Privacy Policy — pr555

This Privacy Policy covers all personal data processed by pr555 in connection with the operation of the Platform and the provision of sports betting, live dealer casino, and slot gaming services to players located in Indonesia and other permitted territories.

pr555 acts as the data controller in respect of the personal data it collects directly from you. Where pr555 engages third-party service providers to process data on its behalf — such as payment processors, identity verification vendors, and game content providers — those parties act as data processors and are bound by contractual obligations to process your data only in accordance with pr555's instructions and this Privacy Policy.

If you are accessing the Platform from Indonesia, your data may be processed on servers located outside Indonesia. In such cases, pr555 takes appropriate measures to ensure that your data receives an equivalent level of protection to that which would apply under Indonesian data protection standards.

pr555 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third parties where necessary for identity verification and fraud prevention. The categories of data we collect are set out below.

pr555 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to open and maintain your Account, process deposits and withdrawals, settle bets, and deliver the core gaming services you have contracted with us to receive.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) obligations, sanctions screening requirements, and any other legal duty imposed on pr555 as a regulated gaming operator.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, business analytics, and the improvement of our services — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain non-essential cookies, where we have obtained your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pr555 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your Account, verify your identity, authenticate your logins, and maintain accurate account records.
• Transaction processing: To facilitate deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain complete records of your financial activity on the Platform.
• Bet and game settlement: To record, calculate, and settle wagers placed on sports markets and casino games, and to resolve any related disputes.
• Compliance and AML: To conduct KYC verification, perform sanctions and politically exposed person (PEP) screening, monitor for suspicious transaction patterns, and fulfil any reporting obligations.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, account takeovers, multi-accounting, bonus abuse, and any other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor betting patterns for signs of problem gambling, apply self-exclusion measures where requested, enforce deposit and loss limits, and support our commitment to player protection.
• Customer support: To respond to your enquiries, resolve complaints, and improve the quality of our support interactions based on chat and email records.
• Platform improvement: To analyse usage patterns, test new features, diagnose technical issues, and optimise the performance and user experience of the Platform.
• Marketing (with consent): To send promotional offers, bonus notifications, and event-based communications via email or in-Platform messaging, where you have opted in to receive such communications. You may unsubscribe at any time.

pr555 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited and specific circumstances:

• Payment service providers: Banks and e-wallet operators (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive only the financial data required to process your deposit or withdrawal transaction.
• Identity verification partners: Third-party KYC and AML service providers receive identity documents and related data strictly for the purpose of completing verification checks on our behalf.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe may receive a pseudonymous player identifier and session data in order to deliver and log game rounds. These providers do not receive your full identity or financial data.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, analytics, and customer support platform vendors who process data solely on pr555's instructions under data processing agreements.
• Legal and regulatory authorities: Where required by law, regulation, court order, or the lawful request of a competent governmental authority, pr555 will disclose personal data to the extent strictly necessary to comply with that obligation.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of pr555's business, your personal data may be transferred to the successor entity, subject to the same or equivalent privacy protections.

Any third party that receives personal data from pr555 is required to handle it in a manner consistent with this Privacy Policy and applicable data protection law. We do not permit our processors to use your data for any purpose other than the specific service they provide to us.

pr555 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the Platform effectively. The types of cookies we use are described below:

• Strictly necessary cookies: These are essential for the Platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. The Platform cannot operate without them, and no consent is required for their placement.
• Functional cookies: These remember your preferences — such as your chosen language, display settings, and recent navigation history within the Platform — to provide a more personalised experience.
• Analytics cookies: These collect aggregated, anonymised data about how players navigate and use the Platform, helping us identify technical issues and improve the user experience. We use only privacy-respecting analytics tools and do not share raw analytics data with third parties for advertising.
• Security cookies: These assist in detecting and preventing fraudulent logins, bot activity, and other security threats.

pr555 does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair the functionality of the Platform.

pr555 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, taking into account applicable legal, regulatory, tax, and accounting requirements. The general retention periods we apply are as follows:

• Active Account data: Retained for the full duration of your Account's active status plus a minimum of five (5) years following permanent Account closure, to satisfy AML record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following the end of the business relationship, in line with AML compliance obligations.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a specific communication relates to an ongoing dispute or legal matter, in which case it is retained until that matter is resolved.
• Analytics and technical logs: Retained in aggregated or anonymised form for up to twelve (12) months; raw server logs are retained for up to ninety (90) days.

When personal data is no longer required, pr555 will securely delete or anonymise it in a manner that renders it irrecoverable.

pr555 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• TLS/SSL encryption: All data transmitted between your browser and the Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). The Platform is accessible exclusively over HTTPS.
• Data encryption at rest: Sensitive data — including identity documents and financial records — is encrypted at rest using AES-256 encryption on our storage infrastructure.
• Access controls: Access to personal data is strictly limited to authorised pr555 personnel and contractors who require it to perform their duties. Role-based access control and multi-factor authentication are enforced for all internal systems.
• Intrusion detection and monitoring: Our infrastructure is continuously monitored for anomalous activity, attempted unauthorised access, and known attack signatures. Security events are logged and reviewed by our security team.
• Regular security audits: pr555 conducts periodic penetration testing and third-party security assessments to identify and remediate vulnerabilities in our systems.
• Incident response: In the event of a confirmed personal data breach that presents a risk to your rights and freedoms, pr555 will notify affected individuals and relevant authorities in a timely manner in accordance with applicable legal requirements.

As a player on the pr555 Platform, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting our support team through the channels listed in Section 13.

pr555 will respond to all verifiable data subject requests within thirty (30) calendar days of receipt. In cases of complex or high-volume requests, this period may be extended by a further thirty (30) days, with notice provided to you explaining the reason for the delay. Requests must be submitted from the email address registered to your Account so that we can verify your identity before disclosing or acting on any data.

The pr555 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from any individual under the age of 21. Account registration requires confirmation of age eligibility, and all accounts are subject to mandatory age verification as part of the KYC process.

If pr555 discovers or has reason to believe that personal data has been collected from an individual under the age of 21, we will take immediate steps to suspend the Account, forfeit any associated winnings, and permanently delete the data from our systems without undue delay.

If you are a parent or guardian and believe that a minor in your care has registered an Account on pr555, please contact our support team immediately so that we can investigate and act accordingly.

The Platform may contain references to or integrations with third-party services — including game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe — whose own privacy policies govern their processing of any data they collect independently. pr555 is not responsible for the privacy practices of these third parties and recommends that you review their respective privacy policies directly.

Where third-party game content is delivered within an embedded frame on the pr555 Platform, the relevant game provider may collect limited technical data (such as session tokens and game interaction logs) required to deliver and audit the game round. This data is governed by the contractual data processing agreements pr555 holds with each provider and is not used by those providers for their own independent marketing purposes.

pr555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the structure of our business. When a material change is made — meaning a change that substantively affects how we collect, use, or share your personal data — we will notify you by email to your registered address and via an in-Platform notification at least seven (7) days before the change takes effect.

The "Last Updated" date shown at the top of this page will be revised whenever any change is made. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated policy. The most current version of this Privacy Policy is always available at https://pr555.cam/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about the way pr555 has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform, covering all Indonesian time zones (WIB, WITA, and WIT).
• Email: [email protected] — please mark the subject line "Privacy Request" or "Data Complaint" so that your message is routed to our data protection team promptly. This is a plain-text address and is not a clickable link.

We aim to acknowledge all privacy-related enquiries within 72 hours and to resolve them in full within 30 calendar days of receipt. For complex requests, we will keep you informed of progress throughout the process.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.