Privacy Policy

This Privacy Policy applies to all personal data processed by pej60 in connection with the online betting and gaming services available at https://pej60.cam and all associated subdomains, mobile applications, and communication channels (collectively, "the Platform").

pej60 acts as the data controller in respect of personal data collected from players and website visitors. We process personal data in accordance with internationally recognized data protection principles, including purpose limitation, data minimization, storage limitation, and the requirement for a lawful basis for each processing activity.

By creating an account or continuing to use the pej60 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, you should discontinue use of the platform and request account closure in accordance with the Terms & Conditions.

This policy should be read alongside the pej60 Terms & Conditions, which govern the overall contractual relationship between you and pej60, and our Responsible Gaming policy, which sets out how we use data to promote player welfare.

The following terms carry the meanings set out below throughout this Privacy Policy:

pej60 collects the minimum personal data necessary to provide its services, comply with legal obligations, and maintain a safe, fair gaming environment. The categories of data we may hold about you are set out below.

3.1 Identity and Contact Data

• Full legal name as shown on your government-issued identification
• Date of birth
• Nationality and country of residence
• Email address and mobile phone number
• Residential address (as provided during KYC verification)
• National Identity Card number (KTP — Kartu Tanda Penduduk) or passport number

3.2 Financial Data

• Bank account details (account holder name, account number, bank name — BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, or other supported Indonesian banks)
• E-wallet account identifiers (GoPay, OVO, DANA, ShopeePay, LinkAja)
• Deposit and withdrawal transaction records, including amounts in IDR and timestamps
• Source of funds declarations where required for AML compliance

3.3 Account and Gaming Data

• Username, account ID, and encrypted password hash
• Betting history across all product verticals — sports, live casino, slot games, and togel (Indonesia's traditional numbers lottery)
• Session duration, login timestamps, and in-game activity logs
• Bonus claims, wagering progress, and promotional opt-in records
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.4 Technical and Device Data

• IP address and geolocation data derived from IP
• Device type, operating system, browser type and version
• Unique device identifiers (IMEI, advertising ID) where collected via mobile application
• Referring URL and on-site navigation path
• Cookie identifiers and session tokens (see Section 9)

3.5 Communications Data

• Records of all live chat, email, and support ticket communications with pej60 staff
• Email marketing preferences and unsubscribe records
• Feedback, survey responses, and complaint submissions

pej60 collects personal data through the following channels:

4.1 Directly From You

When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or opt into a promotion, you provide personal data directly to pej60. The information you submit in these interactions is collected and stored securely.

4.2 Automatically Through Platform Use

As you interact with the pej60 platform — whether through a desktop browser or mobile application — our servers automatically record technical data including your IP address, device identifiers, session activity, pages visited, and game interactions. This data is collected via server logs, cookies, web beacons, and similar tracking technologies described in Section 9.

4.3 From Third-Party Service Providers

pej60 receives personal data from trusted third-party providers who assist in delivering our services. These include:

• KYC verification providers — who confirm the authenticity of identity documents and match selfie photographs to ID records
• Payment processors and banking partners — including the payment networks supporting BCA, BRI, BNI, Mandiri, GoPay, OVO, DANA, ShopeePay, and LinkAja transactions
• Fraud detection and AML screening services — which cross-reference player data against watchlists and sanction databases
• Analytics providers — who supply aggregated, pseudonymized behavioral insights used to improve platform performance

4.4 From Publicly Available Sources

In limited circumstances — primarily in connection with AML investigations or responsible gaming assessments — pej60 may consult publicly available sources such as government sanction lists, court records, or news archives to supplement the data you have provided.

pej60 uses your personal data only for the specific purposes listed below. We do not repurpose data for activities that are incompatible with the original purpose of collection without first obtaining your explicit consent.

Each processing activity carried out by pej60 rests on one of the following lawful bases:

• Contractual necessity: Processing required to fulfill the contract between pej60 and you — including account management, transaction processing, KYC verification, and support services.
• Legal obligation: Processing required to comply with applicable law — including anti-money laundering (AML) checks, sanctions screening, and regulatory reporting to our licensing authority.
• Legitimate interests: Processing necessary for pej60's legitimate business interests, provided those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and business analytics. Where we rely on legitimate interests, we have conducted a balancing assessment confirming that the processing is proportionate and that adequate safeguards are in place.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for optional marketing communications. You may withdraw consent at any time by contacting support at [email protected] or using the unsubscribe link in any marketing email.

pej60 does not sell, rent, or trade personal data. We may share your data in the following limited circumstances only:

7.1 Service Providers (Data Processors)

We engage third-party companies to perform specific functions on our behalf under written data processing agreements that bind them to confidentiality and data protection obligations equivalent to our own. These processors include KYC verification vendors, payment processing partners (supporting BCA, BRI, BNI, Mandiri, GoPay, OVO, DANA, ShopeePay, and LinkAja), fraud detection services, cloud hosting providers, and customer support software vendors. These parties may only process your data for the specific purpose for which they have been engaged and may not use it for their own commercial purposes.

7.2 Game Studios and Software Providers

When you play games provided by licensed studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — your account identifier, bet amounts, and game session data are transmitted to the relevant studio's servers to facilitate gameplay and settle results. These studios are contractually bound to process this data solely for game-delivery purposes.

7.3 Regulatory and Law Enforcement Authorities

pej60 may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law, a valid legal order, or in connection with the investigation of fraud, money laundering, or other criminal conduct. We will disclose only the minimum data required and will notify you of such disclosure where legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of pej60's business, personal data held by pej60 may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms that will apply to your data going forward, with a reasonable opportunity to request deletion if the new terms are materially different.

pej60 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal obligation to retain it for a longer period. Our standard retention schedules are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be linked to any individual.

pej60 uses cookies and similar tracking technologies to operate the platform, personalize your experience, and analyze site performance. The table below describes the categories of cookies we use.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your pej60 account. For detailed instructions on managing cookies in popular browsers, please consult your browser's help documentation. To opt out of analytics or marketing cookies, contact us at [email protected].

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data pej60 holds about you:

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is being processed. We will respond within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent is the lawful basis), or where processing is unlawful. Note that this right is subject to our legal obligation to retain certain data for AML and regulatory purposes as described in Section 8.
• Right to Restrict Processing: You may request that we temporarily suspend processing of your data — for example, while a dispute about accuracy is resolved — without requesting full deletion.
• Right to Data Portability: Where processing is based on your consent or a contract with you, you may request a machine-readable export of the personal data you have provided to us, in a structured, commonly used format (CSV or JSON).
• Right to Object: You may object at any time to processing based on legitimate interests, including profiling for responsible gaming purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before acting on the request. Requests are processed within 30 calendar days; where the request is complex or numerous, this period may be extended by a further 30 days with written notice.

pej60 implements a layered security architecture to protect personal data against unauthorized access, disclosure, alteration, and destruction. Our key technical and organizational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser or mobile app and pej60 servers
• AES-256 encryption at rest for all sensitive personal and financial data stored in our databases
• Password hashing using bcrypt with a work factor designed to resist brute-force attacks — pej60 never stores plaintext passwords
• Role-based access controls (RBAC) ensuring that staff can only access personal data necessary for their specific role
• Multi-factor authentication (MFA) required for all pej60 administrative and support staff accessing player data systems
• Regular penetration testing and third-party security audits conducted at least annually
• Intrusion detection and real-time monitoring across all production infrastructure, with automated alerting for anomalous access patterns
• Secure development lifecycle (SDLC) practices, including code review, dependency scanning, and security regression testing before every release

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pej60 will notify affected players without undue delay and will take immediate steps to contain the breach, assess the damage, and restore security. Where required by applicable law, we will also notify the relevant supervisory authority within the mandated timeframe.

While pej60 takes every reasonable precaution, no system is completely immune from risk. You are responsible for keeping your own login credentials confidential and for using a strong, unique password for your pej60 account. If you suspect your account has been compromised, contact us immediately at [email protected].

pej60 is strictly an adults-only platform. You must be at least 21 years of age to register an account, make a deposit, or place any bet on pej60. This age restriction applies regardless of the legal gambling age in your jurisdiction.

pej60 does not knowingly collect or process personal data relating to individuals under the age of 21. During account registration, you are required to confirm your date of birth and to complete KYC identity verification using a government-issued document. Any account found to belong to a player under 21 years of age will be closed immediately and all funds will be handled in accordance with the Terms & Conditions underage-gambling policy.

If you believe that a minor has registered on the pej60 platform or that personal data of a minor has been inadvertently collected, please contact our Data Protection Officer immediately at [email protected]. We will investigate and take appropriate action, including immediate account closure and secure deletion of any data held, within 48 hours of receiving the report.

pej60 reviews this Privacy Policy at least once per calendar year and whenever there is a material change to the way we process personal data. Any updates will be published on this page with a revised "Last updated" date shown in the page header.

Where a change is material — for example, a new category of data being collected, a new purpose for processing, or a change to our data sharing arrangements — we will notify registered Players by email to the address on file at least 14 days before the change takes effect. For non-material administrative updates (such as corrections to typographical errors or clarifications that do not alter the substance of any data practice), no advance notification will be provided, though the updated policy will be published immediately.

Your continued use of the pej60 platform after any update to this policy constitutes your acknowledgment of the updated terms. If you object to any change, you have the right to request account closure and deletion of your personal data in accordance with Section 10, subject to the retention obligations in Section 8.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data pej60 holds about you, please contact our Data Protection Officer (DPO) using the details below:

If you are not satisfied with how pej60 has handled your personal data or responded to your request, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction where pej60 holds its operating license. Details of the relevant authority will be provided upon request.