Privacy Policy: The Data We Collect

This Privacy Policy explains what personal data PT Arena Teknologi Digital (“ItemGame”, “we”) collects when you use itemgame.com and its related services (the “Service”), what we use it for, who we share it with, and the rights you have over it.

We process personal data in accordance with the laws and regulations in force in Indonesia, including the Personal Data Protection Law. This policy is effective from 22 September 2026.

1. Data We Collect

Order data: the email address (required) and phone number (optional) you enter at checkout, and the Game Account identifier you provide, such as a User ID, Zone ID, server, or the destination number for mobile credit and e-wallet top-ups.
Transaction data: invoice number, the product and amount bought, currency, payment method, payment and delivery status, and timestamps. Payments are processed by our payment partners; ItemGame does not store your card number, PIN, or banking credentials.
Account data (if you sign in): the name, email address, and profile photo provided by Google or Facebook when you choose to sign in with that account.
Technical data: IP address, device and browser type, pages visited, referral source, and access logs recorded automatically by our servers and security services.
Cookies and local storage: data stored in your browser to run the site and measure its use, described in Section 4.
Correspondence: the content of your messages when you contact support by email or WhatsApp.

We do not ask for your Game Account password and never need it to process an order.

2. How We Use Data

To process orders and deliver products to the Game Account or destination number you provide.
To send invoices, delivery confirmations, and order-related notices to your email.
To answer questions and resolve order issues.
To prevent fraud and abuse, including verifying suspicious payments.
To keep the site secure and stable, and to fix faults.
To understand how the site is used and to measure our advertising campaigns.
To meet legal obligations, including bookkeeping requirements and lawful requests from authorities.

We do not sell your personal data to anyone.

3. Legal Basis

Performance of the transaction you requested, for order and transaction data.
Your consent, for analytics and advertising cookies and for signing in with Google or Facebook. Consent can be withdrawn at any time.
Legal obligation, for keeping transaction records.
Our legitimate interest in keeping the Service secure and preventing fraud, where this does not override your rights.

4. Cookies and Similar Technologies

Necessary cookies and local storage: keep your language and region choice, your sign-in session, and data the pages need to work. Our service worker also stores some site assets on your device so pages load faster.
Analytics and advertising: we use Google Tag Manager, Google Analytics, and Google Ads tags to understand site traffic and measure campaign results. Google may set cookies and process your technical data under its own privacy policy.
Security: the site is protected by Cloudflare, which may set cookies to tell genuine visitors apart from automated traffic.
You can delete or block cookies in your browser settings. Blocking necessary cookies may stop some features, such as region selection or sign-in, from working.

5. Who Receives Data

We share data only as far as needed to run the Service:

Payment partners: Duitku (Indonesia) and Fiuu (Malaysia, the Philippines, Singapore, Thailand) receive the data needed to process your payment and handle it as data controllers under their own privacy policies.
Suppliers and publishers: the Game Account identifier or destination number you enter is passed to a supplier so the product can be delivered.
Infrastructure and service providers: hosting and database providers, Cloudflare, our transactional email provider, and Google and Meta for analytics, advertising, and sign-in.
Authorities: where required by law or to respond to a valid official request.

6. International Transfers

Some of the providers we use process data outside Indonesia. Where that happens, we make sure the transfer complies with applicable personal data protection rules, including through agreements with the provider concerned.

7. Retention and Security

Order and transaction data is kept for as long as needed to complete the order, handle complaints, and meet applicable bookkeeping and tax obligations.
Account data is kept while your account is active, or until you ask for it to be deleted.
Technical data and logs are kept for a limited period for security purposes, unless needed longer to investigate abuse.
We apply reasonable safeguards, including encrypted traffic (HTTPS), restricted access to data, and system monitoring. No method of transmission or storage is completely secure, and we will notify you and the relevant authorities as required by law if a data breach affects you.

8. Your Rights

You have the right to:

Access and obtain a copy of the personal data we hold about you.
Correct data that is inaccurate or incomplete.
Request deletion of your data, including your ItemGame account.
Withdraw consent you previously gave.
Object to, or ask us to restrict, certain processing.

Send requests to [email protected] from the email address used on your order or account; we may ask for additional verification before acting on them. Some data, such as transaction records, must be kept for a set period by law even if you ask for deletion. You also have the right to lodge a complaint with the competent data protection authority.

9. Children

The Service is intended for users aged 18 or over, or under the supervision of a parent or guardian. If you become aware that a child has given us personal data without a parent’s or guardian’s consent, contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy when the Service, the providers we use, or the regulations change. The latest version and its effective date are always published on this page, and significant changes are announced on the site before they take effect.

11. Contact

Questions or requests about personal data can be sent to:

PT Arena Teknologi Digital
Email: [email protected]
WhatsApp: +62 877 7077 7770
Address: Tokopedia Care Tower, 15th Floor Unit 10, Jl. Lingkar Luar Barat No. 101, Rawa Buaya, Cengkareng, West Jakarta, DKI Jakarta 11740, Indonesia