At pgraja, your privacy is a fundamental right, not an afterthought. This Privacy Policy explains in plain, precise terms what personal data we collect when you use our platform, why we collect it, how we use and protect it, who we may share it with, and what rights you hold over your own information. Please read this document carefully before registering an account.
Six core principles that define how pgraja handles every piece of data entrusted to us by our users.
All data transmitted between your device and the pgraja platform is protected by 256-bit SSL/TLS encryption. Sensitive fields — including passwords and payment details — are additionally hashed or tokenized at rest so that raw values are never stored in readable form.
pgraja does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes — ever. Data shared with third-party service providers is strictly limited to what is necessary to deliver the service you have requested and is governed by binding data-processing agreements.
We collect only the personal data that is strictly necessary for account administration, identity verification (KYC), payment processing, fraud prevention, and customer support. We do not collect data speculatively or for purposes beyond those stated in this Policy.
You have the right to access, correct, export, or request deletion of your personal data at any time. Requests are processed within 30 days of receipt. Our support team is available 24/7 to assist with any data rights enquiry — in English or Indonesian.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory obligations. Account data is deleted within 90 days of a verified account-closure request, subject to mandatory legal holds.
Marketing communications from pgraja — including email newsletters, SMS promotions, and push notifications — are entirely opt-in. You may withdraw consent and opt out of all marketing at any time through your Account Settings or by contacting our support team, with effect immediately.
The following defined terms are used throughout this Privacy Policy:
This Privacy Policy applies to all Personal Data collected by pgraja in connection with the Platform, including data collected through account registration, KYC verification, deposits and withdrawals, gameplay, customer support interactions, marketing communications, and passive data collection via cookies and analytics tools.
This Policy applies to Users accessing the Platform from Indonesia and to any other jurisdiction where pgraja operates or offers services. Where applicable local data-protection law imposes obligations beyond those described in this Policy, pgraja will comply with those additional requirements.
pgraja collects Personal Data in the following categories:
| Category | Specific Data Points | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration & KYC |
| Contact Data | Email address, Indonesian mobile number, residential address | Registration & KYC |
| Document Data | KTP / passport / driving licence scans, proof-of-address documents | KYC verification |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Deposit / withdrawal |
| Account Data | Username, hashed password, account balance, bonus status, wagering history | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser type, session tokens | Automatic — every visit |
| Behavioural Data | Pages visited, games played, bet patterns, session duration, click paths | Automatic — during session |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
We do not collect special-category data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless expressly required by applicable law and with your explicit prior consent.
pgraja collects Personal Data through the following channels:
pgraja processes your Personal Data for the following clearly defined purposes:
pgraja relies on one or more of the following legal bases when processing your Personal Data:
| Legal Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing required to perform our contract with you — including account creation, payment processing, and delivery of gaming services. |
| Legal Obligation | Processing required to comply with applicable AML, KYC, responsible gaming, and data-retention regulations. |
| Legitimate Interests | Processing for fraud prevention, platform security, abuse detection, and service improvement — where our interests do not override your fundamental rights. |
| Consent | Processing for marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing. |
pgraja does not sell your Personal Data. We share data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:
pgraja uses cookies and similar technologies to operate the Platform, remember your preferences, maintain session security, and gather anonymised analytics. The following cookie categories are in use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security checks. Cannot be disabled without breaking core Platform functionality. | Session / up to 24 hours |
| Functional | Remembering your language preference, odds format, and display settings across sessions. | Up to 12 months |
| Analytics | Aggregated, anonymised data on page visits, traffic sources, and user journeys — used to improve Platform design and performance. | Up to 24 months |
| Security & Fraud | Device fingerprinting signals used by our fraud-prevention systems to detect and block suspicious activity. | Up to 6 months |
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your account and using core Platform features. Disabling analytics or functional cookies will not affect your ability to bet or transact on the Platform.
pgraja implements a layered security architecture to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:
While we take every reasonable precaution to protect your data, no internet-based system can guarantee absolute security. You are encouraged to use a strong, unique password for your pgraja account and to enable any two-factor authentication options made available to you.
pgraja retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with legal, regulatory, or contractual obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML / regulatory compliance |
| KYC Documents | Duration of account + 5 years post-closure | AML / regulatory compliance |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Customer Support Records | 3 years from last interaction | Dispute resolution & quality assurance |
| Behavioural & Analytics Data | 24 months (anonymised after 6 months) | Platform improvement (legitimate interests) |
| Marketing Consent Records | Until consent withdrawn + 3 years | Legal proof of consent |
| Cookie & Technical Data | As per cookie duration (max 24 months) | Security & functional necessity |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.
As a User of the pgraja platform, you are entitled to exercise the following rights in respect of your Personal Data at any time, free of charge, by contacting our support team:
You may request a copy of all Personal Data we hold about you, along with information on how it is being used, who it has been shared with, and how long it will be retained.
You may request correction of any Personal Data that is inaccurate, incomplete, or out of date. Where data has been shared with third parties, we will notify them of the correction where feasible.
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful — subject to any overriding legal retention obligations.
You may request that we restrict active processing of your Personal Data — meaning we continue to store it but do not use it — while a dispute regarding its accuracy or the lawfulness of processing is being resolved.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a machine-readable export of your Personal Data for transfer to another service provider.
You may object at any time to processing based on legitimate interests, including profiling. You have an absolute right to object to processing for direct-marketing purposes, which we will honour immediately upon receipt of your objection.
The pgraja platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or store Personal Data belonging to any person under the age of 21. If you are under 21, you must not use or attempt to access the Platform.
If pgraja becomes aware that Personal Data has been collected from a person under 21 — whether through our own detection, a third-party report, or a parental notification — we will immediately suspend the relevant account, securely delete all associated Personal Data, and, where applicable, report the matter to the appropriate authorities.
Parents or guardians who believe a minor may have created an account on pgraja are encouraged to contact our support team immediately at [email protected]. We treat all such reports as urgent and action them within 24 hours of receipt.
pgraja's primary data infrastructure is located in secure data centres in the Asia-Pacific region. In certain circumstances, Personal Data may be transferred to, stored in, or processed in jurisdictions outside Indonesia — for example, where a third-party service provider (such as a KYC platform or analytics tool) operates infrastructure in another country.
Where such transfers occur, pgraja ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that required under applicable data-protection principles. These safeguards may include:
You may request information about the specific safeguards applied to any cross-border transfer of your Personal Data by contacting our support team.
The pgraja platform does not contain links to external third-party websites. Should game-studio content embedded within the Platform contain links to external resources, pgraja accepts no responsibility for the privacy practices or data-handling policies of those external destinations.
We recommend that you review the privacy policy of any third-party service before submitting Personal Data to it. pgraja's Privacy Policy applies exclusively to the pgraja Platform and does not extend to any third-party website, application, or service.
pgraja may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes — meaning changes that significantly affect your rights or the way we use your Personal Data — we will:
Minor clarifications, typographical corrections, or updates that do not materially affect your rights may be published without specific prior notice, taking effect immediately upon publication. We encourage you to review this page periodically to remain informed of how pgraja manages your Personal Data.
If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which pgraja handles your Personal Data, please contact our Data Privacy team through the following channel:
Data Privacy Enquiries:
[email protected]
Subject line: "Privacy Policy Enquiry" — please include your registered account username and a brief description of your query. We aim to respond to all privacy-related correspondence within 5 business days.
If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data-protection authority in your jurisdiction. Our support team can provide guidance on the appropriate regulatory contact for your location upon request.
pgraja takes all privacy complaints seriously and is committed to resolving any concerns in a fair, timely, and transparent manner. We encourage Users to contact us directly in the first instance so that we have the opportunity to address your concern before it is escalated to a regulatory body.
Our support team is available around the clock to address any privacy-related queries. You may also review our full Terms & Conditions or visit our FAQ for quick answers to common questions about your account and data.