Privacy Policy

Introduction

kera90 is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect the personal data you provide when using our online gaming platform at kera90.cam. By creating an account or using our services, you consent to the data practices described in this policy.

This Privacy Policy applies to all users of kera90 services, including Indonesian residents who register accounts, make deposits, place bets, or interact with our customer support team. We process personal data in accordance with applicable Indonesian privacy laws and international data protection best practices.

We recognize that trust is the foundation of our relationship with Indonesian players. That's why kera90 implements industry-leading security measures, transparent data practices, and robust user controls to ensure your information remains confidential and secure at all times.

1. Information We Collect

kera90 collects various types of personal information necessary to provide gaming services, verify your identity, process transactions, and comply with legal obligations. The information we collect falls into the following categories:

Account Registration Information

When you create a kera90 account, we collect:

• Full legal name as it appears on your Indonesian national ID (KTP)
• Date of birth (to verify you are at least 21 years of age)
• Residential address in Indonesia (street, city, province, postal code)
• Email address (primary communication channel)
• Mobile phone number with Indonesian country code (+62)
• Username and encrypted password for account access

Identity Verification Documents (KYC)

To comply with anti-money laundering regulations and verify your identity, we collect:

• Scanned copy or photograph of your Indonesian national ID card (KTP)
• Proof of address documents (utility bills, bank statements) dated within 3 months
• Selfie photograph holding your ID card next to your face
• Additional identification documents if required for enhanced verification

Financial & Transaction Information

When you make deposits, place bets, or request withdrawals, we collect:

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, and other supported banks
• E-wallet account information for OVO, DANA, GoPay, ShopeePay transactions
• Transaction history including deposit amounts, bet details, withdrawal requests, and timestamps
• Payment method verification documents if requested
• Bonus claims, wagering requirements, and promotional participation records

Gaming Activity & Behavioral Data

To improve user experience and detect fraudulent activity, we collect:

• Betting patterns, game preferences, and play history across sports betting, live casino, slots, and other game categories
• Session duration, login frequency, and gameplay timestamps
• Device information including IP address, browser type, operating system, and device identifiers
• Geolocation data to verify you are accessing kera90 from Indonesia
• Responsible gaming settings including deposit limits, session time limits, and self-exclusion preferences

Communication Records

When you contact kera90 customer support, we collect:

• Live chat transcripts, email correspondence, and WhatsApp messages
• Support ticket details including issue descriptions, resolutions, and satisfaction ratings
• Feedback, complaints, and suggestions submitted through our platform

2. How We Use Your Information

kera90 uses the personal information we collect for the following specific purposes:

Service Provision & Account Management

• Create and maintain your kera90 account with secure login credentials
• Process deposits, bets, winnings, and withdrawal requests
• Verify your identity and age (21+ requirement) through KYC procedures
• Enable access to sports betting, live casino, slots, togel, sabung ayam, and other gaming products
• Manage your responsible gaming settings including deposit limits and self-exclusion

Security & Fraud Prevention

• Detect and prevent fraudulent transactions, money laundering, and account abuse
• Monitor betting patterns for signs of match-fixing, collusion, or bonus exploitation
• Verify payment methods and investigate suspicious withdrawal requests
• Maintain audit trails for regulatory compliance and dispute resolution

Customer Support & Communication

• Respond to inquiries via live chat, email, and WhatsApp
• Send transactional notifications including deposit confirmations, withdrawal updates, and bet settlements
• Provide account statements, transaction histories, and responsible gaming reports upon request
• Resolve technical issues, payment disputes, and account-related problems

Marketing & Promotional Activities (With Consent)

• Send promotional offers, bonus notifications, and special event announcements via email or SMS
• Personalize marketing content based on your game preferences and betting history
• Conduct surveys and gather feedback to improve kera90 services
• Display targeted advertisements on our platform based on your interests

Legal Compliance & Regulatory Obligations

• Comply with Indonesian anti-money laundering (AML) and know-your-customer (KYC) regulations
• Respond to lawful requests from government authorities, law enforcement, or regulatory bodies
• Maintain records required under Indonesian gaming and financial services laws
• Enforce our Terms and Conditions and protect kera90's legal rights

Platform Improvement & Analytics

• Analyze user behavior to optimize game selection, interface design, and user experience
• Monitor platform performance, identify technical issues, and improve system reliability
• Generate aggregated statistics and reports (anonymized data with no personal identifiers)

3. Legal Basis for Processing

kera90 processes your personal data based on the following legal grounds:

You have the right to withdraw consent at any time for processing activities based on consent. However, withdrawal does not affect the lawfulness of processing conducted before withdrawal.

4. Data Sharing & Third Parties

kera90 does not sell your personal information to third parties. However, we may share your data with trusted partners and service providers under the following circumstances:

Payment Processors & Financial Institutions

We share necessary transaction information with Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals. These partners are contractually obligated to use your data only for transaction processing and to maintain strict confidentiality.

Game Providers & Technology Partners

Your gameplay data may be shared with game providers such as Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt to deliver live casino, slots, and other gaming content. Game providers use this data solely to operate games and are bound by confidentiality agreements.

Identity Verification Services

We may use third-party KYC verification services to authenticate your identity documents and verify your age. These providers process your ID information under strict data protection agreements and delete documents after verification is complete.

Customer Support Tools

Customer support interactions may be processed through third-party platforms for live chat, email ticketing, and CRM management. These tools are configured to comply with Indonesian data protection standards.

Legal & Regulatory Authorities

We will disclose personal information to Indonesian government authorities, law enforcement agencies, or regulatory bodies when required by law, to comply with legal processes, to protect kera90's rights, or to investigate suspected illegal activities.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and given options regarding your continued use of kera90 services.

5. Data Security Measures

Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and kera90 servers is encrypted using 256-bit SSL/TLS protocols, ensuring that sensitive information cannot be intercepted during transmission.
• Password Hashing: User passwords are hashed using industry-standard bcrypt algorithms with salt, ensuring that even kera90 administrators cannot view your plain-text password.
• Database Encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption standards.
• Firewall Protection: Multi-layered firewall systems protect our infrastructure from unauthorized access and cyber attacks.
• Intrusion Detection Systems: Automated monitoring systems detect and respond to suspicious activity in real-time.
• Regular Security Audits: Independent security firms conduct quarterly penetration testing and vulnerability assessments.

Organizational Security Policies

• Access Controls: Only authorized personnel with legitimate business needs can access personal data, and all access is logged for audit purposes.
• Employee Training: All kera90 staff undergo mandatory data protection training and are bound by confidentiality agreements.
• Secure Data Centers: Personal data is stored in secure, climate-controlled data centers with 24/7 physical security, redundant power supplies, and backup systems.
• Incident Response Plan: We maintain a documented incident response plan to quickly address and mitigate any data breaches or security incidents.

Your Security Responsibilities

While kera90 implements robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Log out after each session, especially on shared devices
• Enable two-factor authentication if available
• Immediately report suspicious activity to customer support
• Avoid accessing your account from public Wi-Fi networks

6. Data Retention & Storage

kera90 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention Periods

Data Deletion

After the applicable retention period expires, kera90 securely deletes or anonymizes personal data. Deletion methods include secure overwriting, cryptographic erasure, and physical destruction of storage media. Anonymized data (data that can no longer identify individuals) may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

As a kera90 user, you have the following rights regarding your personal information:

Right to Access

You have the right to request a copy of the personal data we hold about you. Submit a data access request via email to our support team, and we will provide your data in a structured, commonly-used format within 30 days.

Right to Rectification

If your personal information is inaccurate or incomplete, you can update it directly through your account settings or contact customer support to make corrections.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Note that we may be required to retain certain information for legal or regulatory compliance (e.g., transaction records for 7 years under Indonesian AML laws).

Right to Restrict Processing

You can request that we limit how we process your personal data under certain conditions, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format and transmit it to another service provider where technically feasible.

Right to Object

You may object to processing of your personal data for marketing purposes at any time by clicking the unsubscribe link in promotional emails or updating your communication preferences in account settings.

Right to Withdraw Consent

For processing activities based on consent (e.g., marketing communications), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact kera90's Data Protection Team at [email protected]. We will respond to your request within 30 days and may require identity verification to protect your privacy.

8. Cookies & Tracking Technologies

kera90 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits.

Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including login authentication, session management, and security features. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, favorite games, and display options to enhance usability.
• Analytics Cookies: Collect aggregated data on user behavior, page views, and interaction patterns to help us improve kera90 services. We use tools like Google Analytics for this purpose.
• Marketing Cookies: Track your activity across websites to deliver targeted advertisements and measure campaign effectiveness. These cookies require your consent.

Managing Cookies

You can manage cookie preferences through your browser settings. However, disabling essential cookies may prevent you from accessing certain features of the kera90 platform. Most browsers allow you to block third-party cookies while accepting first-party cookies from kera90.

9. Children's Privacy

During the registration and KYC verification process, we verify the age of all users through government-issued identification documents. If we discover that we have inadvertently collected personal information from an individual under 21 years of age, we will immediately delete that information and permanently close the associated account.

If you believe a minor has created an account on kera90, please contact our support team immediately at [email protected] so we can investigate and take appropriate action.

10. International Data Transfers

kera90 primarily stores and processes your personal data within Indonesia. However, some of our service providers and technology partners may be located outside Indonesia, which means your data may be transferred to, stored, or processed in other countries.

When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information, including:

• Data processing agreements with all third-party vendors requiring compliance with Indonesian data protection standards
• Use of service providers certified under recognized international privacy frameworks
• Encryption of data during transmission and at rest regardless of storage location
• Regular audits of third-party security practices and compliance

By using kera90 services, you consent to the transfer of your personal data to countries outside Indonesia under the protections described above.

11. Changes to This Policy

kera90 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the most recent revisions were made.

Material changes that significantly affect your privacy rights will be communicated via email to your registered email address and prominently displayed on our platform. Continued use of kera90 services following any changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

12. Contact Us About Privacy

If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact kera90's Data Protection Team:

We take all privacy concerns seriously and will investigate and respond to your inquiry within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Indonesian data protection authority.