poni Privacy Policy

This page describes what we collect when you use poni and how we keep that data protected. We collect information only to operate your account, process your deposits and withdrawals, comply with identity verification, and improve our platform. We do not sell your data to third parties, and we do not use your information for marketing purposes beyond notifying you of account status or payment issues.

Our privacy practices reflect Indonesian data protection standards. When you create a poni account, provide payment details, or request a withdrawal, your information travels encrypted from your device to our servers. We store sensitive data—such as your ID number and bank account details—in isolated, access-restricted systems. Your email address and account balance are held in our main database with standard security protocols.

This policy covers what we collect, why we collect it, how long we keep it, and your rights to access or delete your data. If you have questions about our practices, our support team can address them via our live chat or in-app help.

What data we collect on poni

We collect five categories of information when you use poni. First, account data: your email address, chosen password, and phone number (optional). Second, identity data: your full name, date of birth, national ID number, and address. Third, payment data: your e-wallet or bank account linked to deposits and withdrawals. Fourth, transaction data: every deposit, withdrawal, game play, and balance change. Fifth, technical data: your device type, operating system, IP address, and browser information.

We collect account data when you register. Identity data is collected only when you request your first withdrawal—we need it to verify your account and comply with anti-money-laundering regulations. Payment data is provided by you when you select DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet for a deposit or withdrawal. Transaction data is generated automatically by our system every time you fund your account or play a game. Technical data is collected passively by our servers and logging systems.

How we use your data on poni

We use account data to maintain your poni profile, send you login links, and notify you of account changes or security alerts. We use identity data to comply with anti-money-laundering rules, verify your first withdrawal, and protect against fraud. We use payment data to route your deposits and withdrawals to the correct e-wallet or bank account.

We use transaction data to generate your account history, calculate your balance, and provide support when you ask about a specific deposit or withdrawal. We use technical data to diagnose server problems, detect unusual login patterns, and improve our platform's performance across Android phones, iOS browsers, and desktop devices.

We do not use your data for marketing emails or promotional calls. We send you only transactional emails—such as "your withdrawal of [amount] to mobile banking is pending" or "your account verification passed." We do not rent your email address to third parties. We do not sell your profile information to data brokers.

Who else accesses your data on poni

We share your data with payment processors only. When you deposit via local payment, online payment, e-wallet, mobile banking, or local payment, those companies receive your transaction details to complete the transfer. When you use online payment, your bank's payment network receives the transaction. When you withdraw to a e-wallet, mobile banking, local payment, or online payment virtual account, we share your name and account number with the receiving bank so they can credit your account.

We also share limited data with service providers who help us operate poni. Our hosting provider stores our database backups; they sign a strict data-protection agreement preventing them from using your data for their own purposes. Our email service provider sends our transactional messages; they are contractually forbidden from marketing to our users. Our analytics provider sees aggregate statistics about how many people log in from Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta, but they never see individual names or ID numbers.

We do not share your data with law enforcement or government agencies unless required by a valid court order or subpoena. Indonesia's data protection laws permit disclosure in cases of serious crime. We would notify you of such a request whenever legally permitted to do so.

How long we keep your data on poni

We retain your account data—email, password, phone number—for as long as your account is active and for two years after you delete it. This retention supports dispute resolution and fraud investigation. We retain identity data—ID number, address—for five years after your account deletion to comply with anti-money-laundering regulations; this is a legal requirement in Indonesia.

We retain payment data—your linked e-wallet or bank account—for as long as your account is active. When you unlink a payment method, we delete the underlying account details but keep a tokenized reference for 12 months to detect duplicate transactions. We retain transaction data indefinitely; you can request a full transaction history at any time through our poni support team.

We retain technical data—IP addresses, device information—for 90 days. After 90 days, we delete individual IP addresses but retain aggregate statistics (for example, "1000 logins from Indonesia this month") for performance analysis.

Cookies and tracking on poni

We use cookies on poni to maintain your login session, remember your device, and prevent fraud. Session cookies expire when you close your browser. Persistent cookies stay on your device for up to 12 months and let you log in faster on your next visit.

We do not use cookies for marketing or behavioral tracking. We do not sell your browsing history to advertisers. We use cookies only to operate poni reliably. If you disable cookies in your browser, poni may not function correctly—you may need to log in repeatedly or experience interrupted gameplay.

Data outside your jurisdiction

Our poni servers may sit outside Indonesia. We use data centers in Southeast Asia to ensure fast game performance and quick payment processing. When your data travels to these servers, it remains encrypted in transit. Even if a data center operator wanted to read your information, they would see only encrypted text.

Jurisdiction-restricted framing: our services are available only where local law permits. Users are responsible for verifying that their access and use of poni comply with their own jurisdiction's law. If you access poni from a jurisdiction where online entertainment is prohibited, you violate that jurisdiction's law, not our policy.

Updates to this policy

We may update our privacy policy to reflect changes in our operations or applicable law. We will notify you of significant changes by email or by posting a notice on poni. If you do not agree with our updated privacy practices, you can delete your account before the new policy takes effect.

We at poni treat your data as a trust. We collect only what we need, protect what we collect, and never sell what you give us.

Contacting us about privacy on poni

If you have questions about our privacy practices, our data handling, or your rights under this policy, our poni support team is available through live chat and in-app help. We respond to privacy inquiries within standard support windows. You can also email our privacy officer directly for concerns that require escalation or detailed investigation.

We take privacy requests seriously. If you ask us to delete your data, we process your request within the retention periods outlined above. If you ask for a copy of your data, we compile it within standard business days and deliver it in a readable format. If you report a suspected data breach, we investigate immediately and notify you of our findings.

Our commitment on poni is to protect your information as carefully as you protect it. We do not view your data as a commodity; we view it as a responsibility. Every piece of information—from your email to your bank account number—is held in strict confidence and used only for the purposes described in this policy.