pgsa88 Privacy
Policy

Introduction

pgsa88 ("we", "us", "our") operates the online sports betting and casino platform accessible at pgsa88.cam. We are committed to handling the personal data of our players, visitors, and prospective customers with transparency, integrity, and respect for individual privacy rights.

This Privacy Policy sets out, in clear and unambiguous language, the categories of personal data we collect, the purposes for which that data is processed, the third parties with whom it may be shared, the security measures we employ to protect it, and the rights available to you as a data subject. It applies to all personal data collected through the pgsa88 website, its mobile-optimised interface, customer support interactions, and any other touchpoint through which a user engages with our platform.

This policy is intended to comply with internationally recognised privacy and data-protection principles, including those embedded in major frameworks applicable to cross-border digital service providers operating across Southeast Asia and beyond.

Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the entity opera ting the pgsa88 platform internationally. All enquiries, data subject requests, and privacy-related correspondence should be directed to our support team using the contact details provided in Section 14 of this policy.

Where pgsa88 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, and fraud detection platforms — those providers act as data processors under binding contractual agreements, and pgsa88 remains the data controller accountable for how your data is used.

Data We Collect

pgsa88 collects personal data from you directly when you register an account, make transactions, use our services, or communicate with our support team. We also collect certain technical data automatically when you access the platform. The table below summarises the categories of data we collect and the primary source of each.

How We Use Your Data

pgsa88 processes personal data only for clearly defined and documented purposes. We do not use your data for purposes that are incompatible with the reason it was originally collected. The table below maps each processing purpose to the relevant data categories.

4.1 Account Management & Service Delivery

We use Identity Data, Contact Data, and Financial Data to create and maintain your pgsa88 account, process deposits and withdrawals in Indonesian Rupiah (IDR / Rp), deliver sports betting and casino gaming services, and provide customer support. Without this processing, we are unable to provide you with access to the platform or fulfil any transaction you initiate.

4.2 Identity Verification & KYC Compliance

KYC Documents and Identity Data are processed to verify that you meet the eligibility requirements set out in our Terms & Conditions — specifically that you are at least 21 years of age and a resident of Indonesia. KYC processing also supports our anti-money laundering (AML) obligations and helps us protect the integrity of the platform for all players.

4.3 Fraud Prevention & Security

Technical Data, Financial Data, and Gaming & Betting Data are used by pgsa88 and its licensed fraud-detection partners to identify suspicious account activity, detect multi-accounting and bonus abuse, and prevent money laundering. This processing is essential for the protection of both our players and the platform.

4.4 Responsible Gaming

Gaming & Betting Data and account history are used to monitor for patterns of play that may indicate problem gambling behaviour, to enforce limits and self-exclusion tools set by the player, and to fulfil our responsible gaming obligations. Responsible gaming processing is described in detail on our Responsible Gaming page.

4.5 Platform Analytics & Improvement

Cookie & Usage Data and Technical Data are used in aggregate and anonymised form to understand how players interact with the platform, identify performance bottlenecks, and guide product development decisions. Individual players are not identified through analytics processing.

4.6 Marketing Communications (Opt-In Only)

Where you have given your explicit consent, we use your Contact Data and Marketing Preferences to send promotional emails, SMS notifications, and in-platform messages about offers, bonuses, and seasonal promotions — including events tied to BRI Liga 1 fixtures, Timnas Indonesia international matches, Piala AFF (AFF Cup), and Indonesian cultural occasions such as Idul Fitri and Ramadhan. You may withdraw your marketing consent at any time by updating your preferences in your account settings or by contacting support.

4.7 Legal & Regulatory Compliance

Identity Data, Financial Data, and Communications Data may be processed and retained to comply with applicable legal and regulatory obligations, including record-keeping requirements imposed under international gaming and anti-money laundering frameworks.

Legal Basis for Processing

pgsa88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between pgsa88 and you — including account creation, transaction processing, KYC verification, and service delivery — is carried out on the basis of contractual necessity. Without this processing, we cannot provide you with the services you have signed up for.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of pgsa88's legitimate interests in operating a secure, compliant, and financially sustainable platform. We carry out a balancing test before relying on legitimate interests to ensure that our interests do not override your fundamental privacy rights.
• Legal obligation: Processing that is required to comply with applicable laws and regulations — including KYC and AML record-keeping requirements — is carried out to fulfil a legal obligation.
• Consent: Processing for direct marketing communications is carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

Data Sharing & Third Parties

pgsa88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary.

6.1 Licensed Service Providers (Data Processors)

pgsa88 engages the following categories of third-party service provider to assist in the delivery and operation of our platform. Each provider acts as a data processor under a binding data processing agreement that prohibits them from using your data for any purpose beyond delivering their contracted service to pgsa88:

• Payment processors: Providers facilitating deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC and identity verification services: Certified providers that perform automated or manual review of identity documents to verify age and identity. These providers operate under internationally recognised data security standards.
• Fraud detection and AML screening: Technology platforms that analyse transaction patterns and account behaviour to identify fraud, money laundering, and other prohibited activities in real time.
• Customer support infrastructure: Providers powering pgsa88's live chat, email ticketing, and support case-management systems. Support agents access only the data necessary to resolve your specific query.
• Platform analytics: Tools used to collect aggregated, anonymised usage data for product development purposes. Individual player data is not shared with analytics providers in identifiable form.
• Cloud hosting and infrastructure: Certified cloud infrastructure providers responsible for the secure hosting of the pgsa88 platform and data storage systems.

6.2 Legal Disclosures

pgsa88 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are required to do so by applicable law, a binding court order, or a lawful regulatory direction. We will, where legally permissible, notify you of any such disclosure request before complying.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of pgsa88's assets, personal data held by pgsa88 may be transferred to the successor entity. You will be notified by email and via an in-platform notice at least 30 days before any such transfer takes effect, and you will be given the opportunity to close your account and withdraw your balance prior to the transfer if you do not wish your data to be processed by the new entity.

Cookies & Tracking Technologies

pgsa88 uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to keep you securely logged in, to remember your preferences, and to gather aggregate performance data that helps us improve the service.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They allow the site to recognise your device on subsequent visits and to store certain information about your session or preferences. Cookies do not contain executable code and cannot access other data stored on your device.

7.2 Categories of Cookie We Use

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your shopping cart state during a deposit flow, and enable security features such as CSRF protection. You cannot opt out of strictly necessary cookies without rendering the platform non-functional.
• Functional cookies: These remember your preferences — such as language settings, selected time zone (WIB/WITA/WIT), and display preferences — so you do not need to re-enter them each visit. These cookies do not track your activity across other websites.
• Analytics cookies: We use first-party analytics cookies to collect aggregated, anonymised data about how users navigate the platform. This data is used internally to identify popular features, diagnose performance issues, and guide product improvements. We do not use third-party advertising analytics networks such as Google Analytics in a way that allows user-level tracking across external sites.
• Security and fraud-prevention cookies: These assist our fraud-detection systems in identifying anomalous session behaviour that may indicate account takeover attempts or the use of automation tools.

7.3 Cookie Retention

Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined period — typically between 30 days and 12 months depending on their function — or until you delete them manually through your browser settings.

7.4 Managing Cookies

You can manage, restrict, or delete cookies through your browser settings. Please note that disabling all cookies will prevent you from logging into your pgsa88 account and may impair the usability of the platform. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Edge, and the Chromium-based mobile browsers commonly used on Indonesian Android devices).

Data Retention

pgsa88 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with pgsa88, plus a minimum of five years following permanent account closure to satisfy AML and gaming-regulation record-keeping requirements.
• Financial transaction data: Retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping obligations applicable to international gaming operators.
• KYC documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later, to comply with AML obligations. Original document files are deleted once the minimum retention period has elapsed, unless ongoing legal proceedings require their preservation.
• Gaming and betting history: Retained for the duration of the active account relationship and for three years thereafter, used for dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Support communications: Retained for two years from the date of the final message in a support conversation, used for quality assurance and dispute resolution.
• Marketing consent records: Retained for three years from the date consent was given or last renewed, to demonstrate compliance with consent obligations.
• Technical and log data: Retained for up to 12 months, after which it is aggregated and anonymised for long-term trend analysis, with individual records deleted.

When personal data reaches the end of its retention period, it is securely and permanently deleted or anonymised in accordance with established data destruction protocols. pgsa88 reviews its retention schedules annually and adjusts them to reflect changes in applicable law or regulatory guidance.

Your Rights

As a data subject, you hold a range of rights in relation to the personal data pgsa88 holds about you. pgsa88 is committed to respecting and facilitating these rights. The following rights are available to you:

9.1 How to Exercise Your Rights

To exercise any of the rights listed above, contact our support team using the details in Section 14. We will acknowledge your request within 72 hours and provide a full response within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

9.2 Identity Verification for Data Requests

To protect your data from unauthorised disclosure, pgsa88 will require you to verify your identity before processing any data subject request. Acceptable verification methods include confirmation of your registered email address, a one-time code sent to your registered Indonesian mobile number, or submission of your KTP number.

Data Security

pgsa88 takes the security of your personal data seriously and maintains a comprehensive suite of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction.

10.1 Technical Safeguards

• Encryption in transit: All data exchanged between your device and pgsa88 servers is encrypted using Transport Layer Security (TLS) version 1.3 or higher. Connections using older protocol versions are rejected.
• Encryption at rest: All stored personal data — including KYC documents, financial records, and account credentials — is encrypted using AES-256.
• Access controls: Access to production systems and player data is restricted to authorised pgsa88 personnel and licensed service providers on a strict need-to-know basis. All access events are logged and subject to periodic audit review.
• Penetration testing: pgsa88 commissions independent security penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection: Real-time intrusion detection systems monitor platform infrastructure for anomalous activity. Security alerts are triaged by a dedicated operations team with defined escalation procedures.

10.2 Organisational Safeguards

• All personnel with access to player data receive mandatory data-protection training covering secure data handling, phishing awareness, and incident response procedures.
• Third-party service providers are assessed for security compliance before onboarding and are subject to periodic re-evaluation.
• pgsa88 maintains a documented incident response plan that specifies the steps to be taken in the event of a suspected or confirmed data breach, including notification timelines.

10.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected individuals, pgsa88 will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — via the email address registered to their account. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures taken or proposed to address the breach.

International Data Transfers

pgsa88 operates internationally, and personal data collected from players in Indonesia may be transferred to, stored in, or processed by systems located outside Indonesia. Such transfers are necessary to deliver the platform's services through globally distributed infrastructure and to engage licensed service providers operating in other jurisdictions.

Wherever pgsa88 transfers personal data across international borders, it takes appropriate steps to ensure that the data receives a level of protection equivalent to the standards applied within Indonesia. These steps include:

• Entering into binding data transfer agreements with receiving entities that incorporate recognised international data-transfer safeguards.
• Conducting transfer impact assessments where required to evaluate the legal framework of the destination jurisdiction and identify any supplementary measures necessary to protect the data.
• Ensuring that all receiving entities — including cloud infrastructure providers and third-party processors — are contractually bound to apply security and confidentiality standards that meet or exceed those described in this Privacy Policy.

By creating a pgsa88 account and using our services, you acknowledge that your personal data may be transferred internationally in the manner described above.

Minors & Age Restriction

pgsa88 is strictly intended for adults aged 21 and above. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Registration by a person under 21 is a material breach of pgsa88's Terms & Conditions.

If pgsa88 becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to suspend the relevant account, void any associated transactions, and permanently delete the collected data, subject to any mandatory retention obligations applicable to the circumstances.

If you are a parent or legal guardian and believe that your child has registered a pgsa88 account, please contact our support team immediately using the details in Section 14. We will investigate the matter and take action without undue delay.

Policy Amendments

pgsa88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date displayed in the page header and at the top of this document will be revised whenever a change is made.

Material changes — such as the introduction of a new purpose for processing your personal data, a new category of data collection, or a new international transfer arrangement — will be communicated to registered players via the email address on file at least 14 days before the change takes effect. Your continued use of the pgsa88 platform after that date constitutes acceptance of the updated policy.

For minor changes — such as clarifications of existing provisions, corrections of typographical errors, or updates to the list of service providers — no advance notice will be given, and the updated policy will take effect immediately upon publication.

We encourage you to review this Privacy Policy periodically to stay informed about how pgsa88 protects your personal data. Archived versions of previous editions of this policy are available on request from our support team.

Contact & Data Subject Requests

For all privacy-related enquiries, data subject access requests, consent withdrawal requests, or complaints about how pgsa88 handles your personal data, please contact our support team. We are available 24 hours a day, seven days a week, in both English and Bahasa Indonesia.

Email: support@pgsa88.cam

When submitting a data subject request, please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise or the concern you wish to raise. This will allow us to locate your account and process your request without unnecessary delay.