pej64 Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data held by pej64.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Member" means any individual who has completed registration on the pej64 Platform and holds an active Account.
• "Visitor" means any individual who accesses the pej64 website without completing registration.
• "Third-Party Provider" means any external organisation engaged by pej64 to deliver services in connection with the Platform's operation — including payment processors, identity verification services, game content providers, fraud detection systems, and analytics platforms.
• "IDR Wallet" means the Indonesian Rupiah-denominated balance maintained within a Member's Account.
• "KYC" means the Know Your Customer identity verification process required by pej64 prior to processing withdrawals or as otherwise deemed necessary.
• "Cookies" means small text files placed on a Member's or Visitor's device by the Platform for the purposes described in Section 9 of this Policy.

pej64 collects only the Personal Data that is necessary to deliver its Services, meet regulatory obligations, and maintain a safe and fair platform. The categories of data we collect are set out in the table below:

pej64 collects Personal Data through the following means:

• Direct Interactions: Data you voluntarily provide when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or updating your Account profile.
• Automated Technologies: Data collected automatically when you access the Platform, including IP address, device information, browser characteristics, and session behaviour, using server logs, cookies, and similar tracking technologies.
• Third-Party Sources: Identity verification and fraud screening data received from our KYC and anti-fraud service partners, where permitted by applicable data protection standards. Payment confirmation data received from our local payment processing partners (e.g., bank transfer confirmation APIs, e-wallet gateway notifications).
• Publicly Available Sources: In limited circumstances, pej64 may cross-reference publicly available information to verify Member-provided data or investigate suspected fraud or misuse of the Platform.

pej64 processes your Personal Data only for specified, explicit, and legitimate purposes. The primary purposes are:

• Account Management: To create, maintain, and administer your pej64 Account, including authentication, password recovery, and Account security alerts.
• Service Delivery: To enable you to place wagers, access game content, participate in promotions, and use all features of the Platform.
• Financial Processing: To process deposits and withdrawals via your nominated bank or e-wallet, reconcile transaction records, and maintain accurate IDR Wallet balances.
• Identity Verification (KYC): To verify your identity, confirm your age (minimum 21 years), and comply with anti-money laundering obligations before processing withdrawals or as otherwise required.
• Fraud Prevention & Platform Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: To monitor gambling patterns and proactively identify indicators of problem gambling, and to administer deposit limits, loss limits, session timers, and self-exclusion tools on request.
• Customer Support: To respond to enquiries, resolve disputes, process complaints, and provide general assistance through our 24/7 support team.
• Marketing Communications: To send promotional offers, bonus notifications, and Platform updates to Members who have opted in to receive such communications. You may withdraw your marketing consent at any time through your Account settings or by contacting support.
• Legal Compliance: To meet any legal or regulatory obligations applicable to pej64's operations, including record-keeping, responding to lawful data access requests, and co-operating with competent authorities where required.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the Platform's features, performance, and user experience.

pej64 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between pej64 and the Member — including Account registration, financial transactions, and Service delivery.
• Legitimate Interests: Processing carried out in pursuit of pej64's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental data protection rights.
• Legal Obligation: Processing necessary for pej64 to comply with applicable legal and regulatory requirements — including KYC, anti-money laundering checks, and responses to lawful authority requests.
• Consent: Processing undertaken on the basis of your freely given, specific, and informed consent — principally in relation to marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

pej64 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own commercial purposes. Personal Data may be disclosed in the following limited circumstances:

• Payment Processing Partners: Your financial data is shared with local bank transfer processors and e-wallet gateways (including networks supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) to the minimum extent necessary to execute your deposit or withdrawal instructions.
• Identity Verification & KYC Providers: Identity documents and related personal details are shared with our contracted KYC and anti-fraud service providers for the sole purpose of verifying your identity and screening against sanctions and fraud watchlists.
• Game Content Providers: Usage data relating to game sessions may be shared in anonymised or pseudonymised form with licensed game studios (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) for game performance auditing and technical support purposes.
• Analytics & Security Services: Aggregated, anonymised Technical and Usage Data may be processed by third-party analytics and cybersecurity platforms to maintain Platform integrity and improve user experience. These providers are contractually prohibited from using such data for any purpose beyond the contracted service.
• Legal & Regulatory Authorities: Personal Data may be disclosed to competent law enforcement, regulatory, or government authorities where pej64 is legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of pej64, its Members, or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of pej64's business assets, Personal Data held by pej64 may be transferred as part of that transaction. Affected Members will be notified by email prior to any such transfer taking effect.

pej64 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applicable to each data category are as follows:

• Identity & KYC Data: Retained for a minimum of 5 years from the date of Account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction to support audit, dispute resolution, and regulatory compliance purposes.
• Account & Usage Data: Retained for the duration of your active membership and for up to 2 years following Account closure, unless a longer retention period is required by law or is necessary to resolve an outstanding dispute.
• Marketing Preference Data: Retained until you withdraw your marketing consent or close your Account, whichever occurs first.
• Support Communications: Retained for up to 3 years from the date of the relevant interaction for dispute resolution and quality assurance purposes.
• Technical & Log Data: Retained for up to 12 months for security monitoring and platform performance analysis, after which it is deleted or anonymised.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical constraints (for example, backup storage cycles), the data will be isolated from active processing until secure deletion can be completed.

pej64 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the pej64 Platform is encrypted in transit using industry-standard TLS protocols. The padlock indicator in your browser confirms an active encrypted connection.
• Encrypted Data Storage: Sensitive Personal Data — including identity documents and financial account references — is stored in encrypted form on access-controlled servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to Personal Data within pej64's internal systems is restricted on a strict need-to-know basis. Staff members are granted data access privileges only to the extent required to perform their specific job functions.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their pej64 Account. All pej64 staff accounts with access to Member data are required to use multi-factor authentication.
• Penetration Testing & Vulnerability Management: pej64's technical infrastructure is subject to regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate security weaknesses proactively.
• Incident Response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, pej64 will notify affected Members without undue delay and take all reasonable steps to contain and remediate the incident.

pej64 uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. The types of cookies we use are described below:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies enable core features such as session management, login authentication, and the maintenance of your IDR Wallet balance during a session. They cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised information about how Members and Visitors interact with the Platform — such as which pages are visited most frequently and where users encounter errors. This data is used solely to improve Platform performance and user experience.
• Functional Cookies: Allow the Platform to remember your preferences — such as your preferred language setting, time-zone display (WIB by default), and notification preferences — to provide a more personalised experience.
• Security Cookies: Used to support fraud detection and account security features, including the identification of unusual login behaviour or suspicious session activity.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. pej64 does not use third-party advertising cookies or behavioural targeting cookies to display advertising on external websites.

As a Member of pej64, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact pej64's support team using the details in Section 14.

pej64 will not charge a fee for handling data rights requests submitted in good faith. We reserve the right to request proof of identity before acting on any request to protect against unauthorised access to Member data.

pej64's Services are strictly restricted to individuals who are at least 21 years of age. pej64 does not knowingly collect Personal Data from individuals below this age threshold. If pej64 becomes aware that Personal Data has been collected from a person under the age of 21, the associated Account will be immediately suspended, all data will be securely deleted, and any balance associated with that Account will be held pending investigation.

Parents and guardians who believe that a minor in their care may have registered an Account on pej64 are encouraged to contact our support team immediately. pej64 will investigate and act on all such reports with priority.

The pej64 Platform integrates third-party game content from licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. While pej64 takes care in selecting partners who maintain high standards of data security, pej64 does not control the independent privacy practices of third-party game engine providers. Members are encouraged to review the privacy policies of any third-party service they interact with.

pej64's Privacy Policy applies exclusively to data collected and processed by pej64 in connection with the Platform. pej64 accepts no responsibility for the data practices of any third party, including payment gateway providers, e-wallet platforms, or game studios, beyond the contractual data processing obligations imposed on them by pej64.

pej64 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Where changes are material, pej64 will provide at least 7 calendar days' advance notice by email to your registered address and by posting a prominent notice on the Platform. The "Last Updated" date displayed at the top of this page will be revised each time a new version is published. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using the Platform and request Account closure prior to the effective date.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact pej64's support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the pej64 Platform. Our support team includes native Indonesian-speaking agents available at all times.
• Email: [email protected] — plain text address, not a clickable link. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days of identity verification.

When submitting a data rights request by email, please include your registered username and the nature of your request in the subject line. pej64 will request verification of your identity before acting on any request that involves access to, modification of, or deletion of Personal Data.