Privacy Policy

1. Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "ceri23", "We", "Us", "Our" — the online gaming platform operated at https://ceri23.cam and any related subdomains or mobile interfaces.
• "User", "You", "Your", "Player" — any individual who visits, registers for, or otherwise interacts with the ceri23 platform.
• "Personal Data" — any information that can directly or indirectly identify a natural person, including name, email address, phone number, national identification number, financial details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Sensitive Data" — a subset of Personal Data requiring heightened protection, such as financial account details, payment card numbers, government-issued identification numbers, and health-related information submitted for responsible gaming purposes.
• "Cookie" — a small text file stored on your device by your web browser to record session information, preferences, and usage patterns.
• "Third-Party Processors" — external companies engaged by ceri23 to assist in service delivery, including Game Providers (e.g., Pragmatic Play, Evolution Gaming), payment processors, fraud detection services, and analytics providers.
• "KYC" — Know Your Customer; the identity and age verification process mandated by anti-money laundering (AML) compliance requirements.

2. Personal Data We Collect

ceri23 collects different categories of Personal Data depending on how you interact with our platform. The table below summarises the main categories:

We do not intentionally collect Special Category data (as defined under international data protection frameworks) such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for identity verification.

3. How We Collect Your Data

ceri23 obtains Personal Data through the following channels:

Direct Collection

Information you voluntarily provide when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to surveys or promotions, or set responsible gaming limits. All form inputs on our platform are transmitted over encrypted HTTPS connections.

Automated Collection

When you visit or use ceri23, our servers, cookies, and analytics tools automatically record Technical Data and Usage Data. This includes your IP address (which may indicate your city or region within Indonesia, such as Jakarta or Surabaya), browser fingerprint, session duration, and game activity logs. This data is pseudonymised wherever technically feasible.

Third-Party Sources

We may receive data from fraud prevention agencies, identity verification bureaux, and payment processors to confirm your identity, detect suspicious transactions, and comply with AML obligations. We may also receive limited data from Game Providers to resolve disputes about game outcomes or bonus eligibility.

4. How We Use Your Personal Data

ceri23 processes your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and securing your Account; authenticating your identity at login; notifying you of account activity.
• Service Delivery: Processing deposits and withdrawals via Indonesian banks and e-wallets; enabling access to games; settling bets and calculating winnings.
• KYC and Compliance: Verifying your age (21+) and identity; complying with AML regulations; detecting and preventing fraud, money laundering, or other financial crime.
• Customer Support: Responding to your queries via email or live chat; resolving disputes; providing technical assistance.
• Responsible Gaming: Monitoring play patterns for signs of problem gambling; enforcing deposit limits, time-outs, and self-exclusion requests; providing information about support resources.
• Promotions and Marketing: Sending you information about bonuses, promotions, and events you have opted into. You may unsubscribe at any time by contacting [email protected].
• Platform Improvement: Analysing Usage Data to optimise game performance, improve user interface, and inform product decisions.
• Legal Obligations: Retaining records as required by applicable law; responding to lawful requests from competent authorities.

5. Legal Basis for Processing

Where international data protection principles apply, ceri23 relies on the following legal grounds to process your Personal Data:

• Contractual Necessity: Processing required to perform the agreement between you and ceri23 — including account creation, payments, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification, AML record-keeping, and regulatory reporting.
• Legitimate Interests: Processing for fraud prevention, platform security, analytics, and service improvement, balanced against your privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

ceri23 shares Personal Data only in the following limited circumstances and only to the extent necessary for the stated purpose:

6.1 Game Providers

Third-party Game Providers such as Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt receive anonymised or pseudonymised session tokens to enable game functionality and resolve disputes. These providers are contractually bound to handle data in accordance with industry security standards.

6.2 Payment Processors

To process deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), we share the minimum necessary financial and identity data with authorised payment gateways. These partners are subject to strict data security requirements.

6.3 Fraud Prevention and KYC Services

Identity information and transaction data may be shared with fraud detection agencies and identity verification bureaux to confirm your identity, verify your age, and detect suspicious activity. Such sharing is required by AML compliance obligations.

6.4 Legal and Regulatory Disclosure

ceri23 will disclose Personal Data to law enforcement agencies, courts, or regulators when compelled to do so by law, a valid court order, or to protect the rights, property, or safety of ceri23, its employees, or its Users. We will notify affected Users of such disclosures where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified via email or prominent notice on the ceri23 platform prior to any such transfer, and the receiving entity will be required to honour this Privacy Policy.

7. Data Retention Periods

ceri23 retains your Personal Data for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with legal obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your Account plus 7 years after account closure to comply with financial record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure as required by AML regulations.
• Transaction Records: Retained for 7 years to comply with tax and financial regulatory obligations.
• Marketing Consent: Retained until you withdraw consent or the Account is closed, whichever occurs first.
• Technical and Usage Logs: Typically retained for 12-24 months for security monitoring and service improvement, then anonymised or deleted.
• Responsible Gaming Records: Self-exclusion data retained indefinitely to honour your request and prevent account reopening. Deposit limits and time-out preferences retained for the duration specified in your settings.

After the applicable retention period expires, Personal Data is securely deleted or anonymised such that it can no longer identify you.

8. Security Measures

ceri23 implements industry-standard technical and organisational measures to protect your Personal Data against unauthorised access, loss, destruction, or alteration:

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and ceri23 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology — the same standard used by international banks.
• Secure Data Storage: Personal Data is stored in encrypted databases hosted in secure data centres with 24/7 monitoring, redundant power supplies, and fire suppression systems.
• Access Controls: Access to Personal Data is restricted to authorised ceri23 employees and contractors who require the information to perform their duties. All personnel sign confidentiality agreements.
• Firewalls and Intrusion Detection: Our network infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity in real-time.
• Regular Security Audits: ceri23 conducts periodic security audits and penetration testing to identify and remediate vulnerabilities.

Organisational Safeguards

• Staff Training: All employees handling Personal Data receive training on data protection principles and security best practices.
• Data Minimisation: We collect and retain only the Personal Data necessary for the specified purposes.
• Incident Response Plan: ceri23 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you and relevant authorities as required by law.

While we implement robust security measures, no system is completely impervious to attack. You are responsible for maintaining the confidentiality of your Account login credentials. If you suspect unauthorised access to your Account, contact us immediately at [email protected].

9. Cookies and Tracking Technologies

ceri23 uses cookies and similar tracking technologies to enhance your user experience, analyse platform performance, and deliver personalised content. A cookie is a small text file placed on your device by your web browser when you visit our site.

Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly. These include session cookies that authenticate your login and remember your language preference. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous information about how you use ceri23, such as which pages you visit and how long you spend on each page. This helps us improve site performance and navigation.
• Functional Cookies: Remember your preferences (e.g., username for quick login, preferred game filters) to provide a more personalised experience.
• Analytics Cookies: Used by third-party analytics services (e.g., Google Analytics) to measure traffic and user behaviour patterns. These services provide us with aggregated reports that inform platform improvements.

Managing Cookies

Most web browsers allow you to control cookies through browser settings. You can configure your browser to reject all cookies, accept only certain cookies, or alert you when a cookie is being set. However, disabling essential cookies may prevent you from accessing certain features of the ceri23 platform.

Instructions for managing cookies in popular browsers:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and website data
• Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data

10. Your Privacy Rights

As a ceri23 User, you hold the following rights with respect to your Personal Data:

Right to Access

You have the right to request a copy of the Personal Data we hold about you. To exercise this right, contact [email protected] with the subject line "Data Access Request." We will respond within 30 days and provide the information in a structured, commonly used format (typically PDF or CSV).

Right to Rectification

If you believe any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your Account settings, or contact customer support for assistance.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your Personal Data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Note that we may be required to retain certain data to comply with legal obligations (e.g., financial record-keeping for 7 years).

Right to Restrict Processing

You may request that we limit how we use your Personal Data in certain situations, such as when you contest the accuracy of the data or object to our processing on legitimate interest grounds.

Right to Data Portability

Where technically feasible, you have the right to receive your Personal Data in a portable format and transmit it to another service provider.

Right to Object

You may object to processing of your Personal Data based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Right to Lodge a Complaint

If you believe ceri23 has violated your privacy rights, you have the right to lodge a complaint with a competent data protection authority in your jurisdiction.

11. Protection of Minors

ceri23 is strictly for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under 21. Our registration process requires Users to confirm their date of birth, and KYC verification procedures include age confirmation via government-issued identification.

If we become aware that an individual under 21 has created an Account or provided Personal Data to ceri23, we will immediately suspend the Account, delete the Personal Data (except as required by law to report the incident), and refund any deposited funds to the payment method used.

Parents and guardians are encouraged to monitor their children's online activities. If you believe a minor has accessed ceri23 or provided Personal Data to us, please contact [email protected] immediately so we can take appropriate action.

12. Changes to This Privacy Policy

ceri23 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on this page with a revised "Last Updated" date at the top
• Sending an email notification to the address registered to your Account
• Displaying a prominent notice on the ceri23 platform homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the ceri23 platform following notice of changes constitutes acceptance of the revised Privacy Policy.

If you do not agree to the changes, you may close your Account by contacting customer support. Account closure does not affect our right to retain Personal Data as required by law or for legitimate purposes as described in this policy.

13. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or how ceri23 handles your Personal Data, please contact our Data Protection team:

Thank you for trusting ceri23 with your Personal Data. We are committed to transparency, security, and respecting your privacy rights as you enjoy our gaming platform.