Privacy Policy

pg363 ("we", "us", "our") operates the online betting and casino platform accessible at pg363.net (the "Platform"). This Privacy Policy describes how pg363 collects, uses, stores, shares, and protects the personal data of individuals who register as members, visit the Platform, or otherwise interact with our services.

By creating an account on pg363, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not register an account or continue to use the Platform.

This policy applies to all members, whether they access the Platform via desktop browser, mobile browser, or any other supported device. It covers all data processing activities performed by pg363 directly, as well as those performed by third-party service providers acting on pg363's instructions.

pg363 collects personal data through several channels: directly from you during registration and account management, automatically as you use the Platform, and from third-party sources where permitted. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

• Full legal name (as shown on your Indonesian National Identity Card / KTP, passport, or driving licence)
• Date of birth (used to verify you are 21 years of age or older)
• Email address and mobile phone number
• Residential address (city, province — e.g., Jakarta, Surabaya, Bandung, Bali)
• Username and encrypted password

2.2 Financial & Payment Data

• Bank account name and account number for your registered Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, or other supported banks)
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja accounts registered in your name
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references
• Note: pg363 does not store full card numbers, CVV codes, or online banking login credentials. Payment authentication occurs within your bank's or e-wallet provider's own secure environment.

2.3 KYC Verification Data

• Copies or photographs of government-issued identity documents (KTP, passport, SIM)
• Selfie or liveness verification image (where requested for enhanced KYC)
• Proof of payment method ownership (bank statement excerpt or e-wallet screenshot)

2.4 Betting & Gaming Activity Data

• Sportsbook wager history: markets, odds, stake amounts, and outcomes
• Casino and slot game session data: game titles played, session durations, bet sizes, win/loss records
• Bonus and promotion participation history
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

2.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, page navigation paths, and feature interaction logs
• Cookie identifiers and similar tracking data (see Section 6)

2.6 Communications Data

• Support chat transcripts (live chat sessions conducted through the in-platform support tool)
• Email correspondence sent to [email protected]
• WhatsApp message records where you initiate contact via the published support number

pg363 processes personal data only for clearly defined and legitimate purposes. The table below maps each primary processing activity to its purpose and the data categories involved:

pg363 does not use automated decision-making processes that produce legal or similarly significant effects on members without human review. Where algorithmic tools are used to flag accounts for fraud or responsible gaming review, a qualified member of the pg363 compliance team reviews the flag before any account action is taken.

For each processing activity described in Section 3, pg363 relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted when registering your account — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) requirements, Know Your Customer (KYC) obligations, and age verification mandates. These obligations apply regardless of your consent.
• Legitimate Interests: Processing carried out in pg363's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and general business analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given, and informed consent — specifically for marketing communications and for any processing activities that exceed what is strictly necessary for service delivery. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.1 pg363 does not sell your personal data. We share data with third parties only in the circumstances described below, and only to the extent necessary for each specific purpose:

5.1 Payment Service Providers

We share the financial and identity data required to process your deposit and withdrawal transactions with Indonesian payment infrastructure providers and banking partners — including the processing networks supporting BCA, BRI, BNI, Mandiri, and the e-wallet platforms OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers are contractually bound to process your data solely for payment execution and not for any independent purpose.

5.2 Game Content Suppliers

Third-party game studios (including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, and Spribe) receive session tokens and anonymized game-round data necessary to deliver their games within the Platform. The data shared does not include your full identity documents, bank account details, or contact information unless separately required by the supplier's regulatory obligations.

5.3 KYC & Identity Verification Providers

Where pg363 uses a third-party KYC technology provider to assist with identity document verification or liveness checks, your KYC documents and verification images are shared with that provider solely for the purpose of completing the verification. Such providers are contractually prohibited from retaining or independently using your data beyond the verification scope.

5.4 Legal & Regulatory Authorities

pg363 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory bodies where we are legally required to do so — for example, in response to a valid court order, a regulatory investigation, or a statutory reporting obligation under applicable AML law. We will notify affected members of such disclosures where we are legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of pg363's business, member personal data may be transferred to the acquiring entity as part of the transaction. pg363 will notify affected members via their registered email address before their data is transferred under new ownership and provide an opportunity to close their account if they do not consent to the transfer.

6.1 pg363 uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the Platform effectively and to understand how members use it. By continuing to use the Platform, you consent to the use of cookies as described in this section.

Essential Cookies

These cookies are strictly necessary for the Platform to function. They maintain your login session, remember your account preferences, and ensure security features operate correctly. You cannot opt out of essential cookies without disabling Platform functionality.

Analytical Cookies

We use analytical tools to collect aggregated, anonymized data about how members navigate the Platform — which pages are visited most frequently, where users encounter errors, and how feature usage patterns evolve over time. This data informs Platform improvement decisions and is not linked to identifiable individual profiles.

Functional Cookies

Functional cookies remember your display preferences, chosen time-zone (defaulting to WIB, UTC+7), and responsible gaming tool settings so that your experience is consistent across sessions.

Marketing Cookies

Where you have consented, marketing cookies allow pg363 to deliver relevant promotional content tailored to your betting activity and preferences. You may withdraw consent for marketing cookies at any time by updating your preferences in Account Settings or by contacting support.

6.2 You can manage cookie preferences through your web browser settings. Note that disabling non-essential cookies may affect the performance of certain Platform features. pg363 does not respond to "Do Not Track" browser signals because there is currently no standardized interpretation of what that signal requires of platform operators.

pg363 retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to any overriding legal, regulatory, or contractual retention requirements. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your account membership plus 5 years following account closure, to satisfy AML and KYC record-keeping obligations.
• Transaction Records: Retained for 7 years from the date of the transaction, in line with financial record-keeping requirements applicable to internationally regulated gaming operators.
• KYC Documents: Retained for 5 years from account closure or from the date of the last transaction, whichever is later.
• Support Communications: Retained for 3 years from the date of the last communication in a given support thread.
• Marketing Consent Records: Retained for the duration of the membership plus 3 years to demonstrate compliance with consent obligations, even if consent has been withdrawn.
• Technical & Usage Logs: Retained for 12 months in live systems, then archived for a further 24 months for security investigation purposes before permanent deletion.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized data (from which it is no longer possible to identify an individual) may be retained indefinitely for aggregate analytics purposes.

8.1 pg363 implements technical and organizational security measures commensurate with the sensitivity of the data we process. Our security framework includes, but is not limited to:

• Encryption in Transit: All data transmitted between your device and pg363 servers is protected by TLS 1.2 or TLS 1.3 with 256-bit encryption — the same standard used by Indonesia's major banks (BCA, BRI, BNI, Mandiri).
• Encryption at Rest: Sensitive stored data — including KYC documents, bank account details, and account credentials — is encrypted using AES-256 at the database level.
• Access Controls: Access to member personal data within pg363's internal systems is governed by role-based access controls. Only staff with a legitimate business need can access identifiable member data, and all access events are logged.
• Penetration Testing: The Platform undergoes regular independent penetration testing and vulnerability scanning. Critical vulnerabilities are remediated within 48 hours of identification.
• Incident Response: pg363 maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights or freedoms, we will notify affected members within 72 hours of becoming aware of the breach, as required under applicable data protection standards.

8.2 While pg363 takes all reasonable precautions to protect your data, no internet-based system is completely immune from security risks. You are responsible for maintaining the security of your account credentials and for notifying us immediately at [email protected] if you suspect unauthorized access to your account.

pg363 operates as an internationally licensed platform. Your personal data may be processed on servers located outside Indonesia. Where data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that offered within Indonesia, pg363 implements appropriate safeguards — such as standard contractual clauses or binding data processing agreements — to ensure that your data remains protected to a standard consistent with this Privacy Policy, regardless of where it is processed.

Third-party game suppliers and technology providers with whom we work may also process data in their own jurisdictions. All such providers are contractually required to maintain security and confidentiality standards that meet or exceed those described in this policy. By using the Platform, you consent to the transfer of your personal data to these international processing environments in accordance with the safeguards described above.

As a pg363 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]":

• Right of Access: You may request a copy of all personal data that pg363 holds about you, including your account details, transaction history, betting activity, and any KYC documents we have on file.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. For name or date-of-birth corrections, supporting documentation (updated KTP or passport) will be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Note that data subject to legal retention obligations (AML, KYC, financial records) cannot be deleted during the mandatory retention period.
• Right to Restriction of Processing: You may request that we restrict processing of your data while a rectification or objection request is being reviewed, or where processing is unlawful and you prefer restriction over deletion.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you provided to pg363, for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests at any time. pg363 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Marketing Consent: You may withdraw consent for marketing communications at any time without penalty. Withdrawal does not affect processing based on other legal bases.

pg363 will respond to all substantive data rights requests within 30 days of receipt. Where a request is particularly complex, we may extend this period by a further 30 days and will notify you accordingly. We do not charge a fee for handling data rights requests unless they are manifestly unfounded, excessive, or repetitive.

The pg363 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a member is under 21, their account will be immediately closed, all balances will be forfeited, and all personal data associated with the underage account will be securely deleted within 30 days, except where retention is required for legal reporting purposes.

If you are a parent or guardian and believe that a minor in your care has registered an account on pg363, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take appropriate action as a matter of priority.

12.1 Where you have opted in during registration or subsequently through your Account Settings, pg363 may send you promotional communications by email regarding new games, sportsbook promotions, seasonal offers (such as Idul Fitri / Lebaran bonus packages, Ramadhan reload offers, BRI Liga 1 season promotions, and major tournament specials), and platform feature updates.

12.2 We do not send unsolicited SMS marketing or WhatsApp promotional messages. The pg363 WhatsApp number is used solely for inbound member support, not outbound marketing.

12.3 All marketing emails include a clearly visible and functional unsubscribe link. Unsubscribe requests are processed within 10 Business Days. If you continue to receive marketing emails after unsubscribing, please contact [email protected].

12.4 pg363 does not share your contact details with third-party advertisers for the purpose of those advertisers sending you their own marketing communications.

13.1 pg363 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes — those that meaningfully affect how your data is processed or your rights in relation to it — will be communicated to you by email to your registered address at least 14 days before the changes take effect.

13.2 Non-material changes (such as minor editorial clarifications that do not alter the substance of how your data is processed) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

13.3 Your continued use of the Platform after the effective date of an amended Privacy Policy constitutes acceptance of the updated policy. If you do not agree with the changes, you may request account closure in accordance with the Terms & Conditions before the changes take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pg363 handles your personal data, please contact our support team through any of the following channels:

• Email: [email protected] — for data rights requests, please use the subject format "Data Rights Request — [Your Username]". Response time: 2–24 hours for general enquiries; up to 30 days for formal data rights requests.
• Live Chat: Available 24/7 directly within the Platform. Suitable for general privacy questions; formal data rights requests should be submitted by email for audit-trail purposes.
• WhatsApp: +62 811 9363 363 — available 09:00–22:00 WIB (Western Indonesia Time, UTC+7) for general support enquiries.

pg363 takes all privacy enquiries seriously and is committed to resolving them promptly, transparently, and in accordance with applicable data protection standards. For responsible gaming-related data requests — including self-exclusion records and limit history — please also refer to our Responsible Gaming page.