Your privacy is a core commitment at pg168, not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used, who it may be shared with, and the rights you hold as a player based in Indonesia.
pg168 operates an internationally licensed online gaming and sports betting platform accessible at https://pg168.cam, serving players primarily based in Indonesia. We are fully committed to protecting the privacy and personal data of every individual who interacts with our Platform — whether as a registered Account holder, a visitor browsing our site, or a prospective player completing our registration process.
This Privacy Policy has been drafted to be clear, direct, and comprehensive. We have deliberately avoided dense legal language wherever possible so that every pg168 player can understand precisely what happens to their data. If you are unsure about any aspect of this document, you are encouraged to contact our Customer Support team before providing personal information.
By accessing the pg168 Platform, registering an Account, or using any of our services, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming guidelines, which together form the full framework governing your relationship with pg168.
Plain-English Summary: This policy tells you what data pg168 collects about you, why we need it, who we may share it with, how long we keep it, and what rights you have to access, correct, or delete it. We do not sell your personal data to third parties.
2.1 Identity. For the purposes of this Privacy Policy, the data controller responsible for your personal data is pg168, the operator of the online gaming platform at https://pg168.cam. pg168 operates under an international gaming license and is the entity that determines the purposes and means by which your personal data is processed.
2.2 Contact Details. All privacy-related inquiries, data subject access requests, and complaints should be addressed to our dedicated Privacy team. You can reach us via:
2.3 Scope. This Privacy Policy applies to all personal data collected through the pg168 website at https://pg168.cam, the pg168 mobile web interface, and any communications you initiate with pg168 Customer Support (including live chat, email, and any future support channels). It does not apply to third-party websites or services that may be linked from within the Platform.
3.1 Overview. pg168 collects personal data that falls into four broad categories: identity data, financial data, technical data, and behavioral/gaming data. The table below provides a detailed breakdown of the specific data types within each category.
| Category | Specific Data Types | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, Indonesian National Identity Card (KTP) number or passport number, photograph (from KYC document), selfie verification image | Registration and KYC verification |
| Contact Data | Email address, Indonesian mobile phone number, residential address (province, city, postal code) | Registration and Account updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, currency amounts in IDR | Deposit, withdrawal, and KYC verification |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session timestamps, login history, geolocation (country/region level only) | Every Platform access event |
| Gaming / Behavioral Data | Bet history, game session duration, win/loss records, bonus activations, game preferences, responsible gaming tool settings (deposit limits, self-exclusion status) | During active gaming sessions |
| Communications Data | Chat transcripts, email correspondence, support ticket content, any documents voluntarily submitted to Customer Support | Any support interaction |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred contact channel, language preference, notification settings | Registration and Account Settings |
3.2 Sensitive Data. pg168 does not intentionally collect special categories of sensitive personal data — including health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data used for identification — beyond what is strictly necessary for age and identity verification through the KYC process. KYC document images are processed solely for identity verification purposes and are not used for any other profiling or analysis.
3.3 Accuracy. It is your responsibility to ensure that all personal data you provide to pg168 is accurate, current, and complete. You may update your contact information at any time via the Account Settings panel. Changes to identity data (name, date of birth) require re-verification and must be submitted to Customer Support with supporting documentation.
4.1 Directly From You. The majority of personal data pg168 holds about you is provided directly by you during the following interactions: completing the Account registration form; submitting KYC verification documents; making a deposit or requesting a withdrawal; contacting Customer Support via live chat or email; updating your Account Settings or responsible gaming preferences; and responding to surveys or promotional communications.
4.2 Automatically. When you access the pg168 Platform, our systems automatically collect technical data about your device and session. This includes your IP address, browser fingerprint, device identifiers, and real-time session activity logs. This data is collected using server logs, session cookies, and first-party analytics tools. See Section 9 (Cookies & Tracking) for full details.
4.3 From Third Parties. pg168 may receive personal data about you from the following third-party sources:
5.1 Overview. pg168 only processes your personal data where a valid legal basis exists. The table below sets out our primary processing purposes, the data categories involved, and the corresponding legal basis for each.
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Contractual necessity |
| Identity and age verification (KYC) | Identity, Financial | Legal obligation & contractual necessity |
| Processing deposits and withdrawals | Financial, Identity | Contractual necessity |
| Game delivery and bet settlement | Gaming/Behavioral, Technical | Contractual necessity |
| Fraud detection and prevention | Technical, Financial, Identity | Legitimate interest |
| Responsible gaming enforcement | Gaming/Behavioral, Identity | Legal obligation & legitimate interest |
| Anti-money laundering (AML) compliance | Financial, Identity | Legal obligation |
| Customer support and dispute resolution | Communications, Identity, Financial | Contractual necessity & legitimate interest |
| Platform security and abuse prevention | Technical, Identity | Legitimate interest |
| Marketing and promotional communications | Contact, Marketing Preferences | Consent (opt-in only) |
| Analytics and Platform improvement | Technical, Gaming/Behavioral | Legitimate interest |
5.2 Marketing Communications. pg168 will only send you promotional emails, SMS notifications, or in-Platform push notifications where you have explicitly opted in to receive such communications during registration or via your Account Settings. You may withdraw this consent at any time by updating your notification preferences in the Account Settings panel or by contacting Customer Support. Withdrawal of consent for marketing does not affect the lawfulness of processing carried out before the withdrawal.
No Data Selling: pg168 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your data is used solely to operate, secure, and improve the pg168 Platform and your experience on it.
6.1 Service Providers. pg168 engages a limited number of carefully vetted third-party service providers who process personal data on our behalf as data processors. These providers are contractually bound to process data only on pg168's documented instructions and to implement appropriate security standards. Categories of service providers include:
6.2 Legal and Regulatory Disclosure. pg168 may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, a valid court order, or a lawful request from a competent authority. pg168 will, where legally permitted, notify the affected Account holder of such a disclosure request before complying.
6.3 Corporate Transactions. In the event that pg168 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via the email address associated with your Account and will be provided the opportunity to request Account closure and data deletion before the transfer takes effect.
6.4 No Unauthorized Sharing. Beyond the categories described in this Section, pg168 does not share your personal data with any third party without your explicit prior consent. This includes sharing with advertising networks, social media platforms, and data analytics brokers.
7.1 Cross-Border Processing. As an internationally licensed online gaming operator, pg168's infrastructure and some of its third-party service providers operate outside of Indonesia. This means that personal data you provide to pg168 may be processed in jurisdictions other than Indonesia, including but not limited to the jurisdiction in which pg168 holds its gaming license.
7.2 Safeguards. Where personal data is transferred outside Indonesia, pg168 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under internationally recognized data protection frameworks. These safeguards include: contractual data processing agreements incorporating standard data protection clauses; transfers only to jurisdictions with adequate data protection laws or infrastructure; and technical encryption measures applied to all data in transit and at rest.
7.3 Game Studio Data. Game content provided by third-party studios (including Pragmatic Play, Evolution Gaming, and Pocket Games Soft) may involve game session data being processed on servers operated by those studios in their respective home jurisdictions. pg168 has data processing agreements in place with all game studio partners covering the handling of pg168 player data in connection with game delivery and dispute resolution.
8.1 Retention Periods. pg168 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as general guidelines:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of Account + 5 years post-closure | Contractual records & AML compliance |
| KYC identity documents | Duration of Account + 5 years post-closure | Regulatory obligation |
| Financial transaction records | Duration of Account + 7 years post-closure | AML compliance & financial audit requirements |
| Gaming and bet history | Duration of Account + 2 years post-closure | Dispute resolution & responsible gaming monitoring |
| Customer support communications | 3 years from last interaction | Complaint resolution & quality assurance |
| Technical/session logs | 13 months from collection | Security monitoring & fraud detection |
| Marketing preference records | Until consent withdrawn + 1 year | Evidence of consent basis |
8.2 Deletion After Retention. Upon expiry of the applicable retention period, pg168 will securely delete or anonymize your personal data in accordance with industry-standard data destruction protocols. Anonymized data (where all identifiers have been irreversibly removed) may be retained indefinitely for aggregate analytics purposes and does not constitute personal data subject to this Privacy Policy.
8.3 Self-Exclusion Data. Where a player activates a self-exclusion period through pg168's responsible gaming tools, the self-exclusion record is retained for the full duration of the exclusion period plus an additional 12 months after its expiry. This is to prevent inadvertent Account reactivation during the exclusion window and to support re-registration eligibility checks.
9.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. pg168 uses first-party cookies exclusively — we do not place third-party advertising or cross-site tracking cookies on the pg168 Platform. The cookies we use fall into the following categories:
9.2 Managing Cookies. You can control cookie settings through your browser's built-in privacy controls. Please note that disabling strictly necessary cookies will prevent you from logging into your Account and using real-money gaming features. Browser-level cookie deletion does not delete any personal data stored in pg168's databases — for data deletion requests, please use the process described in Section 10.
9.3 No Third-Party Ad Tracking. pg168 does not embed tracking pixels, retargeting scripts, or advertising network cookies from any third-party advertising platform on the pg168 website. Your browsing behavior on pg168 is not shared with external advertising networks.
If you clear your browser cookies, your saved login session will be terminated and you will need to log back into your pg168 Account. Your Account data, balance, and settings are stored server-side and are not affected by clearing cookies.
10.1 Overview. As a pg168 player, you hold the following rights with respect to your personal data. These rights may be exercised at any time by submitting a written request to our Privacy team at [email protected] with the subject line "Privacy Request." We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.
10.2 Identity Verification for Requests. To protect your privacy and prevent unauthorized data access, pg168 requires identity verification before processing any data subject access request. You will be asked to confirm your Account username and at least one of: your registered email address, your registered mobile number, or a recently completed KYC reference. Requests from unverified individuals cannot be processed.
10.3 Limitations. Some rights are subject to limitations where pg168 has overriding legitimate interests or legal obligations. For example, the right to erasure cannot be applied to financial transaction records that must be retained for AML compliance purposes. Where a limitation applies, pg168 will clearly explain the reason in our response to your request.
11.1 Age Restriction. The pg168 Platform is strictly for individuals aged 21 years and older. pg168 does not knowingly collect personal data from individuals under the age of 21. The mandatory KYC verification process — which requires government-issued identity documentation confirming date of birth — is pg168's primary safeguard against underage access.
11.2 Discovered Minor Accounts. If pg168 discovers or is notified that an Account was registered by or on behalf of an individual under the age of 21, the following actions will be taken immediately: the Account will be suspended pending investigation; all personal data associated with the Account will be flagged for priority deletion; any real-money balance will be returned to the originating payment method; and the matter may be referred to the relevant authorities where legally required.
11.3 Parental Guidance. If you are a parent or guardian and have reason to believe that your child has registered an Account on pg168, please contact our Customer Support team immediately via live chat or email. We will investigate and close the Account promptly, and all associated personal data will be deleted in accordance with our policy on minor accounts. For general guidance on preventing underage access to online gaming, please visit our Responsible Gaming page.
12.1 Technical Measures. pg168 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our technical security measures include:
12.2 Organizational Measures. Access to personal data within pg168 is restricted on a strict need-to-know basis. All staff and contractors who handle personal data are subject to confidentiality obligations and receive regular data protection training. Administrative access to production databases is governed by role-based access controls and is logged and audited.
12.3 Data Breach Response. In the event of a personal data breach that poses a risk to affected players, pg168 will notify impacted Account holders via their registered email address within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps pg168 has taken to mitigate the impact. We will also notify the relevant supervisory authority as required by applicable regulations.
No security system is entirely impenetrable. While pg168 applies industry-best-practice protections, we cannot guarantee absolute security of data transmitted over the internet. You play an important role in protecting your own Account by using a strong, unique password and enabling 2FA.
13.1 Game Studios. The games available on pg168 are supplied by licensed third-party game studios including Pragmatic Play, Evolution Gaming, Pocket Games Soft, Spribe, NetEnt, and Microgaming. When you play a game delivered by a third-party studio, limited gaming session data (such as bet amounts, outcomes, and session timestamps) is processed by that studio's systems to facilitate game delivery and bet settlement. Each studio operates under its own privacy framework and gaming license conditions, with which they are independently obligated to comply.
13.2 Payment Providers. Deposit and withdrawal transactions involve your Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, or BSI) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, or LinkAja) processing transaction data. The privacy practices of these institutions are governed by their own privacy policies and by Indonesian banking regulations. pg168 does not control their data handling and encourages you to review their respective privacy notices.
13.3 No Responsibility for Third-Party Privacy. This Privacy Policy applies exclusively to personal data processed by pg168 in connection with the pg168 Platform. pg168 is not responsible for the privacy practices of any third-party service providers, game studios, or payment institutions. Links to third-party platforms within the pg168 interface lead to services governed by their own terms and privacy policies, and pg168 expressly disclaims any liability for how those third parties handle your data.
14.1 Right to Update. pg168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality, or our data processing practices. The updated Policy will be published at https://pg168.cam/privacy-policy with a revised "Last Reviewed" date at the top of the document.
14.2 Notification of Material Changes. Where a proposed amendment materially affects your rights or the way in which pg168 uses your personal data, we will provide advance notice of at least 14 calendar days before the new Policy takes effect. Such notice will be delivered via email to your registered email address and/or via a prominent notification within the Platform when you next log in.
14.3 Continued Use. Your continued use of the pg168 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any material change, you have the right to close your Account and request deletion of your personal data before the change takes effect by contacting Customer Support.
We recommend bookmarking this page and reviewing it periodically, particularly before making any significant Account changes such as updating your payment methods or modifying your responsible gaming settings.
15.1 Privacy Inquiries. For all privacy-related matters, data subject access requests, consent withdrawal requests, or general questions about this Privacy Policy, please contact the pg168 Privacy team using the details below. All privacy correspondence is handled confidentially and is routed directly to personnel trained in data protection obligations.
15.2 Complaints. If you are dissatisfied with pg168's handling of your personal data or our response to a privacy request, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction governing your rights. pg168 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.
15.3 Governing Version. This Privacy Policy is published in English. In the event of any inconsistency between an English version and any translated or summarized version of this Policy, the English version shall prevail.
Six core commitments that define how pg168 handles your personal information — built on transparency, security, and respect.
Every byte of data you transmit to pg168 — from login credentials to deposit amounts — is protected by industry-standard AES-256 encryption and TLS protocols, keeping your information private in transit and at rest.
Our mandatory Know Your Customer process confirms that every Account holder is a real person aged 21 or older. KYC documents are processed securely, retained only as long as required by regulation, and never shared with advertisers.
pg168 does not sell, rent, or trade your personal data to third-party advertisers or data brokers — ever. Your information exists on our Platform to serve you, not to generate advertising revenue for external parties.
Protect your Account with an optional second verification layer. Enabling 2FA via your Account Settings ensures that even if your password is compromised, your Account and funds remain secure.
Access, correct, export, or delete your personal data at any time. pg168 honors all data subject rights — access, rectification, erasure, portability, restriction, and objection — and responds to formal requests within 30 days.
We keep your data only as long as legally required or operationally necessary. Clear retention periods are published in Section 8 of this Policy so you always know exactly how long pg168 holds each category of your information.
You've reviewed how pg168 protects your data. Play with confidence knowing your information is secure, your rights are respected, and your privacy is never compromised.