Privacy Policy — pg188 Data Commitment

In this Privacy Policy, the following terms carry the meanings set out below unless the context clearly requires otherwise:

pg188 collects Personal Data from you through several distinct channels. The categories of data collected and the channel through which each is typically gathered are summarized in the table below:

pg188 processes your Personal Data exclusively for the following purposes. We do not process Personal Data for any purpose that is incompatible with the purposes listed here:

1. Account Management: To create, maintain, authenticate, and administer your pg188 Account, including resetting credentials, enforcing responsible gaming limits you have set, and communicating account-status changes.
2. Identity & Age Verification (KYC): To confirm that you are at least 21 years of age, that you are the legal owner of the payment accounts linked to your IDR Wallet, and to comply with anti-money-laundering (AML) screening obligations.
3. Payment Processing: To execute IDR deposits and withdrawals via your registered bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain auditable financial records of all transactions.
4. Game Delivery & Platform Operation: To serve the correct game content from licensed providers (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Spribe), to record bet outcomes, and to calculate and credit winnings accurately to your IDR Wallet.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized access, bonus abuse, multi-accounting, and money laundering. Technical data including IP addresses and device fingerprints are used for this purpose.
6. Responsible Gaming Compliance: To enforce self-exclusion orders, cooling-off periods, and deposit limits that you or pg188 have applied to your Account, and to identify patterns of play that may indicate problem gambling behavior.
7. Legal & Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and maintain records required under international gaming regulations.
8. Customer Support: To respond to your queries, resolve complaints, and improve our support processes by analyzing anonymized interaction data.
9. Marketing Communications (with consent only): To send you promotional offers, bonus notifications, and platform news via your registered email address or mobile number, but only where you have explicitly opted in to receiving such communications. You may withdraw marketing consent at any time by contacting [email protected] or by updating your Account preferences.
10. Platform Analytics & Improvement: To analyze aggregate, anonymized usage patterns across the pg188 Platform for the purpose of improving navigation, game selection, and the overall player experience. No individual player is identified in this analysis.

pg188 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract between pg188 and you as a registered player — including account creation, payment processing, game delivery, and KYC verification.
• Legitimate Interests: Processing necessary for pg188's legitimate operational interests, such as fraud detection, security monitoring, platform analytics, and responsible gaming enforcement, provided those interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable legal or regulatory requirements, including AML screening, record-keeping obligations, and responding to lawful authority requests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

pg188 does not sell your Personal Data to third parties. We share Personal Data only in the following limited and controlled circumstances:

• Payment Processors: We share financial and identity data with your nominated payment channel (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja) to the extent required to execute and reconcile your deposit and withdrawal transactions.
• KYC & AML Verification Providers: We share identity documents and related registration data with third-party identity verification services engaged to perform KYC and AML screening on pg188's behalf. These providers process data only as instructed by pg188 and are contractually bound to maintain equivalent data-protection standards.
• Game Content Providers: Limited technical and session data (such as player ID tokens and session timestamps) is shared with licensed game studios including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, and Spribe solely to enable authenticated game sessions. These providers do not receive your full identity or payment data.
• Analytics Providers: Anonymized, aggregated usage data may be shared with analytics platforms for the purpose of platform performance analysis. No data shared for analytics purposes can be used to identify individual players.
• Legal Authorities: pg188 will disclose Personal Data to competent regulatory, law enforcement, or judicial authorities where required to do so by a valid legal order, court order, or applicable regulation. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of pg188's assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer with at least 30 days' advance notice.

pg188 uses cookies and similar technologies (such as local storage and session tokens) on the Platform. The cookies we deploy fall into the following categories:

pg188 does not deploy advertising cookies, third-party remarketing pixels, or cross-site behavioral tracking technologies. You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

pg188 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarizes our standard retention periods by data category:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where anonymization is not technically feasible within a reasonable timeframe, data is archived under access-restricted conditions pending secure deletion.

pg188 implements a layered security architecture to protect Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our technical and organizational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pg188 servers.
• Bcrypt password hashing — your account password is never stored in plain text and is not recoverable by pg188 staff.
• Two-factor authentication (2FA) via OTP, available and strongly recommended for all registered accounts.
• Role-based access controls limiting internal staff access to Personal Data on a strict need-to-know basis.
• Regular automated vulnerability scanning and periodic third-party penetration testing of the Platform infrastructure.
• Encrypted at-rest storage for all databases containing Personal Data, with encrypted, offsite backups maintained on a daily cycle.
• Intrusion detection systems (IDS) monitoring for anomalous data access patterns in real time.
• A formal data breach response plan, under which pg188 will notify affected players and relevant authorities within 72 hours of detecting a confirmed breach involving their Personal Data.

While pg188 takes all reasonable steps to protect your data, no security system is entirely impenetrable. You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact [email protected] immediately.

As a player whose Personal Data is processed by pg188, you hold the following rights. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered username and a brief description of your request. pg188 will respond within 30 calendar days.

• Right of Access: You may request a copy of all Personal Data pg188 holds about you, along with information on how it is being processed and the legal basis for that processing.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For most registration data, corrections can be made directly within your Account settings dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests. Note that pg188 may be required to retain certain data (e.g., KYC and financial records) beyond your erasure request to meet legal obligations.
• Right to Restrict Processing: You may request that pg188 restrict the processing of your Personal Data in specific circumstances — for example, while a data accuracy dispute is being resolved, or where you contest the legal basis for processing.
• Right to Data Portability: You may request that pg188 provide your Personal Data in a structured, machine-readable format (CSV or JSON) so that you can transfer it to another service provider, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, pg188 will cease that processing immediately and without requiring justification.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

pg188 employs KYC age-verification procedures at account registration and prior to processing any withdrawal. Any account found to belong to a person under the age of 21 will be permanently closed, all pending bets will be voided, any deposited real-money balance will be refunded to the originating payment account after identity confirmation, and any bonus funds or winnings accumulated on that account will be forfeited.

pg188 reviews and updates this Privacy Policy periodically to reflect changes in our data-processing practices, Platform features, or applicable legal requirements. The version number and "Last Updated" date at the top of this page indicate the current revision.

Where a proposed change is material — meaning it significantly alters how we collect, use, or share your Personal Data — pg188 will notify registered players via their account-registered email address at least 14 days before the change takes effect. Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

For non-material changes (such as typographical corrections, clarifications that do not alter the substance of existing policies, or the addition of new illustrative examples), the updated Privacy Policy will be published on this page without individual notification. We encourage you to review this page periodically to stay informed of how pg188 handles your Personal Data.

If you have questions, concerns, or requests relating to this Privacy Policy or pg188's handling of your Personal Data, please reach out through the following channels:

• Email: [email protected] — use the subject line "Privacy Policy Inquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24/7 directly within the pg188 Platform. First-response time is under two minutes during WIB peak hours (07:00–23:00 WIB, UTC+7).
• Response Commitment: pg188 will acknowledge all privacy-related inquiries within 48 hours and provide a substantive response within 30 calendar days of receiving a complete, verified request.