erek40 Privacy Policy

This Privacy Policy applies to all personal information collected by erek40 (referred to as "we," "us," "our," or the "Platform") from users (referred to as "you," "your," or "User") who access or use our online betting services through https://erek40.cam, including our website, mobile web interface, and any associated applications or services.

We process personal data in accordance with applicable international data-protection laws, including the General Data Protection Regulation (GDPR) where applicable, and industry best practices for online gaming operators. erek40 operates with full transparency regarding data collection and usage, and we employ robust security measures to safeguard your information against unauthorized access, disclosure, alteration, or destruction.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. If you have any questions about how we handle your data, please contact our Data Protection Officer at [email protected].

2.1 Information You Provide Directly

When you register an account on erek40, you provide us with personal information that is necessary to create and manage your account, verify your identity, and comply with legal and regulatory requirements. This information includes:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP number, passport number, or driver's license number).
• Contact Information: Email address, mobile phone number, and residential address (street, city, province, postal code).
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay account names/numbers), and transaction history including deposits, withdrawals, wagers, and winnings.
• Verification Documents: Copies of government-issued photo identification (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for facial-recognition verification during Know Your Customer (KYC) procedures.
• Communications: Records of your interactions with our customer-support team via email, live chat, or phone, including the content of messages, attachments, and support ticket history.

2.2 Information We Collect Automatically

When you access erek40, we automatically collect certain technical and behavioral information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers (IMEI, MAC address, advertising ID).
• Connection Information: IP address, internet service provider (ISP), geographic location (country, region, city derived from IP address), connection speed, and network operator.
• Usage Data: Pages visited, features used, time spent on each page, click patterns, scroll depth, search queries entered, games played, bet amounts, session duration, login/logout timestamps, and navigation paths through the Platform.
• Performance Data: Page load times, error messages, crash reports, and other diagnostic information used to improve Platform performance and user experience.

2.3 Information from Third Parties

We may receive information about you from third-party sources to verify your identity, prevent fraud, and comply with anti-money-laundering (AML) regulations:

• Payment Providers: BCA, BRI, BNI, Bank Mandiri, and e-wallet operators (OVO, DANA, GoPay) may share transaction confirmation data, account verification status, and fraud-screening results.
• Identity Verification Services: Third-party KYC/AML service providers may supply identity-verification results, watchlist screening outcomes, and risk-assessment scores.
• Affiliates & Marketing Partners: If you accessed erek40 through an affiliate link or promotional campaign, we may receive referral information, campaign identifiers, and attribution data to track marketing effectiveness.

erek40 uses your personal information for the following purposes, all of which are necessary for providing our services, complying with legal obligations, and improving user experience:

3.1 Account Management & Service Delivery

• Creating and managing your user account
• Verifying your identity and age to ensure compliance with 21+ age restrictions
• Processing deposits and withdrawals via BCA, BRI, BNI, Bank Mandiri, and e-wallets
• Maintaining accurate transaction records and account balances
• Enabling you to place wagers on sports, casino games, togel, sabung ayam, and other gaming products
• Crediting winnings, bonuses, and promotional rewards to your account
• Providing customer support via live chat, email, and phone
• Communicating important account updates, policy changes, and service announcements

3.2 Legal Compliance & Fraud Prevention

• Complying with Know Your Customer (KYC) and Anti-Money-Laundering (AML) regulations
• Verifying the source of funds to prevent money laundering and terrorist financing
• Detecting and preventing fraudulent transactions, account takeovers, and bonus abuse
• Screening users against international sanctions lists and politically exposed persons (PEP) databases
• Responding to lawful requests from law enforcement, regulators, and government authorities
• Maintaining audit trails and transaction logs as required by licensing authorities

3.3 Platform Improvement & Personalization

• Analyzing usage patterns to improve Platform design, navigation, and feature placement
• Conducting A/B testing to optimize user experience and conversion rates
• Personalizing game recommendations based on your betting history and preferences
• Tailoring promotional offers and bonus campaigns to match your activity level and game interests
• Optimizing Platform performance for your device type and connection speed
• Troubleshooting technical issues and resolving bugs reported by users

3.4 Marketing & Communications

• Sending promotional emails about new games, bonus offers, tournaments, and special events
• Delivering SMS notifications about deposit confirmations, withdrawal processing, and time-sensitive promotions
• Displaying personalized advertisements on the Platform based on your activity and preferences
• Measuring the effectiveness of marketing campaigns and affiliate partnerships

Note: You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in promotional emails or by adjusting your communication preferences in your account settings. Opting out of marketing does not affect essential service communications (account alerts, transaction confirmations, policy updates).

3.5 Responsible Gaming

• Monitoring betting patterns to identify signs of problem gambling behavior
• Enforcing deposit limits, session time caps, and self-exclusion requests
• Providing responsible-gaming tools and resources to help users maintain control
• Intervening proactively when unusual or concerning betting activity is detected

erek40 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms & Conditions, including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with laws and regulations governing online gambling, KYC/AML requirements, tax reporting, and regulatory audits.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, Platform improvement, and marketing, provided these interests do not override your fundamental privacy rights.
• Consent: For certain optional data uses (e.g., marketing communications, personalized advertising, non-essential cookies), we obtain your explicit consent, which you may withdraw at any time.

erek40 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with the following categories of recipients when necessary for service delivery, legal compliance, or business operations:

5.1 Service Providers

We share data with trusted third-party service providers who perform functions on our behalf under strict confidentiality agreements:

• Payment Processors: BCA, BRI, BNI, Bank Mandiri, and e-wallet operators process deposits and withdrawals and require your bank account or e-wallet details to complete transactions.
• Identity Verification Services: KYC/AML providers verify your identity, screen you against watchlists, and assess fraud risk during account registration and withdrawal requests.
• Cloud Hosting Providers: Infrastructure providers host our servers, databases, and applications, storing your account data and transaction history in secure, encrypted environments.
• Customer Support Tools: Live-chat platforms, ticketing systems, and CRM software store your support interactions to enable efficient issue resolution.
• Analytics Providers: Web analytics tools (Google Analytics, Hotjar) collect anonymized usage data to help us understand user behavior and improve the Platform.

5.2 Game Providers

When you play casino games, slots, or live dealer tables, we share your username and session identifiers with game providers (Evolution Gaming, Pragmatic Play, Microgaming, Ezugi) to enable gameplay and settle wagers. Game providers process data under their own privacy policies and are prohibited from using your information for unrelated purposes.

5.3 Legal & Regulatory Authorities

We may disclose your data to law enforcement, regulatory bodies, or government authorities when required by law or in response to valid legal requests:

• Complying with court orders, subpoenas, or search warrants
• Responding to requests from gaming regulators, licensing authorities, or tax agencies
• Investigating suspected fraud, money laundering, or other criminal activity
• Protecting the rights, property, or safety of erek40, our users, or the public

5.4 Business Transfers

If erek40 undergoes a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email and/or prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

erek40 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (passwords, financial information) is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All employees and contractors sign confidentiality agreements and undergo security training.
• Multi-Factor Authentication: Critical systems require multi-factor authentication (MFA) to prevent unauthorized access by compromised credentials.
• Intrusion Detection: We deploy firewalls, intrusion-detection systems (IDS), and intrusion-prevention systems (IPS) to monitor for and block malicious activity.
• Regular Audits: Our security infrastructure undergoes regular penetration testing and vulnerability assessments by independent third-party security firms.
• Incident Response: We maintain a comprehensive incident-response plan to detect, contain, and remediate security breaches. In the event of a data breach affecting your personal information, we will notify you and relevant authorities in accordance with applicable data-breach notification laws.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for immediately notifying us if you suspect unauthorized access to your account.

erek40 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, and resolve disputes. Specific retention periods include:

• Account Data: Retained for the duration of your account's active status and for 7 years after account closure to comply with financial record-keeping and AML regulations.
• Transaction Records: Retained for 7 years after the transaction date to satisfy tax, audit, and regulatory requirements.
• KYC/AML Documents: Retained for 7 years after account closure as required by anti-money-laundering laws.
• Support Communications: Retained for 3 years to maintain a record of customer-service interactions and resolve future disputes.
• Marketing Data: Retained until you opt out of marketing communications or for 2 years of inactivity, whichever comes first.
• Usage Data & Logs: Anonymized and aggregated usage data may be retained indefinitely for analytics and Platform improvement purposes.

Upon expiration of the applicable retention period, we securely delete or anonymize your personal information in accordance with data-destruction protocols.

You have the following rights regarding your personal data held by erek40:

• Right to Access: You may request a copy of the personal information we hold about you, including details on how we use it and with whom we share it.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information. You can update most account details directly through your account settings.
• Right to Erasure: You may request deletion of your personal data, subject to legal and regulatory retention requirements. Note that deletion may result in account closure and forfeiture of any remaining balance or bonuses.
• Right to Restriction: You may request that we limit the processing of your data in certain circumstances, such as while we verify the accuracy of disputed information.
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling and direct marketing. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your account details and a description of your request. We will respond within 30 days and may require identity verification to prevent unauthorized access to your data.

erek40 uses cookies and similar tracking technologies to enhance user experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps the Platform remember your preferences and track your activity.

Types of Cookies We Use:

• Essential Cookies: Required for basic Platform functionality, including session management, authentication, and security. These cannot be disabled without preventing you from using erek40.
• Performance Cookies: Collect anonymized usage data (page views, navigation paths, error rates) to help us optimize Platform performance.
• Functional Cookies: Remember your preferences (language, timezone, display settings) to personalize your experience.
• Advertising Cookies: Track your activity across websites to deliver targeted advertisements based on your interests and behavior.

You can manage cookie preferences through your browser settings. Note that disabling cookies may limit certain Platform features. For more information on managing cookies, visit your browser's help documentation (Chrome, Firefox, Safari, Edge).

The erek40 Platform may contain links to third-party websites, services, or game providers (Evolution Gaming, Pragmatic Play, Microgaming). We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit through links on our Platform.

erek40 services are intended exclusively for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and close the associated account. If you believe a minor has accessed erek40, please contact [email protected] immediately.

Your personal information may be transferred to and processed in countries outside Indonesia where erek40's servers, service providers, or business partners are located. These countries may have data-protection laws that differ from Indonesian laws. When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs), binding corporate rules, or adequacy decisions recognized by relevant authorities to ensure your data receives an equivalent level of protection.

erek40 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email and/or by posting a prominent notice on the Platform. The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Your continued use of erek40 after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your data.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Email: [email protected]
Subject Line: Privacy Policy Inquiry
Response Time: We aim to respond to all privacy-related inquiries within 48 hours (business days) and resolve requests within 30 days.