pt789 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by pt789 in connection with the operation of the pt789 Platform at pt789.app, including the website, any associated mobile interfaces, customer support communications, and marketing activities directed at registered players.

For the purposes of this Privacy Policy, "pt789" acts as the data controller — meaning pt789 determines the purposes and means by which your personal data is processed. References to "you" or "the Player" refer to any individual who accesses the pt789 Platform, registers an account, or otherwise interacts with pt789's services.

This Policy should be read alongside the pt789 Terms & Conditions, which govern the overall relationship between you and pt789. By registering a pt789 account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing activities described herein.

pt789 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from trusted third-party partners where permitted by applicable law. The categories of personal data pt789 may collect include:

pt789 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where such information is voluntarily provided in the context of a responsible gaming self-assessment or where required by applicable law. Any such data is handled with the highest level of care and access restrictions.

pt789 processes your personal data only where a valid legal basis exists. The primary legal bases on which pt789 relies are:

1. Contractual Necessity: Processing is necessary to perform the contract between you and pt789 — i.e., to operate your account, process deposits and withdrawals in IDR, settle wagers, and provide customer support.
2. Legal Obligation: Processing is required to comply with applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations imposed by pt789's licensing authority and applicable financial regulations.
3. Legitimate Interests: Processing is necessary for pt789's legitimate business interests — including fraud prevention, platform security, abuse detection, responsible gaming monitoring, and improving the quality of the pt789 service — where those interests are not overridden by your data protection rights.
4. Consent: Where pt789 relies on your consent (for example, to send marketing communications or to use non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pt789 uses the personal data it collects for the following specific purposes:

• Account Management: Creating and maintaining your pt789 account, verifying your identity during registration and KYC, and processing changes to your account details.
• Transaction Processing: Receiving and crediting deposits from BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja; processing withdrawal requests to your verified payment method; maintaining accurate IDR account balance records.
• Game & Betting Services: Operating sportsbook markets, live casino tables, slot titles, and togel (Indonesia's traditional numbers lottery) draws; settling wagers; applying bonus and promotional credits.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the pt789 Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns for signs of problem gambling; applying deposit limits, session limits, and self-exclusion periods; sending reality check notifications; facilitating voluntary or mandatory account restrictions.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and maintaining support records for service quality and regulatory purposes.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
• Platform Improvement: Analysing usage data in aggregate to improve site performance, navigation, game selection, and the overall player experience on the pt789 Platform.
• Legal Compliance: Meeting pt789's obligations under its international gaming licence, AML/CTF regulations, and any lawful requests from regulatory or law enforcement authorities.

pt789 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. pt789 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to confidentiality obligations:

1. Payment Processors & Banking Partners: Financial institutions and payment gateways (including those facilitating transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive only the transaction data necessary to process your deposits and withdrawals.
2. Identity Verification (KYC) Providers: Third-party identity verification services may receive your identity documents and personal details for the purpose of conducting automated or manual KYC checks as required by pt789's licensing and AML obligations.
3. Game & Software Providers: Licensed game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive pseudonymised player identifiers necessary to deliver game sessions and resolve game-related disputes. These providers do not receive your full identity or financial data.
4. Analytics & Platform Technology Providers: Service providers supporting platform infrastructure, analytics, and security receive aggregated or pseudonymised technical and usage data. They are contractually prohibited from using this data for their own purposes.
5. Regulatory & Law Enforcement Authorities: pt789 may disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required by applicable law, a court order, or a lawful regulatory request. pt789 will notify affected Players of such disclosures where legally permitted to do so.
6. Business Transfers: In the event of a merger, acquisition, or sale of all or part of pt789's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations. Affected Players will be notified in advance where practicable.

The pt789 Platform uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, remember your preferences, and analyse usage patterns. The categories of cookies used are:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into your pt789 account and using core Platform features. Disabling optional cookies will not affect your ability to place wagers, deposit, or withdraw.

pt789 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including satisfying legal, regulatory, accounting, and reporting obligations. The principal retention periods are as follows:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years following permanent account closure, in accordance with standard AML/CTF record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and wagering records are retained for a minimum of five (5) years following the date of each transaction.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later.
• Customer Support Records: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction.
• Marketing Data: Retained until you opt out of marketing communications, after which your preference record is retained indefinitely to ensure the opt-out is honoured.
• Technical & Usage Data: Aggregated analytics data is retained indefinitely in anonymised form. Raw log data containing IP addresses is deleted or anonymised within 12 months of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically feasible (for example, data stored in backup archives), pt789 will isolate and protect that data from further active processing until deletion becomes possible.

pt789 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

1. Encryption in Transit: All data exchanged between your device and the pt789 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). No unencrypted personal data is transmitted over public networks.
2. Encryption at Rest: Sensitive personal data — including identity documents, payment details, and account credentials — is stored using strong encryption algorithms on pt789's secured servers.
3. Access Controls: Access to personal data is restricted on a strict need-to-know basis. pt789 staff are granted only the minimum level of access required to perform their specific job function. All access is logged and audited.
4. Two-Factor Authentication (2FA): pt789 supports and encourages the use of 2FA on player accounts. Internal administrative access to player data systems requires mandatory multi-factor authentication.
5. Penetration Testing & Audits: The pt789 Platform undergoes regular security assessments, including vulnerability scanning and penetration testing, conducted by independent third-party security specialists.
6. Incident Response: In the event of a confirmed data breach that poses a risk to affected Players, pt789 will notify impacted individuals and, where required, the relevant regulatory authority, within the timeframe prescribed by applicable law.

As a pt789 Player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact pt789 support via live chat or by email at [email protected]. Requests will be acknowledged within 48 hours and actioned within 30 days.

1. Right of Access: You may request a copy of all personal data pt789 holds about you, along with information about how that data is processed.
2. Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by pt789 at any time.
3. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to pt789's legal obligations to retain certain data (see Section 7).
4. Right to Restriction of Processing: You may request that pt789 temporarily restrict the processing of your personal data while a dispute regarding accuracy or lawfulness is resolved.
5. Right to Data Portability: You may request a machine-readable copy of personal data you have provided to pt789, where processing is based on your consent or on a contract.
6. Right to Object: You may object to processing based on pt789's legitimate interests, including profiling for responsible gaming monitoring. pt789 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

pt789 will not charge a fee for handling data subject requests submitted in good faith. If a request is manifestly unfounded or excessive, pt789 reserves the right to charge a reasonable administrative fee or refuse the request, with written justification provided to you.

The pt789 Platform is strictly for adults aged 21 years and over. pt789 does not knowingly collect personal data from individuals under the age of 21. If pt789 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account suspended pending further review.

pt789 uses date-of-birth verification during account registration and may request additional documentary proof of age as part of the KYC process. If you have reason to believe that a person under 21 has registered a pt789 account, please notify the support team immediately via live chat.

Parents and guardians in Indonesia who are concerned about a young person's access to online gambling content are encouraged to use internet filtering and parental control software to restrict access to the pt789 Platform and similar sites. pt789 supports all responsible parental oversight measures.

pt789 operates as an internationally licensed platform, and some of the third-party service providers used to deliver the pt789 service (such as game studio infrastructure providers and cloud hosting partners) may process personal data in jurisdictions outside Indonesia. In such cases, pt789 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data protection obligations in agreements with all third-party processors, requiring them to handle data to a standard no less protective than this Privacy Policy.
• Transfers only to countries or service providers that maintain adequate data protection standards as assessed by pt789's internal compliance team.
• Technical safeguards (encryption at rest and in transit) applied to all data regardless of where it is physically processed.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting pt789 support.

The pt789 Platform integrates services from third-party providers including game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment gateways, and analytics platforms. Each of these providers operates under its own privacy policy and data processing terms. pt789 is not responsible for the privacy practices of third-party providers and encourages you to review their respective policies where relevant.

pt789 does not link to external websites from within the Platform content. Any links that appear within promotional communications are strictly limited to pt789-owned pages. pt789 is not responsible for the content or privacy practices of any external site that a user may independently navigate to.

pt789 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. When material changes are made, pt789 will notify registered Players via email to the address held on their account, or via a prominent on-platform notification, at least 7 days before the revised Policy takes effect.

The "Last Updated" date at the top of this page will be revised each time the Policy is updated. Continued use of the pt789 Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you should contact pt789 support to request account closure prior to the effective date.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pt789, please contact the pt789 Data Support team through the following channels:

• Live Chat: Available 24/7 directly on the pt789 Platform. Native Indonesian-speaking agents are available at all hours. Average response time under 60 seconds.
• Email: [email protected] (plain text — not a clickable link). Include "Privacy Request" in your subject line for faster routing. Responses are provided within 4 hours during WIB business hours, or within 12 hours at other times.

When submitting a data subject rights request (Section 9), please include your registered email address and a brief description of your request. For security purposes, pt789 may need to verify your identity before actioning any request that involves access to or deletion of personal data.