Privacy Policy

This Privacy Policy is published by erek33 ("the Company", "we", "us", "our") and applies to all personal data collected and processed in connection with your use of the erek33 Platform, accessible at https://erek33.cam (the "Platform").

The Platform is operated by erek33 and is designed to serve Members based in Indonesia. This Privacy Policy applies to all individuals who visit the Platform, register a Member Account, make deposits, place bets, participate in games, contact our customer support team, or otherwise interact with any service delivered through the Platform.

By accessing the Platform or registering a Member Account, you acknowledge that you have read this Privacy Policy in full, that you understand how your personal data will be collected and used, and that you consent to those practices as described herein. If you do not agree with any element of this Privacy Policy, please discontinue your use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, date of birth, national identification number (NIK / KTP), email address, phone number, residential address, IP address, payment details, and account activity records.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, transmission, disclosure, restriction, erasure, or destruction — whether by automated or manual means.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. erek33 is the Data Controller for all Personal Data collected through the Platform.
• "Data Processor" means a third-party entity that Processes Personal Data on behalf of erek33 under a written contractual agreement.
• "Member" means any individual who has registered a personal Account on the Platform and whose registration has been accepted by erek33.
• "KYC" means the Know Your Customer identity verification process, involving the collection and review of documentary evidence confirming a Member's identity, age, and payment method ownership.
• "Cookies" means small text files placed on your device by the Platform to enable session management, analytics, and personalization functions.

erek33 collects personal data through several distinct channels. The categories of data collected, and the context in which they are collected, are described in the table below:

Data You Provide Directly: The majority of Personal Data collected by erek33 is provided voluntarily by you at the time of Account registration, when making a deposit or withdrawal request, during KYC verification, or when contacting customer support.

Data Collected Automatically: Certain Technical Data and Behavioral Data is collected automatically when you access or use the Platform. This includes data captured through server logs, cookies, and analytics tools. You have control over cookie placement through your browser settings (see Section 7 for details).

erek33 processes your Personal Data for the following purposes only:

• Account Management: Creating, maintaining, and administering your Member Account; authenticating your identity upon login; processing username and password reset requests.
• Payment Processing: Processing deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, and ShopeePay; processing withdrawal requests; reconciling account balances; detecting and preventing payment fraud.
• Identity Verification (KYC): Verifying your identity, age (minimum 21 years), and residential status in Indonesia; confirming ownership of payment methods; conducting anti-money laundering (AML) checks; complying with international gaming license requirements.
• Service Delivery: Providing access to sports betting markets (including BRI Liga 1, EPL, La Liga, bandar bola, mix parlay, and voor bola markets), togel (Indonesia's numbers lottery) draws, live casino games, and slot games; processing bets; calculating and crediting winnings.
• Customer Support: Responding to inquiries submitted via email ([email protected]) or live chat; investigating and resolving complaints; providing technical assistance.
• Responsible Gaming: Monitoring gameplay patterns for signs of problem gambling behavior; implementing self-exclusion requests; enforcing deposit limits and session time limits; providing access to responsible gaming tools.
• Fraud Prevention & Security: Detecting duplicate accounts; identifying unusual betting patterns indicative of bonus abuse or collusion; preventing unauthorized access to Member Accounts; conducting security audits.
• Analytics & Product Improvement: Analyzing aggregate, anonymized behavioral data to understand how Members use the Platform; identifying technical issues and usability pain points; testing new features and game offerings.
• Legal & Regulatory Compliance: Complying with applicable laws, regulations, and licensing obligations; responding to lawful requests from law enforcement or regulatory authorities; maintaining records required for audit and compliance purposes.
• Marketing Communications (with consent): Sending promotional emails about new games, bonuses, and seasonal offers — only where you have provided explicit opt-in consent. You may withdraw consent at any time by clicking the unsubscribe link in any marketing email or by contacting support.

erek33 processes Personal Data under the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and erek33 as set out in the Terms & Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable legal or regulatory obligations to which erek33 is subject — including KYC / AML verification, age verification, transaction record-keeping, and cooperation with law enforcement.
• Legitimate Interests: Processing is necessary for erek33's legitimate business interests — including fraud prevention, security monitoring, product improvement, and analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities — particularly marketing communications and non-essential cookies — erek33 processes Personal Data only where you have provided explicit, freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

erek33 does not sell, rent, or commercially trade your Personal Data to any third party. However, Personal Data may be shared with carefully selected third-party service providers under strict contractual confidentiality obligations in the following circumstances:

• Payment Processors: We share Financial Data with licensed payment gateway providers and banking partners in Indonesia (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) strictly for the purpose of processing your deposits and withdrawals. These providers operate under PCI-DSS compliance standards.
• KYC Verification Providers: Identity Data and Verification Documents are shared with licensed third-party KYC service providers for the purpose of verifying your identity, age, and address. These providers operate under data processing agreements that prohibit them from using your data for any purpose other than identity verification.
• Fraud Prevention Services: Technical Data, Behavioral Data, and certain Identity Data may be shared with fraud prevention and detection service providers to identify duplicate accounts, suspicious betting patterns, and potential money laundering activity.
• Cloud Hosting & Infrastructure Providers: Personal Data is stored on secure cloud infrastructure provided by reputable international providers operating data centers in compliance with international security standards.
• Customer Support Tools: Communications Data (chat transcripts, email exchanges) is processed through customer support platforms to facilitate efficient inquiry handling and quality monitoring.
• Analytics Platforms: Aggregated, anonymized Behavioral Data is shared with analytics service providers for the purpose of generating usage insights and performance metrics. No individually identifiable Personal Data is shared for analytics purposes.
• Legal Authorities: Personal Data may be disclosed to law enforcement agencies, regulatory authorities, or courts where erek33 is legally compelled to do so by a valid court order, subpoena, or statutory obligation, or where disclosure is necessary to protect the safety, rights, or property of erek33, its Members, or the public.

The erek33 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and collect analytics data. Cookies are small text files stored on your device that enable the Platform to recognize your browser and remember certain information.

Types of Cookies We Use:

• Essential Cookies: These cookies are strictly necessary for the operation of the Platform. They enable core functionality such as user authentication, session management, and security features. Essential cookies cannot be disabled through browser settings without significantly impairing Platform functionality.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymized data about how visitors use the Platform — including page views, session duration, navigation paths, and feature usage. This data helps erek33 understand usage patterns and optimize the Platform's performance and usability.
• Functional Cookies: These cookies enable enhanced functionality and personalization — such as remembering your language preference, display settings, and recently viewed games. Functional cookies improve your user experience but are not strictly necessary for Platform operation.

Managing Cookie Preferences: You can control cookie placement through your web browser settings. Most browsers allow you to refuse all cookies or to selectively accept cookies. However, disabling essential cookies will prevent you from accessing certain features of the Platform, including account login and payment processing. Instructions for managing cookies in common browsers:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data

erek33 implements robust technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption at Rest: All Personal Data stored on erek33 servers is encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between your device and erek33 servers is protected by 256-bit SSL/TLS encryption protocols. You can verify the presence of SSL encryption by checking for the padlock icon in your browser's address bar.
• Access Controls: Access to Personal Data is restricted to authorized erek33 personnel and approved third-party service providers on a strict need-to-know basis. All access is logged and monitored.
• Regular Security Audits: erek33 infrastructure and applications undergo periodic security assessments conducted by independent third-party security firms.
• Intrusion Detection & Prevention: The Platform is protected by firewalls, intrusion detection systems, and automated threat monitoring tools that identify and block suspicious activity in real time.
• Employee Training: All erek33 personnel with access to Personal Data receive mandatory training on data protection principles, confidentiality obligations, and security best practices.

erek33 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Specific retention periods are outlined below:

• Account Data: Identity Data, Contact Data, and Account credentials are retained for the duration of your active Account relationship with erek33, plus an additional 7 years following Account closure to comply with financial record-keeping obligations.
• Financial Transaction Records: Deposit and withdrawal records, bet history, and balance adjustments are retained for 7 years from the date of the transaction in accordance with international AML and tax compliance requirements.
• KYC Verification Documents: Copies of identity documents (KTP, passport, utility bills, bank statements) are retained for 7 years following Account closure to meet regulatory record-keeping requirements.
• Communications Data: Customer support chat transcripts and email exchanges are retained for 3 years to facilitate complaint resolution and quality assurance processes.
• Technical & Behavioral Data: IP addresses, session logs, and behavioral analytics data are retained in anonymized, aggregated form indefinitely for product improvement purposes. Raw, personally identifiable session data is retained for 90 days only.
• Marketing Consent Records: Records of your consent or objection to marketing communications are retained for 7 years to comply with data protection audit requirements.

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Data deletion is conducted in accordance with industry-standard data destruction protocols to ensure data cannot be recovered.

As a Member of erek33, you hold the following rights over your Personal Data:

• Right of Access: You have the right to request a copy of all Personal Data erek33 holds about you. Your request will be fulfilled within 30 days at no charge.
• Right of Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data. You may update most Contact Data directly through your Account settings.
• Right of Erasure (Right to Be Forgotten): You have the right to request deletion of your Personal Data in certain circumstances — including where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing. Note that erek33 may be legally obligated to retain certain Financial Data and KYC records for 7 years despite an erasure request.
• Right to Restrict Processing: You have the right to request that erek33 restrict the processing of your Personal Data in certain circumstances — including where you contest the accuracy of the data or where processing is unlawful but you do not wish the data to be erased.
• Right to Data Portability: You have the right to receive a copy of your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider.
• Right to Object: You have the right to object to processing of your Personal Data where erek33 relies on legitimate interests as the legal basis. You have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

How to Exercise Your Rights: To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". Include your full name, Account username, and a clear description of the right you wish to exercise. erek33 will respond to all data rights requests within 30 days of receipt. Requests are processed at no charge unless the request is manifestly unfounded, excessive, or repetitive.

The erek33 Platform is intended exclusively for adults aged 21 years and older. erek33 does not knowingly collect, process, or solicit Personal Data from any individual under the age of 21.

If erek33 becomes aware that it has inadvertently collected Personal Data from a person under 21 years of age, the Company will take immediate steps to delete that data and suspend the associated Account. Parents or guardians who believe their child has registered an Account on erek33 should contact [email protected] immediately.

erek33 operates an international online gaming platform and relies on cloud infrastructure, payment processors, and service providers that may be located outside Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Indonesia.

Where Personal Data is transferred internationally, erek33 ensures that appropriate safeguards are in place to protect your data in accordance with international data protection standards. These safeguards include:

• Use of cloud infrastructure providers that operate under recognized international security certifications (ISO 27001, SOC 2 Type II).
• Execution of Standard Contractual Clauses with third-party processors located outside Indonesia.
• Ensuring that all international data transfers are conducted only with jurisdictions or entities that provide an adequate level of data protection as determined by recognized international standards.

By using the Platform, you acknowledge and consent to the international transfer of your Personal Data under the safeguards described above.

erek33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or business operations. When material changes are made, the "Last Updated" date at the top of this page will be revised, and where practicable, registered Members will be notified via email or a notice displayed upon next login.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue your use of the Platform and may request Account closure in accordance with Section 10.

It is your responsibility to review this Privacy Policy periodically. The most current version is always accessible at https://erek33.cam/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about how erek33 processes your Personal Data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Privacy Inquiry" or "Data Rights Request"
• Response Target: All privacy-related inquiries will receive an initial response within 3 business days; data rights requests will be fulfilled within 30 days
• Language: English and Bahasa Indonesia supported

For data rights requests specifically — including access requests, rectification requests, erasure requests, or objections to processing — please use the subject line "Data Rights Request" and include your full name, Account username, and a clear description of the request.