Privacy Policy

1 Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, identification number, contact details, financial data, and online identifiers such as IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means pgi188, which determines the purposes and means of Processing your Personal Data.
• "Data Processor" means a third-party entity that Processes Personal Data on behalf of pgi188 under a written data processing agreement.
• "Player" or "User" means any individual who has registered an Account on the pgi188 Platform.
• "KYC Data" means identity verification documents and related information submitted by a Player to fulfil Know Your Customer obligations.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information.

2 Personal Data We Collect

pgi188 collects Personal Data through several channels, including registration forms, transaction records, KYC submissions, platform usage, and automated technical systems. The categories of data we collect are set out in the table below.

3 How We Use Your Personal Data

pgi188 uses your Personal Data only for purposes that are compatible with the reason it was collected. The primary purposes are:

• Account Management: To create, maintain, and administer your pgi188 Account, authenticate your identity at login, and communicate important Account-related notices.
• Payment Processing: To process deposits and withdrawals via your nominated Indonesian bank or e-wallet account, and to maintain accurate financial records.
• KYC Compliance: To verify your identity and age in accordance with international anti-money laundering (AML) and counter-terrorism financing (CTF) obligations before processing withdrawal requests.
• Platform Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, unauthorized access, and other Restricted Activities as defined in our Terms & Conditions.
• Customer Support: To respond to your queries, resolve disputes, and process complaints through our live chat and email support channels.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behavior and, where appropriate, to apply protective tools such as deposit limits or self-exclusion at the Player's request or under our Responsible Gaming obligations.
• Platform Improvement: To analyze aggregated usage data to improve Platform performance, fix technical issues, and develop new features that better serve Indonesian players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, subject to your right to opt out at any time as described in Section 10.
• Legal Compliance: To fulfil any obligation imposed by applicable law, regulatory authority, or court order, including the retention of transaction records for the periods specified in Section 9.

4 Legal Basis for Processing

pgi188 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary to perform the contract between you and pgi188 — specifically, to operate your Account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including AML/CTF requirements, record-keeping obligations, and responses to lawful regulatory or law-enforcement requests.
• Legitimate Interests: Processing is necessary for pgi188's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and improving our services, provided those interests are not overridden by your privacy rights.
• Consent: Where we send marketing communications or use non-essential cookies, we rely on your consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing and Disclosure

pgi188 does not sell, rent, or otherwise trade your Personal Data to third parties for their own marketing purposes. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis:

5.1 Payment Service Providers

To process deposits and withdrawals, we share relevant financial and identity data with our approved payment partners handling transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers are contractually prohibited from using your data for any purpose beyond facilitating your transaction.

5.2 KYC and Fraud Prevention Services

We may share Identity Data and KYC Documents with third-party identity verification specialists to authenticate your identity, screen against sanctions lists, and detect potentially fraudulent applications. All such providers operate under binding data processing agreements.

5.3 Technology and Infrastructure Providers

Our Platform is hosted on cloud infrastructure managed by internationally recognized service providers. These providers may process Technical Data in the course of delivering hosting, security monitoring, and content delivery services. They are classified as Data Processors and may not use your data for independent purposes.

5.4 Game Content Providers

Where required for game operation and fairness auditing, limited gameplay and transaction data may be shared with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These studios receive only the minimum data necessary for game delivery and RNG certification purposes.

5.5 Legal and Regulatory Authorities

pgi188 may disclose your Personal Data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law or where such disclosure is necessary to protect the legal rights, safety, or property of pgi188, our Players, or the public. We will notify you of any such disclosure to the extent permitted by law.

5.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving pgi188, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

6 International Data Transfers

pgi188 operates as an international platform and your Personal Data may be stored or processed on servers located outside Indonesia. Where data is transferred to countries that may not offer the same level of data protection as Indonesia, pgi188 implements appropriate safeguards, which may include:

• Standard contractual clauses approved by recognized data protection authorities.
• Binding corporate rules governing intra-group data transfers.
• Data processing agreements requiring the recipient to apply security and confidentiality standards equivalent to those described in this Policy.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to international servers for the purposes described in this Policy.

7 Cookies and Tracking Technologies

pgi188 uses cookies and similar technologies (such as web beacons and local storage) to enhance your experience on the Platform. The categories of cookies we use are as follows:

You may manage or disable non-essential cookies at any time through your browser's privacy settings. Please note that disabling certain cookies may affect the functionality and performance of your Platform experience. pgi188 does not respond to browser "Do Not Track" signals at this time, as no industry-wide standard for such signals currently exists.

8 Data Security

pgi188 implements a layered security framework to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your device and pgi188 servers is encrypted using current TLS standards, preventing interception by third parties.
• AES-256 Encryption at Rest: Sensitive data fields — including financial details, identity documents, and KYC records — are encrypted at rest using AES-256, an internationally recognized encryption standard.
• Access Controls: Internal access to Personal Data is restricted to authorized personnel on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations and undergo regular data-protection training.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring. Penetration testing is conducted at least annually by independent security specialists.
• Incident Response: pgi188 maintains a documented data-breach response plan. In the event of a breach that is likely to result in risk to your rights and freedoms, we will notify affected Players without undue delay and take all reasonable steps to contain and remediate the breach.

9 Data Retention Periods

pgi188 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active Account plus 5 years following Account closure, to satisfy regulatory record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of 5 years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• KYC Documents: Retained for 5 years from the date of verification, or longer if required by applicable AML/CTF regulations.
• Customer Support Communications: Retained for 2 years from the date of the final communication in each support case.
• Technical and Usage Data: Retained in identifiable form for up to 12 months, after which data is either deleted or anonymized for aggregated analytical purposes.
• Marketing Preferences: Opt-out records are retained indefinitely to ensure we do not inadvertently contact you following an opt-out request.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in accordance with our internal data disposal procedures. Requests for early deletion are addressed under Section 10 below.

10 Your Data Rights

As a Player using the pgi188 Platform, you hold the following rights in relation to your Personal Data. pgi188 is committed to honoring these rights promptly and without undue obstacles.

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request". Include your Account username and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. We may request additional identification to verify your identity before processing a rights request.

10.1 Opting Out of Marketing

To unsubscribe from all marketing communications, simply reply to any marketing email with the word "UNSUBSCRIBE", or contact our support team directly. Opt-out requests are processed within 5 business days. Please note that even after opting out of marketing, you will continue to receive essential transactional communications related to your Account, such as deposit confirmations and withdrawal receipts.

11 Children's Privacy

The pgi188 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a minor has submitted Personal Data to the Platform — whether through registration, a deposit attempt, or any other means — we will immediately close the Account, forfeit any associated balance, and securely delete all Personal Data collected in connection with that Account.

If you are a parent or guardian and believe that a minor has accessed the Platform using your details or has otherwise created an Account, please contact us immediately at [email protected]. We take all such reports seriously and will investigate and act upon them with urgency.

12 Third-Party Links and Services

The pgi188 Platform may contain references to or integrations with third-party game studios, payment gateways, and technology providers. While these third parties are contractually required to handle your data securely, their own privacy practices are governed by their respective privacy policies, over which pgi188 has no direct control.

pgi188 is not responsible for the privacy practices of any third-party service accessible in connection with our Platform. We encourage you to review the privacy policies of any third-party service you interact with independently of the pgi188 Platform. This Policy applies solely to data processed directly by pgi188 in its capacity as Data Controller.

13 Amendments to This Policy

pgi188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. When material changes are made, we will notify registered Players via the email address on file at least 7 days before the changes take effect. The updated Policy will be published on this page with a revised "Last Updated" date.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with the changes, you must cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

14 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a complaint about how pgi188 has handled your Personal Data, please contact our Data Protection team through the following channel:

• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" as appropriate.
• Response Time: We aim to acknowledge all privacy-related inquiries within 5 business days and to provide a full written response within 30 calendar days of receipt.
• Support Hours: Our customer support team, including Indonesian-speaking agents, is available 24 hours a day, 7 days a week via live chat on the Platform.

If you are not satisfied with our response to a complaint, you may have the right to refer the matter to an independent data protection supervisory authority or, where applicable, to pursue dispute resolution in accordance with Clause 14 of our Terms & Conditions.