erek22 Privacy Policy

This page describes what we collect when you use erek22 and how we keep that data protected. We gather information necessary for account creation, identity verification, payment processing, fraud prevention, and compliance with banking and legal requirements. Our data practices apply uniformly across all erek22 products: sportsbook (Liga 1, Piala AFF, Champions League), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slot games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports markets (Mobile Legends, Free Fire, PUBG Mobile).

We encrypt all personal data in transit and at rest. We limit access to authorized staff only. We do not sell your data to marketers or advertisers. We share information with payment processors (QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) solely to process deposits and withdrawals, and with banking and regulatory authorities only as required by law. Our data retention policy reflects legal and operational requirements; we explain timelines below.

If you have questions about this policy, contact our support team via live chat or email. For formal data-protection inquiries, use the Legal Inquiry channel in your Account Settings. We respond to data-access requests and deletion requests within 30 days where legally permitted.

Data We Collect on erek22

We collect several categories of information when you interact with erek22. During account creation, we collect your email address, chosen password, and phone number. During Mobile Verification, we collect your full name, date of birth, and a photograph of your government-issued ID (passport, national ID, or driver's license). We store all verification data encrypted and accessible only to our compliance team.

When you deposit or withdraw, we collect payment method details (which bank, which wallet provider, account holder name). We do not store full credit-card numbers; payment processors handle card data separately under their own security standards. We log the date, time, amount, and status of every transaction for audit and dispute resolution.

We collect your betting and gaming activity: entries you place on Liga 1 fixtures, Piala Indonesia markets, or esports tournaments; hands you play on live blackjack or roulette; spins on Aviator or Mahjong Ways. We track your balance, winnings, and losses. We collect your IP address, device type, browser version, and operating system for security and fraud-prevention purposes. We may collect location data (city-level, not precise GPS) from your IP address to verify you are in a supported jurisdiction.

How We Use Your Data

We use your data for core operational purposes: account creation and authentication, Mobile Verification and identity confirmation, deposit and withdrawal processing, and settlement of bets and games. We use betting and gaming history to generate your transaction statements and account summaries, which you can view in your Account History at any time.

We use device and network data for fraud prevention, account-security monitoring, and jurisdiction verification. If we detect unusual activity (e.g., login from an unexpected country, repeated failed login attempts), we may flag or lock your account temporarily pending manual review. We use this data to comply with banking regulations and anti-money-laundering (AML) requirements: we report suspicious activity to relevant authorities as required by law.

We use your contact information (email, phone) to send you transactional messages: confirmation of deposits, withdrawal status updates, settlement notices, and security alerts. We do not send marketing or promotional emails without your explicit consent. You can manage email and SMS preferences in your Account Settings.

Third-Party Data Processors

We work with several third-party services that handle your data on our behalf. Payment processors (QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive your payment details to process deposits and withdrawals. These providers operate under their own privacy policies and data-protection standards; we recommend reviewing their terms before using their services.

We use third-party identity-verification vendors to cross-reference government-issued IDs during Mobile Verification. These vendors store verification data temporarily (typically 30–90 days) for fraud-prevention purposes, then delete it. They do not use your data for other purposes without our explicit authorization.

We may use third-party analytics and security vendors to monitor platform performance, detect fraud, and prevent account takeover. These vendors receive anonymized or pseudonymized data and do not have access to your full personal information. We contractually require all third-party processors to maintain data security standards equivalent to our own and to delete or return your data upon termination of service.

Data Retention

We retain your account credentials and verification data (name, date of birth, government ID) for the lifetime of your account plus five years after account closure. This retention period reflects banking regulations and potential dispute-resolution timelines. If you request account deletion, we retain a minimal record (encrypted ID, closure date) for regulatory and audit purposes but delete all other personal data within 30 days.

We retain betting and gaming history (transaction records, bets placed, settlements) for seven years after the transaction date, as required by banking and financial-regulatory standards. We retain payment details (bank names, wallet providers) for five years after your final transaction. We retain device and network logs (IP address, login records, device fingerprints) for one year; after that, we retain only anonymized aggregates for security trend analysis.

We retain dispute-related correspondence (support emails, chat logs, settlement investigations) for five years from resolution date. We retain any data subject to legal hold (e.g., data requested by a regulator or covered by a court order) indefinitely until the hold is lifted.

Cookies and Tracking

We use cookies to maintain your login session, remember your language preference, and enable core platform functionality. Session cookies expire when you log out or after subject to verification of inactivity. Persistent cookies (e.g., for language or theme preference) expire after 12 months. We do not use third-party tracking cookies for advertising or behavioral profiling.

We use first-party analytics (hosted on our own servers, not third-party platforms like Google Analytics) to understand how users navigate erek22, which features are used most, and where performance bottlenecks occur. This data is anonymized and does not identify individual users. You can opt out of analytics cookies by disabling cookies in your browser, though this may limit platform functionality.

Your Rights on erek22

You have the right to access all personal data we hold about you. Submit a data-access request via the Legal Inquiry channel in your Account Settings; we respond within 30 days with a downloadable copy of your data (email address, phone number, betting history, transaction records, etc.). We provide this data in a standard format (CSV or JSON) so you can review or transfer it to another service.

You have the right to correct inaccurate data. If you notice an error in your account name, date of birth, or other personal information, contact our support team immediately. We correct verified data within five business days.

You have the right to request deletion of non-essential data. We cannot delete verification data (government ID, date of birth) during your account lifetime, as this is required for fraud prevention and regulatory compliance. However, you can request deletion of device and network logs, analytics data, or other non-essential information. We process deletion requests within 30 days where legally permitted. Account closure requests are honored within five business days; we retain only minimal regulatory records after closure.

Security Measures

We encrypt all personal data in transit using TLS 1.2 or higher. We encrypt data at rest using AES-256 encryption. We store encrypted data on servers in secure, access-controlled facilities. We limit access to personal data to authorized compliance and technical staff on a need-to-know basis. All staff sign confidentiality agreements and undergo background checks.

We implement multi-factor authentication (SMS verification, email confirmation) for sensitive account changes (password reset, withdrawal method change). We monitor for unauthorized access attempts and lock accounts temporarily if we detect suspicious activity. We conduct regular security audits and penetration testing to identify and remediate vulnerabilities.

Despite our security measures, no system is completely risk-free. If we detect a data breach affecting your personal information, we notify you within 30 days via email and provide guidance on protective steps. We report breaches to relevant regulatory authorities as required by law.

International Data Transfer

Our servers may be located outside your country of residence. By using erek22, you consent to the transfer of your data to countries where our servers are hosted. We ensure that data transfers comply with applicable data-protection laws. If your jurisdiction requires specific safeguards (e.g., Standard Contractual Clauses or Binding Corporate Rules), we implement those safeguards. If you have concerns about international data transfer, contact our support team or legal inquiry channel for specific details about server locations and data-protection measures.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new technology, or changes in law. We notify you of material changes via email or a prominent notice on erek22. Your continued use of erek22 after notification constitutes acceptance of the updated policy. We encourage you to review this policy periodically (e.g., annually) to stay informed of how we handle your data.

Contact Us About Privacy

If you have questions about this Privacy Policy, how we collect or use your data, or how to exercise your privacy rights, contact our support team via live chat (business hours) or email (24/7 response within 24 hours on business days). For formal data-protection inquiries or complaints, use the Legal Inquiry channel in your Account Settings. We maintain a formal compliance mailbox for official correspondence; responses are provided within 10 business days.

We take privacy concerns seriously and aim to resolve inquiries promptly. If you are unsatisfied with our response, you may escalate your complaint to the relevant data-protection authority in your jurisdiction.

Summary

We collect data necessary for account creation, verification, payment processing, and fraud prevention. We encrypt all data and limit access to authorized staff. We retain data according to legal and operational requirements (typically 5–7 years for transaction records, lifetime for verification data). We do not sell your data or use it for marketing without consent. We share data with payment processors and identity-verification vendors only as necessary to operate erek22 and comply with law.

You have the right to access, correct, and request deletion of your personal data. You can exercise these rights by submitting a request via the Legal Inquiry channel in your Account Settings. We respond within 30 days. For questions or concerns, contact our support team or compliance mailbox at any time. Services are available only where local law permits; data handling complies with applicable data-protection regulations in supported jurisdictions.