prg007 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by prg007 through the website https://prg007.cam, its subdomains, mobile applications, and related services (collectively referred to as "the Platform"). prg007 acts as the data controller for all personal information processed in connection with your use of our services.

We are committed to complying with applicable data protection laws and international privacy standards. This policy describes our practices regarding the collection, use, disclosure, retention, and protection of your personal information.

By creating an account on prg007, making deposits, placing bets, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein.

2. Information We Collect

prg007 collects several types of information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and personalize your experience.

2.1 Information You Provide Directly

When you register for an account, make deposits or withdrawals, contact customer support, or participate in promotions, you directly provide us with personal information, including but not limited to:

• Account Registration Information: Full legal name, date of birth, email address, mobile phone number, residential address in Indonesia, username, and password.
• Identity Verification (KYC) Documents: Copies of your Indonesian national identity card (KTP) or passport, selfie photographs holding your ID, proof of address documents (utility bills, bank statements, government-issued letters), and proof of payment method ownership (bank account statements or e-wallet screenshots showing your name and account number).
• Payment Information: Bank account details (bank name, account number, account holder name), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers), USDT cryptocurrency wallet addresses (TRC-20 or ERC-20 format), and transaction histories including deposits, withdrawals, and wagers.
• Communication Records: Transcripts of live chat conversations with customer support, email correspondence, WhatsApp messages, and any other communications you send to prg007.
• Marketing Preferences: Your consent or objection to receiving promotional emails, SMS messages, push notifications, and other marketing communications.

2.2 Information Collected Automatically

When you access and use the prg007 platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version (Chrome, Safari, Firefox), screen resolution, device identifiers (IMEI, advertising ID), and device language settings.
• Connection and Location Data: IP address, approximate geographic location (city-level based on IP geolocation), internet service provider (ISP), connection type (Wi-Fi, 4G, 5G), and time zone (WIB, WITA, or WIT).
• Usage and Behavioral Data: Pages visited, time spent on each page, games played, bet types and amounts, deposit and withdrawal patterns, click paths, navigation sequences, session durations, login times, and logout times.
• Performance and Error Data: Page load times, technical errors encountered, crash reports, and diagnostic information that helps us identify and resolve technical issues.

2.3 Information from Third Parties

In certain circumstances, prg007 may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency payment gateways processing USDT deposits and withdrawals.
• Identity Verification Services: Results of automated identity checks and document verification services used to comply with KYC and anti-money laundering (AML) regulations.
• Fraud Prevention Partners: Information from fraud detection and prevention services that help us identify suspicious activity, multi-accounting, and bonus abuse.
• Affiliate and Marketing Partners: Referral source data, campaign tracking information, and attribution data from our marketing partners that help us understand how you discovered prg007.

3. How We Use Your Information

prg007 uses your personal information for a range of legitimate business purposes, including:

3.1 Account Management and Service Delivery

• Creating and maintaining your prg007 account
• Authenticating your identity when you log in
• Processing deposits and withdrawals to and from your account balance
• Facilitating sports betting, live casino games, togel, sabung ayam, and slot game play
• Managing bonuses, promotions, and VIP rewards programs
• Providing customer support via live chat, email, and WhatsApp
• Communicating important account updates, transaction confirmations, and service announcements

3.2 Legal and Regulatory Compliance

• Verifying your age to enforce the 21+ age restriction for Indonesian players
• Conducting Know Your Customer (KYC) and identity verification checks to comply with anti-money laundering (AML) regulations
• Detecting and preventing fraudulent activity, money laundering, collusion, and bonus abuse
• Enforcing our Terms & Conditions and Responsible Gaming policies
• Responding to legal requests, court orders, subpoenas, and regulatory inquiries from government authorities
• Maintaining records required by law for audit, tax, and regulatory reporting purposes

3.3 Platform Security and Fraud Prevention

• Monitoring account activity for suspicious patterns that may indicate fraud, collusion, or terms violations
• Identifying and blocking multi-accounting (duplicate accounts created to abuse bonuses or circumvent limits)
• Detecting unauthorized access attempts, brute-force attacks, and account takeover attempts
• Investigating match-fixing, insider betting, and other forms of sports betting manipulation
• Maintaining audit logs and security incident records for internal investigation and law enforcement cooperation

3.4 Service Improvement and Personalization

• Analyzing usage patterns and player behavior to improve platform design, user experience, and game selection
• Personalizing game recommendations, promotional offers, and bonus campaigns based on your betting preferences and activity history
• Conducting A/B testing and experiments to optimize website performance, conversion rates, and player retention
• Gathering feedback through surveys and support interactions to identify areas for improvement

3.5 Marketing and Promotional Communications

• Sending promotional emails, SMS messages, and push notifications about new games, bonuses, and special offers (only if you have consented to receive marketing communications)
• Displaying personalized advertisements and promotions based on your betting preferences and activity
• Running loyalty programs, VIP tiers, and exclusive campaigns for high-value players
• Conducting market research and customer satisfaction surveys

You may opt out of marketing communications at any time by adjusting your account settings, clicking "unsubscribe" links in emails, or contacting customer support. Opting out of marketing communications will not affect transactional messages (deposit confirmations, withdrawal notifications, account security alerts).

4. Legal Bases for Processing

prg007 processes your personal information based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contractual obligations under the Terms & Conditions you agreed to when creating your account. This includes account creation, processing bets, managing deposits and withdrawals, and providing customer support.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC/AML requirements, age verification, tax reporting, and cooperation with law enforcement and regulatory authorities.
• Legitimate Interests: Processing is necessary for prg007's legitimate business interests, such as fraud prevention, platform security, service improvement, and business analytics, provided these interests do not override your fundamental rights and freedoms.
• Consent: For certain processing activities (marketing communications, non-essential cookies), we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. Information Sharing and Disclosure

prg007 does not sell your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

5.1 Service Providers and Processors

We share personal information with trusted third-party service providers who process data on our behalf to deliver services, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and USDT cryptocurrency payment gateways that process deposits and withdrawals.
• Identity Verification Services: Third-party KYC/AML providers that verify identity documents, screen against sanctions lists, and conduct fraud checks.
• Game Providers and Software Studios: Providers of live casino games (Evolution Gaming, Pragmatic Play Live, Ezugi), slot developers (Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft), and sports data providers that supply odds and results.
• Cloud Hosting and Infrastructure Providers: Cloud computing services that host the prg007 platform, databases, and backups across Southeast Asia data centers.
• Customer Support and CRM Tools: Live chat software, ticketing systems, and customer relationship management platforms that enable our 24/7 Indonesian-speaking support team to assist you.
• Marketing and Analytics Providers: Email marketing platforms, push notification services, web analytics tools (Google Analytics), and advertising networks that help us measure campaign performance and optimize marketing spend.

All service providers are contractually bound to process your personal information only as instructed by prg007, maintain confidentiality, and implement appropriate security measures.

5.2 Legal and Regulatory Authorities

We may disclose personal information to law enforcement agencies, regulatory bodies, tax authorities, courts, and other government entities when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Investigate and prevent fraud, money laundering, terrorist financing, or other criminal activity
• Enforce our Terms & Conditions and protect the rights, property, and safety of prg007, our players, and the public
• Respond to emergency situations that involve a danger to the life, health, or safety of individuals

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email or prominent notice on the platform before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your personal information with third parties not described in this policy when we have obtained your explicit consent to do so.

6. International Data Transfers

prg007 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. These countries may have data protection laws that differ from Indonesian laws.

When we transfer personal information internationally, we implement appropriate safeguards to ensure your data remains protected, including:

• Using cloud hosting providers with data centers located in Singapore, Hong Kong, and other Southeast Asian jurisdictions with robust data protection frameworks
• Entering into standard contractual clauses (SCCs) or data processing agreements with service providers that include data protection obligations
• Ensuring that all international transfers comply with applicable data protection regulations

By using prg007, you acknowledge and consent to the international transfer of your personal information as described in this policy.

7. Data Retention

prg007 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods include:

• Active Accounts: Personal information for active accounts is retained for the duration of the account relationship and for a period of at least five years after account closure to comply with regulatory record-keeping requirements and support potential legal claims.
• Transaction Records: Deposit, withdrawal, and betting records are retained for at least seven years to comply with anti-money laundering regulations, tax reporting obligations, and audit requirements.
• KYC Documents: Identity verification documents are retained for at least five years after the last transaction or account closure, as required by AML regulations.
• Marketing Communications: Marketing consent records and communication logs are retained until you withdraw consent or request deletion, after which we retain a suppression record to honor your opt-out preference.
• Legal and Compliance Records: Information related to legal disputes, investigations, or regulatory proceedings is retained for as long as necessary to resolve the matter and for any applicable statute of limitations period.

After the applicable retention period expires, personal information is securely deleted or anonymized such that it can no longer identify you.

8. Your Privacy Rights

Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you, including details about how we process it.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information. You can update most account information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected or when you withdraw consent. Note that we may retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.
• Right to Restriction of Processing: You may request that we limit how we process your personal information in certain circumstances, such as when you contest the accuracy of the data or object to processing.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format and have it transmitted to another data controller where technically feasible.
• Right to Object: You may object to processing of your personal information for direct marketing purposes, legitimate interests, or profiling. We will cease processing unless we have compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer via the contact methods provided in Section 12 of this policy. We will respond to your request within 30 days and may require identity verification before processing your request.

9. Data Security

prg007 takes data security seriously and implements technical, organizational, and administrative measures to protect your personal information against unauthorized access, loss, destruction, alteration, or disclosure.

Our security measures include:

• Encryption: All data transmitted between your device and prg007 servers is encrypted using 256-bit SSL/TLS encryption. Sensitive personal information and payment data are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal information is restricted to authorized employees and service providers on a need-to-know basis. All personnel with access to personal data are bound by confidentiality obligations.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and DDoS mitigation services. We conduct regular vulnerability scans and penetration testing to identify and remediate security weaknesses.
• Secure Authentication: Account access requires secure password authentication. We encourage players to use strong, unique passwords and enable two-factor authentication (2FA) where available.
• Regular Audits: We conduct periodic internal security audits and engage third-party security firms to assess our data protection practices and compliance with security standards.
• Incident Response: We maintain an incident response plan to detect, respond to, and recover from data breaches or security incidents. In the event of a breach affecting your personal information, we will notify you and relevant authorities as required by law.

While we strive to protect your personal information, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity under your account. Please notify us immediately if you suspect unauthorized access to your account.

10. Cookies and Tracking Technologies

prg007 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content and advertisements.

Types of cookies we use include:

• Essential Cookies: Required for core platform functionality, including session management, authentication, and security. These cookies cannot be disabled without affecting platform usability.
• Performance Cookies: Collect anonymous usage data to help us understand how visitors interact with the platform, identify technical issues, and improve performance.
• Functional Cookies: Remember your preferences, language settings, and account customizations to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertisements and measure campaign effectiveness. These cookies require your consent.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit your ability to use some platform features. For more information about cookies and how to control them, visit your browser's help documentation.

11. Children's Privacy

prg007 does not knowingly collect personal information from individuals under the age of 21. Our services are intended solely for adults aged 21 and older, in accordance with Indonesian legal gambling age requirements.

If we become aware that we have inadvertently collected personal information from a person under 21 years of age, we will take immediate steps to delete that information and terminate the associated account.

Parents and guardians who believe their child has provided personal information to prg007 should contact us immediately using the contact details in Section 12.

12. Changes to This Privacy Policy

prg007 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Any changes will be effective immediately upon posting on the platform.

Material changes will be communicated via email notification or prominent notice on the platform. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

Your continued use of prg007 after changes to this Privacy Policy constitutes your acceptance of the updated policy.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy, our data processing practices, or wish to exercise your privacy rights, please contact our Data Protection Officer:

• Live Chat: Available 24/7 in-app with average response time of 2–5 minutes during peak WIB hours
• WhatsApp: Contact number displayed after login (response within 5–10 minutes during business hours)
• Email: Email address displayed in your account dashboard (response within 2–4 hours for privacy inquiries)

For formal privacy complaints or data protection inquiries, please submit your request in writing via email, including:

• Your full name and prg007 account username
• A detailed description of your privacy concern or the right you wish to exercise
• Proof of identity (copy of KTP or passport) for verification purposes
• Any supporting documentation relevant to your inquiry

We will acknowledge receipt of your inquiry within 48 hours and provide a substantive response within 30 days. If your request is complex or requires additional time, we will notify you of the delay and provide an estimated resolution timeframe.

14. Third-Party Links

The prg007 platform may contain links to third-party websites, game providers, or services that are not operated by prg007. We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party websites or services before providing personal information. This Privacy Policy applies only to information collected by prg007.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with international data protection principles and the laws applicable in the jurisdiction of prg007's licensing authority.

Any disputes arising from this Privacy Policy or our data processing practices shall be resolved in accordance with the dispute resolution mechanisms set forth in our Terms & Conditions.