Privacy Policy

kera36 collects personal data through the following methods:

• Direct Provision: When you register an account, complete your profile, submit KYC documentation, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automated Technologies: Through cookies, web beacons, device fingerprinting, and analytics tools that track how you interact with the Platform. See the Cookies & Tracking section below for more detail.
• Third-Party Sources: From payment processors (to verify transaction details), identity verification services (to validate KYC documents), and game providers (to record gameplay outcomes). kera36 does not purchase personal data from data brokers or marketing lists.
• Public Sources: In limited cases, kera36 may supplement your data with publicly available information (e.g., adverse media screening for AML compliance) where required by regulation or where there is a reasonable suspicion of fraudulent activity.

kera36 processes your personal data only when we have a lawful basis to do so. The applicable lawful bases under international data protection standards include:

• Contractual Necessity: Processing is necessary to perform the contract between you and kera36 (i.e., to provide gaming services, process transactions, and manage your account).
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering (AML) regulations, KYC requirements, and responsible gaming mandates.
• Legitimate Interests: Processing is necessary for kera36's legitimate business interests, such as fraud prevention, system security, customer service quality improvement, and internal business analytics — provided those interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, kera36 will seek your explicit consent before processing personal data for purposes such as direct marketing, promotional communications, or special-category data collection.

You have the right to withdraw consent at any time where processing is based on consent. However, withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Certain processing activities — such as KYC verification and transaction records — are mandatory under regulatory requirements and cannot be opted out of while maintaining an active account.

kera36 processes personal data for the following purposes:

• Account Management: To create and maintain your gaming account, authenticate login sessions, manage your profile preferences, and communicate account-related information.
• Transaction Processing: To process deposits via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), execute withdrawal requests, and maintain accurate financial records in Indonesian Rupiah (IDR).
• Identity Verification (KYC): To verify your identity, age (21+ requirement), and payment method ownership in accordance with international AML and counter-terrorism-financing (CTF) standards.
• Gaming Services: To operate sports betting markets (including BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, Champions League, bandar bola (sports bookmaking), and mix parlay (accumulator) betting), live casino games, online slots, and specialty games such as togel (Indonesia's traditional numbers lottery) and sabung ayam (cockfighting betting).
• Bonus Administration: To determine eligibility for promotions, track wagering requirements, and prevent bonus abuse.
• Customer Support: To respond to your inquiries via live chat or email, resolve disputes, and provide technical assistance. kera36 offers 24/7 Indonesian-speaking support with an average response time under 2 minutes.
• Fraud Prevention & Security: To monitor suspicious activity, prevent money laundering, detect collusion or chip dumping, enforce account limits (one account per person), and protect the Platform from cyber threats.
• Responsible Gaming: To implement deposit limits, session reminders, cooling-off periods, and self-exclusion tools; to monitor activity patterns that may indicate problem gambling; and to enforce age and location restrictions.
• Legal Compliance: To comply with court orders, regulatory inquiries, tax reporting obligations, and law enforcement requests where legally required.
• Marketing & Communications: To send you promotional offers, bonus announcements, and service updates — only where you have opted in or where permitted by applicable law. You may unsubscribe at any time.
• Business Analytics: To understand user behavior, improve Platform functionality, optimize game offerings, and conduct internal research. Analytics data is typically aggregated and anonymized.

kera36 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict data processing agreements:

• Payment Processors: To facilitate deposits and withdrawals. This includes Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). Payment processors receive only the minimum data necessary to complete the transaction.
• Identity Verification Providers: To conduct KYC checks and validate identity documents. These third-party services are bound by confidentiality obligations and may not use your data for any purpose other than verification.
• Game Providers: To deliver live casino, slot, and specialty game content. Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session data but do not have access to your identity or financial information.
• Customer Support Tools: To manage live chat interactions and support ticketing. Chat transcripts are stored securely and accessed only by authorized kera36 personnel.
• Analytics Providers: To analyze Platform performance and user experience. These providers process aggregated, anonymized data where possible.
• Legal & Regulatory Authorities: Where required by law, court order, or regulatory mandate, kera36 may disclose personal data to law enforcement agencies, tax authorities, or the licensing jurisdiction. We will resist overly broad or unjustified requests and disclose only the minimum data necessary.
• Professional Advisors: kera36 may share data with legal counsel, auditors, and compliance consultants under professional confidentiality obligations.
• Business Successors: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to the continued application of this Privacy Policy or an equivalent policy that provides at least the same level of protection.

All third-party data processors engaged by kera36 are selected based on their technical and organizational security measures and are contractually required to process data only in accordance with our instructions and applicable data protection laws.

kera36 uses cookies and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows the Platform to recognize your browser across sessions.

The types of cookies used by kera36 include:

• Essential Cookies: Required for the Platform to function. These cookies enable core features such as login authentication, session management, and secure transactions. You cannot opt out of essential cookies without disabling the Platform.
• Performance Cookies: Used to measure how visitors interact with the Platform, including page load times, error messages, and navigation patterns. This data is typically aggregated and anonymized.
• Functional Cookies: Remember your preferences, such as language settings, display currency, and timezone (WIB, WITA, or WIT), to provide a more personalized experience.
• Marketing Cookies: Track your activity across sessions to deliver targeted promotional offers and measure the effectiveness of marketing campaigns. These cookies are used only where you have provided consent.

Most web browsers allow you to control cookies through their settings. You can block or delete cookies at any time; however, doing so may limit your ability to use certain features of the Platform. For more information on managing cookies, consult your browser's help documentation.

kera36 does not respond to Do Not Track (DNT) browser signals, as there is no universally accepted standard for DNT implementation. However, you retain the right to opt out of non-essential cookies through your browser settings.

kera36 retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, and contractual obligations.

Specific retention periods include:

• Account Data: Retained for the duration of your active account and for a minimum of 5 years after account closure, as required by AML regulations and tax reporting obligations.
• Transaction Records: Financial records, including deposits, withdrawals, and bet histories, are retained for a minimum of 7 years to comply with anti-money-laundering and tax audit requirements.
• KYC Documentation: Identity verification documents are retained for a minimum of 5 years following account closure or the last transaction, whichever is later, in accordance with international AML standards.
• Communications Data: Support chat transcripts and email correspondence are retained for up to 3 years to facilitate dispute resolution and service quality improvement.
• Marketing Data: Promotional preference records are retained until you withdraw consent or request deletion, subject to a maximum of 2 years of inactivity.
• Technical Data: Server logs, IP addresses, and session data are typically retained for 12 months for security monitoring and fraud detection purposes, then anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction. In limited cases, kera36 may retain data beyond the standard retention period where required by ongoing legal proceedings, regulatory investigation, or unresolved disputes.

kera36 implements industry-standard technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and kera36 servers is encrypted using 256-bit Secure Socket Layer (SSL) technology — the same standard used by international banks and financial institutions.
• Secure Data Centers: Personal data is stored in ISO 27001-certified data centers with physical access controls, surveillance monitoring, and redundant power and cooling systems.
• Access Controls: Access to personal data is restricted to authorized kera36 personnel on a strict need-to-know basis. All employees undergo background checks and are bound by confidentiality agreements.
• Regular Security Audits: kera36 conducts regular penetration testing, vulnerability assessments, and third-party security audits to identify and remediate potential weaknesses.
• Multi-Factor Authentication: Sensitive operations, such as withdrawals and account changes, may require additional authentication steps to prevent unauthorized access.
• Incident Response Plan: In the event of a data breach, kera36 maintains an incident response plan that includes immediate containment, forensic investigation, notification to affected individuals (where required by law), and remediation measures.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. kera36 cannot guarantee absolute security, and you acknowledge that you provide personal data at your own risk. You are responsible for maintaining the confidentiality of your login credentials and should notify kera36 immediately if you suspect unauthorized access to your account.

As a Member of kera36, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data kera36 holds about you, along with information about how it is processed. kera36 will respond to access requests within 30 days.
• Right to Rectification: If you believe any of your personal data is inaccurate or incomplete, you may request that it be corrected or updated. You can update certain information directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; (c) you object to processing and there are no overriding legitimate grounds; or (d) the data was unlawfully processed. This right is not absolute and may be limited by legal retention obligations.
• Right to Restriction of Processing: You may request that kera36 restrict the processing of your personal data where: (a) you contest the accuracy of the data; (b) processing is unlawful but you oppose erasure; (c) kera36 no longer needs the data but you require it for a legal claim; or (d) you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that kera36 provide your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
• Right to Object: You may object to processing of your personal data where it is based on legitimate interests or used for direct marketing purposes. kera36 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: If you believe kera36 has mishandled your personal data, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, please contact kera36 at [email protected] (plain text — not a clickable link) with "Data Subject Request" in the subject line. kera36 will verify your identity before processing the request and will respond within 30 days. In certain cases, we may extend this period by an additional 60 days where requests are complex or numerous; we will inform you of any such extension.

kera36 services are strictly restricted to individuals aged 21 years or older, in accordance with Indonesian responsible gaming standards. kera36 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that an individual under 21 has registered an account or provided personal data to kera36, we will immediately suspend the account, void any associated gaming activity, and delete the personal data. Any funds deposited by a minor will be returned to the original payment method following identity verification of the rightful account holder (typically a parent or legal guardian).

Parents and guardians are encouraged to monitor their children's internet usage and ensure that minors do not access online gambling platforms. If you believe a minor has provided personal data to kera36, please contact us immediately at [email protected] (plain text — not a clickable link).

As an online platform serving the Indonesian market, kera36 may transfer personal data outside of Indonesia to jurisdictions where our servers, data centers, or third-party service providers are located. These jurisdictions may have different data protection laws than those applicable in Indonesia.

Where personal data is transferred internationally, kera36 implements appropriate safeguards to ensure that your data receives an adequate level of protection, including:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.
• Binding Corporate Rules (BCRs) where transfers occur within a corporate group.
• Adequacy decisions confirming that the destination jurisdiction provides an equivalent level of protection.
• Explicit consent, where required, for transfers to jurisdictions without adequacy protections.

You may request further information about the specific safeguards applied to international transfers by contacting kera36 at [email protected] (plain text — not a clickable link).

The kera36 Platform may contain links to third-party websites, applications, or services (such as game provider platforms or payment processor portals) for your convenience. kera36 is not responsible for the privacy practices or content of these third-party sites.

This Privacy Policy applies solely to personal data collected by kera36 through the kera36.cam domain. When you click on a third-party link, you leave the kera36 Platform and are subject to the privacy policy and terms of service of the destination site. We encourage you to review the privacy policies of any third-party sites you visit.

kera36 does not endorse, control, or assume any responsibility for third-party websites, and you access them at your own risk.

kera36 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When material changes are made, kera36 will provide notice by:

• Posting the updated Privacy Policy on this page with a revised "Last Updated" date at the top.
• Sending an email notification to registered Members where the changes materially affect their rights.
• Displaying a prominent notice on the Platform for a reasonable period following the update.

Your continued use of kera36 following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you should cease using the Platform and request account closure in accordance with our Terms and Conditions.

We recommend that you review this Privacy Policy periodically to stay informed about how kera36 protects your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or kera36's data processing practices, you may contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link). For data subject requests, please include "Privacy Inquiry" or "Data Subject Request" in the subject line.
• Live Chat: Available 24/7 on the Platform. Native Indonesian-speaking agents are available at all times. Average response time is under 2 minutes.
• Support Hours: kera36 customer support operates around the clock, 7 days a week, including Indonesian public holidays such as Idul Fitri, Nyepi, and Indonesian Independence Day (17 August).

kera36 is committed to resolving privacy-related complaints promptly and transparently. We will acknowledge receipt of your inquiry within 24 hours and aim to provide a substantive response within 14 calendar days. Complex matters may require additional time; we will communicate expected timelines clearly.

If you are not satisfied with kera36's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.