Privacy Policy — pg123

1 Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "pg123" / "we" / "us" / "our" — the pg123 online gaming platform operated at pg123.one, including all services, products, and support functions delivered through that domain.
• "Personal Data" — any information relating to an identified or identifiable natural person (the player), including name, national identity number, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion.
• "Player" / "you" / "your" — any individual who registers an account on, accesses, or uses any part of the pg123 platform.
• "KYC" — Know Your Customer; the identity verification process requiring submission of a valid Indonesian National Identity Card (KTP) or equivalent government-issued document before withdrawal.
• "Third-Party Service Provider" — any external company engaged by pg123 to provide services necessary for platform operation, including payment processors, game studios, identity verification providers, and analytics platforms.
• "Cookies" — small data files placed on your device by the pg123 platform to support session management, preferences, and analytics functionality.

2 Data We Collect

pg123 collects personal data that is necessary to operate a secure, compliant, and functional gaming platform for Indonesian players. The categories of data we collect are described below.

pg123 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity document verification under applicable KYC regulations.

3 How We Collect Data

pg123 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and behavioural data collected automatically as you interact with the pg123 platform, including session logs, device fingerprinting, and cookie-based tracking.
• Third-party providers: Identity verification data returned by KYC service providers; fraud-risk signals from payment processors; geolocation data from IP resolution services.
• Public sources: In limited circumstances, pg123 may cross-reference publicly available information to confirm identity or investigate fraud, in accordance with Applicable Law.

4 Purpose of Processing

pg123 processes personal data for the following specific, legitimate purposes:

1. Account Management: Creating, maintaining, and securing player accounts, including enforcing the 21+ age requirement and managing account settings.
2. Service Delivery: Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; delivering game access; administering bonuses and promotions.
3. Regulatory Compliance: Meeting anti-money-laundering (AML) obligations, KYC requirements, and any reporting obligations imposed by Applicable Law.
4. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, unauthorised access, and other prohibited conduct as defined in the pg123 Terms & Conditions.
5. Responsible Gaming: Monitoring gaming behaviour for indicators of problematic play; enforcing self-exclusion orders; applying deposit limits and cooling-off periods at the player's request or on pg123's own initiative.
6. Customer Support: Responding to player enquiries, resolving disputes, and providing technical assistance through the 24/7 live chat and email support channels.
7. Platform Improvement: Analysing aggregated behavioural data to improve the pg123 user interface, game catalogue, and promotional offer design.
8. Direct Marketing: Sending promotional communications to players who have opted in to receive them, including bonus offers aligned with the Indonesian calendar (Idul Fitri, Ramadhan, Independence Day). Players may opt out at any time.

5 Legal Basis for Processing

pg123 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the service agreement with the player — account registration, payment processing, game access, and customer support.
• Legal obligation: Processing required to comply with AML regulations, KYC mandates, tax reporting requirements, and any lawful order from a regulatory or law enforcement authority.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where those interests are not overridden by the player's data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where the player has given explicit, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing

pg123 does not sell, rent, or trade personal data to third parties for their own commercial purposes. Data is shared only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Financial data is shared with payment service providers — including banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely to process deposits and withdrawals initiated by you.
• Identity Verification Providers: Identity and document data is shared with accredited KYC service providers to fulfil age verification and AML obligations. These providers are contractually bound to use the data only for the verification purpose and to apply security standards equivalent to those used by pg123.
• Game Studios: Technical session data (player ID, wager amounts, game outcomes) is shared with licensed game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to the extent required to deliver and certify game results.
• Analytics and Fraud Prevention Services: Aggregated or pseudonymised technical and behavioural data may be shared with analytics and security platforms to support platform improvement and fraud detection. No directly identifiable personal data is shared in this context beyond what is technically unavoidable (e.g., IP address for geo-fraud checks).
• Regulatory and Law Enforcement Authorities: pg123 will disclose personal data to competent authorities where required to do so by a lawful order, warrant, or legal obligation. pg123 will notify the affected player of such a disclosure where it is legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of substantially all of pg123's assets, player data may be transferred to the acquiring entity. Players will be notified in advance of any such transfer and will retain the right to request deletion of their data prior to the transfer taking effect.

7 Data Retention

pg123 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by Applicable Law. The table below sets out the standard retention periods applied by pg123:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

8 Security

pg123 implements a layered security architecture designed to protect personal data against unauthorised access, accidental loss, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption across all data transmitted between your device and the pg123 platform — the same standard applied by Indonesia's major banks including BCA and BRI.
• Encrypted data storage for sensitive fields including passwords (bcrypt hashing), payment method details, and identity document data.
• Two-factor authentication (2FA) available to all players and enforced for high-value withdrawal requests and account setting changes.
• Access control policies restricting internal access to personal data to authorised personnel on a strict need-to-know basis, with all internal access events logged for audit purposes.
• Continuous intrusion detection monitoring with automated alerts for anomalous login patterns, unusual transaction sequences, and suspected account takeover attempts.
• Regular penetration testing and security audits conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pg123 will notify affected players without undue delay and will take immediate remediation steps to contain and address the incident.

9 Cookies

The pg123 platform uses cookies and similar tracking technologies to operate core platform functionality, improve user experience, and support analytics. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: Remember your preferences — such as preferred language, display settings, and lobby filters — to personalise your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data on how players navigate the platform, which features are most used, and where technical issues occur. This data helps pg123 improve platform performance and game catalogue curation.
• Marketing Cookies: Used — with your explicit consent — to deliver personalised promotional content within the pg123 platform based on your gaming interests and activity. pg123 does not use third-party advertising networks to track you across external websites.

You may manage your cookie preferences through your account settings or by adjusting your browser configuration. Note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Disabling analytics or marketing cookies does not affect your ability to play games, deposit, or withdraw.

10 Your Rights

As a pg123 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the pg123 support team via live chat or email at [email protected]. pg123 will respond to verified requests within 30 days.

• Right of Access: You may request a copy of all personal data pg123 holds about you, together with information about how it is being processed.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. Minor corrections (such as email address updates) can be made directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. Note that certain data must be retained to comply with AML and financial reporting obligations and cannot be deleted on request.
• Right to Restriction: You may request that pg123 restrict the processing of your data — for example, while a correction request is under review — without requiring full deletion.
• Right to Data Portability: You may request a machine-readable copy of the personal data you provided to pg123, in a commonly used format, for transfer to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of an objection, pg123 will cease marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11 Minors

The pg123 platform is strictly intended for adults aged 21 and over. pg123 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the registration process and enforced through mandatory KYC documentation before any withdrawal is processed.

If pg123 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all balances will be frozen pending investigation, and the data will be deleted in accordance with the applicable retention schedule. If you believe that a minor has registered on the pg123 platform, please notify us immediately at [email protected].

12 Third-Party Links

The pg123 platform may contain references to or integrations with third-party services — such as game studio portals, payment provider interfaces, and licensed sports data feeds. Where your interaction with those services takes you to a third-party environment outside the pg123.one domain, this Privacy Policy no longer applies. pg123 is not responsible for the privacy practices of third-party platforms and recommends that you review the relevant privacy policy of any external service before providing personal data to it.

13 Policy Updates

pg123 may update this Privacy Policy from time to time to reflect changes in platform operations, data processing practices, or applicable legal requirements. Material changes will be communicated to registered players via a prominent notice displayed within the platform and, where appropriate, by email to the registered account address.

The date at the top of this page indicates when the Privacy Policy was last revised. Continued use of the pg123 platform following notification of an update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the platform and contact support to close your account.

14 Contact

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the pg123 Data Privacy team through the following channels:

• Live Chat: Available 24/7 directly within the pg123 platform after login. Indonesian-speaking agents are on duty from 08:00 to 24:00 WIB.
• Email: [email protected] — responses within 24 hours during standard WIB business days. Please include "Privacy Request" in your subject line for data rights enquiries.
• WhatsApp: Available after login via Account › Support. Contact details are displayed within the logged-in platform environment.

For responsible gaming concerns — including requests for deposit limits, session time-outs, cooling-off periods, or self-exclusion — please refer to the Responsible Gaming page or raise the request directly with the support team. All responsible gaming requests are actioned immediately upon agent confirmation.