Privacy Policy

1. Introduction

Welcome to pena88's Privacy Policy. This document outlines our commitment to protecting your personal data and explains our data handling practices in clear, transparent terms. pena88 operates an online gaming platform serving Indonesian players and is committed to complying with international data protection standards and industry best practices.

This Privacy Policy applies to all personal information collected through the pena88 website (https://pena88.cam), mobile applications, customer support channels, and any other services we provide. By creating an account and using pena88 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

We recognize that privacy and data security are fundamental rights. pena88 employs industry-standard technical and organizational measures to safeguard your personal data against unauthorized access, loss, misuse, or alteration. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of pena88 services.

2. Data Controller Information

pena88, operating at https://pena88.cam, acts as the data controller responsible for the personal information you provide when using our services. As the data controller, pena88 determines the purposes and means of processing your personal data and is accountable for ensuring compliance with applicable data protection regulations.

Our registered contact information for data protection inquiries:

• Platform Name: pena88
• Website: https://pena88.cam
• Email Contact: [email protected]
• Primary Market: Indonesia
• Operating Hours: 24/7 Customer Support (WIB timezone)

For specific privacy-related inquiries, complaints, or requests to exercise your data protection rights, please contact our customer support team via email or live chat with "Privacy Request" in the subject line or message. We aim to respond to all privacy inquiries within 72 hours and will work diligently to resolve your concerns in accordance with applicable data protection laws.

3. Information We Collect

pena88 collects various categories of personal information to provide, maintain, and improve our gaming services. The information we collect falls into the following categories:

3.1 Account Registration Information

When you create a pena88 account, we collect:

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify you are 21 years of age or older)
• Email address (for account communications and security)
• Mobile phone number (for account verification and support)
• Residential address in Indonesia (street, city, province, postal code)
• Username and encrypted password
• Preferred language and currency (Indonesian Rupiah)

3.2 Identity Verification (KYC) Information

To comply with regulatory requirements and prevent fraud, we collect:

• Copy of Indonesian national ID card (KTP) showing photo and identification number
• Proof of address documents (utility bill, bank statement, government letter dated within last 3 months)
• Selfie photograph holding your identification document
• Additional verification documents if requested for enhanced due diligence

3.3 Financial and Transaction Information

For payment processing, we collect:

• Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga
• E-wallet account information (OVO, DANA, GoPay, ShopeePay account numbers)
• Transaction history (deposits, withdrawals, bets placed, winnings, bonuses claimed)
• Payment method preferences and transaction timestamps

3.4 Gaming Activity and Behavioral Data

To provide personalized services and ensure fair play, we collect:

• Games played (slots, sports betting, live casino, togel, poker)
• Betting patterns and preferences (stake amounts, favorite games, betting frequency)
• Session duration and login/logout timestamps
• Account balance changes and bonus utilization
• Customer support interactions and chat transcripts
• Responsible gaming tool usage (deposit limits, session timers, self-exclusion requests)

3.5 Technical and Device Information

We automatically collect certain technical information when you access pena88:

• IP address and geolocation data (to verify Indonesian residency)
• Device type, operating system, and browser type
• Screen resolution and device identifiers
• Referral source (how you found pena88)
• Clickstream data and pages visited
• Cookies and similar tracking technologies (see Section 10 for details)

3.6 Marketing and Communication Preferences

With your consent, we collect:

• Marketing communication preferences (email, SMS, push notifications)
• Promotional offer participation and bonus activation history
• Survey responses and feedback submissions

4. How We Use Your Information

pena88 uses your personal information for the following specific purposes, all of which are necessary to provide our gaming services or are undertaken with your explicit consent:

4.1 Account Management and Service Provision

• Creating, maintaining, and securing your pena88 account
• Processing your registration and verifying your identity (KYC compliance)
• Providing access to sports betting, casino games, slots, and other gaming products
• Processing game outcomes and updating account balances in real-time
• Maintaining accurate records of your gaming activity and transaction history

4.2 Payment Processing and Financial Transactions

• Processing deposits from BCA, BRI, BNI, Mandiri, and e-wallets (OVO, DANA, GoPay, ShopeePay)
• Executing withdrawal requests and transferring funds to your designated bank account
• Calculating and awarding bonuses, cashback, and VIP rewards
• Preventing fraudulent transactions and protecting against money laundering
• Reconciling payment provider transactions and resolving payment disputes

4.3 Legal and Regulatory Compliance

• Verifying you are at least 21 years of age and legally permitted to gamble
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Maintaining audit trails for regulatory inspections
• Responding to law enforcement requests and legal obligations
• Enforcing our Terms & Conditions and investigating Terms violations

4.4 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, multi-accounting, and collusion
• Monitoring for unusual betting patterns or suspicious account behavior
• Protecting against unauthorized access, hacking attempts, and data breaches
• Verifying the legitimacy of withdrawal requests
• Investigating customer complaints and disputes

4.5 Customer Support and Communication

• Responding to your inquiries via live chat, WhatsApp, and email support
• Providing technical assistance and troubleshooting account issues
• Sending transactional notifications (deposit confirmations, withdrawal updates, account alerts)
• Communicating important account changes or Terms & Conditions updates
• Conducting customer satisfaction surveys to improve service quality

4.6 Marketing and Promotional Activities (With Your Consent)

• Sending promotional offers, bonus notifications, and exclusive VIP rewards
• Personalizing game recommendations based on your playing preferences
• Informing you about new game releases, tournaments, and special events
• Delivering targeted marketing content relevant to Indonesian players (BRI Liga 1 promotions, local holiday bonuses)
• You may opt out of marketing communications at any time via account settings or by contacting customer support

4.7 Platform Improvement and Analytics

• Analyzing user behavior to enhance website functionality and user experience
• Conducting A/B testing to optimize game selection and interface design
• Identifying popular games and betting markets to expand our offerings
• Improving mobile application performance and compatibility
• Generating aggregated, anonymized statistics for business reporting (no personally identifiable information disclosed)

4.8 Responsible Gaming and Player Protection

• Monitoring your gaming activity for signs of problem gambling
• Enforcing deposit limits, loss limits, and session time restrictions you set
• Processing self-exclusion and cooling-off period requests
• Providing access to responsible gaming resources and support organizations
• Preventing underage gambling by verifying age and identity

5. Legal Basis for Processing

pena88 processes your personal data based on the following legal grounds, in accordance with international data protection principles:

5.1 Contractual Necessity

Processing is necessary to fulfill our contractual obligations under the Terms & Conditions you agreed to when creating your account. This includes providing gaming services, processing payments, and maintaining account security.

5.2 Legal Obligation

Processing is required to comply with legal and regulatory obligations, including KYC verification, AML compliance, age verification (21+ requirement), and responding to law enforcement requests.

5.3 Legitimate Interests

Processing is necessary for pena88's legitimate business interests, such as preventing fraud, ensuring platform security, improving services, and conducting analytics, provided such interests do not override your fundamental rights and freedoms.

5.4 Consent

For marketing communications, non-essential cookies, and certain data sharing activities, we obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing and Disclosure

pena88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data with trusted partners and service providers who assist us in operating our platform, and only to the extent necessary to fulfill specific functions:

6.1 Payment Service Providers

We share necessary financial information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals. These providers operate under strict confidentiality obligations and data protection agreements.

6.2 Game Providers and Platform Suppliers

We share limited account information (username, account balance, bet history) with licensed game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft to enable gameplay and ensure fair outcomes. These providers are contractually prohibited from using your data for any purpose other than providing gaming services.

6.3 Identity Verification Services

We may share KYC documents with third-party identity verification services to confirm your identity, verify your age (21+), and prevent fraud. These services operate under strict data protection agreements and delete your documents after verification is complete.

6.4 Customer Support and Communication Tools

We use third-party customer support platforms for live chat and ticketing systems. Support agents may access your account information solely to assist with your inquiries and provide technical support.

6.5 Marketing and Analytics Partners (With Your Consent)

With your consent, we may share anonymized or aggregated data with analytics providers (Google Analytics) to understand user behavior and improve our services. We may also share limited information with marketing partners to deliver relevant promotional offers.

6.6 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory bodies, or government agencies if required by law, court order, or legal process. This includes sharing information to prevent fraud, comply with AML regulations, or protect the rights and safety of pena88 and its users.

6.7 Business Transfers

In the event of a merger, acquisition, or sale of all or part of pena88's assets, your personal information may be transferred to the acquiring entity. We will notify you via email and provide an opportunity to delete your account before any such transfer.

7. Data Security Measures

pena88 employs comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

7.1 Encryption and Secure Communication

• 256-bit SSL/TLS Encryption: All data transmitted between your device and pena88 servers is encrypted using industry-standard 256-bit SSL (Secure Sockets Layer) technology, the same encryption standard used by major Indonesian banks.
• Encrypted Data Storage: Sensitive personal information, including passwords, financial data, and KYC documents, is encrypted at rest using AES-256 encryption.
• Secure Password Hashing: User passwords are hashed using bcrypt or similar strong cryptographic algorithms and are never stored in plain text.

7.2 Access Controls and Authentication

• Two-Factor Authentication (2FA): Optional 2FA is available to add an extra layer of account security.
• Role-Based Access Control: Internal access to personal data is restricted to authorized personnel only, based on their job functions.
• Audit Logs: All access to sensitive data is logged and monitored for suspicious activity.

7.3 Infrastructure Security

• Secure Servers: Our servers are hosted in secure data centers with physical security controls including 24/7 surveillance, biometric access, and fire suppression systems.
• Firewall Protection: Multi-layered firewalls protect against external attacks and unauthorized access attempts.
• Regular Security Updates: All software, operating systems, and applications are regularly updated with the latest security patches.
• DDoS Protection: We employ distributed denial-of-service (DDoS) mitigation technologies to ensure platform availability.

7.4 Monitoring and Incident Response

• 24/7 Security Monitoring: Our security team continuously monitors systems for suspicious activity, intrusion attempts, and potential data breaches.
• Incident Response Plan: We maintain a documented incident response plan to quickly address and contain any security breaches.
• Breach Notification: In the event of a data breach affecting your personal information, we will notify you within 72 hours and provide guidance on protective measures.

7.5 Employee Training and Policies

• All pena88 employees undergo mandatory data protection and security awareness training.
• Employees are bound by strict confidentiality agreements and are prohibited from accessing personal data without legitimate business need.
• We enforce a clean desk policy, secure document disposal, and regular security audits of internal processes.

8. Data Retention

pena88 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

Data Category	Retention Period	Reason
Account Information	Duration of account + 7 years after closure	Legal compliance, AML regulations, dispute resolution
KYC Documents	7 years after account closure	Regulatory requirements, fraud prevention
Transaction History	7 years after transaction	Financial record-keeping, tax compliance
Gaming Activity Logs	5 years after activity	Dispute resolution, responsible gaming monitoring
Customer Support Records	3 years after last interaction	Service improvement, complaint handling
Marketing Consent	Until consent is withdrawn	Compliance with marketing regulations
Technical Logs (IP, Device)	90 days to 2 years	Security monitoring, fraud detection

After the retention period expires, we securely delete or anonymize your personal data. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

8.1 Account Deletion

If you wish to delete your account and associated personal data, you may submit a request via customer support. Upon account deletion:

• Your account will be immediately closed and you will no longer be able to access pena88 services.
• We will delete or anonymize your personal data within 30 days, except where retention is required by law.
• Transaction records and KYC documents will be retained for 7 years as required by financial regulations.
• Any outstanding balances must be withdrawn before deletion. Unclaimed balances may be forfeited.

9. Your Privacy Rights

As a pena88 user, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights in accordance with applicable data protection laws:

9.1 Right to Access

You have the right to request access to the personal information we hold about you. This includes the right to obtain confirmation of whether we are processing your data, details about the purposes of processing, categories of data collected, and recipients of your data. You may request a copy of your personal data in a commonly used electronic format.

9.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through your pena88 account settings. For KYC documents or other information that cannot be self-updated, contact customer support.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes collected, you withdraw consent, or you object to processing. Note that we may retain certain information where legally required (e.g., 7-year retention for financial records under AML regulations).

9.4 Right to Restriction of Processing

You may request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data, the processing is unlawful but you prefer restriction over deletion, or you need the data for legal claims.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another service provider. This right applies to data you provided to pena88 based on consent or contractual necessity.

9.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to marketing communications, we will cease sending such communications. You may opt out of marketing emails by clicking the "unsubscribe" link in any promotional email or by adjusting your communication preferences in account settings.

9.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications, optional cookies), you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

9.8 Right to Lodge a Complaint

If you believe pena88 has violated your privacy rights or failed to comply with data protection obligations, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. However, we encourage you to contact us first so we can address your concerns directly.

How to Exercise Your Rights

To exercise any of the above rights, please contact our customer support team via:

• Email: [email protected] (include "Privacy Rights Request" in subject line)
• Live Chat: Available 24/7 on the pena88 website
• WhatsApp: +62 812-3456-7890

We will respond to all verified requests within 30 days. To protect your privacy, we may require verification of your identity before processing your request.

10. Cookies and Tracking Technologies

pena88 uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. Cookies are small text files stored on your device that help us remember your preferences and improve platform functionality.

10.1 Types of Cookies We Use

Essential Cookies (Always Active)

These cookies are necessary for the website to function properly and cannot be disabled. They enable core functionality such as account login, session management, security features, and payment processing. Without these cookies, pena88 services would not be available.

Performance and Analytics Cookies

These cookies collect anonymized information about how you use pena88, including pages visited, time spent on the site, and links clicked. We use this data to understand user behavior, identify popular games, and optimize website performance. These cookies do not collect personally identifiable information.

Functionality Cookies

These cookies remember your preferences and choices (language, currency, game filters) to provide a more personalized experience. They enable features like remembering your username (not password) for faster login.

Marketing and Targeting Cookies (Consent Required)

With your consent, we use marketing cookies to deliver relevant promotional offers, track the effectiveness of advertising campaigns, and provide personalized game recommendations. These cookies may track your activity across multiple websites.

10.2 Third-Party Cookies

We allow certain trusted third parties to set cookies on your device, including:

• Google Analytics: For website analytics and user behavior insights
• Payment Providers: To facilitate secure transactions with Indonesian banks and e-wallets
• Game Providers: To enable gameplay from Pragmatic Play, Evolution Gaming, and other suppliers

10.3 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect website functionality. To opt out of third-party cookies, visit your browser's privacy settings or use tools like Google Analytics Opt-out Browser Add-on.

Please note that blocking essential cookies will prevent you from accessing pena88 services.

11. International Data Transfers

pena88 primarily serves Indonesian players and stores data within secure data centers. However, some of our service providers and game suppliers may be located outside Indonesia, which may require transferring your personal data internationally.

When we transfer your data outside Indonesia, we ensure adequate protection through:

• Contractual agreements requiring recipients to maintain data protection standards equivalent to those outlined in this Privacy Policy
• Compliance with internationally recognized data protection frameworks
• Use of secure, encrypted communication channels for all data transfers
• Regular audits of data recipients' security practices

We will not transfer your personal data to any jurisdiction where adequate data protection cannot be guaranteed.

12. Children's Privacy

pena88 services are strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal information from anyone under 21 years of age. Our registration process includes age verification measures, and we require submission of government-issued identification (Indonesian KTP) to confirm that all users meet the minimum age requirement.

If we become aware that we have inadvertently collected personal information from an individual under 21 years of age, we will immediately:

• Suspend and permanently close the account
• Delete all personal information associated with that account
• Forfeit any account balance and void all bets and winnings
• Report the incident to relevant authorities if required by law

If you believe someone under 21 has created an account on pena88, please contact our customer support immediately at [email protected]. Protecting minors from gambling is a top priority, and we take all reports seriously.

13. Changes to This Privacy Policy

pena88 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you through one or more of the following methods:

• Email notification sent to your registered email address
• Prominent notice on the pena88 homepage
• In-account notification upon your next login
• Update to the "Last Updated" date at the top of this document

We encourage you to periodically review this Privacy Policy to stay informed about how we protect your personal information. Continued use of pena88 services after any Privacy Policy updates constitutes your acceptance of the revised terms.

If you do not agree with any changes to this Privacy Policy, you have the right to close your account and request deletion of your personal data in accordance with Section 9.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how pena88 handles your personal data, please do not hesitate to contact us. We are committed to addressing all privacy inquiries promptly and transparently.

General Privacy Inquiries

• Email: [email protected] (use subject line "Privacy Inquiry")
• 24/7 Live Chat: Available on every page of the pena88 website
• WhatsApp Support: +62 812-3456-7890
• Response Time: We aim to respond to all privacy-related inquiries within 72 hours

Exercising Your Privacy Rights

To submit requests related to accessing, correcting, deleting, or restricting the processing of your personal data, please email [email protected] with "Privacy Rights Request" in the subject line. Include your pena88 username, registered email address, and a detailed description of your request. We will verify your identity before processing any requests.

Data Protection Officer

For complex privacy matters or concerns about pena88's data protection practices, you may request to speak with our Data Protection Officer by contacting customer support and requesting escalation to the privacy team.

Complaints

If you believe pena88 has not adequately addressed your privacy concerns, you may escalate your complaint by emailing [email protected] with "Privacy Complaint" in the subject line. Our management team will review and respond within 10 business days. You also have the right to lodge a complaint with your local data protection authority.