Privacy Policy — aneka3

This Privacy Policy ("Policy") describes how aneka3 ("Company", "we", "us", "our"), operating the platform at https://aneka3.cam, collects, uses, stores, and protects the personal information of members, visitors, and prospective users ("you", "your") in connection with access to and use of the aneka3 platform and all related services. This Policy is incorporated by reference into the aneka3 Terms and Conditions and forms part of the binding agreement between you and aneka3.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, mobile phone number, financial account details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" — aneka3, which determines the purposes and means of processing member personal data.
• "Data Processor" — any third-party service provider that processes personal data on behalf of aneka3, subject to contractual data protection obligations.
• "KYC" — Know Your Customer; the identity and age verification process required of members before withdrawals are processed.
• "Cookies" — small text files placed on a user's device by a website to store session information, preferences, and behavioral analytics data.
• "DPO" — Data Protection Officer; the designated aneka3 team member responsible for overseeing data protection compliance and member data rights requests.

This Policy applies to all personal data collected by aneka3 through the following channels and interactions:

• Registration and creation of a member account on the Platform.
• Deposits, withdrawals, and all financial transactions conducted via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Participation in any game, sport betting market, togel (Indonesia's traditional numbers lottery) draw, or live casino session on the Platform.
• Communications with our customer support team via live chat, email, or WhatsApp.
• Browsing of the aneka3 website, including passive data collection via cookies and analytics tools.
• Participation in promotional campaigns, bonus programs, or surveys.

This Policy does not apply to third-party websites, payment processors, or game studios that operate their own independent privacy policies. We encourage you to review the privacy policies of any third-party service you interact with in connection with the Platform.

aneka3 collects personal data through two primary channels: information you provide directly, and information collected automatically as you use the Platform.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
• Usage Data: Pages visited, features accessed, game sessions initiated, betting history, session duration, and click-path data.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS coordinates.
• Cookie Data: Session identifiers, authentication tokens, and behavioral analytics data stored via first-party and third-party cookies. See Clause 6 for full details.

aneka3 processes your personal data for the following specific purposes, each grounded in a legitimate legal basis:

aneka3 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated systems flag an account for fraud or AML review, a qualified compliance team member reviews the case before any action is taken.

aneka3 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your data with the following categories of recipients solely to the extent necessary to deliver our services:

• Payment Processors: Indonesian bank transfer intermediaries and e-wallet gateway operators (such as those facilitating BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) receive your financial data solely to execute and confirm payment instructions.
• KYC & Identity Verification Providers: Specialist third-party identity verification services receive copies of your identity documents and biometric data (selfie photographs) to confirm eligibility and satisfy regulatory requirements.
• Fraud Detection & AML Services: Anti-fraud and anti-money-laundering platforms receive technical and behavioral data to screen for suspicious activity patterns.
• Game Content Providers: Licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive a pseudonymous player identifier and session data necessary to deliver game functionality. These studios do not receive your full name, contact details, or financial data.
• Analytics Providers: Web analytics platforms receive anonymized or aggregated usage data to assist in Platform performance analysis. No personally identifiable information is passed to analytics providers.
• Legal & Regulatory Authorities: aneka3 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal order or to protect the rights, property, or safety of aneka3, its members, or the public.

All third-party data processors engaged by aneka3 are bound by contractual data processing agreements that require them to maintain confidentiality and implement security standards consistent with this Policy.

aneka3 uses cookies and similar tracking technologies to operate the Platform, maintain session security, and understand how members interact with our features. The following cookie categories are in use:

Strictly necessary cookies are deployed without requiring your consent, as they are essential for the Platform to function. Functional and analytics cookies are deployed based on your implied consent upon continued use of the Platform after being notified of this Policy. You may disable non-essential cookies through your browser settings; however, doing so may impair certain Platform features such as saved payment preferences and personalized notifications.

aneka3 retains personal data only for as long as is necessary for the purposes for which it was collected, or for the duration required by applicable legal, regulatory, and operational obligations. The following retention schedules apply:

• Active Account Data: Retained for the full duration of your active membership, plus a minimum of five (5) years following account closure to satisfy AML record-keeping obligations.
• Transaction Records: Deposit and withdrawal records, including associated bank and e-wallet data, are retained for a minimum of five (5) years in accordance with financial crime prevention requirements.
• KYC Documents: Identity documents (KTP copies, passport images, selfie photographs) are retained for five (5) years from the date of verification, after which they are securely destroyed.
• Support Communications: Live chat transcripts, email correspondence, and WhatsApp message records are retained for two (2) years from the date of the communication.
• Analytics Data: Anonymized and aggregated analytics data may be retained indefinitely as it does not constitute personal data.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized using industry-standard data destruction methods. Members who request early deletion of their personal data will receive a response within 30 calendar days; requests that conflict with legal retention obligations will be partially fulfilled to the extent permitted by law.

As a member of aneka3, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection Officer (DPO) using the details provided in Clause 13. We will respond to all verified requests within 30 calendar days.

aneka3 implements a multi-layered security architecture designed to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. Our technical and organizational measures include:

• Transport Layer Security: All data in transit between your browser or device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). Our certificates are issued by a recognized certificate authority and renewed continuously.
• Data-at-Rest Encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to member personal data within the aneka3 organization is governed by role-based access controls (RBAC). Only team members with a documented operational need may access personal data, and all access events are logged and auditable.
• Two-Factor Authentication (2FA): aneka3 strongly recommends enabling 2FA on your account. Internal system access by aneka3 staff requires mandatory 2FA on all production systems.
• Penetration Testing: aneka3 engages independent security researchers to conduct periodic penetration tests of the Platform's infrastructure. Critical findings are remediated within a defined SLA.
• Incident Response: In the event of a data breach that is likely to result in a risk to member rights, aneka3 will notify affected members without undue delay and take immediate containment measures.

While aneka3 employs robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account password and for notifying us immediately at support@aneka3.cam if you suspect unauthorized access to your account.

aneka3 operates as an international online gaming platform. Certain service providers and data processors engaged by aneka3 may be located outside Indonesia, meaning your personal data may be transferred to and processed in jurisdictions other than your country of residence.

Where such international transfers occur, aneka3 ensures that adequate safeguards are in place to protect your personal data at the destination. These safeguards include contractual data processing agreements that impose data protection obligations on the receiving party equivalent to those set out in this Policy. Where possible, aneka3 prefers data processors located in jurisdictions with recognized data protection frameworks.

By using the aneka3 Platform and agreeing to this Policy, you acknowledge and consent to the transfer of your personal data to international service providers under the safeguards described above.

The aneka3 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. Registration by minors is a material breach of our Terms and Conditions and is prohibited absolutely.

Where aneka3 becomes aware — through KYC verification, support communications, or any other means — that personal data belonging to a person under 21 years of age has been collected, we will immediately:

• Suspend the associated account pending investigation.
• Delete the personal data of the underage individual from our systems as promptly as technically and legally feasible.
• Refund any deposits made, less any amounts that cannot be refunded due to the terms of applicable payment processing agreements.

If you have reason to believe that a minor has registered an account on aneka3, please contact our support team immediately at support@aneka3.cam so that we can investigate and take appropriate action without delay.

aneka3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered members via a prominent notice displayed upon login or via email to the address associated with your account. The revised Policy will carry an updated effective date at the top of this page.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how aneka3 protects your personal data. If you do not agree with any update to this Policy, you must cease using the Platform and may request account closure by contacting our support team.

All data rights requests, privacy concerns, and questions regarding this Policy should be directed to the aneka3 Data Protection Officer (DPO). We are committed to responding to all verified requests within 30 calendar days of receipt.

When submitting a data rights request, please include your registered email address, a brief description of your request, and (for erasure or access requests) a copy of your KTP or passport for identity verification purposes. All communications regarding data rights requests are handled with strict confidentiality and are accessible only to the DPO and authorized compliance personnel.