Privacy Policy — pej66

pej66 ("we", "us", "our") operates the online betting and gaming platform accessible at https://pej66.cam (the "Platform"). We serve players across Indonesia, offering sports betting (including football markets such as bandar bola and mix parlay), live casino, slot gacor, togel (Indonesia's traditional numbers lottery), crash games, and e-sports wagering.

In providing these services, pej66 necessarily collects and processes personal data about the individuals who use the Platform. We take our responsibilities as a data processor seriously and are committed to handling all personal data with the highest standards of security, integrity, and transparency.

This Privacy Policy applies to all personal data collected through the Platform, whether submitted during account registration, during the use of Platform features, through customer support interactions, or automatically through your device and browser when you visit the Platform. It applies to all current and former members, as well as to visitors who browse the Platform without registering.

If you have any questions about this Privacy Policy or about how pej66 handles your personal data, please contact us at the details provided in Section 15.

For the purposes of applicable data protection legislation, pej66 acts as the data controller in respect of the personal data it collects and processes through the Platform. As data controller, pej66 determines the purposes for which, and the means by which, personal data is processed.

Where pej66 engages third-party service providers to process personal data on its behalf — such as KYC verification services, payment processors, or game content providers — those parties act as data processors under binding contractual arrangements that restrict their use of the data to the specific services they provide to pej66.

pej66's designated point of contact for data protection matters is its customer support team, reachable at [email protected]. All data-related queries and rights requests should be submitted to this address, clearly marked "Data Protection Request" in the subject line.

pej66 collects personal data in several ways: directly from you when you register or interact with the Platform, automatically when you visit the Platform, and from third-party verification or payment partners in connection with account services. The categories of data we collect are set out in the table below.

pej66 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where a government-issued identity document incidentally contains such information as part of its standard format. Such incidental data is not separately processed or stored by pej66.

pej66 uses the personal data it collects for the following specific purposes. We process personal data only where we have a valid legal basis for doing so, as described in Section 5.

• Account Management: To create, verify, administer, and maintain your pej66 account, including processing your registration, updating your profile, and managing your account settings.
• Identity & Age Verification: To confirm that you are who you say you are, that you are at least 21 years of age, and that you are a resident of Indonesia — all conditions of account eligibility under our Terms & Conditions.
• Payment Processing: To process deposits and withdrawals via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay), and to maintain accurate transaction records.
• Service Delivery: To provide access to all Platform products including sports betting, live casino, slots, togel, crash games, and e-sports markets, and to personalise your in-platform experience based on your activity history and preferences.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, match manipulation, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling behaviour, to enforce deposit limits, cool-off periods, and self-exclusion requests set by members, and to fulfil our duty of care obligations.
• Legal & Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and financial crime prevention regulations, and to respond to lawful requests from regulatory or law-enforcement authorities.
• Customer Support: To respond to your support queries, complaints, and feedback, and to maintain a record of our communications with you for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, user experience, product design, and content relevance.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and product updates by email or in-platform message. You may withdraw consent at any time by contacting support or using the unsubscribe function in any marketing email.

pej66 processes personal data only where at least one of the following legal bases applies:

• Contractual Necessity: Processing is necessary to perform the contract between you and pej66 (i.e., the Terms & Conditions) or to take steps at your request before entering into that contract. This covers account creation, payment processing, and service delivery.
• Legal Obligation: Processing is necessary to comply with a legal obligation to which pej66 is subject, including AML regulations, KYC requirements, and responses to regulatory or law-enforcement authority requests.
• Legitimate Interests: Processing is necessary for pej66's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, security monitoring, Platform improvement through aggregated analytics, and responsible gaming monitoring.
• Consent: Where none of the above bases applies, pej66 will rely on your explicit, freely given, and informed consent. Consent-based processing currently applies to: optional marketing communications; and the use of non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pej66 does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent strictly necessary for each stated purpose:

• Payment Processors: Financial data necessary to process deposits and withdrawals is shared with the relevant Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay) solely for transaction processing purposes.
• KYC & Identity Verification Partners: Identity and address documents are shared with our contracted third-party KYC verification service provider, which processes the data solely to verify your identity and age on pej66's behalf.
• Game Content Providers: Limited technical session data (such as player session token, stake amounts, and game outcome records) is shared with our licensed game providers — including Pragmatic Play, Evolution, Microgaming, NetEnt, Spribe, Ezugi, and Pocket Games Soft — to the minimum extent necessary for game delivery and fairness certification.
• Regulatory & Law Enforcement Authorities: pej66 will disclose personal data to competent authorities where legally compelled to do so, including in response to a valid court order, subpoena, regulatory investigation, or law-enforcement request. pej66 will, where legally permitted, notify the affected member of such a disclosure.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of pej66's business or assets, personal data held by pej66 may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations.
• Fraud Prevention Networks: Anonymised or pseudonymised signals (such as device fingerprints and IP reputation scores) may be shared with industry fraud-prevention networks to protect pej66 and its members from fraudulent activity.

pej66 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website you visit. Cookies allow the Platform to recognise your device on subsequent visits and to remember your preferences and session state.

pej66 uses the following categories of cookies:

pej66 does not use advertising cookies, retargeting pixels, or third-party behavioural tracking technologies. You can manage or delete cookies at any time through your browser's settings. Instructions for doing so vary by browser; consult your browser's help documentation for guidance. Note that disabling strictly necessary cookies will prevent you from logging in to the Platform.

pej66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet applicable legal and regulatory obligations, and to resolve any outstanding disputes or enforce our agreements. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the lifetime of your account, plus a minimum of five (5) years after account closure, in order to meet AML record-keeping requirements.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC Documents: Retained for five (5) years from the date of account closure, unless a longer period is required by regulatory direction.
• Customer Support Communications: Retained for three (3) years from the date of the most recent interaction, to support dispute resolution and quality assurance processes.
• Gaming & Betting Activity Logs: Retained for three (3) years from the date of the activity, to support responsible gaming monitoring, fraud detection, and regulatory reporting.
• Technical & Cookie Data: Session data deleted at session end; analytics data anonymised within 90 days of collection.

When personal data is no longer required, it is securely deleted from pej66's production systems and any backup storage within a reasonable timeframe, or irreversibly anonymised so that it can no longer be associated with any individual.

As an internationally licensed operator, pej66 may transfer and store personal data on servers located outside Indonesia. Where such transfers occur, pej66 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under applicable Indonesian data protection law.

Safeguards used by pej66 for international data transfers include:

• Contractual data protection clauses incorporated into all agreements with third-party processors outside Indonesia, requiring them to handle the data in accordance with applicable data protection standards.
• Technical measures including encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256), access controls limiting personnel access to personal data on a strict need-to-know basis, and regular security audits of data processing environments.
• Transfer of data only to third-party processors located in jurisdictions or operating under certifications that provide an adequate level of data protection as determined by pej66's compliance assessment.

If you would like more information about the specific safeguards applicable to a particular international transfer of your personal data, please contact pej66 at [email protected].

As a pej66 member or visitor, you have the following rights in relation to your personal data. To exercise any of these rights, contact pej66 at [email protected] with the subject line "Data Rights Request — [Right Being Exercised]". pej66 will respond within thirty (30) calendar days of receiving a valid request.

• Right of Access: You may request a copy of the personal data pej66 holds about you, together with information about how it is being processed. This is sometimes called a "Subject Access Request".
• Right to Rectification: You may request that pej66 correct any inaccurate or incomplete personal data it holds about you. Some data (such as KYC-verified legal name) can only be corrected by submitting updated verification documents.
• Right to Erasure: You may request that pej66 delete your personal data. This right is subject to pej66's legal obligations — data required for AML compliance, fraud investigations, or ongoing regulatory proceedings may be retained notwithstanding an erasure request.
• Right to Restrict Processing: You may request that pej66 suspend the active processing of your personal data in certain circumstances, for example while a rectification or objection request is being assessed.
• Right to Data Portability: You may request that pej66 provide you with a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Object: You may object to pej66's processing of your personal data where that processing is based on legitimate interests. pej66 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

pej66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher (256-bit SSL). HTTPS is enforced across all Platform pages.
• Encryption at Rest: Sensitive personal data stored in pej66's databases — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to production systems containing personal data is restricted to authorised personnel only, on a strict need-to-know basis, and is protected by multi-factor authentication and role-based access controls.
• Regular Security Audits: pej66 conducts regular penetration testing and vulnerability assessments of its Platform infrastructure and engages third-party security specialists to audit its data handling practices.
• Incident Response: pej66 maintains a documented data breach response procedure. In the event of a data breach that poses a material risk to affected individuals, pej66 will notify affected members without undue delay and will take all reasonable steps to contain and remediate the breach.
• Staff Training: All pej66 personnel with access to personal data receive regular training on data protection obligations and security best practices.

The pej66 Platform is strictly for adults aged 21 and over. pej66 does not knowingly collect personal data from any person under the age of 21, and the Platform's registration process includes age verification steps designed to enforce this restriction.

If pej66 becomes aware that it has inadvertently collected personal data from a person under 21, it will immediately suspend the relevant account, delete the associated personal data to the extent not required for legal record-keeping, and — where applicable — return any wallet balance to the source of deposit following investigation.

If you are a parent or guardian and believe that your child under the age of 21 has registered on the pej66 Platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". pej66 will investigate and act on all such reports as a matter of priority.

The pej66 Platform does not contain links to external third-party websites as part of its standard content. However, where game providers or promotional content occasionally reference external brand or tournament pages, pej66 is not responsible for the privacy practices or content of those external sites.

This Privacy Policy applies solely to personal data collected and processed by pej66 through the Platform at https://pej66.cam. Any personal data you provide directly to a third-party site or service — including payment providers, social media platforms, or game studios — is governed by that third party's own privacy policy, not this one.

pej66 reserves the right to update or revise this Privacy Policy at any time to reflect changes in its data processing practices, applicable laws and regulations, or the structure of its business. The date of the most recent revision is displayed at the top of this page.

When pej66 makes a material change to this Privacy Policy — meaning a change that significantly affects how your personal data is collected, used, or shared — it will notify registered members by email to the address on file, and/or by a prominent notice displayed on the Platform, at least seven (7) days before the change takes effect.

For non-material changes (such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or minor structural reorganisations), pej66 will update the "Last Updated" date on this page without separately notifying members.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the revised policy, you should close your account before the effective date.

If you have any questions, concerns, or complaints about this Privacy Policy or pej66's data handling practices, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, including all Indonesian national holidays.

• Email: [email protected] — for data rights requests, use subject line "Data Rights Request"; for privacy complaints, use "Privacy Complaint".
• Response Time: pej 66 will acknowledge all privacy-related correspondence within 48 hours and provide a substantive response within thirty (30) calendar days.
• Live Chat: Available directly within the Platform after logging in to your Account. Native Indonesian-speaking agents are available at all times alongside English-language support.
• Operating Hours: 24/7, including Idul Fitri, Ramadhan, and all Indonesian national holidays (Hari Kemerdekaan, Nyepi, Waisak, and others).

pej66 is committed to resolving all privacy concerns fairly and promptly. We regard the trust of our Indonesian members as fundamental to our operation, and we take every data protection matter seriously.