Privacy Policy

kera03 is an international online betting and casino platform serving players in Indonesia. We understand that the personal data you share with us is sensitive, and we take our responsibility to protect it seriously. This Policy has been drafted in compliance with globally recognized data protection principles, including those reflected in Indonesia's Personal Data Protection Law (UU PDP) and applicable international data governance frameworks under which kera03 operates.

The Platform is operated under an international gaming license and is intended for use exclusively by adults aged 21 years and over who are residents of Indonesia. If you are under 21, you must not register or use the Platform, and no personal data should be submitted by or on behalf of any person under that age.

This Policy applies to all personal data collected through the Platform, including data submitted during registration, data generated through your use of the Platform (such as betting history and session logs), and data collected automatically through cookies and similar tracking technologies.

For the purposes of this Policy, the following terms carry the meanings set out below:

kera03 collects Personal Data from you in three primary ways: data you provide directly, data generated through your use of the Platform, and data collected automatically through technical means.

3.1 — Data You Provide Directly

• Registration Data: Full legal name, date of birth, email address, Indonesian mobile phone number, and a password of your choosing.
• KYC Verification Documents: Government-issued identification (KTP, passport, or driver's license), proof of residential address, and proof of payment method ownership.
• Financial Data: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction amounts denominated in Indonesian Rupiah (IDR).
• Support Communications: The content of any messages, complaints, or enquiries you submit to our customer support team via email or live chat.
• Responsible Gaming Declarations: Any self-imposed limits, cool-off requests, or self-exclusion declarations you submit through your account dashboard.

3.2 — Data Generated Through Platform Use

• Betting and wagering history, including markets selected, stake amounts, odds accepted, and settlement outcomes.
• Casino game session data, including games played, session durations, and game results for togel (Indonesia's traditional numbers lottery), live dealer titles, and slot games.
• Bonus and promotion redemption history.
• Login timestamps, session durations, and account activity logs.

3.3 — Data Collected Automatically

• IP address and approximate geographic location (city/region level, not precise GPS coordinates).
• Device type, operating system, browser type and version.
• Pages visited, links clicked, and navigation paths within the Platform.
• Cookie identifiers and session tokens (see Section 7 for full cookie details).

kera03 uses your Personal Data only for the purposes for which it was collected or for compatible purposes that you would reasonably expect. Specifically, your data is used to:

• Operate and manage your Player Account — including account creation, authentication, and the maintenance of your Wallet Balance in IDR.
• Process deposits and withdrawals — including communicating with Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to execute your requested transactions.
• Verify your identity and comply with KYC/AML obligations — including screening your information against applicable watchlists and conducting ongoing due diligence as required by our licensing authority.
• Provide and improve Platform services — including personalizing game recommendations, optimizing Platform performance, and resolving technical issues.
• Deliver customer support — including responding to your enquiries and resolving account disputes through our 24/7 Indonesian-speaking support team.
• Enforce our Terms & Conditions — including detecting and preventing fraud, collusion, bonus abuse, unauthorized access, and money laundering.
• Send s ervice communications — including transaction confirmations, account security alerts, and notifications about changes to our Terms or this Policy. We do not send promotional emails without your explicit consent.
• Support responsible gaming — including monitoring for signs of problematic gambling behavior and enforcing any self-exclusion or deposit limits you have set on your account.
• Conduct aggregate analytics — using anonymized, non-identifiable data to understand Platform usage patterns and improve the overall user experience.

kera03 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity involved:

Where we rely on consent as the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

kera03 does not sell your Personal Data to any third party. We may share your data only in the following limited circumstances, and always subject to appropriate data protection safeguards:

• Payment Service Providers: We share the minimum financial data necessary with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposit and withdrawal requests.
• Identity Verification Partners: We work with regulated KYC and AML screening providers to verify the authenticity of identification documents and to conduct required compliance checks. These providers act as Data Processors under our instruction and are contractually prohibited from using your data for their own purposes.
• Game Content Providers: Game studios and platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session-level technical data necessary to deliver their games. No personally identifiable information beyond a pseudonymous player identifier is shared with game studios.
• Regulatory and Law Enforcement Authorities: We will disclose Personal Data to relevant authorities when required to do so by applicable law, court order, or our licensing authority's compliance requirements. We will notify you of any such disclosure where we are legally permitted to do so.
• Corporate Successors: In the event of a merger, acquisition, or sale of all or part of kera03's business assets, your Personal Data may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations under this Policy.

kera03 uses cookies and similar technologies (such as local storage tokens and session identifiers) to operate the Platform, remember your preferences, and understand how the Platform is used. The following categories of cookies are in use:

You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the Platform and may prevent you from logging into your Player Account. kera03 does not use third-party advertising or retargeting cookies.

kera03 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable regulatory and legal obligations. Our standard retention periods are as follows:

• Active Player Account Data: Retained for the duration of your active account relationship with kera03, plus a minimum of five (5) years following permanent account closure, in compliance with our licensing authority's AML record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years in accordance with financial record-keeping obligations applicable to licensed gaming operators.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, or until the resolution of any related dispute, whichever is later.
• Marketing Consent Records: Retained for as long as you maintain an active Player Account, and for three (3) years following account closure, as evidence of your consent or withdrawal of consent.
• Technical and Session Logs: Retained for ninety (90) days on a rolling basis, unless a specific log entry is required to be preserved in connection with a security investigation or compliance review.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with our data destruction procedures.

kera03 employs a multi-layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption in Transit: All data exchanged between your browser and the Platform is encrypted using 256-bit SSL/TLS protocols. Our security certificates are maintained and renewed proactively.
• Encryption at Rest: Sensitive Personal Data, including KYC documents and financial account details, is stored in encrypted form on our servers. Encryption keys are managed under strict access controls.
• Access Controls: Access to Personal Data within kera03's internal systems is restricted on a strict need-to-know basis. All staff who handle Personal Data are subject to confidentiality obligations and regular data protection training.
• Two-Factor Authentication: kera03 supports two-factor authentication (2FA) for Player Accounts. We strongly encourage all players to enable 2FA to reduce the risk of unauthorized account access.
• Intrusion Detection and Monitoring: Our systems are continuously monitored for suspicious activity. Automated alerts are in place to detect and respond to potential data breaches in real time.
• Penetration Testing: kera03 conducts periodic security assessments and penetration tests conducted by independent third-party security specialists to identify and remediate vulnerabilities.

As a player whose Personal Data is processed by kera03, you hold the following rights. To exercise any of these rights, please contact us at [email protected] with your registered email address and a clear description of your request. We will respond within 30 calendar days.

Please note that the exercise of some rights may affect your ability to use certain features of the Platform. Where this is the case, we will inform you clearly before acting on your request.

The kera03 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from any person under the age of 21. If you are a parent or guardian and believe that a minor has registered on the Platform or submitted Personal Data without your knowledge, please contact us immediately at [email protected].

Upon receiving a verified notification of this kind, kera03 will immediately suspend the relevant account, delete the associated Personal Data, and arrange the return of any funds in that account's Wallet Balance through an appropriate channel. Age verification checks are applied during registration precisely to prevent underage access, but we acknowledge that no technical safeguard is entirely foolproof and rely on the cooperation of parents and guardians.

kera03 operates internationally, and your Personal Data may be transferred to and stored on servers located outside Indonesia. In particular, data may be processed in jurisdictions where our licensing authority, technology infrastructure providers, and game studio partners are based.

Whenever Personal Data is transferred outside Indonesia, kera03 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under Indonesian data protection law and our international licensing obligations. These safeguards include:

• Contractual clauses in our data processing agreements that impose binding data protection obligations on all recipients of your Personal Data.
• Transfers only to jurisdictions or entities that kera03 has assessed as providing an adequate level of data protection through technical, organizational, and legal measures.
• Strict limitations on the purposes for which transferred data may be used by recipient Data Processors.

The kera03 Platform does not contain links to external third-party websites or services as a matter of policy. However, if any such link appears in a promotional communication or through an integrated game interface, please be aware that kera03 has no control over the privacy practices of third-party websites. We recommend reviewing the privacy policy of any external site before submitting personal information.

This Policy applies solely to Personal Data collected and processed by kera03 through the Platform. kera03 accepts no responsibility for the data handling practices of third parties, including game studio providers, payment processors accessed via external interfaces, or any other external service.

kera03 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. When material changes are made, we will notify you by email to your registered address and/or by a prominent notice on the Platform, with a minimum of seven (7) calendar days' notice before the revised Policy takes effect.

The "Effective Date" at the top of this Policy will be updated each time a revision is published. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you should stop using the Platform and may request account closure in accordance with our Terms & Conditions.

We maintain an archive of previous versions of this Policy. If you would like to review a prior version, please submit a request to [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or the manner in which kera03 handles your Personal Data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days of receipt.
• Support Language: Available in both English and Indonesian (Bahasa Indonesia).
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri, Idul Adha, and Indonesian Independence Day (17 August).

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in Indonesia or under the jurisdiction of kera03's licensing authority. Details of the relevant supervisory authority will be provided in our response to your complaint.