Privacy Policy

1. Introduction

erek18 ("we," "us," "our") operates the online gaming platform accessible at https://erek18.cam. As part of providing our services to players across Indonesia — including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and beyond — we necessarily process certain personal information. We take that responsibility seriously.

This Privacy Policy sets out, in plain and formal English, what personal data we collect from users, the purposes for which that data is processed, how it is stored and protected, who it may be shared with, and what rights you have with respect to your information. erek18 is committed to handling all personal data in a manner consistent with internationally recognised privacy principles and applicable data protection regulations.

This policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together form the complete framework governing your relationship with erek18.

2. Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living individual, including name, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" — erek18, as the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" — A third party that processes personal data on behalf of erek18 under a contractual obligation.
• "User" / "you" — Any individual who registers for, accesses, or uses erek18's services.
• "KYC" — Know Your Customer; the identity verification process erek18 uses to confirm user identity and comply with regulatory requirements.
• "Cookies" — Small text files stored on your device by your browser that help us recognise returning visitors and remember preferences.

3. Data We Collect

erek18 collects the minimum data necessary to deliver and improve our services securely. The categories of personal data we collect include, but are not limited to, the following:

4. How We Collect Your Data

erek18 collects personal data through several channels:

• Direct Submission: Information you actively provide during account registration, profile updates, deposit and withdrawal requests, bonus opt-ins, and KYC document submissions.
• Automated Technologies: When you visit our website, our servers automatically log technical data including your IP address, browser, device type, pages visited, time spent, and referring URLs. This is collected via server logs, cookies, and similar tracking technologies.
• Payment Processors: When you conduct a financial transaction, we receive confirmation data from payment partners (banks and e-wallet providers) sufficient to reconcile and process your transaction.
• Customer Support Interactions: Records of your communications with our support team — including live chat transcripts, email correspondence, and any documents you share — are retained to resolve disputes and improve service quality.
• Third-Party Identity Verification Services: For KYC purposes, we may use specialist identity verification providers who help us validate government-issued documents and confirm your identity electronically.

5. Purpose of Data Processing

erek18 processes personal data for the following specific, legitimate purposes:

• Account Creation and Management: To register your account, verify your identity, and maintain your account in good standing throughout your relationship with erek18.
• Service Delivery: To process bets, facilitate deposits and withdrawals via local Indonesian payment methods, operate live casino streams, deliver slot games, and provide all other gaming services.
• KYC and Fraud Prevention: To comply with our regulatory obligations by verifying user identity, detecting and preventing fraudulent activity, money laundering, and underage gambling.
• Customer Support: To respond to your inquiries, resolve complaints, and deliver a high-quality, personalised support experience.
• Responsible Gaming: To monitor gaming behaviour, identify potential signs of problem gambling, enforce self-exclusion requests, and apply deposit or wagering limits requested by users.
• Platform Security: To protect the integrity of our systems, prevent unauthorised access, detect anomalous behaviour, and maintain the security of all users' accounts and funds.
• Legal Compliance: To meet our obligations under applicable laws and regulations, including record-keeping requirements, responding to lawful requests from authorities, and enforcing our Terms & Conditions.
• Service Improvement and Analytics: To analyse usage patterns, understand player preferences, test new features, and continuously improve the erek18 platform experience.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and updates about erek18 services. You may opt out at any time.

6. Legal Basis for Processing

erek18 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable laws, including KYC/AML (anti-money laundering) requirements, fraud prevention obligations, and lawful requests from regulatory authorities.
• Legitimate Interests: Processing that serves erek18's legitimate business interests — such as platform security, fraud detection, and service analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given consent — primarily for direct marketing communications. You may withdraw this consent at any time by contacting our support team, without affecting the lawfulness of any prior processing.

7. Data Sharing and Third Parties

erek18 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with carefully selected third parties in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers who process personal data on our behalf under binding contractual agreements that restrict them from using your data for any purpose other than delivering the contracted service. These providers include:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the financial data strictly necessary to process your transactions.
• Identity Verification Providers: Specialist KYC and document verification services that help us confirm user identity and comply with our regulatory obligations.
• Game Software Providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive anonymised session and wagering data necessary to operate their games on our platform.
• IT Infrastructure and Hosting: Cloud hosting and content delivery providers that store and serve our platform data under strict security and confidentiality obligations.
• Customer Support Technology: Live chat and ticketing system providers used to deliver our 24/7 Indonesian-speaking support service.
• Analytics Providers: Anonymised or pseudonymised usage data may be processed by analytics platforms to help us understand platform performance and user behaviour.

7.2 Legal and Regulatory Disclosure

erek18 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of erek18, our users, or the public. We will take reasonable steps to notify you of any such disclosure unless prohibited by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of erek18's business, personal data may be transferred to the acquiring entity as part of that transaction. We will notify you before your personal data becomes subject to a different privacy policy and provide you with an opportunity to request deletion of your data prior to any such transfer.

8. Cookies and Tracking Technologies

erek18 uses cookies and similar technologies (web beacons, local storage, pixel tags) to provide core platform functionality, remember your preferences, and gather aggregate analytics about how our site is used. The table below summarises the types of cookies we deploy:

You may control cookie behaviour through your browser settings. Disabling strictly necessary cookies will impair or prevent access to the erek18 platform. Disabling functional or analytics cookies will not affect your ability to use core services but may reduce personalisation. Please note that third-party game providers loaded within our platform may set their own cookies, subject to their respective privacy policies.

9. Data Retention

erek18 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our standard retention periods are as follows:

• Active Account Data: Retained throughout the duration of your account and for a minimum of 5 years after the account is closed, in accordance with financial record-keeping obligations.
• Transaction Records: Deposit and withdrawal records, along with associated payment method data, are retained for a minimum of 5 years to comply with anti-money laundering regulations.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years following account closure or the completion of the last transaction, consistent with regulatory requirements applicable to financial services.
• Customer Support Records: Support chat logs, emails, and complaint records are retained for 3 years after the resolution of the relevant matter, to enable dispute resolution and quality review.
• Technical Logs: Server access logs and security event logs are retained for up to 12 months before being automatically purged or anonymised.
• Marketing Consent Records: Records of your marketing consent (or withdrawal thereof) are retained for the lifetime of your account to ensure compliance with your preferences.

When personal data is no longer required for any legitimate purpose and no legal retention obligation applies, erek18 will securely delete or irreversibly anonymise it.

10. Security Measures

erek18 implements a comprehensive, layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), preventing interception by third parties.
• Encrypted Data Storage: Sensitive data at rest — including financial details and identity documents — is stored in encrypted form using AES-256 encryption on access-controlled infrastructure.
• Access Controls: Personal data is accessible only to erek18 staff members who require it to perform their specific job functions. All staff access is authenticated, logged, and regularly audited.
• Multi-Factor Authentication: Internal systems holding sensitive user data require multi-factor authentication for staff access.
• Penetration Testing: Our platform undergoes regular security assessments by independent specialists to identify and remediate vulnerabilities before they can be exploited.
• Fraud Detection Systems: Automated monitoring tools continuously analyse account activity for anomalous patterns indicative of unauthorised access, account takeover, or fraudulent transactions.
• Incident Response: erek18 maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.

While we apply rigorous safeguards, no system is entirely impenetrable. You also have an important role in protecting your own data — please use a strong, unique password for your erek18 account, enable any available account security features, and never share your login credentials with anyone.

11. Your Data Rights

Depending on your jurisdiction and the legal basis under which we process your data, you may have the following rights with respect to your personal information held by erek18:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected] (note: email address is displayed as plain text only). We will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, of which we will notify you in advance.

We may need to verify your identity before fulfilling certain requests to ensure that personal data is not disclosed to unauthorised individuals. This verification step is for your protection.

12. Minors and Age Restriction

erek18's services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage users from creating accounts.

If we become aware that personal data has been collected from a person under 21 without verifiable parental consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered with erek18, please notify our support team immediately so that we can investigate and take appropriate action.

Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gambling services. For guidance on responsible gaming tools and protections, please visit our Responsible Gaming page.

13. International Data Transfers

erek18 primarily processes and stores user data on servers located in secure data centres serving the Southeast Asian region, which ensures low-latency access for our Indonesian user base. In some circumstances, data may be transferred to or accessed by our service providers in other countries — for example, game software providers headquartered in Europe or Malta, or cloud infrastructure providers with globally distributed data centres.

Where such international transfers occur, erek18 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Privacy Policy. These safeguards may include standard contractual clauses, data processing agreements, or other legally recognised transfer mechanisms. We will not transfer your data to a country or territory that does not offer an adequate level of data protection without first implementing appropriate protective measures.

14. Changes to This Privacy Policy

erek18 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or service offerings. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

For significant changes that materially affect how we process your personal data, we will provide prominent notice — either by displaying a notice on our platform or by sending you a direct communication — prior to the changes taking effect. Your continued use of erek18's services after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms.

We encourage you to review this page periodically to stay informed about how erek18 protects your information.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or erek18's data practices, please reach out to our team through the following channels:

• Live Chat: Available 24/7 on the erek18 website — our fastest support channel.
• Email: [email protected] (displayed as plain text only — not a clickable link).
• Response Time: We aim to acknowledge all privacy-related inquiries within 3 business days and resolve them within 30 calendar days.

For matters specifically concerning responsible gaming, self-exclusion, or gambling-related concerns, please refer directly to our Responsible Gaming page, where dedicated resources and tools are available.