paku66 Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how paku66 ("we", "us", "our", or the "Company") collects, uses, discloses, stores, and protects the personal information of users ("you", "your") who access or use our online betting platform (the "Platform"). This Privacy Policy applies to all personal data processed by paku66 in connection with your use of our services, including during account registration, identity verification (KYC), deposits and withdrawals, customer support interactions, and marketing communications.

By creating an account on paku66 or using our Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must not use our services. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with paku66.

paku66 is committed to protecting your privacy and complying with applicable data protection laws and regulations, including principles derived from the General Data Protection Regulation (GDPR) and international best practices for online financial services. We implement robust technical and organizational security measures to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

paku66 collects various types of personal information to provide, maintain, and improve our services, ensure compliance with legal and regulatory requirements, prevent fraud and money laundering, and deliver personalized user experiences. The categories of personal data we collect include:

2.1 Information You Provide Directly

• Account Registration Data: When you create an account, we collect your full legal name, date of birth, gender, residential address, email address, phone number, username, and password.
• Identity Verification Documents (KYC): To comply with international financial regulations and licensing requirements, we collect government-issued identification documents such as Indonesian KTP (national identity card), passport, or driving license; proof of address documents (utility bills, bank statements); and selfie photographs holding your identification document.
• Payment Information: Bank account details (account number, bank name, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), transaction history, deposit and withdrawal records, and currency preferences.
• Communication Data: Records of your interactions with our customer support team via live chat, email, WhatsApp, or phone, including inquiry content, complaint details, resolution notes, and satisfaction ratings.
• Marketing Preferences: Your consent status for receiving promotional communications, preferred communication channels, and marketing campaign engagement data.

2.2 Information Collected Automatically

• Device and Technical Information: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, language settings, time zone, and unique device identifiers.
• Usage Data: Pages visited, features used, time spent on pages, navigation paths, clickstream data, bet history, game preferences, login timestamps, and session duration.
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with jurisdiction-specific access restrictions and to provide localized content and promotions.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar technologies to remember your preferences, analyze site traffic, personalize content, and improve platform performance. See Section 9 for detailed cookie information.

2.3 Information from Third-Party Sources

• Payment Processors: Transaction verification data, payment success or failure status, and fraud detection signals from our payment gateway partners (Indonesian banks and e-wallet providers).
• Identity Verification Services: Enhanced due diligence data from third-party KYC verification providers, including watchlist screening results, politically exposed person (PEP) checks, and sanctions list matching.
• Game Providers: Gameplay data, bet outcomes, RTP statistics, and game session information from third-party casino and slot providers integrated into our platform.

3. How We Use Your Information

paku66 processes your personal data for the following purposes, all of which are necessary to provide our services, comply with legal obligations, and pursue legitimate business interests:

3.1 Service Provision and Account Management

• Create and maintain your user account on the paku66 Platform.
• Verify your identity and age to comply with licensing requirements and prevent underage gambling (21+ age restriction enforcement).
• Process deposits and withdrawals to and from your account via Indonesian banks and e-wallets.
• Enable you to place bets on sports events, play casino games, participate in togel draws, and access other betting products.
• Track your betting history, account balance, bonus eligibility, and VIP tier status.
• Provide personalized game recommendations and betting suggestions based on your preferences and activity patterns.

3.2 Legal and Regulatory Compliance

• Fulfill our obligations under international anti-money laundering (AML) and counter-terrorist financing (CTF) regulations.
• Conduct Know Your Customer (KYC) verification and enhanced due diligence procedures as required by licensing authorities.
• Detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and other violations of our Terms & Conditions.
• Maintain records of user transactions, communications, and account activity for audit and regulatory reporting purposes.
• Respond to legal process, court orders, law enforcement requests, and government inquiries.

3.3 Customer Support and Communication

• Respond to your inquiries, complaints, and support requests via live chat, email, WhatsApp, or phone.
• Send you transactional communications including account confirmations, password reset links, deposit receipts, withdrawal notifications, and security alerts.
• Notify you of important changes to our services, policies, or terms.
• Conduct customer satisfaction surveys and collect feedback to improve service quality.

3.4 Marketing and Promotions

• Send you promotional communications about new games, special offers, bonuses, tournaments, and VIP program benefits (only with your explicit consent).
• Personalize marketing content based on your betting preferences, game history, and engagement patterns.
• Administer loyalty programs, cashback rewards, and VIP tier progression.
• Conduct promotional campaigns and prize draws in compliance with applicable laws.

3.5 Platform Improvement and Analytics

• Analyze user behavior, betting patterns, and platform usage to identify trends and improve user experience.
• Test new features, games, and betting markets with select user groups.
• Optimize website performance, loading speeds, and mobile responsiveness for Indonesian network conditions.
• Develop predictive models for responsible gaming interventions and fraud detection.

3.6 Security and Fraud Prevention

• Monitor for suspicious account activity, unauthorized access attempts, and potential security breaches.
• Implement multi-factor authentication and other security measures to protect your account.
• Screen for prohibited jurisdictions, sanctioned individuals, and high-risk payment patterns.
• Collaborate with payment processors and law enforcement to investigate and prosecute fraudulent activity.

4. Legal Basis for Processing

Under international data protection principles, paku66 relies on the following legal bases for processing your personal information:

• Contractual Necessity: Processing is necessary to perform our contract with you under our Terms & Conditions, including account creation, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML/CTF legislation, KYC requirements, licensing conditions, tax reporting obligations, and law enforcement requests.
• Legitimate Interests: Processing is necessary for our legitimate business interests or those of third parties, such as fraud prevention, platform security, service improvement, direct marketing (where you have not opted out), and maintaining business records. We balance these interests against your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing certain data, such as using non-essential cookies or sending you promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

paku66 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality and data protection obligations:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Danamon, Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC verification services that conduct document authentication, biometric checks, and watchlist screening on our behalf.
• Game Providers: Licensed casino, slot, and live dealer game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) to facilitate gameplay and bet settlement.
• Cloud Hosting and IT Services: Infrastructure providers that host our servers, databases, and applications, all subject to stringent security and confidentiality agreements.
• Customer Support Tools: Live chat platforms, ticketing systems, and CRM software providers that help us manage customer communications.
• Analytics and Marketing Services: Tools that help us understand user behavior, measure campaign effectiveness, and deliver personalized content (only with your consent where required).

5.2 Legal and Regulatory Authorities

• Licensing authorities in jurisdictions where paku66 operates, to fulfill reporting and audit requirements.
• Law enforcement agencies, courts, and government bodies when required by law, court order, or legal process.
• Financial intelligence units for suspicious activity reporting under AML/CTF obligations.
• Tax authorities for compliance with international tax reporting standards (CRS, FATCA).

5.3 Corporate Transactions

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal data may be transferred to the successor entity or acquiring party, subject to the same privacy protections outlined in this Privacy Policy. You will be notified via email or prominent notice on our Platform before any such transfer occurs.

5.4 With Your Consent

We may share your personal information with other third parties when you have given us explicit consent to do so, such as when participating in joint promotions with partner brands or when requesting integration with third-party services.

6. International Data Transfers

paku66 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data across borders, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

These safeguards may include:

• Transferring data only to countries or organizations recognized as providing adequate data protection standards.
• Implementing Standard Contractual Clauses (SCCs) approved by data protection authorities with third-party recipients.
• Verifying that third-party service providers maintain equivalent or stronger data protection measures than those described in this Privacy Policy.
• Obtaining your explicit consent for data transfers where required by law.

If you have questions about the specific countries where your data is processed or the safeguards we use for international transfers, please contact us at [email protected].

7. Data Retention

paku66 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory requirements, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and applicable legal obligations:

Data Category	Retention Period	Reason
Account Information	Duration of account activity + 5 years after closure	Legal compliance, dispute resolution, fraud prevention
KYC Documents	Duration of account activity + 7 years after closure	AML/CTF regulatory requirements, licensing obligations
Transaction Records	7 years from transaction date	Financial record-keeping, tax reporting, audit requirements
Betting History	5 years from bet placement	Dispute resolution, responsible gaming monitoring, bonus tracking
Communication Records	3 years from communication date	Customer service quality assurance, dispute resolution
Marketing Consent	Until consent is withdrawn + 30 days	Compliance with marketing regulations, preference management
Cookies and Usage Data	Up to 24 months	Analytics, performance optimization, personalization

After the applicable retention period expires, we securely delete or anonymize your personal data. In some cases, we may retain anonymized or aggregated data (which cannot be used to identify you personally) indefinitely for statistical analysis and service improvement purposes.

If you request account closure, we will deactivate your account and cease using your data for marketing purposes immediately. However, certain data must be retained for the periods specified above to comply with legal obligations. You will be notified of the retention schedule when you close your account.

8. Your Privacy Rights

You have the following rights regarding your personal data held by paku66. To exercise any of these rights, please contact our Data Protection Officer at [email protected]:

8.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information free of charge within 30 days of your request, along with details about the purposes of processing, categories of data, and recipients.

8.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data. You can also update most account information directly through your account settings on the Platform. For KYC document updates, contact customer support with the corrected documents.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent (where processing is based on consent), or when you object to processing. However, we may be unable to delete data that we are legally required to retain for compliance purposes (see Section 7).

8.4 Right to Restriction of Processing

You may request that we temporarily restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or when you need us to retain data for legal claims even though we no longer need it for our purposes.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider without hindrance from paku66, where technically feasible.

8.6 Right to Object

You may object to processing of your personal data when we rely on legitimate interests as the legal basis, including for direct marketing purposes. If you object to marketing, we will stop processing your data for such purposes immediately. You can also adjust your marketing preferences in your account settings.

8.7 Right to Withdraw Consent

Where we process your data based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before the withdrawal. To withdraw consent for marketing communications, click the "unsubscribe" link in any promotional email or adjust your preferences in your account settings.

8.8 Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first at [email protected] so we can address your concerns directly.

9. Cookies and Tracking Technologies

paku66 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device by your web browser. Cookies allow us to recognize you when you return to our Platform and remember your preferences.

9.1 Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for the operation of our Platform. They enable core functionality such as login authentication, account security, session management, and secure payment processing. You cannot opt out of essential cookies as they are required for the Platform to function properly.
• Performance Cookies: These cookies collect information about how you use our Platform, such as which pages you visit most often and whether you receive error messages. This helps us identify and fix technical issues and improve overall platform performance. The data collected is aggregated and anonymized.
• Functionality Cookies: These cookies remember your preferences and choices, such as language settings, currency selection, and display preferences. They allow us to personalize your experience and provide enhanced features.
• Analytics Cookies: We use analytics cookies to understand user behavior, measure traffic patterns, and evaluate the effectiveness of our marketing campaigns. These cookies help us optimize content, improve navigation, and develop new features based on user needs.
• Targeting/Advertising Cookies: These cookies track your browsing activity across different websites to build a profile of your interests and display relevant advertisements. We use targeting cookies only with your explicit consent and allow you to opt out at any time.

9.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may impact your ability to use certain features of the Platform. You can also use our cookie consent banner to adjust your preferences for non-essential cookies. To learn more about cookies and how to manage them, visit www.allaboutcookies.org.

9.3 Third-Party Cookies

Some cookies on our Platform are placed by third-party service providers, including game providers, payment processors, and analytics partners. These third parties have their own privacy policies governing their use of cookies. We recommend reviewing their policies to understand how they collect and use your data.

10. Data Security Measures

paku66 employs industry-leading technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, destruction, or loss. Our comprehensive security framework includes:

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption, the same standard used by banks and financial institutions worldwide. Sensitive data stored in our databases is encrypted at rest using advanced encryption algorithms.
• Access Controls: We implement role-based access controls to ensure that only authorized personnel can access personal data, and only to the extent necessary for their job functions. All access is logged and monitored for suspicious activity.
• Multi-Factor Authentication: Account access requires multi-factor authentication for all privileged users and is available to all users for enhanced account security.
• Firewalls and Intrusion Detection: Our network infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) that monitor and block suspicious traffic in real-time.
• Regular Security Audits: We conduct regular internal security assessments and engage independent third-party cybersecurity firms to perform penetration testing, vulnerability scanning, and compliance audits.
• Employee Training: All paku66 employees with access to personal data undergo mandatory data protection and security training and are bound by strict confidentiality agreements.
• Secure Payment Processing: Payment transactions are processed through PCI-DSS compliant payment gateways. We do not store your full credit card numbers, bank account details, or e-wallet credentials on our servers.
• Data Backup and Recovery: We maintain regular encrypted backups of all data and have disaster recovery procedures in place to ensure business continuity and data integrity in the event of system failures.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data using commercially acceptable means, we cannot guarantee absolute security. If you become aware of any security vulnerability or unauthorized access to your account, please contact us immediately at [email protected].

11. Children's Privacy

paku66 services are strictly intended for individuals who are at least 21 years of age or the legal gambling age in their jurisdiction, whichever is higher. We do not knowingly collect, use, or disclose personal information from individuals under the age of 21. Our account registration process includes mandatory date of birth verification, and we conduct identity verification (KYC) checks to confirm the age of all users.

If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will take immediate steps to delete that information from our systems and close the associated account. Parents or guardians who believe their child has provided personal information to paku66 should contact us immediately at [email protected], and we will investigate and take appropriate action.

We take underage gambling prevention extremely seriously and cooperate fully with law enforcement and child protection authorities on any reports of minors attempting to access online gambling platforms.

12. Changes to This Privacy Policy

paku66 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on this page with a revised "Last Updated" date at the top.
• Sending you an email notification to the address registered with your account (for significant changes that affect your rights).
• Displaying a prominent notice on our Platform homepage for at least 30 days following the update.

Your continued use of the paku66 Platform after the updated Privacy Policy becomes effective constitutes your acceptance of the changes. If you do not agree with the updated Privacy Policy, you must stop using our services and close your account. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our dedicated Data Protection Officer:

• Email: [email protected]
• Subject Line for Privacy Requests: "Privacy Policy Inquiry" or "Data Rights Request"
• General Customer Support: [email protected] (24/7 Indonesian-speaking team)
• Security Concerns: [email protected]

When contacting us about privacy matters, please include your full name, registered email address, and account username (if applicable) to help us verify your identity and respond to your request efficiently. We aim to respond to all privacy inquiries within 30 days, or sooner if required by applicable law.

For urgent security matters, such as suspected unauthorized account access or data breaches, please use our 24/7 live chat support or call our emergency hotline (details provided in your account dashboard) for immediate assistance.