pgas Platform Privacy Notice

This page describes what data we collect when you use pgas and how we keep that data protected. We collect personal information to operate our sportsbook and gaming platform, verify your identity, process payments, and comply with regulatory requirements. Your data is encrypted, stored securely, and shared only with essential service partners and regulatory authorities where required by law.

We at pgas respect your privacy and operate under strict data-protection principles. This notice explains what information we gather, how we use it, your rights regarding your data, and how to contact us with privacy questions. Our policy applies to all users of pgas in jurisdictions where our services are available under local law.

If you have questions about this privacy notice or wish to exercise your data rights, contact our privacy team using the channels listed below. We respond to all privacy inquiries within 30 days.

What Data We Collect on pgas

Account Registration Information

When you register for pgas, we collect your full name, email address, phone number, date of birth, and residential address. We use this information to create and manage your account, verify your identity, and confirm eligibility under applicable law. Your email and phone number allow us to send account notifications, password-reset links, and service updates. These contact details also help us reach you if we detect unusual account activity or need to request additional information for compliance purposes.

Know Your Customer (KYC) Documentation

Before your first withdrawal, we require government-issued identification (such as a passport, national ID card, or driver's license) and proof of residence (utility bill, bank statement, or government correspondence). We process these documents through secure, encrypted channels. Our system scans documents for authenticity and compares your identification details against our registration data to confirm consistency. Once verified, KYC documents are retained in secure storage for regulatory compliance and anti-money-laundering purposes. We are legally required to maintain these records for specified periods under applicable financial and gaming regulations.

Payment and Financial Information

When you deposit or withdraw on pgas, we collect payment-method details—e-wallet identifiers, bank account information, or QRIS identifiers—depending on your chosen method (e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, or mobile banking). We do not store full credit-card numbers or sensitive payment data on our servers. Instead, payment processing is handled by PCI-compliant third-party processors. We retain transaction records (date, amount, method, status) in our account system for accounting, reconciliation, and regulatory reporting.

Betting and Gaming Activity

We record all account activity on pgas—wagers placed, game spins, live-dealer sessions, withdrawals, and account balance changes. This activity log includes timestamps, bet amounts, outcomes, and settlement status. We retain this data to settle disputes, detect fraud, comply with regulatory audits, and improve our platform. Your betting history on Liga 1, Piala Indonesia, Champions League, and other markets is stored; your game history (slots, live dealer, esports) is also recorded. This data helps us respond to settlement inquiries and conduct periodic compliance reviews.

Data retention: We retain KYC documents for the duration required by law (typically 5–7 years post-account closure). Account activity logs and transaction history are retained for 7 years minimum for regulatory and audit purposes.

Device and Access Logs

When you access pgas, we log your Internet Protocol (IP) address, device type (mobile, desktop, tablet), operating system, browser type, and approximate geographic location (determined by IP geolocation). We record login timestamps and unsuccessful login attempts. This information helps us detect suspicious account access, prevent fraud, and troubleshoot technical issues. Access logs are retained for 12 months and are reviewed if we detect unauthorized access attempts or unusual account activity.

Cookies and Tracking Technologies

Our pgas platform uses cookies to maintain your login session, remember your preferences, and track your navigation within the site. Session cookies expire when you log out; persistent cookies (such as language preference) remain until you delete them. We use analytical cookies to understand how users interact with pgas—which pages are visited, how long users stay, and which features are used. This helps us improve the platform. We do not use cookies to track you across third-party websites. You can control cookie settings in your browser; disabling cookies may affect pgas functionality.

Communication Records

When you contact our support team via email, live chat, or phone, we retain records of your communication. These records include the date, time, content of your inquiry, and our response. We use these records to resolve issues, monitor support quality, and improve our customer service. Communication records are retained for 2 years unless longer retention is required for dispute resolution or regulatory compliance.

How We Use and Share Your Data on pgas

Primary Uses of Your Data

We use your data to operate pgas—process deposits and withdrawals, settle bets, manage your account, and deliver customer support. We use your email and phone to send you account notifications, promotional updates (if you opt in), service maintenance notices, and security alerts. We use your account activity history to investigate disputes, detect fraud, and monitor for suspicious patterns. Your personal and financial data is used to comply with Know Your Customer (KYC), anti-money-laundering (AML), and financial-reporting requirements mandated by gaming regulators and financial authorities.

Third-Party Processors and Service Partners

We share your data with essential service providers who help us operate pgas:

Payment processors: We share deposit and withdrawal details with payment providers (QRIS operators, e-wallet platforms, banks) to process transactions.
Identity verification services: We use third-party vendors to verify your government-issued ID documents and conduct background checks for KYC compliance.
Fraud detection services: We share account activity patterns with specialized fraud-prevention companies to detect suspicious behaviour and protect against unauthorized access.
Customer support platforms: Our support system may process your inquiries through third-party ticketing or chat platforms to manage and track your requests.
Cloud hosting and data storage: Our servers may be hosted by third-party data centres. Your data is encrypted in transit and at rest, limiting what hosting providers can access.

We contractually require all third-party processors to handle your data securely and use it only for the specific purpose we authorize. We do not sell your personal data to third parties for marketing or commercial purposes.

Regulatory and Legal Disclosure

We may disclose your data to gaming regulators, financial authorities, law-enforcement agencies, and tax authorities if required by applicable law or legal process (such as a court order or subpoena). We will notify you of such disclosures unless doing so would violate a legal prohibition or obstruct an investigation. We may also disclose data if we determine in good faith that disclosure is necessary to protect the safety of our users or the integrity of our platform.

Data location: Our servers and database are located outside Indonesia. Your data may be processed and stored in jurisdictions with different data-protection laws. By using pgas, you consent to this cross-border data transfer.

Your Rights Regarding Your Data on pgas

Depending on your jurisdiction, you may have the following rights:

Right of access: You can request a copy of all personal data we hold about you.
Right to correction: You can request that we correct inaccurate or incomplete information in your account.
Right to deletion: You can request deletion of your data, subject to legal retention requirements (KYC documents and transaction records may not be deletable).
Right to data portability: You can request your data in a portable, machine-readable format.
Right to withdraw consent: If you consented to marketing communications, you can withdraw that consent at any time.

To exercise any of these rights, contact our privacy team at the email address below. We respond to all data requests within 30 days. Some requests may require additional verification to confirm your identity.

Data Security and Protection Measures

We at pgas employ industry-standard security practices to protect your data from unauthorized access, disclosure, and misuse. Your data is encrypted in transit (using HTTPS/TLS protocols) and at rest (using AES-256 encryption). Our servers are protected by firewalls, intrusion-detection systems, and access controls. Only authorized personnel can access sensitive data, and they are bound by confidentiality agreements. We conduct regular security audits and penetration testing to identify and remediate vulnerabilities.

However, no online system is completely secure. If we discover a data breach involving your personal information, we will notify you within 24 hours and provide details about what data was compromised, steps we are taking to investigate and remediate, and recommendations for protecting yourself. We will cooperate with relevant regulatory authorities and provide notification as required by applicable law.

Contact Our Privacy Team

If you have questions about this privacy notice, wish to exercise your data rights, or believe we have mishandled your data, contact us:

Email: [email protected]
Mailing address: Privacy Officer, pgas, [jurisdiction-specific address]
Response time: We respond to all privacy inquiries within 30 days. Urgent or complex requests may require up to 60 days.

Policy Updates

We may update this privacy notice from time to time to reflect changes in our data practices, technology, or applicable law. We will notify you of material changes by email or by posting an updated notice on pgas. Your continued use of pgas after such changes constitutes your acceptance of the updated privacy notice. We encourage you to review this page periodically to stay informed of how we protect your data.