Privacy Policy

Introduction

cer188 ("we", "us", "our") operates the online betting platform accessible at https://cer188.cam (the "Platform"). We serve Indonesian players and users from other permitted jurisdictions who wish to engage in sports betting, live casino gaming, slot games, and related entertainment products. As a data controller, cer188 is responsible for determining how and why your personal data is processed.

This Privacy Policy ("Policy") describes in plain, accessible terms how cer188 collects, uses, stores, shares, and protects personal information relating to our users ("you", "your"). It also describes the rights available to you regarding your personal data and the mechanisms through which you can exercise those rights.

This Policy must be read together with our Terms & Conditions, which govern your overall use of the Platform and are incorporated herein by reference. By registering an Account or using any feature of the Platform, you confirm that you have read, understood, and accepted this Policy.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, national identity number, location data, email address, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means cer188, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of cer188 under a binding contractual agreement.
• "User" means any individual who accesses the Platform, creates an Account, or interacts with cer188 services in any capacity.
• "KTP" means the Indonesian National Identity Card (Kartu Tanda Penduduk), the primary government-issued identification document required for KYC verification on the Platform.
• "Sensitive Data" means a subset of Personal Data requiring heightened protection, including financial account details, government identity numbers, and information relating to health or gambling behaviour.
• "Cookie" means a small data file placed on a User's device by a web server for the purposes of session management, analytics, or preference storage.

Data We Collect

cer188 collects the following categories of Personal Data in connection with the provision of its services:

3.1 Identity and Contact Data

• Full legal name as it appears on your KTP
• Date of birth (for age verification — users must be 21 or older)
• City and province of residence in Indonesia (e.g., Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta)
• Valid email address and active mobile phone number
• KTP number and scanned copy or photograph of the KTP document
• Selfie or liveness-check photograph where requested for enhanced KYC

3.2 Financial Data

• Bank account number, account holder name, and associated bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or other supported institutions)
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja accounts linked to your cer188 account
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used
• Account balance history and bonus credit records

3.3 Technical and Usage Data

• IP address, device type, operating system, and browser type at time of access
• Login timestamps, session duration, and logout timestamps
• Pages visited, games played, bets placed, and search queries conducted within the Platform
• Geolocation data derived from IP address (not GPS-level precision)
• Referral source (how you arrived at the cer188 Platform)

3.4 Communications Data

• Records of live chat conversations and email correspondence with our support team
• Customer feedback submissions, complaint records, and dispute documentation
• Survey or questionnaire responses submitted voluntarily through the Platform

How We Collect Data

cer188 collects Personal Data through the following channels and mechanisms:

4.1 Direct Submission

You provide data directly when you: create an Account on the Platform; complete KYC verification by uploading KTP documents and proof of payment method; m ake a deposit or withdrawal request; contact our customer support team via live chat or email; respond to a survey or promotional communication; or submit a complaint or dispute claim.

4.2 Automated Collection

When you access or use the Platform, our servers automatically record Technical and Usage Data including your IP address, browser type, operating system, referring URL, pages visited, and session timestamps. This data is collected via server logs, cookies, and similar tracking technologies described in Section 11 of this Policy.

4.3 Third-Party Sources

cer188 may receive Personal Data about you from trusted third-party sources in limited circumstances, including:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) who provide transaction confirmation and account ownership verification data.
• Identity verification service providers engaged by cer188 to perform automated KTP document validation and liveness checks.
• Fraud detection and anti-money laundering (AML) screening providers who cross-reference your identity against sanctions lists and adverse media databases.
• Analytics platforms that aggregate anonymized usage data to help cer188 understand overall Platform performance and user experience patterns.

Purpose of Processing

cer188 processes your Personal Data only for specified, explicit, and legitimate purposes. The primary purposes for which your data is used are as follows:

• Account Management: To create, maintain, authenticate, and administer your cer188 Account, including processing login sessions and managing Account preferences.
• Identity Verification (KYC): To verify that you meet the eligibility requirements for Platform use, including confirming that you are at least 21 years of age and are a legitimate account holder rather than a fraudulent or duplicate registration.
• Payment Processing: To facilitate deposits and withdrawals via your nominated Indonesian bank account (BCA, BRI, BNI, Mandiri, or other supported banks) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate transaction records for accounting and audit purposes.
• Service Delivery: To make available the full range of cer188 betting and gaming products, including sports markets (BRI Liga 1, EPL, La Liga, Champions League), live casino, slot games, and togel (Indonesia's traditional numbers lottery) draw results.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple-account creation, and other conduct prohibited by our Terms & Conditions.
• Legal and Regulatory Compliance: To fulfill obligations under applicable anti-money laundering (AML) laws, international gaming regulations, and licensing requirements, including record-keeping and reporting obligations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance through live chat and email support channels.
• Responsible Gaming: To monitor gaming behaviour patterns that may indicate problem gambling, and to deliver or enforce responsible gaming tools such as deposit limits, self-exclusion, and session time controls where requested or required.
• Platform Improvement: To analyze aggregated usage data and improve the design, performance, and content of the cer188 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign information — only where you have explicitly opted in to receive such communications.

Legal Basis for Processing

cer188 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to perform the contract between cer188 and you (as set out in the Terms & Conditions), including Account creation, KYC verification, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC mandates, and licensing conditions imposed by cer188's international gaming license.
• Legitimate Interests: Processing carried out for cer188's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, Platform security, service improvement, and responsible gaming monitoring.
• Consent: Processing activities where you have provided freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications and any optional data collection beyond what is strictly necessary for Platform operation. You may withdraw consent at any time without detriment to your Account access.

Data Sharing & Disclosure

cer188 does not sell, rent, or trade your Personal Data to third parties for their own commercial or marketing purposes. We share your data only in the following limited circumstances and only to the extent strictly necessary:

7.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include payment gateway operators facilitating BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay transactions; KYC identity verification vendors; fraud detection platforms; cloud infrastructure providers; and customer support software vendors. All processors are contractually required to process data only on our documented instructions and to implement appropriate technical and organizational security measures.

7.2 Legal and Regulatory Disclosure

cer188 may disclose your Personal Data to law enforcement agencies, regulatory authorities, courts, or other government bodies when required to do so by applicable law, court order, or in response to a lawful request from a competent authority. Where legally permitted, we will notify you of such a disclosure request before complying.

7.3 Business Transfers

In the event that cer188 undergoes a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred as part of that transaction. We will notify affected users via email and prominent Platform notice before such a transfer occurs, and you will retain the right to request deletion of your data prior to the transfer.

7.4 Fraud Prevention Networks

cer188 may share limited identity and transaction data with industry-wide fraud prevention and AML screening networks to protect the integrity of the Platform and the broader online gaming community. Data shared with such networks is subject to strict confidentiality obligations.

International Data Transfers

As an internationally operated platform serving Indonesian users, cer188 may transfer your Personal Data to servers and service providers located outside of Indonesia. Such transfers are made only where appropriate safeguards are in place to ensure that your data receives a level of protection equivalent to that which it would receive within Indonesia.

Safeguards we rely upon for international transfers include: standard contractual clauses incorporated into our Data Processor agreements; transfers to jurisdictions that maintain internationally recognized data protection frameworks; and technical measures such as end-to-end encryption during data transit.

Where your data is processed by cloud infrastructure or analytics providers operating internationally, cer188 ensures that all such providers are bound by our data processing agreements and are prohibited from processing your data for any purpose other than those specified by cer188.

Data Retention

cer188 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data (KTP, name, date of birth): Retained for the duration of your active Account plus a minimum of 5 years following Account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years following the date of each transaction, or longer if required by applicable law or ongoing regulatory investigation.
• Customer support communications: Retained for 3 years from the date of the communication, or for the duration of any related dispute resolution process if longer.
• Technical and usage logs: Retained for 12 months from the date of collection, after which they are aggregated and anonymized for analytical purposes.
• Marketing consent records: Retained for the duration of your consent plus 3 years to evidence the lawfulness of any marketing communications sent during the consent period.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized data that can no longer be attributed to any identifiable individual may be retained indefinitely for statistical and analytical purposes.

Security Measures

cer188 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the cer188 Platform, including all financial transaction data.
• Encrypted data storage for all sensitive Personal Data including KTP scans, bank account details, and password credentials. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Role-based access controls restricting internal access to Personal Data to only those cer188 employees and contractors whose job functions require it, subject to strict confidentiality obligations.
• Two-factor authentication available for all User Accounts and mandated for internal staff accessing administrative systems.
• Regular security audits and penetration testing conducted by independent third-party security firms to identify and remediate vulnerabilities proactively.
• Intrusion detection systems and 24/7 security monitoring to identify and respond to anomalous network activity in real time.

Cookies & Tracking Technologies

cer188 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The following categories of cookies are used:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They enable core functionality including session management (keeping you logged in during your visit), security token validation, and load-balancing across our server infrastructure. No personally identifiable information is stored in strictly necessary cookies beyond what is required for secure session management.

11.2 Analytical and Performance Cookies

These cookies collect anonymized data about how users interact with the Platform — including which pages are visited most frequently, where users encounter errors, and how long sessions typically last. This data helps cer188 continuously improve the Platform experience. Analytical cookies may be set by cer188 directly or by trusted third-party analytics providers operating under our instructions.

11.3 Functional Cookies

Functional cookies remember your preferences and settings — such as your preferred display language, time zone (WIB/WITA/WIT), and any Platform customizations you have configured — so that you do not need to re-enter them on each visit.

11.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will impair core Platform functionality, including your ability to log in and maintain a secure session. For instructions on managing cookies in your specific browser, please consult your browser's help documentation.

Your Privacy Rights

As a cer188 user, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

Minors & Age Verification

The cer188 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is conducted as part of the KYC process for every registered Account using KTP document review and, where appropriate, automated liveness-check technology.

If cer188 discovers that Personal Data has been collected from a user who was under 21 years of age at the time of collection, we will immediately suspend the associated Account, delete all collected data, and — where required — report the matter to relevant authorities. The detection of underage gambling may also involve notification to the user's registered contact details.

If you are a parent or guardian and believe that a minor under your care has created an Account on the cer188 Platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act promptly.

Policy Amendments

cer188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. All amendments will be published on this page with a revised "Last Updated" date displayed prominently at the top of the Policy.

Where an amendment materially affects how your Personal Data is processed or reduces your rights in any way, cer188 will notify registered Users via email at least 14 days before the amendment takes effect. For non-material updates — such as clarifications, typographical corrections, or minor restructuring — the updated Policy will take effect immediately upon publication.

Your continued use of the cer188 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you must discontinue use of the Platform and may request Account closure as described in our Terms & Conditions.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cer188 processes your Personal Data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Policy Inquiry" to ensure prompt routing to the Data Protection team
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days and to complete rights requests within 30 calendar days
• Support Hours: Our customer support team is available 24/7 via live chat for general queries; formal privacy requests are handled during business hours (WIB, Monday–Friday)

If you are dissatisfied with cer188's response to a privacy concern, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in your jurisdiction. cer188 will cooperate fully with any regulatory investigation into our data processing practices.