pga88 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, either directly (e.g., full name, national identity number) or indirectly (e.g., IP address combined with a device identifier).
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, combination, restriction, erasure, or destruction.
• "Data Controller" means pga88, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party service provider engaged by pga88 to process Personal Data on its behalf under a contractual data-processing agreement.
• "Member" / "you" means any individual who has registered an account on the pga88 platform or who browses the platform without registration.
• "KYC Data" means identity and address verification documents submitted by a Member as part of the Know Your Customer process, including national identity documents, selfie photographs, and proof-of-address records.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including but not limited to financial account information, government-issued identity numbers, and biometric data.
• "Cookie" means a small text file placed on your device by the pga88 platform for the purposes described in Clause 10 of this Policy.

pga88 collects the following categories of Personal Data depending on how you interact with the platform:

2.1 Identity Data

Full legal name (as it appears on your Indonesian National Identity Card — KTP or passport), date of birth, nationality, and gender.

2.2 Contact Data

Registered email address, active Indonesian mobile phone number (with +62 country code), and residential address (city, province, postal code).

2.3 Financial Data

Indonesian bank account details (bank name, account number, and account holder name) for deposit and withdrawal processing — covering supported banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata — and e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. pga88 does not store full debit or credit card numbers; card transactions are handled exclusively by certified PCI-DSS-compliant payment processors.

2.4 KYC Verification Data

Scanned or photographed copies of your government-issued identity document, proof-of-address documentation (dated within the last three months), and selfie photographs taken for liveness verification purposes.

2.5 Technical Data

IP address, device type and operating system, browser type and version, screen resolution, session duration, login timestamps, and geolocation data derived from your IP address.

2.6 Transactional Data

Complete history of deposits, withdrawals, bets placed, games played, bonus claims, and winnings — all denominated in Indonesian Rupiah (IDR).

2.7 Communication Data

Records of all interactions with pga88's customer support team via live chat, WhatsApp, or email, including transcripts, timestamps, and resolution notes.

2.8 Marketing Preference Data

Your expressed preferences regarding receiving promotional communications from pga88, including any opt-out instructions you have provided.

pga88 collects Personal Data through the following channels:

• Direct submission: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, or contact our support team.
• Automated technical collection: When you browse the pga88 platform, our servers automatically record technical data including your IP address, browser type, referring URL, and session activity via server logs and first-party cookies.
• Payment intermediaries: When you initiate a financial transaction, our payment processing partners transmit confirmation data (transaction reference, amount, and partial account identifier) back to pga88 for reconciliation purposes.
• Third-party identity verification services: During the KYC process, pga88 may use specialist identity verification providers to authenticate the documents you submit. These providers act as Data Processors under contract with pga88 and do not retain your documents beyond the verification workflow.
• Customer support platforms: Conversations conducted via live chat or WhatsApp are logged by pga88's customer support platform for quality assurance, training, and dispute resolution purposes.

pga88 processes your Personal Data only for specific, legitimate purposes. We do not process data beyond what is necessary for those purposes. The primary purposes are:

• Account management: Creating and maintaining your pga88 Member account, processing login requests, and managing account settings and preferences.
• Identity verification and fraud prevention: Conducting KYC verification to confirm your identity, age (21+), and source of funds, and to prevent fraudulent registrations, bonus abuse, and money laundering.
• Transaction processing: Facilitating deposits and withdrawals via Indonesian bank accounts (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and maintaining an accurate IDR transaction history for each Member.
• Platform security: Monitoring login activity, detecting anomalous betting patterns, identifying compromised accounts, and protecting platform integrity against automated attacks and collusion.
• Customer support: Responding to enquiries, resolving disputes, processing responsible gaming requests (deposit limits, self-exclusion), and providing ongoing account assistance.
• Regulatory compliance: Meeting the record-keeping, anti-money-laundering (AML), and reporting obligations required by pga88's international gaming licence.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the user interface, game selection, payment speed, and overall platform experience.
• Promotional communications: Sending you personalised bonus offers, promotions, and platform updates where you have not opted out of marketing communications.

pga88 relies on the following legal grounds to process your Personal Data:

• Contractual necessity: Processing required to fulfil our obligations under the Member Agreement, including account creation, transaction processing, and KYC verification.
• Legitimate interests: Processing for fraud prevention, platform security monitoring, and aggregated analytics, where those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with AML, record-keeping, and other obligations under pga88's applicable licensing framework.
• Consent: Processing for optional marketing communications, which you may withdraw at any time by contacting our support team or using the unsubscribe mechanism in any email communication.

pga88 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We share Personal Data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

pga88 engages carefully vetted third-party service providers to perform specific functions on our behalf, including payment processing (Indonesian bank gateways and e-wallet providers), identity verification, cloud infrastructure hosting, customer support platforms, and cybersecurity services. All such providers operate under a binding data-processing agreement that restricts their use of your data to the specific purpose for which it was shared.

6.2 Game Content Providers

Third-party game studios integrated into the pga88 platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive only the minimum technical session data required to deliver their game content (session token, wallet balance, bet result). These providers do not receive your name, identity documents, or bank account details.

6.3 Legal and Regulatory Disclosure

pga88 may disclose Personal Data to competent authorities, regulators, or law enforcement agencies where required to do so by law, court order, or in connection with a lawful investigation. We will notify affected Members of such disclosure requests where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of pga88's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected Members in advance and ensure the acquiring entity is bound by data protection obligations no less stringent than those in this Policy.

pga88's platform infrastructure is hosted on internationally distributed cloud servers. As a result, your Personal Data may be stored or processed in data centres located outside the Republic of Indonesia, including in jurisdictions within Asia-Pacific and Europe that may have data protection laws different from those applicable in Indonesia.

Where Personal Data is transferred outside Indonesia, pga88 ensures that appropriate safeguards are in place, including contractual data protection clauses with the receiving entity that require a standard of protection equivalent to that set out in this Privacy Policy. By using the pga88 platform, you acknowledge and consent to such international transfers on the terms described herein.

pga88 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply as a general guide:

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with pga88's data destruction protocols. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

pga88 implements a layered, defence-in-depth security architecture to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, and destruction. Key security measures include:

• Transport encryption: All data transmitted between your browser or device and the pga88 platform is encrypted using TLS 1.2 or higher (256-bit SSL). The presence of the padlock icon in your browser address bar confirms that an encrypted connection is active.
• Data-at-rest encryption: Sensitive data stored in pga88's databases — including KYC documents and financial account details — is encrypted at rest using AES-256 encryption.
• Access controls: Access to Personal Data within pga88's internal systems is restricted on a strict need-to-know basis. All staff with data access privileges are subject to confidentiality obligations and undergo regular data-protection training.
• Two-factor authentication (2FA): pga88 strongly encourages all Members to enable 2FA on their accounts. Internal administrative access to pga88 systems requires 2FA as a mandatory control.
• Penetration testing: pga88 conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data breach affecting Members' Personal Data, pga88 will notify affected Members and relevant authorities within the timeframes required by applicable law, providing details of the nature of the breach, data affected, and remedial actions taken.

pga88 uses first-party cookies and similar tracking technologies to operate and improve the platform. We do not use third-party advertising cookies or cross-site tracking pixels. The cookies used by pga88 fall into the following categories:

Strictly necessary cookies cannot be disabled as they are essential to platform operation. You may disable functional and analytics cookies by adjusting your browser settings; however, doing so may affect the quality of your experience on the pga88 platform. pga88 does not place tracking cookies on pages where you enter banking credentials or payment information.

As a pga88 Member whose Personal Data we process, you hold the following rights. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond within 30 calendar days of receiving a verifiable request.

The pga88 platform is strictly for adults aged 21 and above. pga88 does not knowingly collect or process the Personal Data of anyone under the age of 21. Our account registration and KYC processes include mandatory date-of-birth verification and identity document checks to enforce this restriction.

If pga88 discovers that it has inadvertently collected Personal Data from an individual under 21 years of age, it will immediately close the associated account, delete the collected data (subject to any applicable legal retention obligations), and return any deposited funds to the source payment method. If you believe that a minor may be using the pga88 platform, please contact our support team immediately via live chat or WhatsApp.

pga88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will post the updated Policy on this page with a revised "Last Updated" date and, where the changes significantly affect how we process your Personal Data, notify you via a platform notification or email to your registered address with a minimum of 7 calendar days' notice prior to the changes taking effect.

Your continued use of the pga88 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how pga88 protects your personal information.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how pga88 handles your Personal Data, please contact us through any of the following channels:

• Live Chat: Available 24/7 via the chat widget on the platform — the fastest channel for urgent privacy or account-related enquiries.
• WhatsApp: +62-811-0000-888 (available 08:00–22:00 WIB).
• Email: [email protected] — for formal written data subject requests, please include "Privacy Request" in the subject line and provide your registered account email address and full name so we can verify your identity efficiently.

pga88 aims to acknowledge all written privacy enquiries within 48 hours and to provide a full response within 30 calendar days. Complex requests may require additional time; we will inform you if an extension is necessary.