Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by ceri18 through our website (ceri18.cam), mobile platforms, customer service channels, and any other digital touchpoints where Players interact with our services. We collect and process personal information in accordance with international data protection standards and best practices for online gaming platforms serving the Indonesian market.

ceri18 operates as an international online gaming platform licensed and regulated offshore, providing casino gaming and sports betting services to Players in Indonesia. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall relationship with ceri18. If you have questions or concerns about how we handle your personal data, please contact our Data Protection team at the contact details provided at the end of this document.

2. Data Controller Information

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is ceri18, operating through the domain ceri18.cam. We are responsible for determining the purposes and means of processing your personal data and ensuring compliance with privacy regulations. You can contact us regarding any privacy-related matters at [email protected] or through our 24/7 live chat service.

3. Information We Collect

ceri18 collects various categories of personal information necessary to provide our gaming services, ensure platform security, comply with legal obligations, and improve Player experience. The types of data we collect include:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, preferred username, and password.
• Identity Verification Documents: Government-issued identification such as Indonesian KTP (Kartu Tanda Penduduk), passport, or driver's license, as well as proof of address documents like utility bills or bank statements.
• Financial Information: Bank account details for deposits and withdrawals (account number, bank name, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay identifiers), and payment transaction history.
• Communication Data: Content of your communications with customer support, including live chat transcripts, email correspondence, and phone call recordings (where permitted by law and with appropriate notice).
• Verification Responses: Answers to security questions, responses to account verification challenges, and any additional information requested to confirm your identity or comply with Know Your Customer (KYC) requirements.

3.2 Information Collected Automatically

• Gaming Activity Data: Detailed records of all bets placed, games played, deposits made, withdrawals requested, bonuses claimed, and outcomes of gaming sessions. This includes timestamps, bet amounts, game types, and win/loss records.
• Device and Technical Information: IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers (IMEI, advertising ID), mobile network operator, and time zone settings.
• Usage Data: Pages visited, features accessed, click patterns, navigation paths through our platform, time spent on different sections, search queries within our site, and interaction with promotional content.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixel tags, and similar technologies as detailed in our Cookie Policy. This includes session cookies (temporary) and persistent cookies (stored long-term) used for authentication, preferences, and analytics.
• Geolocation Data: Approximate geographic location derived from your IP address to verify you are accessing our services from Indonesia and to comply with geographic restrictions on online gaming.

3.3 Information from Third Parties

• Payment Processor Data: Transaction confirmation details from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and e-wallet providers to verify deposits and process withdrawals.
• Fraud Prevention Services: Risk assessment data and fraud screening results from third-party security vendors used to detect suspicious activity and protect against account takeover, payment fraud, and money laundering.
• Identity Verification Services: Confirmation of identity documents and biometric verification results from specialized KYC service providers who assist us in fulfilling regulatory compliance requirements.
• Game Provider Data: Aggregated game performance statistics and session data from our game suppliers (Pragmatic Play, Evolution Gaming, Pocket Games Soft, etc.) to ensure fair play and detect technical issues.

4. How We Use Your Information

ceri18 processes your personal data for specific, legitimate purposes related to providing online gaming services, maintaining platform security, and fulfilling legal obligations. We use your information for the following purposes:

4.1 Service Provision and Account Management

• Creating, maintaining, and authenticating Player accounts
• Processing deposits and withdrawal requests
• Providing access to casino games, live dealer tables, and sports betting markets
• Settling bets and crediting winnings to Player accounts
• Administering bonuses, promotions, and loyalty rewards
• Responding to customer support inquiries and resolving disputes
• Facilitating communication regarding account status, transactions, and platform updates

4.2 Legal Compliance and Security

• Verifying Player identity and age to ensure compliance with 21+ age restrictions
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by gaming regulations
• Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other violations of our Terms & Conditions
• Monitoring gaming patterns for signs of problem gambling and implementing responsible gaming interventions
• Maintaining audit trails and transaction records for regulatory reporting purposes
• Responding to lawful requests from government authorities, regulators, and law enforcement agencies
• Protecting the rights, property, and safety of ceri18, our Players, and the public

4.3 Platform Improvement and Analytics

• Analyzing usage patterns to improve website navigation, user interface design, and overall Player experience
• Conducting statistical analysis of gaming behavior to optimize game selection and odds offerings
• Testing new features and services through A/B testing and controlled rollouts
• Identifying technical issues, bugs, and performance bottlenecks for resolution
• Generating aggregated, anonymized reports for business intelligence purposes

4.4 Marketing and Communications

• Sending promotional emails about new games, special bonuses, and platform updates (with your consent where required)
• Personalizing marketing content based on your gaming preferences and activity history
• Notifying you of relevant promotions for Indonesian holidays and sporting events (BRI Liga 1, EPL matches, major tournaments)
• Conducting customer satisfaction surveys to gather feedback on our services

You may opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in promotional emails. Note that you will continue to receive essential transactional communications (deposit confirmations, withdrawal notifications, security alerts) even if you opt out of marketing.

5. Legal Basis for Processing

ceri18 processes personal data based on one or more of the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you as a Player, including providing gaming services and processing transactions.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including age verification, KYC requirements, AML screening, and regulatory reporting.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, customer support, and service improvement, provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, such as for marketing communications or optional data collection. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing and Disclosure

ceri18 does not sell your personal information to third parties. However, we may share your data with trusted service providers and partners in the following circumstances:

6.1 Service Providers and Processors

• Payment Processors: Banks and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) to facilitate deposits and withdrawals.
• Game Providers: Licensed gaming suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) who operate the games available on our platform.
• Identity Verification Services: KYC and AML screening providers who verify Player identities and screen for fraud risk.
• Technology Infrastructure Providers: Cloud hosting services, content delivery networks (CDN), and IT security vendors who support our technical infrastructure.
• Customer Support Tools: Live chat platforms, ticketing systems, and CRM software used to manage Player communications.
• Analytics and Marketing Services: Web analytics platforms and email service providers used to analyze site usage and deliver communications.

All third-party service providers are contractually obligated to protect your personal data, use it only for specified purposes, and maintain confidentiality. We conduct due diligence on vendors to ensure they maintain adequate security measures.

6.2 Legal Requirements and Public Authorities

We may disclose personal information to government agencies, regulators, law enforcement, or courts when required by law, legal process, or to protect our legal rights. This includes responding to subpoenas, court orders, regulatory investigations, or lawful requests from authorities investigating suspected criminal activity, fraud, or threats to public safety.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

7. International Data Transfers

ceri18 operates as an international platform with technical infrastructure located outside Indonesia. Your personal data may be transferred to, stored in, and processed in countries with different data protection laws than Indonesia. When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses, encryption in transit, and vendor security assessments to ensure your information remains protected to the standards described in this Privacy Policy.

8. Data Security Measures

ceri18 employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: 256-bit SSL/TLS encryption for all data transmitted between your device and our servers. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Role-based access restrictions ensuring only authorized personnel can access personal data on a need-to-know basis. All access is logged and monitored.
• Network Security: Firewalls, intrusion detection systems, and DDoS protection to defend against cyber attacks and unauthorized network access.
• Regular Security Audits: Penetration testing, vulnerability assessments, and third-party security audits to identify and remediate potential weaknesses.
• Secure Development Practices: Code reviews, security testing during development, and patch management to address software vulnerabilities.
• Employee Training: Regular data protection and security awareness training for all staff members who handle personal information.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data security incidents.

While we implement robust security measures, no method of electronic storage or internet transmission is 100% secure. You also play a role in protecting your account by using strong passwords, not sharing credentials, logging out after sessions, and reporting suspicious activity immediately.

9. Data Retention

ceri18 retains personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:

• Active Account Data: Retained for the duration of your account relationship with ceri18 plus a retention period after account closure.
• Transaction Records: Maintained for a minimum of 7 years to comply with financial regulations and tax reporting requirements.
• KYC Documents: Retained for 5-7 years after account closure as required by anti-money laundering regulations.
• Marketing Data: Deleted within 30 days of opt-out request unless retention is required for legal compliance.
• Technical Logs: Typically retained for 12-24 months for security monitoring and troubleshooting purposes.

After retention periods expire, personal data is securely deleted or anonymized such that it can no longer identify you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence.

10. Your Privacy Rights

As a Player of ceri18, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you, including details about how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete personal information.
• Right to Erasure: Request deletion of your personal data in certain circumstances, subject to legal retention requirements.
• Right to Restriction: Request temporary restriction of processing your data while disputes are resolved.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: Object to processing of your data for direct marketing purposes or processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw previously given consent for processing, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact our Data Protection team at [email protected] with your request. We will respond within 30 days and may request additional information to verify your identity before fulfilling requests. Note that some rights are not absolute and may be subject to legal limitations or exemptions.

11. Cookies and Tracking Technologies

ceri18 uses cookies, web beacons, and similar technologies to enhance platform functionality, personalize your experience, and analyze site usage. Cookies are small text files stored on your device that allow us to recognize you across sessions. Types of cookies we use include:

• Essential Cookies: Necessary for platform operation, including authentication, security, and basic functionality. These cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and customizations to provide a personalized experience.
• Analytics Cookies: Collect aggregated data about site usage to help us improve performance and user experience.
• Marketing Cookies: Track your interests to deliver relevant promotional content and measure advertising effectiveness.

You can manage cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality. Most browsers allow you to refuse cookies, delete existing cookies, or receive notification before cookies are stored.

12. Children's Privacy

ceri18 services are strictly restricted to individuals 21 years of age or older. We do not knowingly collect personal information from individuals under 21. If we become aware that we have inadvertently collected data from a person under the minimum age, we will immediately delete that information and close the associated account. Parents or guardians who believe a minor has provided information to ceri18 should contact us immediately at [email protected].

13. Changes to This Privacy Policy

ceri18 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated through prominent notice on our website, email notification to registered Players, or in-platform messaging. Your continued use of ceri18 services after changes take effect constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Information and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 through the ceri18 website
• Subject Line: Include "Privacy Inquiry" or "Data Protection Request" for faster routing

We aim to respond to all privacy-related inquiries within 48 hours. If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.