Privacy Policy

1. Definitions

In this Privacy Policy, the following terms carry the meanings set out below unless context requires otherwise:

• "erek02" (also "we", "us", "our") refers to the operating entity that owns and administers the online betting platform at https://erek02.cam.
• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other data.
• "Member" (also "you", "your") means any registered account holder or visitor accessing the erek02 Platform.
• "Platform" means the erek02 website, mobile-optimised site, progressive web application, and all related digital services.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means erek02, the entity that determines the purposes and means of Processing Personal Data.
• "Third-Party Processor" means any external service provider that Processes Personal Data on behalf of and under the instruction of erek02.
• "KYC" means Know Your Customer — the identity verification process required to confirm a Member's identity, age, and residency.
• "Cookie" means a small text file placed on a Member's device by the Platform to store session or preference information.
• "WIB" means Western Indonesia Time (UTC+7), the default time zone used in all operational references within this Policy.

2. Data We Collect

erek02 collects Personal Data across three broad categories. The table below summarises the specific data points we hold, why we hold each, and how long we retain it by default:

3. How We Collect Personal Data

3.1 Directly From You

The majority of Personal Data we hold is provided directly by you through your interactions with erek02:

• Account registration: name, date of birth, email address, mobile number, preferred bank details
• KYC document submission: government-issued identity document (Indonesian KTP or international passport) and selfie photograph
• Deposit and withdrawal requests: bank account details, e-wallet identifiers, transaction amounts in IDR
• Support interactions: content of live chat sessions, email enquiries, and WhatsApp messages with our team
• Promotion participation: information submitted when entering a competition, claiming a bonus, or completing a survey

3.2 Automatically Through the Platform

When you access the erek02 Platform, certain data is collected automatically through technical systems:

• IP address and approximate geographic location (city-level, not street-level)
• Device identifiers, operating system version, and browser type
• Pages and game modules accessed, session start and end timestamps (WIB), and click-path data
• Cookies and similar tracking technologies (see Section 8)

3.3 From Third-Party Sources

In limited circumstances, erek02 may receive Personal Data from trusted third parties:

• Payment processors: transaction confirmation and payment-method validation data from BCA, BRI, BNI, Mandiri, and e-wallet providers
• Identity verification partners: KYC validation results from certified third-party identity verification services
• Fraud prevention databases: risk-scoring signals from industry-standard anti-fraud networks

4. Purpos es of Processing

erek02 processes your Personal Data for the following specific and lawful purposes:

4.1 Service Delivery

The primary purpose for which erek02 collects and processes Personal Data is to operate the Platform and deliver its services to you. This includes creating and maintaining your Account, processing deposits and withdrawals via Indonesian banking channels and e-wallets, settling wagers on sports events and casino games — including togel (Indonesia's traditional numbers lottery) and sabung ayam (cockfighting) markets — and providing customer support across all channels.

4.2 Identity Verification & Fraud Prevention

erek02 is obligated to verify the identity and age of all Members before processing withdrawal requests. KYC data is used solely for this purpose and for detecting and preventing fraudulent activity, money laundering, duplicate accounts, and underage gambling. Fraud-prevention Processing is in erek02's legitimate interest and is a condition of our international operating licence.

4.3 Regulatory & Legal Compliance

Certain categories of Personal Data — particularly financial transaction records — must be retained for defined periods to satisfy anti-money-laundering (AML) obligations, respond to lawful requests from competent authorities, and resolve disputes or legal claims. erek02 retains this data strictly for the minimum period required by applicable law.

4.4 Responsible Gaming Monitoring

erek02 uses behavioural and wagering data to monitor for patterns that may indicate problem gambling, such as rapidly escalating deposit frequency, session durations beyond reasonable recreational thresholds, or repeated self-exclusion requests. Where such patterns are detected, our responsible gaming team may proactively reach out to the Member. This Processing is conducted in the Member's genuine interest and in fulfilment of erek02's duty of care.

4.5 Platform Improvement & Personalisation

Aggregated and anonymised behavioural data is used to improve Platform performance, design new features, and personalise the experience — for example, surfacing BRI Liga 1 markets or Indonesian togel draw times prominently for Members who engage with those products most frequently. Personalisation is based on your own activity and does not involve profiling based on third-party data.

4.6 Marketing Communications

With your explicit consent at registration (or later through Account settings), erek02 may send you promotional communications about new games, bonus offers, seasonal promotions (such as Idul Fitri specials or Independence Day bonuses), and VIP programme updates. You may withdraw consent for marketing communications at any time by updating your notification preferences in Account settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of prior Processing.

5. Legal Basis for Processing

erek02 processes Personal Data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to perform our obligations under the Member Agreement — account management, payment processing, wager settlement, and customer support.
• Legal obligation: Processing required to comply with applicable laws — KYC verification, AML record-keeping, and responses to lawful regulatory requests.
• Legitimate interests: Processing conducted in erek02's or a Member's genuine interest where those interests are not overridden by the Member's rights — fraud prevention, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Processing based on your freely given, specific, and informed consent — marketing communications, optional personalisation features, and non-essential cookies. Consent may be withdrawn at any time without penalty.

6. Data Sharing & Disclosure

6.1 Third-Party Processors

erek02 shares Personal Data with a limited set of Third-Party Processors who act strictly under our instruction and are bound by confidentiality and data-protection obligations no less stringent than those in this Policy. Categories of Third-Party Processors include:

• Payment processors: BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja — for transaction execution and confirmation
• KYC and identity verification providers: certified partners who validate government-issued documents and perform liveness checks
• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, Spribe, Pocket Games Soft, and other licensed suppliers — who receive only the session tokens and bet data necessary to deliver gameplay
• Cloud infrastructure providers: secure hosting partners who store Platform data on access-controlled servers
• Customer support platforms: live chat and ticketing systems used to manage Member communications
• Fraud prevention networks: industry-standard services that cross-reference device and behavioural signals against known fraud indicators

6.2 Legal Disclosures

erek02 may disclose Personal Data to competent governmental or regulatory authorities where required by a valid legal order, court judgment, or regulatory directive. In such cases, erek02 will disclose only the minimum data required and, where permitted by law, will notify the affected Member of the disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of erek02's business, Personal Data held by erek02 may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer and of any material changes to this Policy that result from it, with a minimum notice period of 30 days prior to the transfer taking effect.

7. International Data Transfers

As an internationally operated platform serving Indonesian Members, erek02 may transfer Personal Data to servers or Third-Party Processors located outside Indonesia. Where such transfers occur, erek02 ensures appropriate safeguards are in place, including:

• Contractual data-protection clauses binding the recipient to standards equivalent to those in this Policy
• Transfers only to jurisdictions or processors with demonstrated data-protection frameworks and security certifications
• Regular audits of Third-Party Processors to confirm ongoing compliance with contractual data-protection obligations

Financial data associated with Indonesian Rupiah (IDR) transactions — including bank account details for BCA, BRI, BNI, and Mandiri — is stored on servers located within the Asia-Pacific region to minimise latency and regulatory exposure. Specific server locations are not published for security reasons but are available to Members upon written request to our privacy team.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit the erek02 Platform. They allow the Platform to recognise your device across sessions, maintain your login state, remember your preferences, and gather anonymised analytical data about Platform usage.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function — session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language display, preferred deposit method, and last-visited game category to deliver a more personalised experience.
• Analytical cookies: Collect anonymised data on page visits, session durations, and feature engagement to help erek02 improve Platform performance. No personally identifiable information is included in analytical cookie data.
• Security cookies: Support fraud-detection and bot-prevention systems, including device fingerprinting signals used to identify duplicate account attempts.

8.3 Managing Cookies

You may control non-essential cookies through your browser settings or through the cookie preference panel accessible within the erek02 Platform settings. Please note that disabling functional cookies may affect your user experience — for example, your preferred deposit bank (BCA, BRI, etc.) may not be remembered between sessions. Disabling strictly necessary cookies will prevent you from logging in to the Platform.

9. Data Retention

erek02 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The default retention periods are outlined in the data table in Section 2. In summary:

• Identity and contact data is retained for five (5) years following permanent account closure, to support any post-closure disputes or regulatory enquiries.
• Financial transaction data is retained for seven (7) years from the date of each transaction, in line with standard financial record-keeping obligations.
• Technical and behavioural data is retained on a rolling basis — two (2) years for technical logs and three (3) years for behavioural analytics — after which it is securely deleted or irreversibly anonymised.
• Communications data (support transcripts, emails) is retained for three (3) years from the date of each interaction.
• Marketing consent records are retained indefinitely to demonstrate compliance with consent obligations, even after a Member withdraws consent.

Upon expiry of the applicable retention period, Personal Data is permanently deleted using secure erasure methods that prevent reconstruction. Where full deletion is not technically feasible — for example, within encrypted backup archives — data is anonymised such that it can no longer be linked to an individual.

10. Your Privacy Rights

As a Member of erek02, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our privacy team at the details provided in Section 15. erek02 will acknowledge your request within 48 hours and respond substantively within 14 calendar days.

11. Security Measures

erek02 implements a layered security architecture designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:

• Transport Layer Security (TLS 1.3): All data transmitted between Member devices and erek02 servers is encrypted using 256-bit TLS encryption.
• At-rest encryption: Databases containing Personal Data — particularly identity, financial, and KYC records — are encrypted at rest using AES-256.
• Access controls: Internal access to Member Personal Data is restricted on a strict need-to-know basis. Staff with access rights undergo regular background screening and mandatory data-protection training.
• Two-factor authentication (2FA): All erek02 staff accounts with access to Member data require 2FA. Members are strongly encouraged (and may be required) to enable 2FA on their own accounts.
• Intrusion detection and monitoring: Automated systems monitor the Platform continuously for anomalous access patterns, brute-force login attempts, and data exfiltration indicators.
• Penetration testing: erek02 commissions independent security assessments of the Platform infrastructure on a regular basis.
• Data breach response: In the event of a confirmed data breach affecting Member Personal Data, erek02 will notify affected Members within 72 hours of becoming aware of the incident, detailing the nature of the breach, the categories of data affected, and the remedial steps taken.

12. Minors & Age Policy

erek02 operates a strictly enforced minimum age policy. You must be 21 years of age or older to register an Account or use any erek02 service. The Platform is not directed at, and does not knowingly collect Personal Data from, persons under the age of 21.

Where erek02 discovers or has reasonable grounds to believe that Personal Data has been collected from a person under 21, the relevant Account will be immediately suspended, all Personal Data associated with that Account will be deleted as quickly as operationally and legally practicable, and any funds deposited will be returned to the originating payment source. Winnings generated by an underage account will be forfeited in their entirety.

13. Third-Party Services & Links

The erek02 Platform integrates third-party services — including game engines from providers such as Pragmatic Play, Evolution Gaming, and Spribe — and may contain references to external payment networks (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja). These third parties operate under their own privacy policies, which are independent of this Policy.

erek02 does not control and is not responsible for the data-collection practices of third-party service providers beyond the scope of our contractual data-processing agreements with them. We encourage Members to review the privacy policies of any third-party service they interact with directly. When you transact via OVO, DANA, GoPay, or any other e-wallet, that provider's own privacy policy governs the data collected through their platform interface.

14. Policy Amendments

erek02 reviews this Privacy Policy at least annually and whenever significant changes to our data-processing activities occur — for example, when we introduce a new payment method, integrate a new game provider, or update our security architecture. Material amendments that substantially affect Member rights or data-processing practices will be communicated to Members via registered email address at least 14 days before the changes take effect.

Non-material amendments — such as clarifications, corrections, or the addition of new Third-Party Processors in an existing category — will be applied immediately upon publication, with the "Last Updated" date at the top of this page revised accordingly. We recommend saving this page to your browser bookmarks and reviewing it periodically. Your continued use of the erek02 Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you object to any material amendment, you may close your Account by contacting our support team before the amendment's effective date. Outstanding verified withdrawal balances will be processed in the normal course prior to account closure.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact erek02's privacy team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line
• Live Chat: Available directly on the erek02 Platform, 24 hours a day, seven days a week
• WhatsApp: +62 812-3456-7890 — plain text, not a clickable link

erek02 will acknowledge all privacy-related requests within 48 hours (WIB business hours) and provide a substantive response within 14 calendar days. For complex requests — such as full data portability exports or detailed erasure requests involving multiple data categories — the response period may be extended to 30 calendar days, with notice provided to you before the original 14-day deadline.

If you are dissatisfied with erek02's response to a privacy complaint, you have the right to escalate the matter to an independent dispute resolution body. erek02 will provide details of the appropriate escalation path upon request.