Privacy Policy

1. Introduction

This Privacy Policy governs the collection, use, storage, and disclosure of personal information by pen666 ("we," "us," "our") in relation to the services provided through our website https://pen666.cam and associated platforms. By creating an account and using pen666 services, you consent to the data practices described in this Privacy Policy.

pen666 respects the privacy of all users and is committed to protecting personal data in accordance with international privacy standards and best practices. We recognize that you trust us with sensitive personal information, and we take that responsibility seriously. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of pen666 services.

We reserve the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to registered users and prominently displayed on our website. The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. Your continued use of pen666 services after changes are posted constitutes acceptance of the updated Privacy Policy.

2. Information We Collect

pen666 collects several categories of personal information necessary to provide betting services, comply with legal obligations, and maintain platform security. The information we collect includes:

2.1 Information You Provide Directly

When you register for a pen666 account, you voluntarily provide the following personal information:

• Identity Information: Full legal name, date of birth, gender, and nationality as required for account verification and compliance with anti-money laundering regulations.
• Contact Information: Email address, mobile phone number, and residential address (street address, city, postal code) for communication, verification, and payment processing purposes.
• Account Credentials: Username, password, and security questions used to authenticate your identity and protect account access.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay account numbers), and payment transaction history for deposit and withdrawal processing.
• Verification Documents: Government-issued identification (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and selfie photographs submitted during the KYC (Know Your Customer) verification process.
• Communication Records: Content of communications sent to pen666 customer support via email, live chat, WhatsApp, or in-app messaging, including queries, complaints, and support requests.

2.2 Information We Collect Automatically

When you use pen666 services, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, iOS, Android), browser type and version, screen resolution, and device identifiers (IP address, mobile advertising ID).
• Usage Data: Pages visited on our website, games played, bets placed (amount, type, outcome), features accessed, time spent on platform, click patterns, and navigation paths through the website.
• Location Data: IP address-derived geographic location (country, region, city) used for compliance with geographic restrictions and fraud prevention. pen666 serves primarily Indonesian residents, and location data helps ensure users are accessing from permitted jurisdictions.
• Transaction Data: Detailed records of all deposits, withdrawals, bets placed, winnings, bonuses claimed, and account balance changes for accounting, compliance, and customer service purposes.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies track user preferences, authenticate sessions, analyze site usage, and deliver personalized content. See Section 8 for detailed cookie information.

2.3 Information from Third Parties

pen666 may receive information about you from third-party sources including:

• Payment Processors: BCA, BRI, BNI, Mandiri, and e-wallet providers (OVO, DANA, GoPay, ShopeePay) confirm transaction success, account holder names, and payment method validity.
• Identity Verification Services: Third-party KYC providers verify the authenticity of submitted identification documents and cross-reference data against fraud databases.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other suppliers provide game outcome data, RTP statistics, and player activity within their games.
• Fraud Prevention Services: Specialized security vendors provide risk scoring, device fingerprinting, and behavioral analysis to detect fraudulent activity and protect platform integrity.

3. How We Use Your Personal Data

pen666 uses the personal information collected for the following purposes, all of which are necessary for providing betting services and complying with legal obligations:

3.1 Account Management and Service Delivery

• Creating and maintaining your pen666 user account
• Authenticating your identity during login and securing account access
• Processing deposits, withdrawals, and financial transactions
• Delivering betting services including sports betting, live casino, slots, and togel lottery games
• Tracking bet history, account balances, winnings, and losses
• Managing bonuses, promotions, loyalty programs, and VIP rewards
• Providing customer support and responding to inquiries

3.2 Legal Compliance and Verification

• Verifying your identity and age (21+ requirement) to prevent underage gambling
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detecting and preventing fraud, identity theft, and account takeover
• Investigating suspicious activity, rule violations, or bonus abuse
• Maintaining transaction records as required by gaming regulators and financial authorities
• Responding to legal requests, court orders, or regulatory inquiries
• Enforcing our Terms and Conditions and protecting pen666's legal rights

3.3 Platform Security and Improvement

• Monitoring platform security and protecting against cyberattacks, unauthorized access, and data breaches
• Analyzing usage patterns to detect anomalies, bot activity, or coordinated fraud
• Testing and improving website functionality, user interface, and performance
• Conducting data analytics to understand user preferences and optimize game offerings
• Developing new features, betting markets, and promotional campaigns

3.4 Communication and Marketing

• Sending transactional emails regarding deposits, withdrawals, and account changes
• Notifying you of important updates to Terms, Privacy Policy, or service changes
• Sending promotional communications about bonuses, new games, and special offers (opt-in only - you can unsubscribe at any time)
• Conducting customer satisfaction surveys and collecting feedback (optional participation)

4. Data Sharing and Disclosure

pen666 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict contractual obligations:

4.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive necessary transaction data to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other suppliers receive user IDs and bet data to operate games and calculate outcomes.
• Identity Verification Services: Third-party KYC/AML providers verify submitted documents and conduct identity checks as part of regulatory compliance.
• Cloud Hosting Providers: Secure data centers host pen666 infrastructure and store encrypted user data with strict access controls.
• Customer Support Tools: Live chat platforms, email services, and ticketing systems process support communications between users and pen666 staff.
• Security and Fraud Prevention Services: Specialized vendors analyze transaction patterns, device fingerprints, and behavioral data to detect fraudulent activity.

All third-party service providers are contractually bound to protect your data, use it only for specified purposes, and comply with data protection standards equivalent to those outlined in this Privacy Policy.

4.2 Legal and Regulatory Authorities

pen666 may disclose personal information to government authorities, law enforcement, regulators, or courts when:

• Required by applicable law, regulation, or legal process (court order, subpoena, regulatory request)
• Necessary to comply with gaming licensing requirements or anti-money laundering obligations
• Needed to investigate suspected fraud, illegal activity, or violations of our Terms and Conditions
• Essential to protect the rights, property, or safety of pen666, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy involving pen666, your personal information may be transferred to the acquiring entity. You will be notified of any such transfer, and the acquiring entity will be required to continue protecting your data in accordance with this Privacy Policy or provide you with notice of any changes.

4.4 With Your Consent

Beyond the disclosures described above, pen666 will not share your personal information with third parties without obtaining your explicit consent. You have the right to withdraw consent at any time by contacting our Data Protection Officer.

5. Data Security Measures

pen666 implements comprehensive technical, physical, and organizational security measures to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure:

5.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and pen666 servers is encrypted using 256-bit SSL (Secure Socket Layer) encryption, ensuring data cannot be intercepted during transmission.
• Database Encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption algorithms.
• Secure Authentication: Passwords are hashed using bcrypt with salt, making them unreadable even to pen666 staff. Optional two-factor authentication (2FA) provides additional login security.
• Firewall Protection: Enterprise-grade firewalls monitor and filter all network traffic to prevent unauthorized access attempts.
• Intrusion Detection Systems: Automated systems continuously monitor for suspicious activity, unauthorized access attempts, and potential security threats.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments quarterly to identify and address potential weaknesses.

5.2 Access Controls

• Personal data access is restricted to authorized pen666 employees on a need-to-know basis only
• All staff with data access undergo background checks and sign confidentiality agreements
• Access logs track all interactions with personal data for audit purposes
• Multi-factor authentication is required for all administrative access to systems containing personal data

5.3 Organizational Measures

• Comprehensive data protection policies and procedures govern all data handling activities
• Regular staff training on data protection, privacy best practices, and security protocols
• Incident response procedures outline steps for identifying, containing, and mitigating data breaches
• Data Protection Officer oversees compliance with privacy regulations and investigates privacy complaints

6. Data Retention and Deletion

pen666 retains personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements:

6.1 Active Account Data

While your pen666 account is active, we retain all personal information, transaction history, and usage data to provide ongoing services and support.

6.2 Closed Account Data

When you close your account, pen666 retains certain data for the following periods:

• Identity and Verification Documents: Retained for 5 years after account closure to comply with anti-money laundering and financial regulations requiring transaction record preservation.
• Transaction History: Financial records including deposits, withdrawals, and bet history retained for 7 years for tax compliance, regulatory reporting, and potential dispute resolution.
• Account Credentials and Contact Details: Deleted 90 days after account closure, after which point the account cannot be recovered.
• Marketing Lists: Removed immediately upon account closure or opt-out request.

6.3 Legal Preservation

If your account is involved in ongoing investigations, legal proceedings, or regulatory inquiries, relevant data will be retained until the matter is fully resolved, even if this exceeds standard retention periods.

6.4 Anonymization

After retention periods expire, personal data is either securely deleted or anonymized such that it can no longer be associated with you individually. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

7. Your Privacy Rights

pen666 respects your rights regarding your personal data. Depending on applicable data protection laws, you may have the following rights:

7.1 Right to Access

You have the right to request a copy of all personal information pen666 holds about you. We will provide this data in a structured, commonly used, machine-readable format within 30 days of your request.

7.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances. However, this right is not absolute - we may be required to retain certain data for legal compliance (financial records, KYC documents) even after you request deletion. We will explain any limitations when responding to your request.

7.4 Right to Restrict Processing

You can request that we temporarily suspend processing of your personal data in situations where you contest the accuracy of data, object to processing, or believe data was unlawfully obtained.

7.5 Right to Data Portability

You have the right to receive personal data you provided to pen666 in a portable format and transmit it to another service provider if technically feasible.

7.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. Simply unsubscribe from marketing emails or contact customer support to opt out.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. However, this will not affect the lawfulness of processing conducted before withdrawal.

7.8 Exercising Your Rights

To exercise any privacy rights, contact our Data Protection Officer at [email protected]. Include your full name, registered email address, and specific request details. We will respond within 30 days and may request additional information to verify your identity before processing requests.

8. Cookies and Tracking Technologies

pen666 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit pen666. They contain information about your browsing session, preferences, and authentication status. Cookies do not contain personal information like passwords or financial data.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality, authentication, and security. Cannot be disabled as they are required for pen666 to operate.
• Preference Cookies: Remember your language selection, display settings, and other preferences to enhance user experience.
• Analytics Cookies: Track website usage patterns, popular games, and navigation behavior to improve our platform. Data is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content and measure campaign effectiveness. Can be disabled through cookie settings.

8.3 Managing Cookies

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit functionality - for example, disabling essential cookies will prevent you from logging into your account. Most browsers allow you to block third-party cookies while accepting first-party cookies from pen666.

9. Contact Information and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or pen666's data practices, please contact us:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the pen666 website
• WhatsApp: +62 812 3456 7890 (text only, 08:00-02:00 WIB)

We take all privacy complaints seriously and will investigate and respond within 14 business days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.