At pg500, protecting your personal data is a core responsibility — not an afterthought. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and what rights you have as a player registered on the pg500 platform from Indonesia.
Quick Summary:
This Privacy Policy applies to all personal data processed by pg500 Group ("the Company", "we", "us", "our") in connection with the pg500 online betting and gaming platform accessible at pg500.cam, including all sportsbook, live casino, slot, and togel (Indonesia's traditional numbers lottery) products offered through the platform.
pg500 Group acts as the data controller in respect of all personal data collected from players, prospective players, and website visitors. As data controller, pg500 Group determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.
This Policy covers personal data collected from players residing in Indonesia, the primary market served by pg500. References to "you" and "your" refer to any individual whose personal data is processed by pg500 Group in connection with their use of, or application to use, the pg500 platform.
This Privacy Policy should be read alongside the Terms & Conditions, which govern your use of the pg500 platform as a whole. By registering an account or continuing to use the pg500 platform, you acknowledge that you have read and understood this Privacy Policy.
pg500 collects only the personal data that is necessary to provide you with a safe, compliant, and high-quality gaming experience. The categories of personal data we collect are described in the table below.
| Category | Examples | Mandatory / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government-issued ID number (KTP / SIM / Passport) | Mandatory |
| Contact Data | Email address, Indonesian mobile number (registered to your identity), residential address in Indonesia (city, province, postal code) | Mandatory |
| KYC Documents | Scanned copy or photograph of national identity card (KTP), passport, driver's licence (SIM); selfie with ID; proof of address (bank statement, utility bill, or similar issued within 90 days) | Mandatory (before first withdrawal) |
| Financial Data | Indonesian bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history (deposits, withdrawals, wager amounts in IDR) | Mandatory |
| Account & Gaming Data | Username, encrypted password hash, account registration date, login timestamps, session durations, game history, betting patterns, bonus redemptions, responsible gaming settings | Mandatory (auto-generated) |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, geolocation (country/city level), referral URL | Mandatory (auto-collected) |
| Communications Data | Records of live chat conversations, support ticket history, WhatsApp messages sent to pg500 support, email correspondence | Collected when you contact us |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and platform push notifications | Optional |
pg500 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health information, except where explicitly required by responsible gaming obligations (e.g., a player's self-disclosed vulnerability for the purpose of implementing protective account measures).
pg500 collects personal data through the following channels and mechanisms:
pg500 processes your personal data only for clearly defined, legitimate purposes. Each processing activity is grounded in one or more of the following legal bases: (a) performance of the contract between you and pg500; (b) compliance with a legal obligation; (c) legitimate interests pursued by pg500 that do not override your fundamental rights; or (d) your explicit consent.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and maintenance | Identity, Contact, Account & Gaming | Contract performance |
| Identity verification (KYC/AML) | Identity, KYC Documents, Financial | Legal obligation |
| Processing deposits and withdrawals | Identity, Financial, Technical | Contract performance |
| Fraud prevention and security monitoring | Identity, Technical, Financial, Gaming | Legitimate interests |
| Responsible gaming monitoring and intervention | Account & Gaming, Communications | Legal obligation / Legitimate interests |
| Customer support and dispute resolution | Identity, Account & Gaming, Communications | Contract performance |
| Platform personalisation and product improvement | Technical, Account & Gaming | Legitimate interests |
| Sending promotional offers and bonus communications | Contact, Marketing Preferences | Consent |
| Regulatory reporting and record-keeping | All categories as required | Legal obligation |
Marketing Communications: You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your Account settings, or by contacting pg500 support. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.
pg500 does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. Personal data is shared with third parties only in the following circumstances, and only to the extent strictly necessary:
All third-party processors engaged by pg500 are required to process personal data only in accordance with pg500's instructions, to implement appropriate technical and organisational security measures, and to delete or return data upon termination of their engagement.
As an internationally operated platform, pg500 may process and store personal data on servers located outside Indonesia. Where personal data is transferred to a jurisdiction that does not offer a level of data protection equivalent to Indonesian standards, pg500 ensures that appropriate safeguards are in place, which may include:
By using the pg500 platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside Indonesia, including data centre locations in Asia-Pacific and Europe, under the safeguards described above.
pg500 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of active account + 5 years after closure | AML / regulatory record-keeping obligations |
| KYC Documents | 5 years from last transaction or account closure | Anti-money-laundering law |
| Financial Transaction Records | 5 years from transaction date | Financial record-keeping requirements |
| Gaming & Betting History | 3 years from account closure | Dispute resolution, responsible gaming audit |
| Customer Support Records | 2 years from last interaction | Complaint handling and quality assurance |
| Technical / Log Data | 12 months | Security monitoring and fraud detection |
| Marketing Preference Records | Until consent is withdrawn + 1 year | Audit trail for consent management |
After the applicable retention period has elapsed, personal data is securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.
pg500 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
Your Responsibilities: While pg500 takes every reasonable precaution to protect your data, the security of your account also depends on you. Use a strong, unique password, enable 2FA, and never share your login credentials with any third party. pg500 will never ask for your password via email, live chat, or WhatsApp.
pg500 uses cookies and similar tracking technologies to operate the platform, remember your session preferences, and analyse how the site is used so that we can improve it. The cookies used on pg500.cam fall into the following categories:
pg500 does not use third-party advertising or behavioural tracking cookies that share your data with external advertising networks. You can manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies may prevent you from logging in or using certain platform features.
As a player on the pg500 platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact pg500's Data Protection team using the details in Clause 14. pg500 will respond to verified requests within 30 days of receipt.
You have the right to request a copy of all personal data pg500 holds about you, along with information about how it is used and with whom it is shared.
You have the right to request correction of any inaccurate or incomplete personal data pg500 holds about you. Some data can be updated directly in your Account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to pg500's legal retention obligations under AML law.
You may request that pg500 temporarily suspend processing of your personal data — for example, while a rectification request is being assessed.
You may request that pg500 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider of your choice.
You may object to processing based on pg500's legitimate interests — including profiling for responsible gaming monitoring — where you believe your individual rights override those interests.
pg500 is strictly an adults-only platform. The minimum age to register and play is 21 years. pg500 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the KYC process, and pg500 uses automated document scanning tools to confirm that identity documents presented during verification reflect an age of 21 or older.
If pg500 discovers or has reasonable grounds to suspect that a player is under 21, the account will be suspended immediately, all pending transactions will be placed on hold, and any winnings accrued during the underage period may be withheld pending investigation. Any personal data collected in connection with an underage account will be retained only for as long as is required by applicable law and then securely deleted.
21+ Only. If you are aware that a minor may be using the pg500 platform, please contact support immediately at [email protected] (plain text — not a clickable link). We take underage access reports with the utmost seriousness.
The pg500 platform may contain links to third-party websites or embedded content from third-party game providers (such as live casino studio streams from Evolution Gaming or slot game frames from Pragmatic Play). pg500 is not responsible for the privacy practices of these third parties, and this Privacy Policy does not apply to data processed directly by them through their own interfaces.
We encourage you to review the privacy policies of any third-party service you interact with through the pg500 platform. Game providers receive only the minimum data necessary to deliver the game session — a pseudonymous session token — and are contractually prohibited from using that data for purposes other than game delivery and fraud prevention within that session.
pg500 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where a change is material — for example, the introduction of a new category of data processing or a new third-party processor with access to sensitive data — pg500 will provide advance notice via the platform's announcement system and/or by email to your registered address, with a minimum of seven (7) days' notice before the change takes effect.
Minor changes — such as typographical corrections, clarifications of existing descriptions, or updates to third-party processor lists — may be made without prior notice and take effect upon publication. The "Effective Date" at the top of this page reflects the date of the most recent substantive revision.
Your continued use of the pg500 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you should cease using the platform and request account closure before the effective date.
If you wish to exercise any of the data rights described in Clause 10, have a question about how pg500 handles your personal data, or wish to raise a data protection complaint, please contact the pg500 Data Protection team through any of the following channels:
pg500 commits to acknowledging all data rights requests within 3 business days and providing a substantive response within 30 calendar days of verifying your identity. Where a request is complex or involves a large volume of data, pg500 may extend this period by a further 60 days, with written notification of the extension provided within the initial 30-day period.
If you are not satisfied with pg500's response to a data protection complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.
Identity Verification for Data Rights Requests: To protect your privacy, pg500 must verify your identity before acting on any data rights request. You will be asked to confirm your registered email address and provide one additional piece of identifying information (such as your registered Indonesian mobile number or the last four digits of your KTP number) before we process your request.
Six core principles that underpin every data protection decision we make at pg500.
All data transmitted between your device and pg500's servers is secured with TLS 1.3. Your KYC documents and financial records are stored with AES-256 encryption at rest — the same standard used by international banks.
pg500 will never sell, rent, or broker your personal data to third-party advertisers, data brokers, or any commercial entity. Your data is used exclusively to operate and improve the pg500 platform for you.
Access, correct, export, or delete your data at any time. pg500's Data Protection team responds to all verified requests within 30 days — and acknowledges them within 3 business days.
We collect only what is strictly necessary to deliver our services and meet our legal obligations. No superfluous data fields, no speculative collection — just the information required to keep your account secure and your transactions processing smoothly.
Every category of data pg500 holds has a defined retention period. When that period expires, data is securely and permanently deleted. We do not hold personal data indefinitely — only for as long as the law or our contract with you requires.
pg500 applies internationally recognised data protection principles — purpose limitation, storage limitation, accuracy, integrity, and confidentiality — to all personal data we process, regardless of where it is stored.
Your data is protected. Your transactions are encrypted. Your rights are guaranteed. Now explore everything pg500 has to offer — from live sportsbook action on BRI Liga 1 and the Champions League, to hundreds of premium slot titles, live casino tables, and togel draws.