Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") is issued by pgking ("we", "us", "our", or the "Company"), the operator of the online gaming platform accessible at https://pgking.cam (the "Website") and all associated mobile applications and services (collectively, the "Service"). This Policy governs our collection, processing, storage, transfer, and deletion of personal data relating to users, visitors, and prospective members (collectively, "you" or "User") in connection with your use of the Service.

We take data privacy seriously. pgking is designed from the ground up to handle personal information with the care, discretion, and security that our Indonesian players deserve. This Policy is intended to be clear and accessible — not a wall of impenetrable legal text — so that you understand exactly what happens to your data when you interact with us.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference. If any conflict exists between this Policy and the Terms & Conditions regarding data privacy, this Policy shall prevail.

By registering an account, accessing the Website, or using any feature of the Service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must immediately cease using the Service and may request account closure by contacting us at [email protected].

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or in combination with other data, including name, email address, phone number, date of birth, national identification number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, restriction, erasure, or destruction.
• "Data Controller" means pgking, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of pgking under a written data processing agreement.
• "KYC Data" means identity verification documentation submitted by Users, including government-issued identification, proof of address, and biometric photographs.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health status, financial information beyond what is required for payment processing, or any other special category of data requiring heightened protection.
• "Cookie" means a small data file placed on your device by the Website to recognize returning visitors, maintain session state, and collect usage analytics.

3. Categories of Personal Data We Collect

pgking collects Personal Data through multiple channels: directly from you during registration and account use, automatically through your interaction with the Website, and from third-party service providers where legally permitted. The categories of data we collect are as follows:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify the 21+ age requirement).
• Residential address in Indonesia, including province and postal code.
• Email address and mobile phone number (used for account communication and two-factor authentication).
• Username and encrypted password credentials.

3.2 KYC and Verification Data

• Copies of Indonesian National Identity Card (KTP), passport, or driver's license (SIM).
• Proof of residential address (utility bill, bank statement, or government correspondence dated within 3 months).
• Selfie photographs for biometric identity confirmation.
• Taxpayer Identification Number (NPWP) where required for large transaction reporting.

3.3 Financial and Transaction Data

• Bank account details for deposit and withdrawal processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Danamon, BSI).
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers).
• Transaction history including deposit amounts, withdrawal requests, bet stakes, and winnings — all denominated in Indonesian Rupiah (IDR).
• Records of payment method changes and associated verification requests.

3.4 Gaming and Behavioral Data

• Bet history, game participation logs, wagering patterns, and session durations.
• Responsible gaming settings, deposit limit configurations, and self-exclusion records.
• Bonus claim history and promotional participation records.
• Customer support interaction transcripts and complaint records.

3.5 Technical and Device Data

• IP address and approximate geolocation (country and city level).
• Device type, operating system version, and browser type.
• Unique device identifiers and mobile advertising IDs (where applicable).
• Session timestamps, login history, and access logs.
• Cookie data and similar tracking technologies (see Section 8 on Cookies).

4. Legal Basis and Purposes of Processing

We process your Personal Data only where we have a lawful basis to do so. The table below outlines our primary processing activities, the purpose of each, and the legal basis on which we rely:

5. Data Sharing and Third-Party Disclosure

pgking does not sell your Personal Data. We may share your data with carefully selected third parties only where necessary for the delivery of our Service, compliance with legal obligations, or protection of our legitimate business interests. All third-party recipients are bound by contractual data protection obligations consistent with this Policy.

5.1 Service Providers and Data Processors

We engage the following categories of third-party service providers who process data on our behalf:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Danamon, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your financial transactions. These providers receive only the minimum data necessary to execute transactions.
• KYC and identity verification providers: Third-party automated verification platforms that cross-reference submitted identification documents against official databases to confirm identity and age.
• Game software providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session tokens and gameplay identifiers necessary to deliver their games. They do not receive your full Personal Data profile.
• Cloud infrastructure providers: Hosting and data storage providers operating ISO-27001-certified infrastructure. Data processed by these providers is subject to binding contractual data protection terms.
• Customer support platforms: Live chat and ticketing software providers that process support interaction data to enable real-time assistance.
• Fraud detection and cybersecurity services: Automated threat intelligence platforms that analyze traffic patterns and device fingerprints to detect and prevent fraud.

5.2 Legal and Regulatory Disclosure

pgking may disclose your Personal Data to regulatory authorities, law enforcement agencies, courts, or other government bodies where we are required to do so by applicable law, court order, or lawful regulatory request. This includes but is not limited to disclosures required under anti-money laundering (AML) legislation and international financial intelligence obligations. We will notify you of such disclosures where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or part of our business assets, your Personal Data may be transferred to the acquiring entity as part of the transaction. We will provide advance notice of any such transfer and ensure that the receiving entity is bound by data protection obligations equivalent to those in this Policy before any transfer occurs.

5.4 Affiliates and Group Companies

We may share your data with affiliated companies within the pgking corporate group for purposes consistent with this Policy, including consolidated fraud monitoring, shared infrastructure, and unified customer support operations. All group entities are bound by the same data protection standards as pgking.

6. International Data Transfers

As an internationally operating platform, pgking may transfer your Personal Data to countries outside Indonesia for processing or storage. Where such transfers occur, we implement appropriate safeguards to ensure your data receives a level of protection consistent with this Policy, including:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with all recipient third parties.
• Transfers exclusively to jurisdictions with adequate data protection frameworks recognized under applicable international standards.
• Binding corporate rules for intra-group transfers where applicable.

The primary data centers used by pgking are located in Singapore and Hong Kong, both of which maintain robust data protection regimes. Processing of Indonesian financial data (payment transactions via BCA, BRI, BNI, Mandiri, and associated e-wallets) is conducted within servers that comply with applicable cross-border data transfer regulations.

7. Data Retention

pgking retains your Personal Data for the periods set out below, after which data is securely deleted or anonymized so that it can no longer be associated with you:

Where retention beyond these periods is required by a specific legal obligation, court order, or ongoing regulatory investigation, pgking will retain the relevant data until that obligation is fully discharged, after which deletion will proceed without unnecessary delay.

8. Cookies and Tracking Technologies

pgking uses cookies and similar technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the Website, personalize your experience, and gather usage analytics. Below is a summary of the categories of cookies we use:

• Strictly necessary cookies: Essential for the Website to function. These include session management cookies that keep you logged in and security cookies that help detect and prevent fraud. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, saved login details (if opted in), and display options. Disabling these may reduce your experience quality.
• Analytics cookies: Collect aggregate, anonymized data about how visitors use the Website (pages visited, session duration, click paths). This data helps us improve the platform. We use privacy-respecting analytics tools that do not share your data with advertising networks.
• Security cookies: Used by our fraud detection systems to fingerprint devices and identify suspicious login patterns, protecting your account from unauthorized access.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block, delete, or be notified before cookies are set. Please note that disabling strictly necessary cookies will prevent you from accessing your account and using core platform features. For more detailed information about specific cookies used, contact us at [email protected].

9. Your Data Protection Rights

As a pgking member and data subject, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request." We will respond within 30 calendar days of receiving your request.

10. Marketing Communications and Opt-Out

With your consent, pgking may send you promotional communications including bonus offers, deposit match notifications, seasonal promotions (such as those tied to Idul Fitri, Chinese New Year, or major sporting events like the BRI Liga 1 season opener or Piala AFF), and platform feature announcements. These communications may be delivered via email, SMS, WhatsApp, or in-app push notifications.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email.
• Updating your communication preferences in your Account settings under "Notifications."
• Sending a written opt-out request to [email protected] with the subject "Marketing Opt-Out."

Opting out of marketing communications will not affect transactional messages (account security alerts, withdrawal confirmations, KYC requests, or responsible gaming notifications), which are sent as necessary components of the Service regardless of marketing preferences.

11. Minors and Age Verification

pgking's Service is strictly intended for adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under 21. Our registration process includes mandatory date-of-birth collection and active KYC age verification for all accounts before withdrawal privileges are granted.

If we become aware that we have inadvertently collected Personal Data from a minor, we will immediately suspend the associated account, void all wagers, return any deposits, and permanently delete all Personal Data associated with that account. If you believe a minor has registered on pgking, please notify us immediately at [email protected].

12. Data Security Measures

pgking implements a comprehensive set of technical, organizational, and physical security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our key security controls include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption at rest for all sensitive Personal Data and KYC documents stored in our databases.
• Two-factor authentication (2FA) available for all accounts and mandatory for administrative access to our internal systems.
• Role-based access controls (RBAC) ensuring that employees can only access Personal Data that is strictly necessary for their job function.
• Continuous intrusion detection and prevention systems (IDS/IPS) monitoring all network traffic for anomalies.
• Regular penetration testing conducted by independent third-party cybersecurity firms on an annual basis and following any significant platform update.
• Staff training on data protection and information security conducted for all employees at onboarding and annually thereafter.

In the event of a data breach that poses a risk to your rights and freedoms, pgking will notify affected Users without undue delay and take immediate remedial action to contain the breach and prevent recurrence.

13. Changes to This Privacy Policy

pgking reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy.
• Post a prominent notice on the Website homepage for at least 14 days following the update.
• Send an email notification to all registered Users with active accounts summarizing the key changes.

Your continued use of the Service following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with any revised version of this Policy, you must cease using the Service and may request account closure as described in Section 9 (Your Data Protection Rights).

14. Contact and Data Protection Inquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to raise a concern about how your Personal Data is being handled, please contact our Data Protection Team:

Email: [email protected]
Subject Line: Privacy / Data Protection Inquiry
Response Time: Within 30 calendar days of receipt
Live Chat: Available 24/7 via the Website for urgent inquiries

We aim to resolve all privacy-related concerns promptly and fairly. If you are not satisfied with our response to your inquiry, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.