Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") explains how ceri88 ("we", "us", "our", "the Platform") collects, uses, stores, processes, shares, and protects personal information obtained from users ("you", "your", "User") of our website located at https://ceri88.cam and all associated services (collectively, "Services"). This Policy applies to all visitors, registered users, and anyone who interacts with our platform, regardless of geographic location.

By accessing or using ceri88 Services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must not use our Services. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform and form part of the overall legal agreement between you and ceri88.

We are committed to protecting your privacy and handling your personal data responsibly. We comply with applicable international data protection laws and regulations, including principles derived from GDPR (General Data Protection Regulation) and other internationally recognized privacy frameworks, adapted to our operational context and the jurisdictions we serve, including Indonesia.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account, use our Services, or communicate with us, you may provide the following types of personal information:

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, and username/password.
• Identity Verification Data (KYC): Government-issued identification documents (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs holding identification, and other documentation required to verify your identity and comply with anti-money laundering regulations.
• Financial Data: Bank account details (account number, bank name, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account details), transaction history, deposit amounts, withdrawal amounts, and payment method preferences.
• Communication Data: Any information you provide when contacting customer support, including email correspondence, live chat transcripts, support tickets, feedback, complaints, and survey responses.
• Marketing Preferences: Your consent choices regarding promotional communications, newsletters, and marketing materials.

2.2 Information Collected Automatically

When you access or use ceri88 Services, we automatically collect certain technical and usage information, including:

• Device Information: Device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, device identifiers (advertising ID, device ID), and mobile network information.
• Connection Data: IP address, internet service provider (ISP), referring/exit pages, clickstream data, and geographic location (country, city, region) derived from IP address.
• Usage Data: Pages visited, features used, time spent on pages, games played, bets placed, search queries, date and time stamps, and navigation patterns within the platform.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to collect information about your browsing behavior, preferences, and interactions with our Services. See Section 8 for detailed information about cookies.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) may share transaction confirmation data, payment status, and fraud detection information.
• Game Providers: Third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt) may share game session data, betting patterns, and win/loss statistics to enable gameplay and resolve disputes.
• Identity Verification Services: Third-party KYC verification providers may share identity validation results and fraud risk assessments.
• Publicly Available Sources: We may obtain information from publicly accessible databases, government registries, or social media platforms to verify identity or prevent fraud.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your ceri88 account
• Processing deposits, withdrawals, and financial transactions
• Providing access to casino games, sports betting, and other gaming services
• Processing bets and wagers, calculating winnings, and crediting payouts
• Managing your account settings, preferences, and responsible gaming limits
• Communicating with you about your account, transactions, and services

3.2 Legal Compliance and Security

• Verifying your identity and age (21+ requirement) through KYC procedures
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Detecting and preventing fraud, cheating, collusion, and other prohibited activities
• Enforcing our Terms & Conditions and other policies
• Responding to legal requests, court orders, and regulatory inquiries
• Protecting the security and integrity of our platform and users

3.3 Service Improvement and Analytics

• Analyzing usage patterns and user behavior to improve our Services
• Developing new features, games, and betting markets
• Conducting research and statistical analysis to optimize user experience
• Testing platform performance, identifying bugs, and troubleshooting technical issues
• Personalizing your experience based on preferences and playing history

3.4 Marketing and Communications (with consent)

• Sending promotional offers, bonuses, and special deals (only if you opt in)
• Distributing newsletters and updates about new games or features
• Conducting surveys and soliciting feedback to improve services
• Providing customer support and responding to your inquiries

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: Banks and e-wallet providers process your deposits and withdrawals. We share necessary financial information to complete transactions.
• Game Providers: Software companies (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe) require session data to deliver games and calculate outcomes.
• Identity Verification Services: Third-party KYC providers verify your identity documents and assess fraud risk.
• Customer Support Tools: Live chat and ticketing systems may store communication data to assist with support inquiries.
• Analytics Providers: We use analytics services to understand platform usage and improve user experience.
• Cloud Hosting: Your data is stored on secure cloud servers operated by reputable infrastructure providers.

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure third parties maintain appropriate security measures.

4.2 Legal Requirements and Protection of Rights

We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Enforce our Terms & Conditions, Privacy Policy, or other agreements
• Protect the rights, property, or safety of ceri88, our users, or the public
• Investigate or prevent fraud, security breaches, or illegal activity
• Respond to emergency situations involving threats to personal safety

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4.4 Aggregate and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you personally. This includes statistical data about user demographics, gaming trends, popular betting markets, and platform performance. Such data is used for research, marketing, and business development purposes.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

After the retention period expires, we securely delete or anonymize your personal data in accordance with industry best practices. If you request account deletion, we will remove data not subject to legal retention requirements within 30 days. Data subject to regulatory retention (KYC documents, transaction records) will be securely archived with restricted access until the legal retention period expires.

6. Data Security

We implement comprehensive technical and organizational security measures to protect your personal information against unauthorized access, loss, misuse, alteration, or disclosure. Our security measures include:

6.1 Technical Safeguards

• Encryption: All data transmission between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (passwords, financial information, KYC documents) is encrypted in our databases.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, 24/7 monitoring, redundant power supplies, and fire suppression systems.
• Firewalls and Intrusion Detection: Multi-layered firewalls and intrusion detection systems protect our network from external attacks and unauthorized access attempts.
• Password Security: User passwords are hashed using industry-standard cryptographic algorithms (bcrypt) and never stored in plain text.
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans by independent security firms.

6.2 Organizational Safeguards

• Access Controls: Access to personal data is restricted to authorized personnel who require it to perform their job functions. Access is granted on a need-to-know basis with role-based permissions.
• Employee Training: All employees handling personal data receive training on data protection, confidentiality obligations, and security best practices.
• Confidentiality Agreements: Employees and contractors with access to personal data sign confidentiality agreements and are subject to disciplinary action for violations.
• Incident Response: We maintain a data breach response plan to detect, respond to, and mitigate security incidents. In the event of a breach affecting your personal data, we will notify you as required by applicable law.

While we employ industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continually work to enhance our protections and respond to evolving threats.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request. You can access most account information directly through your ceri88 account dashboard.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information (email, phone, address) directly in your account settings. For changes to legal name, date of birth, or other verified information, contact customer support with supporting documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to legal retention requirements. We cannot delete data required for regulatory compliance (KYC documents, transaction records) until the legal retention period expires. To request account deletion, contact [email protected].

7.4 Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances, such as when contesting data accuracy or objecting to processing. During restriction, we will store your data but not actively use it except as required by law.

7.5 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting preferences in your account settings.

7.6 Right to Data Portability

You have the right to receive your personal data in a portable format and to request transfer to another service provider where technically feasible. Contact customer support to request data export.

7.7 Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We may require identity verification before processing requests to protect your data from unauthorized access. We will respond within 30 days and provide reasons if we cannot fulfill your request.

8. Cookies and Tracking Technologies

ceri88 uses cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies are small text files stored on your device when you visit our website.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly. These enable core features like account login, session management, and secure transactions. You cannot disable these cookies without affecting site functionality.
• Performance Cookies: Collect anonymous information about how visitors use our website, such as page views, traffic sources, and error messages. This helps us improve site performance and user experience.
• Functionality Cookies: Remember your preferences (language, currency, display settings) to provide enhanced, personalized features.
• Advertising Cookies: Track your browsing habits to deliver relevant promotional content. We do not use third-party advertising networks but may use cookies to track effectiveness of our own marketing campaigns.

8.2 Managing Cookies

Most browsers allow you to control cookies through settings. You can block or delete cookies, though this may affect site functionality. To learn more about cookie management, visit your browser's help section. Note that disabling essential cookies will prevent you from using core features of ceri88.

9. Children's Privacy

ceri88 Services are strictly for adults aged 21 and over. We do not knowingly collect personal information from anyone under 21 years of age. If we discover that a user is underage, we will immediately close their account, forfeit any balance, and delete their personal data.

If you are a parent or guardian and believe your child has provided personal information to ceri88, contact us immediately at [email protected]. We will take prompt action to investigate and remove the information.

10. International Data Transfers

ceri88 operates internationally, and your personal information may be transferred to, stored in, and processed in countries other than Indonesia. These countries may have data protection laws different from those in Indonesia. When we transfer data internationally, we implement appropriate safeguards including standard contractual clauses, encryption, and security protocols to protect your information.

By using our Services, you consent to the transfer of your information to countries outside Indonesia as necessary to provide our Services and fulfill the purposes described in this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated through prominent notice on our website or via email to your registered address at least 30 days before taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of ceri88 Services after changes take effect constitutes acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond within 48 hours for privacy-related inquiries

For general customer support inquiries unrelated to privacy, use our live chat service available 24/7 on the ceri88 website. For urgent privacy matters or suspected data breaches affecting your account, mark your email as urgent and include "URGENT" in the subject line.