Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you register for a pama26 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued Indonesian identification number (NIK from KTP).
• Contact Information: Email address, mobile phone number, residential address (province, city, postal code).
• Account Credentials: Username, password (stored in encrypted form), and security questions.
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), and payment transaction history.
• Verification Documents: Photographs or scans of your Indonesian KTP, selfie photographs for identity verification, and proof of address documents (utility bills, bank statements).
• Communication Records: Content of support inquiries, live chat conversations, email correspondence, and feedback submitted through our platform.

1.2 Information Automatically Collected

When you access pama26, we automatically collect certain technical information:

• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Connection Information: IP address, internet service provider (ISP), geographic location (city and country level, not precise GPS coordinates), and time zone.
• Usage Information: Pages visited, features used, games played, time spent on platform, navigation paths, and search queries.
• Gaming Activity: Bets placed, game outcomes, wagering patterns, deposit and withdrawal amounts, bonus activations, and account balance changes.
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies, and similar tracking technologies. See Section 8 for detailed information about cookies.

1.3 Information from Third Parties

We may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: KYC verification results from third-party identity verification providers used to confirm your Indonesian KTP authenticity.
• Fraud Prevention Services: Risk assessment data from fraud detection systems to protect against account compromise and fraudulent transactions.

2. How We Use Your Information

pama26 uses your personal information for the following purposes:

2.1 Service Provision

• Create and manage your pama26 account.
• Process deposits and withdrawals to your Indonesian bank accounts and e-wallets.
• Enable access to gaming services including sports betting, live casino, slots, togel, and sabung ayam streaming.
• Track your gaming activity, account balance, and transaction history.
• Provide customer support and respond to your inquiries via live chat, email, WhatsApp, and Telegram.
• Process bonus claims and verify compliance with wagering requirements.

2.2 Legal Compliance and Security

• Verify your identity and age to ensure you are at least 21 years old and a resident of Indonesia.
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Detect and prevent fraud, account compromise, bonus abuse, and other prohibited activities.
• Investigate suspected violations of our Terms and Conditions.
• Respond to legal requests from Indonesian law enforcement or regulatory authorities.
• Maintain records as required by Indonesian financial and gaming regulations.

2.3 Platform Improvement

• Analyze usage patterns to improve website performance, navigation, and user experience.
• Conduct statistical analysis of gaming preferences to optimize game selection and offerings.
• Test new features and services before full deployment.
• Identify and fix technical issues, bugs, and security vulnerabilities.
• Personalize your gaming experience based on your preferences and playing history.

2.4 Marketing and Communications

• Send promotional offers, bonus notifications, and new game announcements via email or SMS (with your consent).
• Provide updates about account activity, transaction confirmations, and security alerts.
• Invite you to participate in tournaments, competitions, and special events.
• Deliver personalized recommendations based on your gaming preferences.
• Conduct surveys and gather feedback to improve our services.

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting customer support. Please note that you cannot opt out of essential service communications (transaction confirmations, security alerts, terms updates).

2.5 Responsible Gaming

• Monitor gaming patterns to identify signs of problem gambling behavior.
• Implement deposit limits, loss limits, and self-exclusion requests.
• Provide reality check notifications and session time tracking.
• Enforce cooling-off periods and account restrictions for responsible gaming purposes.

3. Information Sharing and Disclosure

pama26 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information in the following limited circumstances:

3.1 Service Providers

We share personal information with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive your financial information to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Asia Gaming, and other licensed game studios receive your gaming activity data to deliver game content and validate results.
• Identity Verification Services: Third-party KYC providers receive your identification documents to verify your identity and age.
• Cloud Hosting Services: Infrastructure providers host our servers and databases with your encrypted data.
• Customer Support Tools: Live chat and ticketing systems process your support inquiries.
• Analytics Providers: Receive anonymized or aggregated data to help us analyze platform usage and improve services.

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

3.2 Legal Requirements

We may disclose your information when required by Indonesian law or legal process:

• In response to valid subpoenas, court orders, or legal requests from Indonesian law enforcement or regulatory authorities.
• To comply with Indonesian financial regulations, anti-money laundering laws, or counter-terrorism financing requirements.
• When we believe disclosure is necessary to protect the rights, property, or safety of pama26, our users, or the public.
• To enforce our Terms and Conditions or investigate potential violations.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and prominent notice on our website of any such change in ownership or control of your personal information.

3.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when you authorize us to share your username for tournament leaderboards or promotional purposes.

4. Data Security Measures

pama26 implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

4.1 Technical Security

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Stored data is encrypted at rest using AES-256 encryption.
• Secure Authentication: Passwords are hashed using bcrypt with salt. We offer two-factor authentication (2FA) for enhanced account security.
• Firewall Protection: Multi-layered firewalls protect our servers from external attacks.
• Intrusion Detection: Automated systems monitor for suspicious activity and potential security breaches 24/7.
• Regular Security Audits: Independent third parties conduct penetration testing and security audits quarterly.
• Secure Payment Gateways: All financial transactions are processed through PCI-DSS compliant payment processors.

4.2 Organizational Security

• Access Controls: Personal data is accessible only to authorized employees who require it to perform their job functions. Access is logged and monitored.
• Employee Training: All staff undergo mandatory data protection and security awareness training.
• Confidentiality Agreements: Employees and contractors sign non-disclosure agreements regarding user data.
• Data Segregation: Different categories of data are stored in separate databases with appropriate access controls.
• Incident Response Plan: We maintain a comprehensive data breach response plan to quickly contain and mitigate any security incidents.

4.3 Your Security Responsibilities

While we implement robust security measures, you also play a role in protecting your account:

• Choose a strong, unique password and do not share it with anyone.
• Enable two-factor authentication (2FA) for additional account protection.
• Log out of your account when using shared or public computers.
• Keep your contact information updated so we can reach you about security matters.
• Report any suspected unauthorized account access immediately to customer support.

5. Your Privacy Rights

As a pama26 user, you have the following rights regarding your personal information:

5.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To request access, contact our customer support team at [email protected] with the subject line "Data Access Request". We will provide your data in a structured, commonly used, machine-readable format (such as PDF or CSV) within 30 days of verification of your identity.

5.2 Right to Correction

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings. For information that cannot be self-updated (such as KYC documents), contact customer support with supporting documentation.

5.3 Right to Deletion

You have the right to request deletion of your personal information, subject to certain exceptions. We will delete your data unless we are required to retain it for legal compliance, dispute resolution, or enforcement of our Terms and Conditions. Account closure requests can be submitted through customer support. Please note that financial transaction records must be retained for 7 years under Indonesian law even after account deletion.

5.4 Right to Restrict Processing

You may request that we restrict processing of your personal information in certain circumstances, such as while we verify the accuracy of your data or while a dispute is being resolved.

5.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or by contacting customer support.

5.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used format and to transmit that data to another service provider where technically feasible.

5.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

5.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line specifying your request (e.g., "Data Deletion Request"). We will respond to verified requests within 30 days. For security purposes, we may require identity verification before processing your request.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit pama26. They help us recognize your device, remember your preferences, and improve your overall experience on our platform.

6.2 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, account login, and security features. These cannot be disabled without affecting platform usability.
• Preference Cookies: Remember your language selection, display settings, and other preferences.
• Analytics Cookies: Help us understand how users interact with pama26, which pages are most popular, and how we can improve the platform.
• Marketing Cookies: Track your activity across our website to deliver relevant promotional offers and measure the effectiveness of marketing campaigns.

6.3 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may impair your ability to use certain features of pama26. Disabling analytics or marketing cookies will not affect platform functionality but may result in less personalized experience.

6.4 Third-Party Cookies

Some cookies on pama26 are placed by third-party service providers such as game studios and analytics providers. These cookies are governed by the privacy policies of those third parties.

7. International Data Transfers

pama26 primarily operates in Indonesia and stores user data on servers located in secure data centers within Indonesia or the Southeast Asian region. However, some of our service providers (such as game studios Evolution Gaming, Pragmatic Play, and Microgaming) may be located in other jurisdictions including Europe, Philippines, Malta, and Singapore.

When we transfer your personal information outside Indonesia, we ensure appropriate safeguards are in place:

• Contracts with service providers include data protection clauses equivalent to Indonesian standards.
• We use encryption and secure transmission protocols for all international data transfers.
• Service providers based in the European Union are required to comply with GDPR, which provides strong data protection standards.
• We conduct due diligence on the data protection laws of any jurisdiction to which we transfer data.

8. Children's Privacy

pama26 services are strictly for adults aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process requires date of birth verification, and our KYC process requires submission of Indonesian KTP to confirm age.

If we become aware that we have inadvertently collected personal information from someone under 21, we will immediately delete that information and close the associated account. Any deposits from underage accounts will be returned to the source payment method.

Parents or guardians who believe their child has provided personal information to pama26 should contact us immediately at [email protected] so we can take appropriate action.

9. Changes to This Privacy Policy

pama26 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Policy, we will:

• Update the "Effective Date" at the top of this document.
• Notify registered users via email to the address on file.
• Display a prominent notice on our website homepage for at least 30 days.
• For significant changes that affect your rights, we may require renewed consent before continuing to process your data under the new terms.

Your continued use of pama26 services after changes take effect constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you may close your account by contacting customer support.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us through the following channels:

• Data Protection Officer Email: [email protected] (Subject: Privacy Inquiry)
• Customer Support: Available 24/7 via live chat on our website
• WhatsApp Support: Contact details available on website
• Telegram Support: Join our official support channel

We aim to respond to all privacy-related inquiries within 5 business days. For data access, correction, or deletion requests, please allow up to 30 days for processing after identity verification.

Complaints: If you believe pama26 has not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant Indonesian data protection authority.