct marketing purposes. We will cease unless we have compelling grounds to continue.
To exercise any of these rights, please contact our Data Protection Officer at [email protected] (plain text — not a clickable link). Include your full name, registered email address, and a description of the specific right you wish to exercise. We will respond to valid requests within 30 calendar days. There is no fee for exercising these rights, except where requests are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee.
yagoal does not knowingly collect Personal Data from individuals under 21 years of age. The Platform's Services are strictly for adults aged 21 and above. During the KYC verification process, yagoal verifies the age of all account holders through official identity documents such as the Indonesian KTP, driver's license, or passport.
If we become aware that we have inadvertently collected Personal Data from a minor, we will immediately suspend the Account, delete the Personal Data from our systems (except where retention is required by law for investigative purposes), and forfeit any balance in accordance with our Terms & Conditions.
Parents and guardians are encouraged to monitor their dependents' internet usage. If you believe that a minor has registered an account with yagoal or provided Personal Data to the Platform, please contact us immediately at [email protected].
The Platform may contain links to third-party websites, services, or applications (including game provider sites, payment processor portals, and social media platforms). yagoal is not responsible for the privacy practices or content of these third-party services. This Privacy Policy applies solely to Personal Data collected by yagoal through the Platform.
We recommend that you review the privacy policies of any third-party service you visit or use. yagoal does not endorse, control, or assume responsibility for third-party data handling practices.
yagoal reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or technological capabilities. Material changes will be communicated to registered players via email to the address on file and/or via a prominent notice on the Platform at least 14 calendar days prior to the changes taking effect, except where immediate amendment is required by law.
Your continued use of the Platform after the effective date of the amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the amended Privacy Policy, you must cease using the Platform and may request account closure and data deletion in accordance with the Right to Erasure provisions above.
If you have any questions, concerns, or complaints regarding this Privacy Policy or yagoal's data handling practices, please contact our Data Protection Officer:
Email: [email protected] (plain text — not a clickable link)
Response Time: We acknowledge all privacy inquiries within 48 hours and aim to resolve them within 30 calendar days.
If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection authority in the jurisdiction where yagoal's international gaming license is issued, or where you are resident. We will cooperate fully with any regulatory investigation or audit.
All data transmitted between your device and yagoal's servers is protected by 256-bit SSL/TLS encryption. Personal Data stored in our databases is encrypted at rest using AES-256 standards. Your KYC documents are stored securely and never shared with unauthorized parties.
yagoal does not sell, rent, or trade your Personal Data to third parties for marketing purposes. We share data only with trusted service providers who process it on our behalf under strict contractual obligations, or where required by law enforcement and regulatory authorities.
You hold the right to access, rectify, erase, restrict, and port your Personal Data at any time. You may withdraw marketing consent and object to processing based on legitimate interests. Contact our Data Protection Officer to exercise any of these rights.
Identity documents submitted for KYC verification (KTP, SIM, passport, proof of address) are used exclusively for age verification and AML compliance. They are encrypted, stored on secure servers, and accessible only to authorized compliance staff. We do not repurpose your KYC documents for marketing.
yagoal retains transaction records for 7 years to comply with AML laws, but deletes session logs and technical data after 90 days. At the end of applicable retention periods, your Personal Data is securely erased or anonymized so it can no longer identify you.
In the unlikely event of a data breach affecting your Personal Data, yagoal has documented incident response procedures to contain the breach, assess its impact, notify affected individuals within 72 hours where legally required, and report to regulatory authorities.
If you have any concerns regarding how yagoal handles your Personal Data, or if you wish to exercise any of your privacy rights, our Data Protection Officer is available 24/7 to assist. You can also review our Terms & Conditions and FAQ for additional information on account security and data handling.