Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how pg386 ("we", "us", "our") collects, uses, stores, and protects personal information provided by users ("you", "your") of the online betting and gaming platform accessible at https://pg386.cam. It applies to all services offered on the Platform, including sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot gacor (high-RTP slot games), and sabung ayam (virtual cockfighting).

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which form part of your agreement with pg386.

If you have questions about any aspect of this Policy, please contact our Data Protection team at [email protected] before using the Platform.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Controller" means pg386, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means a third-party service provider that processes Personal Data on behalf of pg386 under a binding data-processing agreement.
• "KYC" means Know Your Customer — the identity verification process required to confirm your eligibility to use the Platform.
• "Cookie" means a small text file placed on your device by the Platform to enable functionality, analytics, or personalization.
• "IDR / Rp" means Indonesian Rupiah, the currency in which all pg386 account balances and transactions are denominated.

3. Data We Collect

3.1 Information You Provide Directly

When you register or interact with pg386, we collect the following categories of data you voluntarily provide:

• Identity Data: Full legal name (as on your KTP or passport), date of birth, nationality, and gender.
• Contact Data: Email address, active Indonesian mobile number, and residential address.
• Verification Documents: Scans or photographs of government-issued identification (KTP, SIM, or passport) and supporting address-verification documents submitted during KYC.
• Financial Data: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), and digital-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals.
• Communications Data: Records of your correspondence with our customer support team, including live-chat transcripts and email threads.

3.2 Information Collected Automatically

When you access the Platform, our systems automatically collect certain technical data:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language settings.
• Usage Data: Pages visited, session duration, bet history, game activity, deposit and withdrawal timestamps, and click-path data.
• Geolocation Data: Approximate geographic location derived from your IP address, used for eligibility screening and fraud prevention.
• Cookie Data: Session identifiers, preference tokens, and analytics identifiers placed on your device as described in Section 6.

3.3 Information from Third Parties

We may receive supplementary data about you from third-party identity-verification providers, fraud-screening services, payment processors, and publicly available sources — solely for the purpose of validating your identity and protecting the integrity of the Platform.

4. How We Use Your Data

pg386 uses your Personal Data for the following purposes:

Purpose	Data Used
Creating and managing your Account	Identity Data, Contact Data
Processing deposits and withdrawals in IDR	Financial Data, Identity Data
Verifying your identity and age (21+) under KYC obligations	Verification Documents, Identity Data
Detecting and preventing fraud, money laundering, and abuse	Financial Data, Usage Data, Device Data, Geolocation Data
Providing customer support and resolving disputes	Identity Data, Communications Data, Usage Data
Sending transactional notifications (deposit confirmations, withdrawal receipts)	Contact Data, Financial Data
Sending promotional communications (with your consent)	Contact Data, Usage Data
Improving Platform performance and user experience	Usage Data, Cookie Data, Device Data
Complying with applicable legal and regulatory obligations	All categories as required by law

5. Legal Basis for Processing

We process your Personal Data on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions — for example, creating your account, processing payments in IDR, and completing KYC verification.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights.
• Legal Obligation: Processing required to comply with anti-money-laundering laws, international gaming regulations, and lawful requests from competent authorities.
• Consent: Processing for optional purposes — such as sending promotional offers or placing non-essential cookies — where you have given clear, specific, and withdrawable consent.

6. Cookies & Tracking Technologies

pg386 uses cookies and similar technologies (web beacons, local storage tokens) to operate the Platform, remember your preferences, and analyze usage patterns. The categories of cookies we deploy are:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled. Examples include session authentication tokens and security identifiers.
• Functional Cookies: Remember your preferences such as language selection and display settings to improve your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform, helping us identify and resolve usability issues.
• Marketing Cookies: Used — only with your consent — to deliver relevant promotional content and measure the effectiveness of our campaigns.

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect certain features. Strictly necessary cookies cannot be disabled without impairing core functionality.

7. Data Sharing & Third Parties

pg386 does not sell your Personal Data. We share data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment Processors: We share Financial Data with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to execute your deposit and withdrawal instructions.
• Identity Verification Providers: We engage licensed KYC and anti-fraud service providers to verify the authenticity of identity documents submitted during account registration.
• Technology Partners: Hosting providers, cloud infrastructure operators, and software vendors that support Platform operation are bound by strict data-processing agreements and may not use your data for their own purposes.
• Game Studio Providers: Studios such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft may receive a pseudonymous player identifier to facilitate game delivery; they do not receive your name, contact details, or financial information.
• Legal Authorities: We will disclose Personal Data to law enforcement, regulatory bodies, or courts where required by law, court order, or where disclosure is necessary to protect the safety of persons or the integrity of the Platform.

All third-party Processors are assessed for data-security compliance before engagement and are contractually required to implement appropriate technical and organizational safeguards.

8. Data Retention

We retain your Personal Data for as long as your Account is active and for a period thereafter as required by our legal obligations and legitimate business interests. Specific retention periods are as follows:

• Account & Identity Data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, in accordance with international anti-money-laundering record-keeping standards.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Retained for five (5) years from the date of verification, or longer if required by applicable regulation.
• Customer Support Communications: Retained for three (3) years from the date of the interaction.
• Cookie & Analytics Data: Session cookies expire at the end of each browser session; persistent analytics cookies expire within thirteen (13) months of placement.

When data is no longer required for its original purpose and no legal retention obligation applies, we securely delete or anonymize it so that it can no longer be linked to any individual.

9. Data Security

pg386 implements a layered security architecture to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. Our key security measures include:

• TLS 1.3 encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Role-based access controls ensuring that only authorized personnel can access Personal Data, and only to the extent required for their job function.
• Regular third-party penetration testing and vulnerability assessments of our infrastructure.
• Two-factor authentication (2FA) options for user accounts and mandatory 2FA for all internal administrative systems.
• Continuous monitoring and automated alerting for anomalous account activity and potential security incidents.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pg386 will notify affected users without undue delay in accordance with applicable law.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, you hold the following rights with respect to your Personal Data held by pg386:

1. Right of Access: Obtain confirmation of whether we process your data and receive a copy of that data.
2. Right to Rectification: Request correction of inaccurate or incomplete data without undue delay.
3. Right to Erasure ("Right to be Forgotten"): Request deletion of your data where it is no longer necessary for the original purpose, where you withdraw consent (where consent was the legal basis), or where you object to processing and we have no overriding legitimate grounds. Note that certain data must be retained under legal obligations notwithstanding an erasure request.
4. Right to Restriction of Processing: Request that we limit our use of your data in certain circumstances — for example, while a rectification request is being assessed.
5. Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format (JSON or CSV) and have it transmitted directly to another controller where technically feasible.
6. Right to Object: Object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. We may need to verify your identity before processing a request.

11. Children's Privacy

The Platform is intended exclusively for adults aged 21 years and over. pg386 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a minor has registered an Account or provided Personal Data, we will immediately suspend the account, delete all associated data, and reverse any transactions processed. If you believe a minor has accessed the Platform, please notify us immediately at [email protected].

12. Changes to This Policy

pg386 reserves the right to update this Privacy Policy at any time. When we make material changes, we will revise the "Last Updated" date at the top of this page and — where the changes are significant — notify registered users via email or an in-platform alert. We encourage you to review this Policy periodically. Your continued use of the Platform after a revised Policy has been published constitutes acceptance of the updated terms.

13. Contact Us

For any privacy-related inquiries, data-rights requests, or concerns about how pg386 handles your Personal Data, please reach out to our team. We are available around the clock and can assist in both English and Indonesian.

• Email: [email protected]
• Response Time: Within 30 calendar days for data-rights requests; within 24 hours for general privacy inquiries.
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)

When contacting us about a data-rights matter, please include your registered email address and a clear description of your request so we can locate your records and respond accurately. We may request proof of identity before fulfilling your request to ensure your data is not disclosed to an unauthorized party.