Privacy Policy — pej63

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, or any combination thereof.
• "Data Controller" means pej63, as the entity that determines the purposes and means of processing Personal Data collected through the pej63 platform.
• "Data Processor" means any third party that processes Personal Data on behalf of pej63 under a written data processing agreement, including payment processors, game providers, and technology infrastructure providers.
• "Player", "you", or "your" means any individual who accesses, registers, or uses the pej63 platform.
• "Platform" means the pej63 website at pej63.net and all associated services, including the online casino, sportsbook, live dealer games, and slots.

2. Data Controller

pej63 is the Data Controller with respect to Personal Data collected from players using the pej63 platform. All data protection inquiries, rights requests, and complaints should be directed to pej63 using the contact details provided in Section 16 of this Policy.

Where pej63 engages Data Processors to carry out specific processing activities on its behalf (such as payment processing, identity verification, or game delivery), pej63 remains responsible for ensuring that those processors handle your Personal Data in accordance with this Policy and applicable data protection standards.

3. Personal Data We Collect

3.1 Registration Data

When you create a pej63 account, we collect the following information:

• Full legal name
• Date of birth
• Email address
• Indonesian mobile telephone number
• Residential address (including city and province within Indonesia)
• Username and password (password stored in hashed, non-reversible form)

3.2 Identity Verification (KYC) Data

To fulfil our KYC obligations and comply with anti-money-laundering standards, pej63 may collect:

• Copies of government-issued photo identification (Indonesian KTP, passport, or equivalent)
• Proof of residential address (utility bill, bank statement, or equivalent dated within three months)
• Proof of payment method ownership (e-wallet screenshot, bank statement, or equivalent)
• Source of funds documentation where deposit or wagering volumes trigger internal review thresholds
• Selfie or live facial verification image, where required for identity confirmation

3.3 Financial and Transaction Data

pej63 records all financial transactions associated with your account, including:

• Deposit amounts, timestamps, and payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Withdrawal requests, amounts, and processing outcomes
• Wagering history, game session records, and bet outcomes
• Bonus activations, wagering progress, and promotional interactions

3.4 Technical and Usage Data

When you access the pej63 platform, our systems automatically collect certain technical information:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session start and end times
• Pages visited, game sessions initiated, and features accessed
• Referring URL (the address of the page from which you navigated to pej63.net)

3.5 Communications Data

Where you contact pej63 support, respond to surveys, or engage with promotional communications, pej63 retains records of those interactions, including message content, timestamps, and resolution outcomes.

4. How We Collect Your Data

pej63 collects Personal Data through the following means:

• Directly from you — at registration, during KYC submission, when making deposits or withdrawals, when contacting support, and when opting in to promotions.
• Automatically — through server logs, session tracking, and cookies placed on your device when you access the pej63 platform (see Section 10).
• From third-party processors — payment processors and identity verification services may provide transaction confirmation data and KYC verification outcomes to pej63 as part of their contracted services.

5. Purpose of Processing

pej63 processes your Personal Data for the following purposes:

6. Legal Basis for Processing

pej63 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity — processing required to fulfil pej63's obligations under the Terms & Conditions you accepted upon registration, including account management, payment processing, and game delivery.
• Legal obligation — processing required to comply with applicable anti-money-laundering, counter-terrorism-financing, and identity verification obligations.
• Legitimate interests — processing carried out for pej63's legitimate interests including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent — processing for marketing communications, carried out only where you have provided explicit opt-in consent, which you may withdraw at any time.

7. Data Sharing and Disclosure

7.1 Data Processors

pej63 shares Personal Data with the following categories of Data Processor, each operating under a written data processing agreement requiring them to handle data securely and only for the specified purpose:

• Payment processors — Indonesian bank transfer infrastructure providers and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to execute deposits and withdrawals.
• Identity verification providers — third-party KYC platforms receive identity document images and registration data solely for the purpose of age and identity verification.
• Game providers — certified studios including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and game session data necessary to deliver their games through the pej63 platform. Full personal registration data is not shared with game providers.
• Cloud and infrastructure providers — hosting and data storage services receive encrypted data as part of platform delivery infrastructure.

7.2 Legal Disclosures

pej63 may disclose Personal Data to law enforcement authorities, regulatory bodies, or judicial authorities where required by applicable law, court order, or legal process. pej63 will, where legally permitted, notify affected players of any such disclosure.

7.3 No Sale of Data

pej63 does not sell, rent, license, or otherwise transfer Personal Data to third-party advertisers, data brokers, or marketing networks. Your Personal Data is not a commercial commodity at pej63.

8. Data Retention

pej63 retains Personal Data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention standards:

• Account data — retained for the duration of the active account relationship and for a minimum of five years following account closure, in accordance with AML record-keeping obligations.
• KYC documents — retained for a minimum of five years from the date of submission, or longer where required by applicable regulatory obligations.
• Transaction records — retained for a minimum of five years from the date of each transaction.
• Support communications — retained for a minimum of two years from the date of the most recent interaction.
• Technical and usage logs — retained for up to 12 months, unless a longer period is required for fraud investigation or legal proceedings.

Upon expiry of the relevant retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

pej63 implements the following technical and organisational security measures to protect your Personal Data:

• SSL/TLS encryption on all data in transit between your device and pej63 servers.
• Encryption at rest for sensitive data fields including KYC documents and financial records.
• Password storage using one-way cryptographic hashing — pej63 staff cannot access your password in plain text.
• Role-based access controls restricting Personal Data access to authorised staff with a defined operational need.
• Regular security assessments and penetration testing of the pej63 platform infrastructure.
• Internal data breach response procedures, including notification protocols in the event of a breach affecting player data.

While pej63 takes all reasonable steps to protect your Personal Data, no system connected to the internet can guarantee absolute security. You are encouraged to maintain a strong, unique password for your pej63 account and to notify pej63 support immediately if you suspect any unauthorised access.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by a website to store session information, preferences, or usage data. pej63 uses cookies and similar tracking technologies (including local storage) to operate and improve the platform.

10.2 Types of Cookies Used by pej63

• Strictly necessary cookies — required for the platform to function, including session authentication and CSRF protection. These cannot be disabled without preventing you from using the platform.
• Functional cookies — remember your preferences such as language settings, game lobby layout, and deposit method selection to improve your experience on return visits.
• Analytics cookies — collect aggregate, anonymised data about how players use the pej63 platform, helping the team identify pages or features that may benefit from improvement. No individual player is identifiable from analytics data.

10.3 Managing Cookies

You may manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent access to core pej63 platform features, including account login. pej63 does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes.

11. Your Data Rights

As a pej63 player, you have the following rights with respect to your Personal Data:

• Right of access — you may request a copy of the Personal Data pej63 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete Personal Data. For basic account details, corrections can be made directly through your pej63 Account settings.
• Right to erasure — you may request deletion of your Personal Data, subject to pej63's legal retention obligations. Where deletion is not possible for legal reasons, pej63 will explain the basis for retaining the data and restrict its use to compliance purposes only.
• Right to restriction — you may request that pej63 restrict processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability — you may request a structured, machine-readable copy of Personal Data you have provided to pej63, where technically feasible.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to processing carried out on the basis of pej63's legitimate interests, where you have grounds relating to your particular situation.

To exercise any of these rights, contact pej63 support at the email address provided in Section 16. pej63 will respond to rights requests within 30 calendar days of receipt. Identity verification may be required before fulfilling any request.

12. Minors and Age Restriction

The pej63 platform is strictly for adults aged 21 and over. pej63 does not knowingly collect Personal Data from individuals under the age of 21. If pej63 discovers that Personal Data from an underage individual has been collected, the relevant account will be closed immediately, all balances will be forfeited in accordance with pej63's Terms & Conditions, and the data will be deleted as promptly as legal obligations permit.

If you believe a minor has registered a pej63 account, please contact pej63 support immediately so that appropriate action can be taken.

13. Third-Party Services and Links

The pej63 platform may reference or integrate with third-party services, including game providers, payment processors, and identity verification platforms. These third parties operate under their own privacy policies, and pej63 is not responsible for the data practices of any third-party service outside of the Data Processor arrangements described in Section 7.1.

pej63 does not embed third-party social media tracking pixels, advertising networks, or affiliate tracking scripts on the pej63 platform that would allow third parties to collect Personal Data about your platform activity without your knowledge.

14. International Data Transfers

pej63 operates infrastructure that may involve storage or processing of Personal Data in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, pej63 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections applied within pej63's primary operating environment. These safeguards include contractual data protection clauses in agreements with all Data Processors who process data outside pej63's primary jurisdiction.

15. Amendments to This Policy

pej63 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform features. Material changes will be communicated to registered players by email to their registered address and by a prominent notice on the pej63 platform. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

Continued use of the pej63 platform following notification of a material change constitutes acceptance of the updated Privacy Policy. If you do not agree to any update, you should close your pej63 account and withdraw your balance before the revised Policy takes effect.

16. Contact & Data Rights Requests

All data protection inquiries, rights requests, and privacy complaints should be directed to the pej63 support team. pej63 aims to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 calendar days.