Privacy Policy

pgr007 ("we", "us", "our") operates the online gaming platform accessible at pgr007.cam. We are committed to protecting the privacy and personal data of all individuals who access, register on, or interact with our platform ("you", "the Player", "the User").

This Privacy Policy sets out in full the basis on which personal data we collect from you — or that you provide to us — will be processed by pgr007. By registering an account or using any part of our platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, either alone or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; in this context, pgr007.
• "Data Processor" — a third party that processes Personal Data on behalf of pgr007, under our documented instructions.
• "Sensitive Data" — a special category of Personal Data, including financial account details, identity document numbers, and payment credentials.
• "KYC Data" — identity and age-verification documentation collected as part of our Know Your Customer compliance process.
• "Cookie" — a small text file placed on your device by the platform to support functionality, analytics, and personalisation.
• "IDR" — Indonesian Rupiah; the sole transactional currency on the pgr007 platform.

pgr007 collects the following categories of Personal Data, depending on how you interact with the platform:

We do not collect or store full payment card numbers. Where card payments are facilitated, transactions are handled directly by our PCI-DSS compliant payment processor partners, and card numbers are never transmitted to or stored on pgr007 servers.

pgr007 collects Personal Data through the following methods:

• Direct Provision: Information you actively provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team.
• Automated Technologies: Technical and behavioural data collected automatically when you access the platform, including via cookies, web beacons, server logs, and similar tracking technologies (see Clause 9).
• Third-Party Payment Providers: Transaction confirmation data received from banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• Identity Verification Partners: Where we use third-party KYC verification services to cross-check identity documents, we may receive a verification result and associated metadata from those partners.
• Fraud Prevention Services: Risk scores and device fingerprint data received from fraud-screening service providers used to protect the integrity of the platform.

pgr007 processes your Personal Data only for specified, explicit, and legitimate purposes. The table below summarises the primary purposes for which we use your data and the legal basis on which each processing activity rests:

pgr007 does not sell , rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the following limited, controlled circumstances:

• Payment Processors: We share necessary financial data with our banking and e-wallet partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to facilitate deposit and withdrawal transactions on your behalf.
• KYC & Identity Verification Partners: Identity documents and verification data are shared with accredited third-party KYC providers for the purpose of confirming your identity and age. These partners are contractually bound to process your data only for this specific purpose.
• Game Content Providers: Session and wagering data may be shared with our licensed game studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) to the extent necessary to operate game functionality, resolve disputes, and maintain provably fair game records.
• Fraud & Security Services: Technical and behavioural data may be shared with fraud prevention and cybersecurity service providers to protect the platform and its users from fraudulent activity.
• Legal & Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of pgr007, its users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of pgr007's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

All third-party data processors engaged by pgr007 are required to enter into formal data processing agreements committing them to process your data only on our documented instructions, to implement appropriate technical and organisational security measures, and to delete or return your data upon termination of the processing relationship.

pgr007 operates as an internationally licensed platform, and some of our service providers and data processors are located outside Indonesia. As a result, your Personal Data may be transferred to and processed in countries other than Indonesia, including countries whose data protection laws may differ from those applicable in your jurisdiction.

Where such international transfers occur, pgr007 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply equivalent levels of data protection to those observed by pgr007.
• Transfers only to processors operating in jurisdictions with recognised adequate data protection frameworks.
• Regular review of international data transfer arrangements to ensure ongoing compliance.

pgr007 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction. Where anonymisation is applied, the resulting data is no longer Personal Data and may be retained indefinitely for statistical and analytical purposes.

pgr007 uses cookies and similar tracking technologies to support platform functionality, analyse usage patterns, and deliver a personalised experience. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential to the operation of the platform. These enable core functions such as user authentication, session management, and security. They cannot be disabled without materially impairing your ability to use pgr007.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform — including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps us improve platform quality and user experience.
• Functionality Cookies: Allow the platform to remember your preferences, such as language setting, default currency display (IDR), and time zone (WIB/WITA/WIT), to deliver a more personalised experience.
• Marketing & Targeting Cookies: Used only where you have provided explicit consent. These cookies help us present relevant promotional content and measure the effectiveness of our marketing campaigns.

You may manage cookie preferences at any time through your browser settings. Note that disabling Strictly Necessary Cookies may prevent you from logging into your account or completing transactions. Disabling other cookie categories will not affect your ability to use core platform features.

pgr007 may send you promotional communications about new games, seasonal bonuses (including offers aligned with Indonesian occasions such as Idul Fitri, Ramadhan, and Indonesian Independence Day), and platform updates. All marketing communications are subject to the following rules:

• Opt-In Consent Required: We will only send you marketing emails or messages if you have explicitly opted in to receive them — either at registration or subsequently through your account preferences.
• Easy Unsubscribe: Every marketing communication includes a clearly visible unsubscribe mechanism. You may also withdraw your marketing consent at any time by updating your account notification settings or by contacting our support team.
• Transactional Notifications Are Separate: Communications about your account activity — such as deposit confirmations, withdrawal processing updates, security alerts, and KYC requests — are not marketing communications and will be sent regardless of your marketing preferences, as they are necessary for the operation of your account.
• No Third-Party Marketing: pgr007 does not pass your contact details to third parties for marketing purposes. You will only receive promotional communications from pgr007 directly.

Subject to applicable law and certain regulatory limitations, you hold the following rights in respect of your Personal Data held by pgr007:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how and why it is being processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to our legal obligation to retain certain records (see Clause 8).
• Right to Restrict Processing: You may request that we limit the processing of your Personal Data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interest at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us using the details in Clause 17. We will respond to all verified requests within 30 days. In complex cases, we may extend this by a further 30 days, in which case we will notify you of the extension and the reasons for it.

pgr007 is strictly an adults-only platform. Access to and use of the platform is prohibited for any individual under the age of 21. We do not knowingly collect Personal Data from anyone under 21 years of age.

If we become aware that Personal Data has been collected from an individual under the age of 21 — whether through misrepresentation at registration or by any other means — we will immediately close the associated account, securely delete all collected data, and return any deposited funds to their source. Where required by law, we may report such incidents to the relevant authorities.

If you are a parent or guardian and believe that a minor in your care has registered on pgr007 or provided us with personal information, please contact us immediately using the details in Clause 17.

pgr007 implements a layered security architecture designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Security: All data in transit between your device and pgr007 servers is encrypted using TLS 1.3 with 256-bit encryption.
• Data at Rest Encryption: Sensitive data stored on our servers — including KYC documents, financial records, and authentication credentials — is encrypted at rest using AES-256.
• Access Controls: Access to Personal Data within pgr007 is strictly limited to personnel with a documented operational need. All access is logged and subject to periodic audit review.
• Two-Factor Authentication (2FA): We strongly recommend that all Players enable 2FA on their accounts. 2FA adds a second layer of identity verification that significantly reduces the risk of unauthorised account access.
• Penetration Testing: pgr007 conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities in our platform infrastructure.
• Incident Response: We maintain a documented data breach response plan. In the event of a confirmed breach affecting your Personal Data, we will notify you without undue delay and provide clear guidance on protective steps you can take.

While we take every reasonable measure to protect your data, no system is entirely immune to risk. You also play an important role in keeping your account secure — please use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

The pgr007 platform may, from time to time, contain references to or integrations with third-party services — including game content providers, payment gateways, and analytics tools. This Privacy Policy applies solely to data processed by pgr007 in connection with the pgr007 platform.

pgr007 is not responsible for the privacy practices of any third-party service providers or content partners. Where your interaction with a third-party service involves the collection of your Personal Data by that third party, their own privacy policy will govern that processing. We encourage you to review the privacy policies of any third-party services you interact with through our platform.

pgr007 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our operational requirements. When we make material changes to this policy, we will notify you via a platform notification or by email to the address registered on your account, and we will update the effective date displayed at the top of this page.

We encourage you to review this Privacy Policy periodically. The current version of this policy is always available at pgr007.cam/privacy-policy. Your continued use of the platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms.

This Privacy Policy is governed by and construed in accordance with the laws of the jurisdiction in which pgr007 holds its international gaming licence. Any dispute arising from or in connection with this Privacy Policy that cannot be resolved informally shall be subject to the dispute resolution mechanism described in our Terms & Conditions.

Nothing in this clause limits any data protection rights you may hold under applicable Indonesian law or any international data protection framework that is recognised as applicable to your circumstances.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how pgr007 handles your Personal Data, please contact our Data Privacy team using the details below:

Email: support@pgr007.cam

Subject Line: Please include "Privacy Request" or "Data Rights" in the subject line of your email so our team can route your enquiry to the correct department promptly.

Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. Support is available 7 days a week, 08:00–24:00 WIB (Western Indonesia Time, UTC+7).

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or supervisory body in your jurisdiction.