modal Privacy Policy

This page describes what we collect when you use modal and how we keep that data protected. We collect personal information only to operate our platform, process payments, verify your identity, and comply with anti-money-laundering regulations. Our commitment is to handle your data transparently and securely.

When you create a modal account, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, or place bets on Liga 1, Piala AFF, Champions League, or other markets, we record those actions. We do not sell your data to third parties. We share information only with payment processors, fraud-prevention services, and regulators where legally required.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law. We do not offer our services in jurisdictions where online wagering is prohibited.

What We Collect on modal

Account Information

We collect your email address, password (hashed, never stored in plain text), full name, date of birth, and phone number during registration. We use this information to verify your identity, send account notifications, and recover your account if you forget your password. Your date of birth confirms you meet the minimum age requirement under the law of your jurisdiction.

Payment Data

When you deposit on modal via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we record the deposit amount, timestamp, and payment method. We do not store full card numbers or bank account details; instead, we store a tokenised reference provided by our payment processor. Withdrawal requests are similarly logged with the amount, method, and completion status. We retain payment records for seven years to comply with anti-money-laundering reporting.

Identity Verification Documents

Before your first withdrawal, we require Know-Your-Customer (KYC) verification. We collect scans of your national identity card and proof of address (utility bill, bank statement). We encrypt these files and store them separately from your account login data. We delete KYC documents one year after account closure or dormancy.

Betting and Gaming Activity

We log every bet you place on modal—whether on Liga 1, Piala Indonesia, live-dealer blackjack, Aviator slots, or esports markets. We record the bet amount, odds, outcome, and payout. This data helps us detect fraud, settle disputes, and provide accurate statements. We also track your session duration, device type, and IP address for security purposes.

Cookies and Tracking

Our modal platform uses cookies to remember your login session, store your language preference, and track which games you viewed. Session cookies expire when you close your browser. Persistent cookies remain for up to 30 days to streamline your next login. We do not use third-party advertising cookies. Analytics cookies help us identify technical issues and improve platform speed.

Communication Data

If you contact our customer support team, we keep records of your inquiry, our response, and any attachments you send. We use this data to resolve issues and train our support staff. Support conversations are kept for three years.

Our modal Data Protection and Your Rights

How We Protect Your Data

We at modal encrypt all data in transit using TLS 1.3 (HTTPS). Your password is hashed with bcrypt; we cannot retrieve it even if our servers are compromised. Our payment processor, fraud-prevention partner, and KYC vendor are all contractually bound to protect your data. We conduct annual security audits and respond to any breach within 24 hours by notifying affected users.

Who We Share Data With

We share your data only with the following categories of processor: (1) Payment processors (e.g., DANA, e-wallet, mobile banking handlers) to execute deposits and withdrawals; (2) KYC verification services to confirm your identity; (3) Fraud-prevention vendors to detect suspicious activity; (4) Legal authorities only when required by court order or anti-money-laundering legislation. We do not sell user data to marketers or brokers.

Your Rights on modal

• 1
  Right to access

  You can request a copy of all personal data we hold about you within 30 days.

• 2
  Right to correction

  If your email, phone, or address is incorrect, you can update it in your modal account settings anytime.

• 3
  Right to erasure

  You can close your modal account. We then anonymise your personal data, though we retain transaction records for regulatory compliance.

Cross-Border Data Transfer

Our modal servers may be located outside your jurisdiction. When we transfer your data internationally, we apply the same encryption and contractual safeguards as domestic transfers. By using modal, you consent to this transfer. If you do not accept cross-border data handling, do not create an account.

Changes to This Policy

We may update this modal privacy policy from time to time. We will notify you of material changes via email to your registered address. Continued use of modal after such notice constitutes acceptance of the updated policy. We recommend reviewing this page periodically during major holidays such as Idul Fitri, Idul Adha, and Imlek, when our terms may be clarified.

Contact modal

If you have questions about our privacy practices, wish to exercise your data rights, or believe we have mishandled your information, contact our data protection team at [email protected]. We will respond within five business days. If you are located in Jakarta, Surabaya, Bandung, or Medan and believe we have violated local data protection law, you may file a complaint with your regional data protection authority.

We at modal believe that transparency and security are foundational—you should always know what we collect and trust that your data is protected.