Privacy Policy — erek16

The following terms are used throughout this Privacy Policy with the specific meanings defined below:

erek16, operating the online gaming platform accessible at erek16.cam, is the Data Controller responsible for all personal data collected through the platform and its associated services. All queries, requests, and complaints relating to this Privacy Policy should be directed to erek16's Data Protection contact, whose details are set out in Section 14 of this Policy.

Where erek16 engages third-party Data Processors to support its operations — including payment infrastructure providers such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja, as well as game studio partners such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft — those parties act under binding contractual obligations that restrict their use of Player data to the specific services they are engaged to deliver.

erek16 collects personal data through several channels and in several categories, as described in the table below:

erek16 processes personal data only for clearly defined, legitimate purposes. The table below maps each processing purpose to the data categories involved:

erek16 relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to fulfill erek16's obligations under the Player Account Agreement — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, KYC obligations, financial record-keeping requirements, and any lawful order from a competent authority.
• Legitimate Interests: Processing carried out in pursuit of erek16's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your rights and interests.
• Consent: Where erek16 relies on your consent as the legal basis for processing — primarily for sending marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawing marketing consent does not affect your account or your ability to use erek16's services.

erek16 does not sell your personal data. We share personal data with third parties only in the following defined circumstances:

• Payment Processors: To facilitate deposits and withdrawals, erek16 shares necessary financial and identity data with payment service providers including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. These parties act as Data Processors under binding agreements and are prohibited from using your data for any purpose beyond the specific transaction.
• Game Studio Partners: Where game delivery requires real-time interaction with third-party platforms (e.g., Evolution Gaming for live casino, Pragmatic Play for slot games), session-level technical data may be transmitted to those partners to enable game functionality. Personal identification data is not shared with game studios beyond what is technically necessary.
• Identity Verification Services: erek16 may use accredited third-party KYC and identity verification services to process and validate identity documents. These services operate under strict data-processing agreements and do not retain your documents beyond the verification process.
• Regulatory and Law Enforcement Authorities: erek16 will disclose personal data to competent governmental or regulatory authorities where required to do so by law, court order, or lawful regulatory request. We will notify affected Players where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets, Player personal data may be transferred to the acquiring entity. Players will be notified of any such transfer and of any material changes to how their data will be processed.

erek16 operates on internationally distributed infrastructure. As a result, personal data collected from Indonesian players may be processed or stored on servers located outside Indonesia. Where such international transfers occur, erek16 ensures that appropriate safeguards are in place, including:

• Data-processing agreements incorporating standard contractual clauses that bind the receiving party to data protection standards equivalent to those applied by erek16.
• Transfers only to jurisdictions or entities that maintain adequate technical and organizational security measures consistent with internationally recognized data protection standards.
• Regular audits of data processors and sub-processors to confirm continued compliance with contractual data protection obligations.

You may request further information about specific international transfer safeguards by contacting erek16's data protection contact at the address set out in Section 14.

erek16 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with an identifiable individual.

erek16 implements a multi-layered approach to data security, incorporating both technical and organizational safeguards designed to protect your personal data against unauthorized access, loss, alteration, or disclosure:

• Encryption: All data transmitted between your device and erek16's servers is protected by 256-bit SSL/TLS encryption. Stored personal and financial data is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within erek16's systems is restricted to staff and contractors with a legitimate operational need. Role-based access controls and multi-factor authentication are enforced for all internal systems that handle Player data.
• Penetration Testing and Audits: erek16 engages independent security professionals to conduct regular penetration testing and vulnerability assessments of its platform infrastructure. Findings are remediated within defined timeframes based on severity.
• Incident Response: erek16 maintains a documented data breach response procedure. In the event of a security incident that poses a material risk to Players, affected individuals will be notified promptly with information on the nature of the incident and recommended protective actions.
• Staff Training: All personnel with access to Player data receive mandatory data protection and security awareness training at onboarding and on an ongoing annual basis.

While erek16 takes all reasonable steps to protect your data, no system is entirely impenetrable. We encourage Players to also take personal responsibility for their account security — including using a strong, unique password and enabling any available two-factor authentication options.

erek16 uses cookies and similar tracking technologies to operate the platform effectively, measure its performance, and improve the experience for Players. The categories of cookies used on erek16 are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without preventing core platform functionality from working correctly.
• Functional Cookies: Enable enhanced features such as remembering your preferred language, currency display settings, and game preferences between sessions. These cookies improve convenience but are not essential to basic operation.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Players navigate and use the platform — including which pages are visited most frequently, average session durations, and common exit points. This data helps erek16 identify and fix usability issues and improve the overall platform experience.
• Responsible Gaming Cookies: Store session-duration data locally to enable real-time session alerts and reality check prompts where a Player has activated these responsible gaming tools in their account settings.

erek16 does not use third-party advertising cookies or tracking pixels that report Player behavior to external advertising networks. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.

As a Player whose personal data is processed by erek16, you hold the following rights. To exercise any of these rights, contact erek16's data protection team using the details in Section 14. We will respond within 30 calendar days of receiving a valid request.

erek16 enforces a strict 21+ only policy. The platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. Age confirmation is obtained at the point of account registration and is subsequently verified through the KYC process.

If erek16 discovers or has reasonable grounds to believe that personal data has been collected from an individual under 21 years of age, it will immediately suspend the associated account, cease processing the data, and take prompt steps to securely delete it. Any funds deposited by an underage user will be returned through the original payment channel where technically feasible.

Parents and guardians who believe a minor may have registered on erek16 are encouraged to contact our support team immediately at [email protected]. We treat such reports as a priority and will investigate and act on all credible reports without delay.

erek16 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The version number and effective date at the top of this document indicate the currently applicable version.

Where changes are material — for example, where we introduce a new category of data processing or a new class of third-party sharing — erek16 will notify registered Players by email to the address on file, or via a prominent in-platform notification, prior to the changes taking effect. For non-material changes, the updated policy will be published on this page and the effective date updated accordingly.

Continued use of the erek16 platform following the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with a material change, you may close your account by contacting our support team before the change takes effect.

For any questions, concerns, or formal requests relating to this Privacy Policy or to the personal data erek16 holds about you, please contact our data protection team using the following details:

• Email: [email protected] — please include "Privacy Request" or "Data Rights" in the subject line for prioritized routing.
• Response Time: erek16 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Support Hours: Our data protection team operates 24/7 in WIB (Western Indonesia Time, UTC+7), with extended coverage across WITA (UTC+8) and WIT (UTC+9) time zones.

If you are not satisfied with erek16's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. erek16 will cooperate fully with any such regulatory inquiry.

For general platform support, responsible gaming requests, or account queries unrelated to data privacy, please visit our FAQ page or contact support directly at [email protected].