This Privacy Policy explains how PT. Ankassa Raya Digital ("we", "us", "our"), the operator of the Gaple mobile application ("Gaple", "the App"), collects, uses, shares, and protects information when you use Gaple.
By creating an account or otherwise using Gaple, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.
1. Who we are
- Operator: PT. Ankassa Raya Digital
- Registered address: Jln. Pattimura No 17, Bonesompe, Poso Kota Utara, 94616
- Contact: ankassarayadigital@gmail.com
- App package:
com.ankassa.gaple
2. Information we collect
2.1 Account and identity data
When you sign in with Google (via Firebase Authentication) — or with Apple, once that platform launches — we receive a unique authentication identifier and, depending on what the provider shares and you permit, your name and email address. We use this solely to create and secure your Gaple account — we do not use it for marketing outside the App.
Inside the App you additionally choose:
- a username (unique, publicly visible to other players),
- an optional display name and bio,
- an avatar and cosmetic loadout (frames, nameplates, tile skins, etc.).
2.2 Gameplay data
Match history, scores, ranking/ladder standing, room and tournament participation, quest progress, and in-game currency balances (Coins and Diamonds) earned or spent through gameplay.
2.3 Purchase data
If you buy a Monthly Pass, Diamond pack, or other in-app product, the purchase is processed by Google Play Billing (or Apple, once that platform launches) — we never see or store your payment card details. Our backend receives a purchase receipt/token from the store, which we verify server-side to grant the corresponding in-app entitlement, and we retain a record of the transaction (product, amount, timestamp, status) for order history, support, refunds, and fraud prevention.
2.4 Push notification token
If you allow notifications, we store a device push token (Firebase Cloud Messaging) to deliver gameplay-related notifications (e.g. quest reminders, tournament updates, broadcast announcements). You can disable this at any time in your device's notification settings.
2.5 Camera (QR scanning)
Gaple requests camera permission only to let you scan a QR code (for example, to join a room or tournament via an invite code). The camera feed is processed locally on your device to read the code — we do not capture, store, or transmit any photo or video from your camera.
2.6 Device and technical data
We automatically collect limited technical information needed to operate and secure the service: app version and crash/diagnostic data (via Firebase Crashlytics) when the App unexpectedly stops working, plus the following identifiers.
IP address. We record and store your IP address and associate it with your account — when you register, when your sign-in is refreshed, and when your device connects to our game servers. Where you claim a referral invite, the IP used at that moment is also stored on the referral record. We use it for abuse, fraud, and referral-abuse prevention, e.g. detecting multi-accounting, matchmaking collusion, or self-referral. We never use your IP address to track your location or for advertising.
Device identifier. The App supplies an opaque device identifier, recorded on the same events and stored as provided — we do not derive a device fingerprint from it. It is kept, together with the snapshot taken when a referral invite is claimed, so that possible duplicate-device abuse can be reviewed.
2.7 Analytics and remote configuration
We use Firebase Analytics to understand aggregate, non-identifying usage patterns (e.g. which screens are used, session length, feature adoption) so we can improve the App. This data is processed by Google as our service provider.
The App also uses Firebase Remote Config to receive remote configuration and feature-flag values at startup, so we can enable, disable, or tune features without shipping an update. Contacting this service involves device and app-instance identifiers, and it is likewise processed by Google as our service provider.
2.8 Advertising
Gaple shows ads served by Google AdMob (interstitial and, in some placements, rewarded ads). AdMob may collect an advertising identifier and other information to select and measure ads, subject to Google's own privacy policy. You can reset or limit your device's advertising identifier in your device settings.
2.9 Customer support requests
If you contact us through Help & Support in the App, we collect what you send us: the topic, subject and description you write, any replies, and any screenshots you choose to attach (picked from your photo gallery; the App asks for photo access only when you add one and never uses the camera for this). To help us solve your issue, each request also includes your app version, device model, operating-system version and language, plus the purchase or last match you choose to point us to. Screenshots are stored privately (never publicly accessible), only you and our support team can view them, and we remove the photo's embedded metadata (such as location) when it is uploaded. Please avoid attaching screenshots that show passwords or payment details. Support requests are used only to answer you and to improve our help center.
3. How we use your information
We use the information above to:
- create, secure, and operate your account;
- run matches, rankings, tournaments, and the in-game economy;
- process purchases and grant the entitlements you paid for;
- send you notifications you've opted into;
- detect and prevent cheating, fraud, and abuse;
- diagnose crashes and fix bugs;
- understand aggregate usage so we can improve the App;
- comply with legal obligations and enforce our Terms & Conditions.
We do not sell your personal data, and we do not use your in-app data for advertising outside of the third-party ad network described above.
4. Legal basis (Indonesian Personal Data Protection Law)
Where Indonesia's Personal Data Protection Law (UU No. 27/2022, "UU PDP") applies, we process your personal data on the following bases: your consent (given when you create an account and accept this policy), performance of the contract formed by our Terms & Conditions (running the game and processing purchases), and our legitimate interest in keeping the App secure and free of fraud/abuse.
5. Who we share data with
We share data only with:
- Firebase / Google Cloud (authentication, analytics, crash reporting, remote configuration, push notifications, cloud storage) — acting as our data processor;
- Google Play Billing, to process purchases (and Apple, once that platform launches);
- Google AdMob, to serve ads;
- law enforcement or regulators, only when required by law or to protect the rights, safety, or property of PT. Ankassa Raya Digital, our players, or the public.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
6. Data retention
We keep your account data for as long as your account is active. If you delete your account (see Section 8), we permanently and immediately delete your personal data from our live systems — your profile info (display name, bio, avatar), live Coin/Diamond balance, friendships, IP address, and device identifier. Your username is replaced with an anonymized placeholder.
Your purchase and in-game currency transaction records (entitlement grants such as a Monthly Pass, and each Coins/Diamonds ledger entry) are not deleted — we keep them, unlinked from any personal data, for order history, tax, refunds, and fraud prevention, the same purposes described in Section 2.3. After deletion these records are attached only to your anonymized account placeholder; nothing in them identifies you personally any more. This is in addition to, not instead of, Google Play's own order/receipt record for the same purchase, kept under Google's own policy, which we do not control.
If our support team took an action on your account before you deleted it (e.g. processing a refund or a manual grant), a record of that action may remain in our internal administrative audit trail for accountability purposes. Your data may also persist for up to 30 days in encrypted backup snapshots taken before your deletion request, after which those backups are rotated out and no longer contain your data.
Support requests (see Section 2.9) are kept while your account is active so we can follow up. Screenshots attached to a request are permanently deleted 90 days after the request is closed. If you delete your account, the text of your support requests and their screenshots are deleted and the remaining request record is anonymized.
7. Your rights
Subject to applicable law (including UU PDP), you may have the right to: access the personal data we hold about you, correct inaccurate data, request deletion of your account and data, object to or restrict certain processing, and withdraw consent. To exercise these rights, use the in-app Delete Account option (Settings → Delete Account) or contact us at ankassarayadigital@gmail.com.
8. Account and data deletion
You can permanently delete your Gaple account at any time, directly in the App: Settings → Delete Account, then type the confirmation word to proceed. This immediately removes your authentication identity and scrubs your personal data (profile info, live currency balance, friendships, IP address, device identifier) from our systems; your username is replaced with an anonymized placeholder in historical match records that other players can still see (e.g. past match results), since those records also belong to the other participants.
Your purchase and currency transaction records (Section 6) are kept, anonymized, rather than deleted — for tax, refund, and fraud-prevention purposes.
If you cannot access the App, you can request deletion the same way described on our dedicated Account Deletion page, or by emailing ankassarayadigital@gmail.com from the address associated with your account.
9. Children's privacy
Gaple is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at ankassarayadigital@gmail.com so we can delete it.
10. Security
We use industry-standard measures (encrypted connections, access controls, server-side purchase verification) to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. International data transfer
Our infrastructure providers (Firebase/Google Cloud) may process and store data outside Indonesia. Where required by UU PDP, we ensure such transfers occur under an adequate level of data protection.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where appropriate, notified in-app.
13. Contact us
Questions about this Privacy Policy or your data: ankassarayadigital@gmail.com.
Bahasa Indonesia version: /privacy-policy