Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal information collected by cer388 ("we", "us", "our", "Company") through our website located at https://cer388.cam and any related services, features, or applications (collectively, the "Platform"). This Policy describes our practices concerning the collection, use, disclosure, and protection of personal information of Indonesian residents who access or use our online gaming services.

cer388 is an online gaming platform offering casino games, sports betting, togel (Indonesian lottery games), sabung ayam (cockfighting live streams), and other gambling entertainment services specifically designed for Indonesian players. We operate in accordance with applicable data protection laws and regulations, and we are committed to transparency in how we handle your personal information.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform. By creating an account with cer388, making a deposit, placing a bet, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein. If you do not agree with this Policy, you must cease using our services immediately.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account, use our services, or communicate with us, we collect information that you provide directly, including:

• Personal Identification Information: Full legal name, date of birth, gender, Indonesian National Identity Card (KTP) number, residential address, phone number, and email address.
• Financial Information: Bank account details including bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), account number, account holder name, deposit and withdrawal transaction history, and payment processing information.
• Verification Documents: Copies of identity documents submitted during the KYC (Know Your Customer) process, including your Indonesian National ID (KTP), proof of address documents (utility bills, bank statements), and selfie photographs holding your ID card.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers, and any other authentication information.
• Communications: Content of messages sent through live chat, email correspondence, customer support tickets, feedback forms, and any other communications with our support team.

2.2 Information Collected Automatically

When you access and use the cer388 platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers, and hardware model.
• Connection Information: IP address, internet service provider, connection type, approximate geographic location (city and region level, not precise GPS coordinates), and time zone.
• Usage Data: Pages visited, features used, games played, bet history, win/loss records, login times, session duration, clickstream data, referral sources, and navigation patterns on the Platform.
• Performance Data: Page load times, error messages, system crashes, and other technical performance metrics used to improve Platform functionality.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions (BCA, BRI, BNI, Mandiri, and other Indonesian banks) to verify transactions and prevent fraud.
• Identity verification services to confirm the authenticity of submitted KYC documents and prevent identity theft.
• Game providers and software studios whose games you play on our Platform to track gameplay, calculate winnings, and ensure fair play.
• Publicly available databases and government registries to verify identity information and comply with legal obligations.

3. How We Use Your Information

cer388 collects and processes your personal information for specific, legitimate purposes. We use your information to:

3.1 Provide and Improve Services

• Create and manage your gaming account, including authentication and access control.
• Process deposits, withdrawals, and other financial transactions securely.
• Enable you to place bets, play games, and access all features of the cer388 platform.
• Track your gaming activity, betting history, and account balance in real-time.
• Calculate winnings, process payouts, and update your account balance accurately.
• Provide customer support and respond to your inquiries, complaints, and requests.
• Improve Platform functionality, user experience, and game offerings based on usage patterns and feedback.
• Develop new features, services, and gaming products tailored to Indonesian player preferences.

3.2 Security and Fraud Prevention

• Verify your identity through KYC procedures to prevent underage gambling, identity theft, and account fraud.
• Detect, prevent, and investigate fraudulent activities, money laundering, collusion, cheating, and other prohibited behaviors.
• Monitor for suspicious betting patterns, bonus abuse, and violations of our Terms & Conditions.
• Maintain the integrity and security of our Platform against cyber attacks, unauthorized access, and technical vulnerabilities.
• Comply with anti-money laundering (AML) regulations and report suspicious activities to relevant authorities when required by law.

3.3 Legal Compliance and Responsible Gaming

• Comply with legal obligations, regulatory requirements, and government requests applicable to online gaming operators.
• Enforce our Terms & Conditions, house rules, and Platform policies.
• Support responsible gaming initiatives by monitoring play patterns and identifying players who may need help with gambling problems.
• Implement and enforce self-exclusion requests, deposit limits, and other responsible gaming tools.
• Maintain records as required by law for tax, accounting, and audit purposes.

3.4 Marketing and Communications

• Send you promotional offers, bonuses, tournament invitations, and other marketing communications (only with your consent, which you may withdraw at any time).
• Notify you about important account updates, policy changes, new features, and service announcements.
• Conduct market research, surveys, and collect feedback to better understand player preferences and improve our services.
• Personalize your gaming experience by showing relevant game recommendations, tailored promotions, and customized content based on your preferences and playing history.

4. Information Sharing and Disclosure

cer388 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with third parties in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• Payment processors and financial institutions (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) to process deposits and withdrawals.
• Identity verification services to conduct KYC checks and authenticate documents.
• Game studios and software providers whose games are featured on our Platform to track gameplay and calculate results.
• Cloud hosting providers who store data on secure servers.
• Customer support platforms to manage inquiries and communications.
• Analytics providers to understand Platform usage and improve user experience.

All service providers are contractually obligated to protect your information and use it only for the specific purposes we authorize.

4.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, regulators, law enforcement agencies, or courts when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests.
• Investigate or prevent illegal activities, fraud, money laundering, or violations of our Terms & Conditions.
• Protect the rights, property, or safety of cer388, our users, or the public.
• Enforce our legal rights or defend against legal claims.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate restructuring, your personal information may be transferred to the acquiring or successor entity. We will notify you via email or prominent notice on our Platform before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you provide explicit consent for such sharing. You may withdraw your consent at any time by contacting our support team.

5. Data Security Measures

cer388 takes data security extremely seriously and implements comprehensive technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected using bank-grade 256-bit SSL (Secure Socket Layer) encryption, ensuring that your personal and financial information cannot be intercepted during transmission.
• Secure Storage: All personal information stored on our servers is encrypted using industry-standard encryption algorithms. Passwords are hashed using one-way cryptographic functions and cannot be reversed.
• Firewalls and Intrusion Detection: Our systems are protected by multiple layers of firewalls and intrusion detection systems that monitor for and block unauthorized access attempts.
• Regular Security Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and remediate potential security weaknesses.
• Secure Payment Processing: Financial transactions are processed through PCI DSS (Payment Card Industry Data Security Standard) compliant payment gateways that never expose your full bank account details to our systems.

5.2 Administrative Security Measures

• Access Controls: Access to personal information is restricted to authorized employees and service providers who require access to perform their job functions. All access is logged and monitored.
• Employee Training: All employees with access to personal information undergo mandatory security and privacy training.
• Confidentiality Agreements: Employees and service providers are bound by strict confidentiality agreements prohibiting unauthorized use or disclosure of personal information.
• Incident Response: We maintain an incident response plan to quickly identify, contain, and remediate security breaches, and to notify affected users as required by law.

5.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone.
• Enable two-factor authentication if available.
• Log out of your account when using shared or public devices.
• Be cautious of phishing emails or messages asking for your login credentials.
• Report any suspicious account activity to our support team immediately.

6. Data Retention and Deletion

cer388 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal obligations.

6.1 Retention Periods

• Active Accounts: While your account remains active, we retain all information necessary to provide services, including personal details, gaming history, and financial records.
• Closed Accounts: After you close your account, we retain certain information for legal, regulatory, and fraud prevention purposes. This includes identity verification documents, transaction history, and records of any disputes or violations of our Terms.
• Legal Requirements: We are required by law to retain certain financial records and transaction data for a minimum of seven years for tax, audit, and anti-money laundering compliance purposes.
• Responsible Gaming Records: Self-exclusion records are retained indefinitely to honor your exclusion request and prevent account reopening during the exclusion period.

6.2 Data Deletion

You may request deletion of your personal information by contacting our support team. However, please note that we may not be able to delete all information if:

• We are required by law to retain the information for legal, tax, or regulatory purposes.
• The information is necessary to resolve ongoing disputes or enforce our Terms & Conditions.
• Deletion would compromise the integrity of our security systems or fraud prevention measures.
• The information has been de-identified or aggregated in a way that does not identify you personally.

7. Your Privacy Rights

As a cer388 user and resident of Indonesia, you have certain rights regarding your personal information. We are committed to honoring these rights and providing you with control over your data.

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can view most of your information directly through your account dashboard. For a comprehensive data export, contact our support team.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings, or contact support for assistance with changes that require verification.

7.3 Right to Erasure

You may request deletion of your personal information, subject to legal retention requirements and the exceptions described in Section 6.2. We will respond to your request within a reasonable timeframe and inform you of any information we cannot delete and the reasons why.

7.4 Right to Object

You have the right to object to certain processing of your personal information, including direct marketing communications. You can opt out of marketing emails by clicking the unsubscribe link in any promotional message or updating your communication preferences in your account settings.

7.5 Right to Data Portability

Upon request, we will provide your personal information in a structured, commonly used, and machine-readable format that allows you to transfer the data to another service provider.

7.6 Exercising Your Rights

To exercise any of these rights, please contact our support team at [email protected] (displayed as plain text). We will verify your identity before processing your request and respond within 30 days. There is no fee for exercising your rights unless your request is manifestly unfounded or excessive.

8. Cookies and Tracking Technologies

cer388 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our Platform, understand usage patterns, and deliver personalized content.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including session management, authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and previously entered information to provide a more personalized experience.
• Analytics Cookies: Help us understand how visitors interact with the Platform by collecting anonymous usage statistics, page views, and navigation patterns.
• Marketing Cookies: Track your visits to our Platform and other websites to deliver relevant advertisements and measure campaign effectiveness (only with your consent).

8.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Note that disabling cookies may affect Platform functionality and prevent you from accessing certain features. You can manage cookie preferences through your browser settings or by using our cookie management tool available on the Platform.

9. International Data Transfers

cer388 primarily serves Indonesian residents, and your information is stored on servers located within secure data centers. However, some of our service providers and technology partners may be located outside Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by data protection authorities.
• Ensuring the recipient country has adequate data protection laws.
• Obtaining your explicit consent for the transfer where required.

All international data transfers comply with applicable Indonesian data protection regulations.

10. Children's Privacy Protection

cer388 is strictly an adult gaming platform intended for users 21 years of age or older. We do not knowingly collect personal information from individuals under the age of 21. Our registration process includes age verification, and we employ robust KYC procedures to confirm all users meet the minimum age requirement.

If we discover that we have inadvertently collected information from someone under 21 years of age, we will immediately delete that information and permanently close the associated account. If you believe we have collected information from a minor, please contact us immediately at [email protected].

Parents and guardians are encouraged to monitor their children's internet usage and educate them about the risks of online gambling. We support parental control software and filters that block access to gambling websites.

11. Policy Updates and Modifications

cer388 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes to this Policy, we will notify you by:

• Posting the updated Policy on our Platform with a new "Last Updated" date.
• Sending an email notification to the address associated with your account.
• Displaying a prominent notice on the Platform homepage or within your account dashboard.

Your continued use of cer388 services after such notification constitutes acceptance of the updated Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. If you do not agree with any changes, you must cease using our services and may request account closure.

12. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, please contact us through the following channels:

• Email: [email protected] (displayed as plain text, not a clickable link)
• Live Chat: Available 24/7 via the chat widget on our website
• WhatsApp: Available 24/7 (number provided upon login)
• Telegram: Available 24/7 (channel link provided upon login)

We are committed to resolving privacy concerns promptly and transparently. Our customer support team is trained to handle privacy inquiries and will respond to your questions within 24 hours. For formal data protection requests (access, rectification, deletion), we will acknowledge receipt within 5 business days and provide a substantive response within 30 days.