Terms & Conditions

1. Introduction

These Terms & Conditions ("Terms") govern your access to and use of the website, booking services, membership, and related digital services operated by Arcana Gaming Space ("Arcana", "we", "us", or "our") at arcanagaming.id.

By creating an account, booking a session, or otherwise using our services, you confirm that you have read, understood, and agree to these Terms, including how we process your personal data.

2. Compliance with Indonesian Personal Data Protection Law

We process personal data in accordance with applicable Indonesian law, including:

• Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi ("UU PDP" / PDP Law), which has been fully applicable since the end of its transitional period; and
• Peraturan Pemerintah Nomor 33 Tahun 2026 on the implementation of the PDP Law ("PP 33/2026"), which elaborates controller duties, consent standards, data subject rights, and related operational requirements (with phased effectiveness as provided in that regulation).

Under the PDP Law, Arcana acts as a Personal Data Controller (Pengendali Data Pribadi) for account, booking, membership, and marketing data we determine the purposes and means of processing for. Where we use third-party platforms (for example Meta, Google, or messaging providers), those parties may process data as processors and/or independent controllers under their own terms.

3. Personal data we collect

Depending on how you use our services, we may collect:

• Identity and contact data (name, email, WhatsApp / phone number, address)
• Account credentials and authentication data
• Booking, membership, transaction, and payment-related information
• Usage, device, and interaction data (including cookies, pixels, and analytics events on our website)

4. Purposes of processing

We process your personal data to:

• Create and manage your account and provide booking / membership services
• Communicate service updates, booking confirmations, and customer support
• Improve website performance, security, and user experience
• Conduct digital marketing and advertising measurement, as described in Section 5
• Comply with legal obligations and protect our rights and users

Lawful bases may include your explicit consent, performance of a contract, compliance with legal obligations, and/or other bases permitted under Article 20 of the PDP Law, as applicable to each processing activity.

5. Marketing, analytics, and advertising partners

By agreeing to these Terms (including via the signup checkbox), you acknowledge and consent that your data may be used for marketing and advertising purposes, including:

• Meta (Facebook / Instagram) Pixel and related retargeting / conversion measurement features
• Google Analytics 4 (GA4) for website analytics and measurement
• Google Ads, including sharing of conversion / event data for advertising optimization
• Other digital marketing channels we may use in the future (for example additional ad platforms, CRM tools, or attribution services), subject to these Terms and applicable law

Your phone / WhatsApp number may also be used for WhatsApp blast marketing (promotional messages about Arcana products, offers, events, and services) only. We will not sell your personal data to third parties.

Consistent with PDP Law / PP 33/2026 consent standards for promotional offers, you may withdraw marketing consent at any time by contacting us (see Section 10). Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and will not reduce access to core booking services that do not require marketing processing.

6. Security practices and data breach awareness

We implement and continuously improve reasonable technical and organizational security measures consistent with industry best practices and our obligations as a Personal Data Controller under the PDP Law (including measures appropriate to the nature of the data and processing risk). Examples of practices we aim to maintain include access controls, secure transmission where applicable, monitoring, and staff handling discipline.

Important: No online service can guarantee absolute security. Despite our efforts, residual risks remain (including cyberattacks, unauthorized access, malware, phishing, or failures involving third-party providers). By using our services, you acknowledge that:

• You understand that a data incident or breach may occur even when reasonable security measures are in place;
• To the maximum extent permitted by applicable Indonesian law, Arcana is not responsible for losses arising from security incidents, unauthorized access, or data breaches that occur despite reasonable protective measures, or that are caused by factors outside our reasonable control (including acts of third parties, force majeure, or your own credential compromise); and
• Nothing in these Terms excludes or limits liability that cannot be excluded under mandatory provisions of the PDP Law or other applicable Indonesian law (including obligations to implement appropriate security measures and to notify / respond where legally required).

If a personal data breach occurs that triggers notification duties under the PDP Law and related regulations, we will follow the legally required notification and response process.

7. Your rights as a data subject

Subject to the PDP Law and its implementing rules, you may have rights including to access, obtain copies, update or correct, withdraw consent, and request restriction or other available remedies regarding your personal data. Controllers are generally expected to respond to verified requests within the timelines set by applicable regulations (including the operational timeframes elaborated under PP 33/2026).

To exercise these rights, contact us using the details in Section 10.

8. Account responsibilities

• Provide accurate registration information
• Keep your login credentials confidential
• Notify us promptly if you suspect unauthorized account use
• Use our venue and digital services lawfully and respectfully

9. Changes to these Terms

We may update these Terms from time to time to reflect service changes, marketing channels, or legal developments (including further guidance under the PDP Law / PP 33/2026). The updated version will be posted on this page with a revised "Last updated" date. Continued use of the services after changes take effect constitutes acceptance of the updated Terms, except where additional consent is required by law.

10. Contact

For questions about these Terms, personal data requests, or marketing opt-out:

• Email: arcanagaming.id@gmail.com
• Website: Contact page