pg368 Privacy Policy

This Privacy Policy ("Policy") is issued by pg368 ("pg368", "we", "us", or "our") and applies to all personal data processed in connection with your use of the pg368 website at https://pg368.vip and all associated products, services, and features (the "Platform").

By registering an Account on the Platform or by continuing to use the Platform after this Policy has been published, you acknowledge that you have read and understood how pg368 handles your personal data. If you disagree with any part of this Policy, you must discontinue use of the Platform immediately.

pg368 is an internationally licensed online betting platform serving players across Indonesia, including major cities such as Jakarta, Surabaya, Bandung, Medan, Semarang, Makassar, Yogyakarta, and Bali. The Platform offers sports betting, live casino, premium slots, fish shooting games, and crash games, all denominated in Indonesian Rupiah (IDR).

This Policy governs the collection, use, storage, disclosure, and protection of personal data relating to:

• Registered Players who hold an active Account on the pg368 Platform.
• Visitors who browse the Platform without registering an Account.
• Individuals who contact pg368 via email, live chat, or any other support channel.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated into the overall framework governing your relationship with pg368.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, either directly (e.g., full name, national ID number) or indirectly (e.g., IP address combined with a timestamp).
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means pg368, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of pg368, under documented instructions and appropriate data-processing agreements.
• "Account" means the registered personal account created by a Player on the pg368 Platform.
• "KYC" means Know Your Customer — the identity and age-verification process required under our anti-money-laundering obligations.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 7.

pg368 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

pg368 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make deposits or withdrawal requests, contact customer support, or respond to surveys and promotions.
• Automatically — through cookies, server logs, and analytics tools when you navigate the Platform. This includes pages visited, time spent, links clicked, and game sessions initiated.
• From third-party service providers — identity verification agencies that confirm the authenticity of KTP or passport documents; payment processors that confirm transaction status; fraud-detection partners that flag unusual account activity; and game studios (such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, and Spribe) that provide session and outcome data for games hosted on the Platform.
• From publicly available sources — in limited circumstances, pg368 may cross-reference publicly available records to verify identity or address information provided during KYC.

pg368 processes your Personal Data only when there is a valid legal basis to do so. The table below sets out the primary purposes of processing and the corresponding legal grounds:

pg368 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. Personal Data is shared only in the following circumstances, and only to the extent strictly necessary:

• Payment processors and financial institutions — BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja receive transaction details necessary to execute deposits and withdrawals. These providers operate under their own privacy policies and are bound by Indonesian banking secrecy obligations.
• KYC and identity verification providers — Licensed third-party agencies receive copies of identity documents solely for the purpose of verifying your identity and age in accordance with our KYC obligations.
• Game studios and content providers — Pragmatic Play, Evolution Gaming, Pocket Games Soft, Microgaming, NetEnt, and Spribe receive a Player ID and session token necessary to deliver their games on the Platform. They do not receive your full identity or financial data.
• Fraud detection and cybersecurity partners — Specialist providers receive Technical Data (IP address, device fingerprint, session logs) to identify suspicious activity and protect the integrity of the Platform.
• Legal and regulatory authorities — pg368 will disclose Personal Data where required by a valid court order, applicable law, or a request from a competent regulatory or law-enforcement authority.
• Corporate transactions — In the event of a merger, acquisition, or sale of all or part of pg368's business, Personal Data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

pg368 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to understand how Players interact with our content. The categories of cookies we use are:

• Strictly necessary cookies — Essential for the Platform to operate (e.g., session authentication, security tokens, language preference). These cannot be disabled without impairing the Platform's core functionality.
• Functional cookies — Remember choices you make (e.g., preferred payment method, responsible gaming settings) to provide a more personalised experience across visits.
• Analytics cookies — Collect aggregated, anonymised data about how visitors navigate the Platform (pages viewed, time on page, bounce rate) to help us improve content and usability. No individual is identified through analytics data.
• Marketing and preference cookies — Used to deliver promotions and bonus offers relevant to the games and betting markets you engage with most. These cookies are activated only if you have opted in to marketing communications.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Most modern browsers (Chrome, Firefox, Safari, and others) provide documented instructions for managing cookies in their respective help centres.

pg368 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data — Retained for the lifetime of your Account and for a minimum of five (5) years after Account closure, in accordance with anti-money-laundering record-keeping obligations.
• Financial transaction records — Retained for a minimum of five (5) years from the date of each transaction.
• Gaming session logs — Retained for three (3) years to support dispute resolution and responsible gaming reviews.
• Customer support communications — Retained for two (2) years from the date of the last interaction.
• Marketing consent records — Retained for the duration of your Account and for one (1) year after your last marketing interaction or opt-out, whichever is later.
• Technical and analytics data — Aggregated or anonymised within thirteen (13) months of collection; individual-level technical logs retained for twelve (12) months.

Where retention beyond these periods is required by a legal obligation, ongoing investigation, or pending dispute, data will be held until the relevant matter is fully resolved. Once a retention period expires, data is securely deleted or irreversibly anonymised.

pg368 implements a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform.
• Encryption at rest for sensitive fields including passwords (stored as salted hashes), national ID numbers, and bank account details.
• Role-based access controls ensuring that pg368 staff can only access Personal Data to the extent required for their specific job function.
• Multi-factor authentication for all internal systems that store or process Personal Data.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• 24/7 intrusion detection and monitoring with automated alerting on anomalous access patterns.
• Incident response procedures — In the event of a confirmed data breach that poses a risk to your rights or interests, pg368 will notify affected Players without undue delay and will implement containment measures immediately.

The pg368 Platform serves players primarily in Indonesia. Some of our Data Processors — including game studios, cloud infrastructure providers, and cybersecurity partners — may process or store data on servers located outside Indonesia.

Where Personal Data is transferred internationally, pg368 ensures that appropriate safeguards are in place, which may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that provide a recognised adequate level of data protection. In all cases, the recipient is contractually required to apply security and confidentiality standards at least equivalent to those described in this Policy.

As a Player on the pg368 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered Account username and a brief description of your request.

• Right of access — You may request a copy of the Personal Data pg368 holds about you, along with information about how it is being processed.
• Right to rectification — You may ask pg368 to correct any inaccurate or incomplete Personal Data without undue delay.
• Right to erasure — You may request that pg368 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (see Section 8).
• Right to restrict processing — You may ask pg368 to pause the processing of your Personal Data in certain circumstances, such as while an inaccuracy is being investigated.
• Right to data portability — Where processing is based on your consent or on a contract, you may request that pg368 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to object — You may object to processing carried out on the basis of pg368's legitimate interests or for direct marketing purposes. Where you object to direct marketing, pg368 will cease processing your data for that purpose immediately.
• Right to withdraw consent — Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

pg368 will respond to all verified data rights requests within thirty (30) calendar days. In complex or high-volume cases, this period may be extended by a further two months, with notice provided to you within the initial thirty-day window.

The pg368 Platform is strictly for adults aged 21 years or older. pg368 does not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory step during Account registration and KYC, and pg368 actively uses technical controls and document checks to enforce this requirement.

If pg368 becomes aware that Personal Data has been collected from a person under 21 — whether through a false declaration of age at registration or any other means — the Account will be suspended immediately, all funds will be handled in accordance with our Terms & Conditions, and the data will be deleted as soon as is practicable.

pg368 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, sports betting specials, and seasonal promotions — but only if you have explicitly opted in to receive such communications during registration or through your Account settings.

You may unsubscribe from marketing communications at any time by:

• Clicking the "unsubscribe" link included in every marketing email.
• Updating your communication preferences in your Account settings under "Notifications".
• Emailing [email protected] with the subject line "Marketing Opt-Out".

Unsubscribing from marketing communications does not affect transactional messages, which include Account verification emails, deposit and withdrawal confirmations, security alerts, and KYC status notifications. These messages are sent as part of the contractual service and cannot be disabled while your Account is active.

pg368 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The date of the most recent revision is displayed at the top of this page.

Where a material change is made — one that significantly affects how we collect, use, or share your Personal Data — pg368 will provide advance notice to registered Players via email or through a prominent notice on the Platform, no fewer than fourteen (14) days before the change takes effect.

Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with a material change, you may close your Account by contacting support before the revision date.

For all privacy-related enquiries, data rights requests, or complaints regarding the handling of your Personal Data, please contact pg368 using the details below. We aim to acknowledge all privacy enquiries within 48 hours and resolve them within 30 calendar days.

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing.
• Live Chat: Available directly on the Platform after logging in to your Account, 24 hours a day, 7 days a week.
• Postal correspondence: Address your written request to the pg368 Privacy Team (full registered address available upon request via email).

If you are not satisfied with pg368's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or supervisory body in your jurisdiction. pg368 will cooperate fully with any such authority in the investigation of a complaint.

For more information about your rights and the services available to you, please also review our FAQ page or visit our Responsible Gaming page for guidance on data controls related to safer gambling tools.