Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings assigned to them below:

• "pgg68", "we", "us", or "our" refers to pgg68, the operator of the online gaming and betting platform at pgg68.cam.
• "Platform" means the pgg68 website, mobile interface, and all associated digital services accessible at pgg68.cam.
• "Player" or "you" means any natural person who has registered an Account on the Platform or who accesses the Platform as a visitor.
• "Personal Data" means any information relating to an identified or identifiable natural person — including name, contact details, financial information, and device identifiers — that pgg68 collects, stores, or processes in connection with your use of the Platform.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, pgg68.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of pgg68 and under pgg68's documented instructions.
• "KYC" means Know Your Customer — the identity verification process required by pgg68 prior to authorizing any withdrawal transaction or where regulatory obligations demand it.
• "Cookies" means small text files placed on your device by the Platform to store session information and preference data.
• "WIB" means Western Indonesia Time (UTC+7), the primary operational time zone referenced by pgg68.

Personal Data We Collect

pgg68 collects the categories of Personal Data described in the table below. The specific data elements collected in each category depend on the nature of your interaction with the Platform.

pgg68 does not intentionally collect special category data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) unless specifically required and legally permissible for enhanced identity verification purposes. In such rare cases, explicit consent will be sought separately.

How We Collect Your Data

pgg68 collects Personal Data through the following channels and mechanisms:

• Directly from you: When you register an Account, complete the KYC verification process, make a deposit or withdrawal, submit a support request via live chat or email, or update your Account preferences and communication settings.
• Automatically via the Platform: When you access or use the Platform, certain Technical Data and Usage Data are collected automatically through server logs, session management systems, and first-party analytics tools. This data does not require any active input from you and is collected as a standard function of operating a web-based platform.
• From payment processors: When a deposit or withdrawal is processed through a local banking channel (such as BCA, BRI, BNI, or Mandiri) or a digital wallet (such as OVO, DANA, or GoPay), pgg68 may receive transaction confirmation data from those providers to reconcile your Account balance.
• From identity verification providers: Where third-party KYC service providers are used to cross-reference identity document data, pgg68 may receive a verification result and confidence score alongside the document information you have provided.
• From cookies and similar technologies: As described in Section 9 of this Policy, pgg68 uses cookies to manage sessions and improve Platform performance. Data collected via cookies is used in aggregate where possible and is linked to your Account only where necessary for security and fraud prevention purposes.

Purposes for Which We Process Your Data

pgg68 processes your Personal Data only for the purposes listed below. We do not use your data for any purpose that is incompatible with these stated purposes without first seeking your consent or establishing a new lawful basis.

1. Account creation and management: To register your Account, authenticate your identity at login, and maintain an accurate record of your Account status, balance, and transaction history.
2. Transaction processing: To receive and credit deposits, process withdrawal requests, and communicate with local payment partners (Indonesian banks and e-wallets) to facilitate the movement of funds in Indonesian Rupiah (IDR).
3. KYC and fraud prevention: To verify your identity in accordance with pgg68's regulatory obligations, to detect and prevent fraudulent activity, money laundering, and multiple-account creation, and to comply with applicable anti-money-laundering and counter-terrorism-financing standards.
4. Customer support: To respond to your enquiries, resolve disputes, manage complaints, and communicate important Account-related updates and service notifications.
5. Platform improvement and analytics: To analyze aggregate usage patterns, identify technical issues, improve Platform performance, and develop new features based on how players interact with pgg68's services.
6. Responsible gaming: To monitor for indicators of problem gambling behavior and, where our responsible gaming policies require, to proactively contact Players or restrict Account activity in the interest of player welfare.
7. Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and platform updates where you have given explicit consent to receive marketing communications. All such communications include a clear opt-out mechanism.
8. Legal and regulatory compliance: To fulfill obligations imposed on pgg68 by applicable law, regulatory requirements, court orders, or governmental authority requests.

Legal Basis for Processing

pgg68 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform our obligations under the Terms & Conditions to which you are a party — for example, Account management, deposit processing, and withdrawal authorization.
• Legal obligation: Processing that is required for pgg68 to comply with applicable law, including KYC obligations, anti-money-laundering requirements, and responses to legitimate regulatory or law enforcement requests.
• Legitimate interests: Processing conducted in pursuit of pgg68's legitimate business interests — such as fraud prevention, security monitoring, and analytics — where those interests are not overridden by your fundamental rights and interests.
• Consent: Processing conducted on the basis of your explicit consent — principally marketing communications and any optional data collection activities clearly identified at the time of collection. You may withdraw this consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Data Sharing and Disclosure

pgg68 does not sell, rent, or trade your Personal Data to third parties for any purpose. Personal Data may be shared in the limited circumstances described below:

• Payment processors and banking partners: pgg68 shares the minimum necessary financial and identity data with its Indonesian banking and e-wallet partners (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, and GoPay) to process your transactions. These partners operate under their own privacy policies and data protection frameworks and are bound by applicable Indonesian banking regulations.
• KYC and identity verification providers: Where a third-party identity verification service is used to process KYC submissions, your identity document data and verification outcome will be shared with that provider under a data processing agreement that restricts secondary use of your data.
• Game content providers: When you play games hosted by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, PG Soft, and Spribe — limited technical and session data may be passed to those providers' game servers as a technical necessity. Game providers are contractually prohibited from using this data for any purpose other than delivering the game session.
• IT and infrastructure service providers: pgg68 uses cloud hosting, CDN, and cybersecurity service providers to operate the Platform. These providers process data on our behalf and are contractually bound to equivalent data protection standards.
• Regulatory and law enforcement authorities: Where pgg68 is required by applicable law, court order, or governmental authority request to disclose Personal Data, we will comply with that obligation. Where legally permissible to do so, we will notify the affected Player prior to or promptly following such disclosure.
• Business restructuring: In the event of a merger, acquisition, or sale of all or substantially all of pgg68's assets, Player data may be transferred to the acquiring entity, subject to the acquiring entity assuming obligations at least equivalent to those set out in this Policy.

In all cases of data sharing, pgg68 applies a data minimization principle — sharing only the specific data elements that are necessary for the stated purpose and no more.

Data Retention

pgg68 retains Personal Data for as long as it is necessary to fulfill the purposes for which it was collected, subject to the retention periods described below:

• Active Account data: Retained for the full duration of your Account's active status and for a minimum period of 5 years following permanent Account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, or longer where required by the regulatory framework under which pgg68's operating license is held.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping requirements.
• Customer support communications: Retained for 2 years from the date of the support interaction, unless the content is directly relevant to an ongoing dispute, in which case it is retained until the dispute is fully resolved.
• Technical and usage data: Retained in identifiable form for up to 12 months, after which it is aggregated or anonymized. Anonymized data may be retained indefinitely for analytics purposes.
• Marketing consent records: Retained for the duration of your Account's existence or until consent is withdrawn, plus a further 1 year as evidence of consent or withdrawal.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized, unless a specific legal obligation requires extended retention. Requests for early deletion are handled under the right-to-erasure process described in Section 10.

Security Measures

pgg68 implements a layered technical and organizational security framework to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Key measures include:

• Transport security: All data transmitted between your device and pgg68's servers is protected by 256-bit TLS/SSL encryption, ensuring that data in transit cannot be intercepted or read by unauthorized parties.
• Encryption at rest: Sensitive stored data — including KYC documents, financial account details, and hashed authentication credentials — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All personnel with data access undergo background screening and are required to comply with pgg68's internal data handling policies. Access is logged and reviewed periodically.
• Two-factor authentication (2FA): pgg68 supports and encourages 2FA on all Player Accounts. Privileged internal systems require 2FA by policy.
• Penetration testing and vulnerability management: pgg68 conducts regular security assessments and vulnerability scans of its Platform infrastructure. Identified vulnerabilities are remediated in accordance with a defined severity-based patching schedule.
• Incident response: pgg68 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to affected Players, we will notify impacted Players without undue delay and take all reasonable steps to contain and remediate the incident.

While pgg68 employs industry-standard security measures, no digital platform can guarantee absolute security against all possible threats. You also bear responsibility for maintaining the security of your Account credentials. If you suspect unauthorized access to your Account, contact pgg68 support immediately.

Cookies and Tracking Technologies

pgg68 uses cookies and similar browser-based technologies to operate the Platform effectively. The following categories of cookies are in use:

• Essential cookies: These are strictly necessary for the Platform to function. They manage your login session, maintain your Account authentication state across pages, and enable core Platform features. Essential cookies cannot be disabled without impairing basic Platform functionality.
• Performance and analytics cookies: These collect aggregate, anonymized data about how Players navigate and use the Platform — such as which pages are most visited, where Players encounter errors, and how long sessions typically last. This data is used to improve Platform usability and performance. pgg68 uses only first-party analytics for this purpose.
• Preference cookies: These store your personal settings — such as your language preference, responsible gaming reminder intervals, and display preferences — so that you do not need to re-enter them on each visit.
• Security cookies: These are used to detect and mitigate fraudulent activity, including session hijacking attempts and bot-driven credential attacks. Security cookies are essential to maintaining the integrity of the Platform.

pgg68 does not use third-party advertising cookies or cross-site behavioral tracking technologies. You may manage or delete cookies using your browser's built-in settings at any time. Note that disabling essential cookies may result in degraded Platform functionality or an inability to maintain a logged-in session.

Local storage and session storage technologies may be used for the same purposes as preference and performance cookies, where browser cookie restrictions would otherwise prevent the Platform from functioning correctly.

Your Data Rights

Subject to applicable law and pgg68's legal obligations, you have the following rights with respect to your Personal Data:

1. Right of access: You may request a copy of the Personal Data that pgg68 holds about you. We will provide a structured, commonly used electronic copy within 30 calendar days of receiving a verified request.
2. Right to rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected. For Account-level data (such as your registered email or phone number), you may update certain fields directly within your Account settings. For KYC data, corrections must be submitted to our support team with supporting documentation.
3. Right to erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other lawful basis for processing), or where processing is unlawful. Note that pgg68 is subject to mandatory retention obligations (described in Section 7) that may limit our ability to erase certain data immediately.
4. Right to restriction of processing: In certain circumstances — such as while the accuracy of Personal Data is contested, or while a complaint is under review — you may request that processing of your data be temporarily restricted to storage only.
5. Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that pgg68 provide your Personal Data in a structured, machine-readable format suitable for transfer to another service provider.
6. Right to object: You may object to processing based on pgg68's legitimate interests at any time. pgg68 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
7. Right to withdraw consent: Where processing is based solely on your consent (principally marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal requests are processed within 5 business days (WIB).

To exercise any of the rights above, please contact the pgg68 support team via live chat or email (details in Section 11). We may require you to provide proof of identity before actioning a request, to ensure that Personal Data is not disclosed to or deleted on behalf of an unauthorized third party.

Contact Us and Complaints

If you have questions about this Privacy Policy, wish to exercise any of the data rights described in Section 10, or want to raise a privacy-related complaint, please contact pgg68 using the following channels:

• Live Chat: Available 24/7 directly within the pgg68 Platform — the fastest channel for routine queries.
• Email: [email protected] — use this for formal data subject requests, complaints, or sensitive correspondence. Please include your registered Account username or email address and a clear description of your request or concern.
• WhatsApp (plain text): +62 812 0000 6868 — available 08:00–24:00 WIB daily for general support queries.

pgg68 will acknowledge formal privacy complaints within 3 business days (WIB) and will aim to provide a substantive response within 15 business days. Where a complaint cannot be resolved within this window, pgg68 will communicate a revised timeline and the reason for the delay.

If you are not satisfied with pgg68's handling of your complaint, you may escalate the matter to the relevant data protection or regulatory authority under pgg68's operating license jurisdiction. pgg68 commits to cooperating fully with any such regulatory review.

Amendments to This Policy

pgg68 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify Players by posting a prominent notice on the Platform and, where practicable, by sending a notification to the email address registered on your Account. The updated Policy will always state the current Effective Date at the top of the document.

Continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not accept the revised terms, you must discontinue use of the Platform and may request Account closure by contacting customer support.

We recommend that you review this Policy periodically. Archived versions of previous Policies are available on request by contacting our support team at the email address listed in Section 11. The version in force at the time of any data processing activity is the version that governs that activity.