Privacy Policy
pej66 Data Commitment

Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

Scope & Application

This Privacy Policy applies to all Personal Data collected by pej66 from individuals who visit, register on, or interact with the pej66 platform in any capacity, including as registered players, prospective players who browse without registering, and individuals who contact pej66 customer support.

This Policy applies regardless of the device or connection type used to access the Platform — desktop browser, mobile browser, or any future mobile application released under the pej66 brand. It covers data collected online through the Platform and any data provided offline directly to pej66 support staff (for example, KYC documentation submitted via email to [email protected]).

Data We Collect

pej66 collects the following categories of Personal Data, depending on how you interact with the Platform:

pej66 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. If such information is incidentally disclosed in support communications, it will not be stored or processed beyond what is necessary to resolve the relevant support query.

How Data Is Collected

Personal Data is collected through the following channels:

• Direct submission: Information you actively provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and Usage Data collected automatically when you access the Platform via cookies, web server logs, and similar tracking technologies (see Section 8).
• Third-party sources: Identity and fraud-risk data received from KYC verification partners, payment processors, and publicly available sanctions and PEP (Politically Exposed Persons) screening databases as part of our AML compliance obligations.
• Device permissions: If you grant the Platform permission to access device features (for example, camera access for document upload), relevant data may be captured for the sole purpose of completing the requested function.

Legal Basis for Processing

pej66 processes Personal Data under one or more of the following legal bases:

• Contractual necessity: Processing required to create and manage your account, facilitate deposits and withdrawals, process bets, and deliver platform services as set out in the pej66 Terms & Conditions.
• Legal obligation: Processing required to comply with applicable AML, KYC, financial record-keeping, and regulatory reporting requirements under international gaming law and the conditions of pej66's operating license.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, service improvement, and internal analytics — where such interests are not overridden by your rights and freedoms.
• Consent: Where pej66 relies on your consent (for example, for optional marketing communications), that consent will be requested clearly and separately. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

pej66 uses collected Personal Data for the following purposes:

• Account management: Creating, maintaining, and securing your pej66 account, including authentication and password recovery.
• Transaction processing: Executing deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported channels, as well as processing withdrawal requests to your verified payment method.
• KYC and compliance: Verifying your identity and age (21+), screening against sanctions lists and PEP databases, and fulfilling AML reporting obligations.
• Platform security: Detecting and preventing fraud, unauthorized access, collusion, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Customer support: Responding to queries, resolving disputes, and maintaining records of support interactions for quality assurance and regulatory purposes.
• Responsible gaming: Monitoring gambling patterns to identify potential problem gambling, implementing player-requested limits, and facilitating self-exclusion requests in accordance with the Responsible Gaming Policy.
• Platform improvement: Analyzing aggregated and anonymized usage data to optimize the user experience, improve game offerings, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and newsletters where you have given explicit consent. You may opt out at any time by contacting [email protected].
• Legal proceedings: Preserving and disclosing data where necessary to establish, exercise, or defend legal claims.

Data Sharing & Disclosure

pej66 does not sell, rent, or trade Personal Data. Data is shared only in the following limited circumstances:

• Payment processors: Financial Data is shared with your chosen payment service provider (e.g., BCA, BRI, OVO, DANA) solely to execute your requested transaction. These providers are bound by their own regulatory obligations and strict confidentiality requirements.
• KYC & fraud prevention partners: Identity Data and relevant transaction data may be shared with certified KYC verification providers and fraud screening services engaged by pej66 under written data processing agreements.
• Game providers: Technical Data (such as session identifiers) is shared with certified game providers such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft solely to facilitate gameplay and resolve technical disputes. Game providers do not receive your financial or identity data.
• Regulatory & law enforcement authorities: pej66 will disclose Personal Data to competent governmental or law enforcement authorities where required to do so by applicable law, court order, or gaming regulatory directive.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of pej66's assets, Personal Data may be transferred to the acquiring entity subject to equivalent data protection obligations. Players will be notified of any such transfer in advance where legally permissible.

Cookies & Tracking Technologies

pej66 uses cookies and similar tracking technologies to operate, maintain, and improve the Platform. By continuing to use the Platform after acknowledging this Policy, you consent to the use of cookies as described below.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and may make it impossible to log in or place bets. pej66 does not currently use third-party advertising or retargeting cookies.

Data Security

pej66 implements a layered security architecture to protect Personal Data against unauthorized access, accidental loss, alteration, or destruction. Key measures include:

• Transport security: All data in transit is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Storage security: Personal Data at rest is stored in encrypted database environments with role-based access controls limiting access to authorized personnel only.
• Authentication controls: pej66 enforces strong password policies and supports multi-factor authentication. Internal admin systems require multi-factor authentication for all staff access.
• Penetration testing: The Platform undergoes regular third-party security audits and penetration tests to identify and remediate vulnerabilities proactively.
• Incident response: pej66 maintains a documented data breach response procedure. In the event of a breach likely to result in a risk to your rights and freedoms, you will be notified without undue delay.

While pej66 takes all reasonable steps to protect your data, no system is entirely immune to security threats. You are responsible for maintaining the confidentiality of your own account credentials and for notifying pej66 promptly at [email protected] if you suspect unauthorized access to your account.

Data Retention

pej66 retains Personal Data for the minimum period necessary to fulfill the purposes described in this Policy, subject to the following specific retention schedules:

• Account and identity data: Retained for the duration of your active account and for a minimum of 5 years following account closure, as required by AML and KYC regulatory obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with international financial record-keeping standards.
• Support communications: Retained for up to 3 years from the date of the last interaction, or longer where the communication is relevant to an ongoing or potential legal dispute.
• Usage and analytics data: Aggregated and anonymized analytics data may be retained indefinitely as it no longer constitutes Personal Data. Raw session logs are retained for up to 12 months.
• Marketing consent records: Retained for the duration of your consent and for 2 years after withdrawal of consent, to demonstrate compliance with consent obligations.

When Personal Data is no longer required and no legal retention obligation applies, it is securely deleted using cryptographic erasure for encrypted storage systems, or physical destruction for any paper records.

International Data Transfers

The pej66 Platform serves Indonesian players from server infrastructure that may be located in jurisdictions outside Indonesia. As a result, your Personal Data may be transferred to, stored in, and processed in countries other than your country of residence.

Where such transfers occur, pej66 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Transfers to jurisdictions recognized as providing an adequate level of data protection under internationally accepted standards.
• Contractual data transfer agreements with Data Processors incorporating standard data protection clauses that impose equivalent obligations to those described in this Policy.
• Technical security measures (encryption, pseudonymization) that protect data integrity regardless of the jurisdiction in which it is stored.

Your Rights

As a pej66 player, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". pej66 will respond within 30 calendar days.

Please note that certain rights are subject to limitations where pej66 has a legal obligation to retain or process your data (for example, AML record-keeping requirements). Where a request cannot be fulfilled in full, pej66 will explain the reason in writing.

Minors — Under 21

The pej66 Platform is strictly restricted to individuals aged 21 years and over. pej66 does not knowingly collect Personal Data from anyone under the age of 21. If pej66 discovers that Personal Data has been submitted by an individual who is under 21, the associated account will be closed immediately and all collected data will be deleted from our systems within 5 business days, except where retention is required to document the violation for regulatory reporting purposes.

Policy Amendments

pej66 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Material changes — those that meaningfully affect how we collect, use, or share your Personal Data — will be communicated to registered players via email or an in-platform notification at least 7 days before the revised Policy takes effect.

The most current version of this Privacy Policy is always published at https://pej66.net/privacy-policy with the effective date displayed at the top. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgment of the updated Policy. If you disagree with a material change, you may close your account before the revised Policy takes effect.

Contact & Data Rights Requests

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact pej66 through the following channel:

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24/7 directly on the pej66 Platform — Indonesian-speaking agents are on duty at all times (WIB).
• Response Time: Privacy and data rights enquiries are handled within 30 calendar days. Urgent security concerns (suspected data breach, unauthorized account access) are escalated and responded to within 24 hours.

pej66 is committed to resolving privacy concerns directly and transparently. If you are not satisfied with our response to a data rights request, you retain the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.