Privacy Policy

Panah Bulan is designed to need as little personal data as possible. You can play Panah Cahaya without an account, without telling us your name and without any payment details. This policy explains what we do collect, why we collect it and what you can ask us to do with it.

1. Who we are

This policy covers the Panah Bulan website at panahbulan.site, the Panah Cahaya browser game and any Panah Bulan app on Google Play (together, the "Service"). "We" and "us" refer to the operator of Panah Bulan. You can reach us at [email protected].

2. Information we collect

When you open the game, our server places one session cookie in your browser. It holds a random identifier that connects your browser to your coin balance and to any free spins in progress, both of which are stored on our server. Without it, the game could not remember your coins from one spin to the next. The cookie contains no name or contact details and is not used for advertising.

Settings stored on your device

The game saves a few small settings in your browser's local storage, such as your last bet and your music and sound effect volumes. These stay on your device and are not sent to us as personal data.

Server logs

Like almost every website, our servers and network providers automatically record technical details of each visit: your IP address, browser and device type, the pages and game requests made, the date and time, and any error messages. We use these logs to keep the Service running, to fix faults and to protect it from abuse and attacks.

Emails you send us

If you contact us, we receive your email address, the content of your message and any attachments, such as screenshots. A report about a coin seller may also contain that seller's username, phone number or links.

Analytics

We do not currently use analytics or advertising trackers. If we decide to add a privacy-friendly analytics tool, we will update this policy first and ask for your consent where the law requires it.

3. Information we do not collect

We never collect bank account, card, e-wallet or other payment details. The Service has no payments.
We do not ask for your identity card, home address or date of birth.
We do not sell personal data or share it with advertisers.
We do not build marketing profiles about you.

4. How we use information

To run the game and keep your coin balance during your session
To keep the Service secure, prevent cheating and stop abuse such as coin selling
To find and fix bugs and keep the Service working across devices
To reply to your messages and act on your reports
To comply with legal obligations

We use this information because it is necessary to provide the Service you have asked for, because we have a legitimate interest in keeping it safe and working, or because the law requires it.

5. Service providers

A small number of trusted providers process data for us, and only on our instructions:

Our web hosting provider, whose servers run the website and the game and store the server logs.
Cloudflare, which delivers the website quickly and shields it from attacks. To do this it processes your IP address and request data.
Our email provider, which receives and stores messages sent to [email protected].
Google Play, if you install the Panah Bulan app. Google handles downloads, updates and app statistics under its own privacy policy. If optional purchases are ever introduced, Google Play would process them and we would never see your payment details.

Some of these providers may process data outside Indonesia. Where that happens, we rely on their security measures and contractual safeguards. We may also disclose information when the law requires it, or to report fraud to the relevant platforms or authorities.

6. How long we keep information

Session data (your balance and any free spins) is kept while your session is active and is removed automatically after a period of inactivity.
Server logs are kept for no more than 90 days, unless a specific log is needed longer to investigate abuse or a security incident.
Emails and reports are kept only as long as needed to deal with them and are deleted within 12 months, unless we need them longer for a fraud case or a legal claim.

7. Your rights

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and similar laws in other countries, you may ask us to:

tell you what personal data we hold about you and provide a copy;
correct inaccurate data;
delete your data;
stop or restrict how we use it.

Send your request to [email protected]. To help us locate your data, tell us the email address you wrote from or, for game data, roughly when you played. You can also remove the session cookie at any time by clearing your browser's cookies; your balance will then restart at 1,000,000 coins.

8. Security

We use HTTPS encryption, limit cookies to what the game needs and restrict who can access logs and emails. No system is completely secure, but we take care to protect the small amount of data we hold.

9. Not for anyone under 18

The Service is only for adults 18+. We do not knowingly collect data from anyone under 18. If you believe a minor has contacted us or is using the Service, please tell us and we will delete any related data.

10. Changes to this policy

We may update this policy, for example when the Android app is released or new features are added. We will change the "Last updated" date on this page, and for significant changes we will show a notice on the website.

11. Contact

Questions about privacy or a request about your data? Email [email protected] or use our contact page. See also our terms.

Last updated: 2026-11-05