pui68 Privacy Policy

Overview

pui68 is committed to handling the personal data of its Members and visitors with the highest standards of care, transparency, and security. We collect only the data that is genuinely necessary to operate the platform, deliver our services, comply with our legal and compliance obligations, and improve the Member experience over time.

This Privacy Policy is written in plain, professional English to ensure that Members based in Indonesia — and internationally — can understand without difficulty how their personal information is handled. Where this Policy uses technical or legal terms, we provide clear explanations alongside them.

This Policy should be read alongside the pui68 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and are available in full on the pui68 platform.

Data Controller

For the purposes of applicable data protection legislation, pui68 acts as the data controller in respect of all personal data collected via the https://pui68.bet website and associated services. As data controller, pui68 determines the purposes for which and the manner in which your personal data is processed.

pui68 operates as an internationally licensed online gambling platform primarily serving players resident in Indonesia. The platform complies with applicable international standards governing the protection of personal data held in connection with online gambling operations.

All enquiries relating to this Privacy Policy, including requests to exercise your data rights (set out in Section 10 below), should be directed to the pui68 Data Protection contact at [email protected].

Data We Collect

pui68 collects the following categories of personal data from Members and, in certain cases, from unregistered visitors to the platform:

How We Collect Data

pui68 collects personal data through the following methods:

• Direct submission: Data you provide when completing the pui68 registration form, updating your account profile, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team.
• Automated technical collection: Data gathered automatically when you access the platform, including IP address, device identifiers, browser fingerprint data, session logs, and cookie data as described in Section 9 below.
• Payment processors: Confirmation data returned by local Indonesian payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) when a deposit or withdrawal transaction is initiated or completed.
• KYC and fraud prevention partners: Identity verification results and risk-scoring data returned by our third-party KYC service providers following document submission.
• Game studio providers: Session and outcome data relayed by licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe) in respect of games played on the pui68 platform.
• Publicly available sources: In limited circumstances, pui68 may cross-reference data against publicly available registries for fraud prevention and compliance purposes.

Purpose & Legal Basis for Processing

pui68 processes your personal data only where a valid legal basis exists for doing so. The table below summarizes the primary purposes of processing and the corresponding legal basis for each:

Sharing Your Data

pui68 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We share personal data only in the following controlled circumstances:

• Payment service providers: We share the minimum necessary financial and identity data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposit and withdrawal transactions. Each provider is bound by their own privacy and data security standards.
• KYC and identity verification partners: We share identity documents and related data with accredited KYC service providers strictly for the purpose of verifying your identity and age (21+) as required by our licensing obligations. These partners are contractually prohibited from using your data for any other purpose.
• Game studio providers: Game studios supplying content to pui68 (including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, and Spribe) may receive your Member session ID and relevant game-play data to operate their games on the platform. Studios do not receive your full identity or financial data.
• Fraud prevention and security services: We may share technical data (including IP addresses and device fingerprints) with specialist fraud detection partners to protect the platform against account takeover, bonus abuse, and money laundering activity.
• Legal and regulatory authorities: pui68 will disclose personal data to law enforcement, regulatory bodies, or licensing authorities where required to do so by applicable law, court order, or our international gaming license conditions. We will notify affected Members of such disclosures where permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets involving pui68, Member personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections. Members will be notified of any such transfer that materially affects the handling of their personal data.

Data Retention

pui68 retains personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, subject to the following retention principles:

• Active accounts: Personal data associated with an active pui68 Member account is retained for the full duration of the Member relationship and for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping requirements applicable to internationally licensed gambling operators.
• KYC documents: Identity verification documents are retained for a minimum of five years from the date of submission, or longer if required by applicable regulatory obligations.
• Transaction records: Deposit, withdrawal, and bet history records are retained for a minimum of five years to support audit, dispute resolution, and regulatory reporting obligations.
• Support correspondence: Live chat logs and email records are retained for a minimum of two years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing data: Where you have opted in to marketing communications, your marketing preferences and related data are retained until you withdraw your consent, at which point they are removed from active marketing lists within 30 days.
• Technical and analytics data: Aggregated and anonymized platform usage data may be retained indefinitely for statistical and product improvement purposes, as it cannot be linked back to any individual Member.

When data is no longer required for any active purpose and its retention period has expired, pui68 will securely delete or anonymize it using industry-standard data destruction practices.

Security Measures

pui68 employs a layered set of technical and organizational security measures designed to protect Member personal data against unauthorized access, accidental loss, alteration, or disclosure. Key measures include:

• SSL/TLS encryption: All data transmitted between your browser and the pui68 platform is encrypted using 256-bit SSL/TLS protocols. This applies to login sessions, deposit and withdrawal flows, account updates, and support communications.
• Data encryption at rest: Sensitive data stored on pui68 servers — including password hashes, KYC documents, and financial records — is encrypted using AES-256 or equivalent standards.
• Access controls: Access to Member personal data within pui68's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and undergo regular security awareness training.
• Intrusion detection and monitoring: pui68's technical infrastructure is monitored continuously for anomalous activity, unauthorized access attempts, and potential data breaches using automated detection systems.
• Password security: Member passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. pui68 staff cannot retrieve your password; only a password reset process is available.
• Two-factor authentication (2FA): pui68 offers optional 2FA for Member accounts to provide an additional layer of protection against unauthorized login. Members are strongly encouraged to enable 2FA via their account security settings.

Cookies & Tracking Technologies

pui68 uses cookies and similar tracking technologies to operate the platform, maintain your session, analyze usage patterns, and deliver a personalized Member experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential to the operation of the platform and cannot be disabled. They include session authentication tokens, security tokens, and load-balancing cookies. Without these cookies, pui68 cannot function.
• Functional cookies: These cookies remember your preferences (such as language settings, currency display, and lobby layout) so that your experience is consistent across sessions.
• Analytics cookies: pui68 uses aggregated, anonymized analytics data to understand how Members navigate the platform, which games are most popular, and where improvements can be made. Individual browsing behavior is not shared with third-party advertisers.
• Fraud prevention cookies: Certain cookies support our fraud detection systems by maintaining a consistent device fingerprint across sessions, helping us identify account takeover attempts and bonus abuse patterns.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the pui68 platform. Disabling functional or analytics cookies will not prevent access but may affect your experience.

Your Data Rights

As a pui68 Member, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account username.

• Right of access: You have the right to request a copy of the personal data pui68 holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may also update certain account details directly via the pui68 account settings page.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records (see Section 7). Data subject to mandatory retention periods cannot be erased before those periods expire.
• Right to restrict processing: You may request that pui68 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

pui68 will respond to all data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Minors

pui68 enforces a strict minimum age of 21 years for all Members. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.

If pui68 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all associated data will be reviewed, and any funds held in that account will be handled in accordance with applicable legal requirements. The account will be permanently closed without exception.

Parents and guardians who believe that a minor in their care has accessed or registered on the pui68 platform are encouraged to contact us immediately at [email protected] so that the matter can be addressed promptly. pui68 also provides parental control guidance in its Responsible Gaming Policy.

Third-Party Links

The pui68 platform does not contain links to external third-party websites for commercial or advertising purposes. Game content and payment processing functionality is delivered through embedded integrations with licensed partners (game studios and payment service providers), not through outbound links to third-party sites.

In the event that any third-party content or functionality is ever embedded within the pui68 platform in future, those third parties will operate under their own privacy policies, for which pui68 accepts no responsibility. Members would be informed of any such change via an amendment to this Privacy Policy.

Amendments to This Policy

pui68 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform functionality, or applicable legal requirements. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are significant — for example, a new category of data being collected or a new purpose for processing — pui68 will notify active Members by email or via a prominent notice on the platform prior to the change taking effect. Continued use of pui68 following publication of a revised Privacy Policy constitutes acceptance of the updated terms.

We encourage Members to review this Privacy Policy periodically to remain informed about how pui68 protects their personal data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by pui68, please reach out to our support team using the details below:

• Email (Data Rights & Privacy): [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24/7 through the pui68 Member dashboard after login. Native Indonesian-speaking agents are available at all hours across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.
• Response time: pui68 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days.

pui68 takes privacy complaints seriously. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction of residence.