pg386 is committed to protecting your personal data and your right to privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights available to you as a pg386 player based in Indonesia.
Summary: pg386 collects personal data only to the extent necessary to operate our platform, process your transactions, comply with legal obligations, and keep your account secure. We do not sell your personal data to third parties. You have the right to access, correct, restrict, or delete the data we hold about you. For any privacy concern, contact us at [email protected].
In this Privacy Policy, the following terms carry the meanings set out below:
pg386 collects the following categories of Personal Data from Players:
This data is collected during the registration process and during KYC verification. It enables us to confirm your identity, verify your age (21+ requirement), and communicate with you about your account.
Financial data is used exclusively for payment processing, fraud prevention, and regulatory compliance. pg386 does not store full bank card numbers or banking passwords. All payment data is processed through PCI-DSS-compliant channels.
Technical data is collected automatically when you access the pg386 platform. It supports our security monitoring, fraud detection, and platform performance optimisation functions.
Behavioural data allows pg386 to personalise your experience, identify responsible gaming indicators, and improve product design. This data is stored in aggregate-anonymised form where possible.
We retain records of communications you initiate with our customer support team for quality assurance, dispute resolution, and regulatory compliance purposes.
pg386 collects Personal Data through the following channels:
pg386 processes your Personal Data only where we have a lawful basis to do so. The table below summarises the primary purposes of processing and the corresponding legal basis:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Performance of a contract |
| Processing deposits and withdrawals | Financial, Identity | Performance of a contract |
| KYC identity and age verification | Identity, Financial | Legal obligation; legitimate interest |
| Fraud detection and prevention | Technical, Behavioural, Financial | Legitimate interest |
| Responsible gaming monitoring | Behavioural, Financial | Legal obligation; legitimate interest |
| Customer support and dispute resolution | Communications, Identity | Performance of a contract; legitimate interest |
| Personalised promotions and bonuses | Behavioural, Contact | Consent (you may withdraw at any time) |
| Platform performance and analytics | Technical, Behavioural | Legitimate interest |
| Regulatory compliance and audit | All categories | Legal obligation |
Where processing is based on your consent (for example, receiving personalised promotional emails), you may withdraw that consent at any time by updating your communication preferences in Account Settings or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5.1 General Principle. pg386 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share data only to the extent strictly necessary to deliver our services, meet legal obligations, or protect the security of the platform.
5.2 Categories of Recipients. Your Personal Data may be shared with the following categories of third parties, all of whom are contractually bound to process data only as instructed by pg386 and to maintain appropriate security standards:
5.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of pg386's business, Personal Data held by pg386 may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data under new ownership.
6.1 Cross-Border Processing. As an internationally operated platform serving players in Indonesia, pg386 may transfer your Personal Data to countries outside Indonesia for processing purposes — for example, to cloud servers or KYC partners located in other jurisdictions.
6.2 Transfer Safeguards. Where Personal Data is transferred internationally, pg386 ensures that adequate protections are in place, which may include:
6.3 Indonesian Players. For players resident in Indonesia, pg386 processes your data in compliance with the principles of Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022 — PDP Law) to the extent applicable to our platform operations, including the requirement for a lawful basis, data minimisation, and respect for data subject rights.
7.1 Retention Periods. pg386 retains your Personal Data for as long as your Account remains active and for a defined period thereafter, depending on the data category:
| Data Category | Retention Period |
|---|---|
| Account registration and KYC identity data | Duration of account + 5 years after closure |
| Financial transaction records | Duration of account + 7 years after closure |
| Bet and game session history | Duration of account + 3 years after closure |
| Customer support communications | 3 years from the date of last interaction |
| Technical and access logs | 12 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn + 3 years |
7.2 Grounds for Extended Retention. Where pg386 is involved in an active legal dispute, regulatory investigation, or AML inquiry, relevant data may be retained beyond the standard periods listed above until the matter is fully resolved.
7.3 Deletion. Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and platform improvement purposes.
8.1 What Are Cookies? Cookies are small text files placed on your device when you visit the pg386 platform. They allow the platform to remember your session, preferences, and usage patterns across visits.
8.2 Types of Cookies We Use.
8.3 Third-Party Cookies. Some cookies are set by third-party service providers acting as our Processors (e.g., analytics platforms, live chat providers). These third parties are contractually prohibited from using cookie data for their own independent marketing purposes.
8.4 Managing Cookies. You can control and delete cookies through your browser settings at any time. Please note that disabling certain cookie categories may limit the functionality of the pg386 platform — for example, you may need to log in on every visit if session cookies are blocked.
pg386 applies a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure:
While pg386 takes all reasonable steps to protect your data, no system is entirely immune to risk. You are responsible for maintaining the security of your own Account credentials. If you suspect your Account has been compromised, contact [email protected] immediately.
As a Player on the pg386 platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, email [email protected] with the subject line "Privacy Rights Request". pg386 will respond within 30 calendar days of receiving a verified request.
pg386 respects your right to control how your personal data is used. Here is a clear summary of every right available to you as a Player.
Request a copy of all Personal Data pg386 holds about you, together with information about how it is processed and with whom it is shared.
Ask pg386 to correct any inaccurate or incomplete Personal Data held in your Account. Basic profile details can be updated directly from Account Settings.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Ask pg386 to restrict processing of your data — for example, while the accuracy of data you have contested is being verified.
Receive your Personal Data in a structured, commonly used, machine-readable format and transfer it to another service provider where technically feasible.
Object to processing carried out on the basis of pg386's legitimate interests, including profiling for marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
Withdraw any consent you have given for processing (e.g., promotional emails) at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
Lodge a complaint with the relevant data protection supervisory authority in your jurisdiction if you believe pg386 has processed your data unlawfully.
The pg386 platform is strictly intended for adults aged 21 years and over. pg386 does not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not register an Account or use any pg386 service.
If pg386 discovers or is notified that Personal Data has been collected from a person under the age of 21, we will promptly close the associated Account, delete all Personal Data linked to that Account, and retain only the minimum records required for legal compliance purposes. Parents or guardians who believe a minor has registered with pg386 should contact [email protected] immediately.
12.1 External Links. The pg386 platform does not contain links to external third-party websites. All navigation and content remain within the pg386 domain.
12.2 Game Studios. Games on the pg386 Casino and Slots products are delivered by third-party studios including Pragmatic Play, PG Soft, Evolution Gaming, NetEnt, Microgaming, and Spribe. While these studios receive the minimum session data required to deliver their games (such as anonymised player session tokens), they operate under their own privacy frameworks and are contractually bound not to use pg386 player data for their own marketing or profiling purposes.
12.3 Payment Partners. When you initiate a deposit or withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant payment provider will process your transaction data under their own privacy policy and terms of service. pg386 recommends reviewing those policies separately.
13.1 Right to Update. pg386 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, the "Last updated" date at the top of this page will be revised and, where reasonably practicable, registered Players will be notified by email.
13.2 Continued Use. Your continued use of the pg386 platform after a revised Privacy Policy has been published constitutes your acknowledgement of the changes. If you disagree with any updated provisions, you may request Account closure by contacting [email protected] in accordance with Section 3.5 of our Terms & Conditions.
13.3 Policy Archive. Prior versions of this Privacy Policy are available upon written request by emailing [email protected] with the subject line "Privacy Policy Archive Request".
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how pg386 handles your Personal Data, please contact our Privacy team using the details below:
If you are not satisfied with pg386's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. For players based in Indonesia, the relevant supervisory authority is the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital — Kemkomdigi), which oversees enforcement of Indonesia's Personal Data Protection Law (UU PDP).
Privacy at pg386 is built on concrete technical and operational safeguards — not just policy commitments.
All sensitive Personal Data stored on pg386 servers — including KYC documents, financial records, and account credentials — is encrypted using AES-256, the same standard used by international financial institutions.
Every connection between your browser or mobile device and the pg386 platform is protected by TLS 1.3 transport encryption. Look for the padlock icon in your browser address bar as confirmation.
pg386 does not sell, rent, or trade your Personal Data to advertisers, data brokers, or any third party for marketing purposes. Data sharing is limited strictly to service delivery, payment processing, and legal compliance.
pg386 applies a data-minimisation principle — we collect only the Personal Data genuinely required to operate our platform, comply with Indonesian financial regulations, and keep your account secure. No surplus data is collected.
In the unlikely event of a data breach that poses a risk to your rights or freedoms, pg386 will notify affected Players without undue delay and, where required by law, report the incident to the relevant supervisory authority within the legally mandated timeframe.
pg386 gives you meaningful control over non-essential cookies. Marketing and analytics cookies require your explicit consent and can be switched off at any time via the Cookie Settings panel without affecting your ability to play or transact.
Now that you understand how pg386 protects your privacy, explore Indonesia's most trusted online sportsbook and casino. Bet on BRI Liga 1, EPL, and Champions League — or spin the reels on top slot gacor titles. Fast IDR transactions. 21+ only.
21+ Gambling involves financial risk. Play responsibly. Visit our Responsible Gaming page for support tools and guidance.