Privacy Policy — erek89

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more factors specific to their physical, economic, or social identity.
• "Processing" means any operation performed on Personal Data, whether by automated means or otherwise, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means erek89 and its operating entities, which determine the purposes and means by which Personal Data is processed.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of erek89 and in accordance with erek89's instructions.
• "Member" means any individual who has registered an account on the erek89 Platform.
• "Platform" means the erek89 website, mobile interface, and all associated services at erek89.cam.
• "KYC Data" means identity verification documentation submitted by a Member in fulfilment of Know Your Customer requirements, including government-issued identification and payment method evidence.
• "Cookies" means small text files placed on a Member's device by the Platform to facilitate session management, personalisation, and analytics.

2.1  erek89 collects Personal Data across several categories, depending on the nature of your interaction with the Platform:

2.2  erek89 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, or biometric data for identification purposes beyond the document-based KYC process described above.

3.1  erek89 collects Personal Data through the following means:

• Directly from you when you register an account, complete KYC verification, initiate a deposit or withdrawal, place a wager, or contact our support team.
• Automatically when you access the Platform, via server logs, cookies, pixel tags, and similar tracking technologies that record technical interaction data.
• From third-party payment processors that confirm transaction completion and provide payment method validation data to facilitate deposits and withdrawals through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• From identity verification service providers engaged to assist with KYC document validation, where applicable.

4.1  erek89 processes your Personal Data for the following purposes:

• Account management: Creating, maintaining, and securing your erek89 account; authenticating login sessions; communicating account-related notices.
• Identity verification: Fulfilling KYC obligations to confirm your identity, age (21+), and payment method ownership prior to processing withdrawals.
• Transaction processing: Executing deposit and withdrawal requests through local Indonesian payment channels; reconciling account balances.
• Service delivery: Enabling access to all Platform verticals including football betting, togel (Indonesia's traditional numbers lottery), live casino, and slot gacor (high-payout slots).
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent, abusive, or otherwise prohibited activity on the Platform.
• Responsible gaming: Monitoring wagering patterns to identify Members who may benefit from responsible gaming interventions; processing self-exclusion and deposit limit requests.
• Legal and regulatory compliance: Retaining records as required by applicable law; responding to lawful information requests from regulatory or law enforcement authorities.
• Service improvement: Analysing aggregate usage data to improve Platform features, payment flows, and customer support quality.
• Marketing communications: Sending promotional offers and Platform updates to Members who have opted in to receive such communications, in accordance with their stated preferences.

5.1  erek89 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the erek89 Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable regulatory requirements, including anti-money laundering (AML) obligations, KYC mandates, and responses to lawful authority requests.
• Legitimate interests: Processing conducted for purposes such as fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing of your Personal Data for non-essential marketing communications, which you may withdraw at any time without affecting the lawfulness of prior processing.

6.1  erek89 does not sell, rent, or trade your Personal Data to third-party marketers under any circumstances. Data sharing is limited to the categories of recipients described below, and only to the extent necessary for the specified purpose.

6.2  Payment processors and financial institutions. To facilitate deposits and withdrawals, erek89 shares relevant payment and identity data with the applicable Indonesian payment channels, including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja. Each payment partner operates under its own privacy and data security frameworks.

6.3  Identity verification providers. Where erek89 engages third-party KYC service providers to assist with document validation, only the minimum necessary identity documents are shared. Such providers are bound by strict confidentiality and data processing agreements.

6.4  Game content providers. Third-party game studios and live casino operators (including Evolution Gaming and other certified providers) may receive limited technical data — such as your session token and account identifier — to authenticate your access to their game environments. These providers do not receive your full personal profile.

6.5  Regulatory and law enforcement authorities. erek89 will disclose Personal Data to competent governmental or regulatory authorities where required to do so by applicable law, court order, or legitimate legal process. Where legally permissible, erek89 will notify the affected Member of such a disclosure request.

6.6  Corporate transactions. In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's business, Personal Data held by erek89 may be transferred to the acquiring or succeeding entity, subject to equivalent data protection commitments.

6.7  All third-party Data Processors engaged by erek89 are required to process Personal Data strictly in accordance with erek89's written instructions and to implement appropriate technical and organisational security measures.

7.1  erek89 retains your Personal Data for as long as your account remains active and for such additional period as is required to fulfil legal, regulatory, and operational obligations.

7.2  The following retention periods apply as a general guide:

7.3  Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where anonymisation is used, the resulting aggregate data may be retained indefinitely for statistical and analytical purposes.

8.1  erek89 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption on all data in transit between your device and erek89 servers.
• Encryption at rest for sensitive data categories including KYC documents and payment account details stored on Platform infrastructure.
• Access controls limiting Personal Data access to authorised erek89 personnel on a strict need-to-know basis, enforced through role-based permission systems.
• Multi-factor authentication for internal system access by erek89 technical and compliance staff.
• Regular security audits and penetration testing conducted by independent third parties to identify and remediate vulnerabilities.
• Intrusion detection systems and real-time monitoring to identify and respond to anomalous access patterns.

8.2  In the event of a personal data breach that poses a risk to your rights and freedoms, erek89 will take prompt remedial action and notify affected Members in accordance with applicable data protection obligations.

9.1  erek89 uses cookies and similar technologies (including pixel tags and local storage) to support the functioning of the Platform and to improve the Member experience. The categories of cookies deployed are as follows:

9.2  Essential cookies are deployed without the need for prior consent, as they are strictly necessary for the Platform to function. Non-essential cookies (preference and analytics) are only placed with your consent, which you may grant or withdraw through your browser settings at any time.

9.3  Most modern browsers allow you to control cookie behaviour through their settings. Blocking essential cookies may impair your ability to log in or use core Platform features. Blocking non-essential cookies will not affect your access to the Platform's core functionality.

10.1  Subject to applicable law and any overriding legal obligations, you hold the following rights with respect to your Personal Data held by erek89:

• Right of access: You may request a copy of the Personal Data erek89 holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data. You may also update certain information directly through your Account settings.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to erek89's legal retention obligations, which may require certain data to be retained for up to five years post-account closure.
• Right to restriction of processing: You may request that erek89 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or a contractual necessity, and is carried out by automated means, you may request that your data be provided in a structured, machine-readable format.
• Right to object: You may object at any time to processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, though erek89 may be entitled to continue processing where it can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

10.2  To exercise any of the rights above, please contact the erek89 Data Protection team at [email protected] with a clear description of your request. erek89 will respond within 30 calendar days of receiving a complete and verifiable request.

10.3  For identity verification purposes, erek89 may need to confirm your identity before processing a data rights request. This is to ensure that Personal Data is not disclosed to or altered by unauthorised third parties.

11.1  The erek89 Platform is strictly intended for adults aged 21 years and over. erek89 does not knowingly collect Personal Data from individuals under the age of 21.

11.2  Age verification is a mandatory component of the KYC process. Any account found to belong to an individual under 21 years of age will be immediately suspended, all associated Personal Data will be deleted, and any funds will be handled in accordance with applicable regulatory requirements.

11.3  If you have reason to believe that a minor has registered an account on the Platform or has submitted Personal Data to erek89, please notify our support team immediately at [email protected].

12.1  erek89 operates as an internationally oriented platform. As a result, your Personal Data may be transferred to, stored in, and processed in countries other than Indonesia, including the jurisdiction in which the Company is incorporated and where certain infrastructure or service providers are located.

12.2  When Personal Data is transferred outside of Indonesia, erek89 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under applicable Indonesian data protection law. Such safeguards may include contractual data processing agreements incorporating internationally recognised standard contractual clauses.

12.3  By using the erek89 Platform, you acknowledge and consent to the transfer of your Personal Data to other jurisdictions as described in this clause, where necessary for the provision of the Platform services.

13.1  erek89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform operations, or data processing practices. The updated Policy will be published on this page with a revised "Last Updated" date.

13.2  For material changes to this Policy — particularly those that affect how your Personal Data is used or shared — erek89 will provide advance notice via email or an in-Platform notification at least seven (7) calendar days before the changes take effect.

13.3  Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised Policy, you must cease using the Platform and contact erek89 support to request account closure.

14.1  If you have any questions, concerns, or requests relating to this Privacy Policy or erek89's handling of your Personal Data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line for fastest routing
• Live Chat: Available 24/7 through the erek89 Platform interface — request to speak with the Data Protection team
• Response time: Data rights and privacy enquiries are responded to within 30 calendar days of receiving a complete, verifiable request

14.2  For responsible gaming enquiries, including self-exclusion requests or concerns about your own wagering behaviour, please refer to our dedicated Responsible Gaming page or contact support and request the Player Protection team.