This page explains our policy on collecting, using and disclosing personal information when you use our services. We never sell your data, and we don't use or share it except as described here.
1. Introduction
This policy covers anjas.id, the Client Area (billing), the Game Panel and all ANJAS services. We use your personal information to provide and improve our services. By using our services you agree to the collection and use of information in accordance with this policy.
It follows Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and, for users in the European Union, the General Data Protection Regulation (GDPR).
2. Personal information
When you use our services we may ask for personally identifiable information that can be used to contact or identify you. This may include, but is not limited to, your name, email, phone number and postal address.
We also keep the data needed to run the service: invoice and payment history, server configuration, files you upload, and support tickets and correspondence with our team.
3. Log data
We collect information your browser sends whenever you visit our services ("Log Data"). This may include your Internet Protocol ("IP") address, browser type and version, the pages you visit, the time and date of your visit, the time spent on those pages and other statistics.
Servers running your services also generate network and security logs that we use to keep services stable, mitigate DDoS attacks and investigate abuse.
4. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Providing and managing the services you order | Performance of a contract |
| Billing, fraud prevention and tax obligations | Legal obligation and legitimate interest |
| Network security, DDoS mitigation and abuse investigation | Legitimate interest |
| Technical support and service notices | Performance of a contract |
| Promotional information | Consent (withdrawable at any time) |
5. Disclosure to third parties
Personal information you provide on anjas.id is never sold, rented or given to outside parties for their own purposes.
Data is shared only as needed to run the service — with payment providers, data centre providers and transactional email providers — under obligations to protect it to the standard of this policy. Data may also be disclosed to competent authorities where required by law.
6. Data retention
| Data type | Retention |
|---|---|
| Web access logs and server network logs | 30 days |
| Security and DDoS mitigation logs | 90 days |
| Account data | While the account is active; deleted or anonymised after closure |
| Invoice and transaction data | As required by tax record-keeping rules |
| Service files and backups | Deleted after service termination per the Terms of Service |
8. Security
The security of your personal information is important to us. We apply a range of measures to protect it:
- All traffic to the site, Client Area and Game Panel is encrypted with TLS.
- Data you provide (username, email, address and so on) is stored in our database. Sensitive information such as passwords is encrypted or hashed.
- Passwords are stored with a strong hash function, making them extremely difficult to recover even if an attacker obtains the hashes.
- Sensitive data is never stored in browser cookies. Client Area session tokens are stored encrypted in httpOnly cookies.
- Credit card numbers are not and will never be stored in our database; payments are processed directly by payment providers.
- Internal access to production systems is role-restricted, and infrastructure is protected by firewalls and always-on DDoS mitigation.
- In the event of a personal data breach we notify affected users and the relevant authority within the deadlines set by UU PDP.
9. Your rights
Requests, including data deletion, can be made via a Client Area ticket or the Contact page.
- Access and obtain a copy of your personal data.
- Correct inaccurate data.
- Request erasure of your data where no legal obligation requires us to keep it.
- Restrict or object to certain processing, including marketing.
- Withdraw consent previously given.
- Receive your data in a commonly used format (portability).
- Lodge a complaint with a data protection authority.
10. Links to other websites
Our services may contain links to sites we don't operate. If you click a third-party link you will be directed to that site. We strongly advise you to review the privacy policy of every site you visit.
We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party sites or services.
11. International transfers
Where data is processed outside Indonesia, we ensure the recipient provides equal or higher protection, as required by UU PDP and the GDPR.
12. Changes to this privacy policy
We may update this Privacy Policy from time to time. Changes are announced by publishing the new policy on this page, and material changes are also notified by email or in the Client Area.
We advise you to review this policy periodically. Changes take effect when published on this page. If you have any questions, please contact us.
Related documents
Questions about this document?
Contact us