Privacy Policy

1. Introduction

567luk ("we," "us," "our," "the Company") operates the online gaming platform accessible at https://567luk.cam (the "Platform"). We are committed to safeguarding the privacy of our users ("you," "your," "User," "Player") in accordance with Indonesian data protection laws and international best practices.

This Privacy Policy describes how we collect, use, disclose, store, and protect personal information when you register for an account, use our services, visit our website, or interact with our customer support. It also explains your rights under applicable privacy laws and how to exercise those rights.

We encourage you to read this Privacy Policy carefully. If you have questions or concerns about our privacy practices, please contact us at [email protected].

2. Information We Collect

567luk collects several categories of personal information to provide gaming services, comply with legal obligations, and improve user experience.

2.1 Information You Provide Directly

When you register for an account or interact with our services, you provide the following information directly:

• Account Registration Information: Full legal name (as appears on identity documents), date of birth, gender, residential address, email address, phone number, username, and password.
• Identity Verification Documents (KYC): Indonesian national identity card (KTP) or passport, proof of address (utility bill, bank statement, government letter), and verification selfie holding your identity document. These documents are required to verify you are at least 21 years old and to comply with anti-money laundering regulations.
• Payment Information: Bank account details (account number, bank name, account holder name) or e-wallet information (OVO, DANA, GoPay account details) for processing deposits and withdrawals. Note: We do not store full credit card numbers or CVV codes. Payment processing is handled by third-party payment processors who maintain PCI-DSS compliance.
• Communication Data: Content of messages, emails, live chat transcripts, and support tickets when you contact customer service.
• Survey and Feedback Data: Responses to surveys, promotional questionnaires, or feedback forms you voluntarily complete.

2.2 Information Collected Automatically

When you access the 567luk Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system (iOS, Android, Windows), browser type and version, screen resolution, device identifiers (IMEI, advertising ID).
• Connection Information: IP address, internet service provider, approximate geographic location (city/region level based on IP), time zone setting.
• Usage Data: Pages visited, features used, games played, time spent on Platform, click patterns, navigation paths, referral source (how you arrived at our site).
• Gaming Activity: Bets placed (amount, type, odds), games played (slot titles, live casino tables, sports events), wins and losses, account balance changes, bonus claims, deposit and withdrawal history.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to recognize you, remember preferences, analyze traffic, and improve services. See Section 8 for detailed cookie information.

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation, payment status, fraud risk assessments from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Game Providers: Game session data, RTP statistics, technical performance metrics from providers like Pragmatic Play, Evolution Gaming, Microgaming.
• Identity Verification Services: Verification results from third-party KYC service providers we use to authenticate identity documents and detect fraud.
• Marketing Partners: Campaign performance data, referral sources, advertising effectiveness metrics from affiliate partners and advertising networks.

3. How We Use Your Information

567luk uses collected personal data for the following purposes:

3.1 Service Provision and Account Management

• Create and maintain your gaming account
• Process deposits, withdrawals, and internal fund transfers
• Enable access to gaming products (sports betting, casino games, slots, togel lottery)
• Track gaming activity and account balances
• Manage bonuses, promotions, and VIP rewards
• Provide customer support and respond to inquiries
• Send transactional communications (deposit confirmations, withdrawal notifications, password resets)

3.2 Legal Compliance and Security

• Verify your age (21+ requirement enforcement)
• Verify your identity and address (KYC/AML compliance)
• Detect and prevent fraud, money laundering, and other illegal activities
• Comply with Indonesian gaming regulations and international licensing requirements
• Respond to legal requests from authorities (court orders, subpoenas, government investigations)
• Enforce our Terms & Conditions and investigate Terms violations
• Monitor for suspicious betting patterns, collusion, or bonus abuse
• Protect Platform security and prevent unauthorized access

3.3 Service Improvement and Analytics

• Analyze user behavior to improve Platform functionality and user experience
• Conduct statistical analysis and generate aggregated reports (e.g., most popular games, peak usage times)
• Develop new features and gaming products based on user preferences
• Optimize Platform performance, load times, and mobile responsiveness
• Test new functionalities and troubleshoot technical issues

3.4 Marketing and Communications (With Consent)

• Send promotional emails about new games, bonuses, and special offers
• Display personalized recommendations based on gaming preferences
• Notify you about VIP program benefits and exclusive rewards
• Conduct surveys and request feedback to improve services

Note: Marketing communications require your explicit consent. You may opt out at any time by clicking unsubscribe links in emails or adjusting preferences in your account settings. Transactional communications (deposit confirmations, security alerts) cannot be opted out as they are essential for service delivery.

4. Legal Basis for Processing (GDPR-Aligned)

Although 567luk primarily serves Indonesian users, we adopt GDPR-aligned principles for data processing. We process personal data based on the following legal grounds:

• Contract Performance: Processing is necessary to fulfill our Terms & Conditions agreement with you (account creation, payment processing, game access).
• Legal Obligation: Processing is required to comply with Indonesian law, anti-money laundering regulations, age verification requirements, and licensing conditions.
• Legitimate Interest: Processing serves our legitimate business interests (fraud prevention, security, service improvement, analytics) while respecting your privacy rights.
• Consent: For marketing communications and non-essential cookies, we obtain your explicit consent before processing. You may withdraw consent at any time.

5. Data Sharing and Disclosure

567luk does not sell your personal information to third parties. However, we may share personal data with the following categories of recipients:

5.1 Service Providers and Business Partners

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, and payment gateway operators who process deposits and withdrawals on our behalf.
• Game Content Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other gaming studios whose products appear on our Platform. These providers receive limited data necessary to operate games (user ID, bet amounts, session data) but not full personal details.
• Identity Verification Services: Third-party KYC/AML service providers who verify identity documents, cross-check against sanctions lists, and detect fraudulent documents.
• Cloud Hosting Providers: Secure server infrastructure providers who host our Platform, databases, and application servers.
• Customer Support Tools: Live chat platforms, ticketing systems, and email service providers used to deliver customer support.
• Analytics and Marketing Services: Google Analytics, Facebook Pixel, and similar analytics tools (aggregated data only, no personally identifiable information unless you consent).

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Legal and Regulatory Authorities

We may disclose personal information to law enforcement, regulatory agencies, or courts when:

• Required by Indonesian law or valid legal process (subpoena, court order, government request)
• Necessary to investigate suspected illegal activity (fraud, money laundering, underage gambling)
• Required to comply with gaming license conditions or regulatory audits
• Necessary to protect our rights, property, or safety, or the rights and safety of users or the public

5.3 Business Transfers

If 567luk undergoes a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the acquiring entity. Users will be notified via email and/or prominent notice on the Platform. The new entity will be bound by this Privacy Policy unless a revised policy is provided.

5.4 Aggregated and De-identified Data

We may share aggregated, anonymized data that cannot identify individual users with business partners, researchers, or the public. For example: "40% of 567luk users play slots between 19:00-22:00 WIB" or "Average withdrawal processing time is 6 hours." This data does not reveal personal information.

6. Data Security

567luk implements industry-standard security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Sockets Layer) technology. Look for the padlock icon in your browser address bar.
• Encrypted Data Storage: Sensitive data (passwords, payment information, identity documents) is encrypted at rest using AES-256 encryption.
• Secure Servers: Our servers are hosted in secure data centers with physical access controls, 24/7 monitoring, fire suppression systems, and backup power supplies.
• Firewalls and Intrusion Detection: Network-level firewalls and intrusion detection systems monitor for suspicious activity and block unauthorized access attempts.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments quarterly to identify and remediate potential weaknesses.

6.2 Organizational Security Measures

• Access Controls: Personal data is accessible only to authorized employees and contractors who require it to perform their duties. Access is granted on a need-to-know basis.
• Staff Training: All employees receive data protection training and sign confidentiality agreements.
• Password Policies: Strong password requirements enforced for all user accounts and internal systems. Passwords are hashed (not stored in plain text) using bcrypt with salt.
• Two-Factor Authentication: Available for user accounts; required for employee access to sensitive systems.
• Incident Response Plan: Documented procedures for detecting, responding to, and reporting data breaches. If a breach occurs affecting your data, we will notify you within 72 hours as required by applicable law.

6.3 Payment Security

• Payment processing is handled by PCI-DSS (Payment Card Industry Data Security Standard) compliant payment processors.
• 567luk does not store complete credit card numbers, CVV codes, or card PINs on our servers.
• Bank account numbers and e-wallet details are encrypted and accessible only to authorized payment operations staff.

6.4 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your data:

• Choose a strong, unique password for your 567luk account (minimum 8 characters, mix of letters, numbers, symbols). Do not reuse passwords from other websites.
• Never share your password, username, or account credentials with anyone.
• Log out after each session, especially when using shared or public devices.
• Keep your email account secure, as it is used for password resets and account notifications.
• Enable two-factor authentication if available in your account settings.
• Report suspicious emails or phishing attempts to [email protected] immediately.

Important: 567luk will never ask for your password via email, phone, or live chat. If someone claiming to be from 567luk requests your password, it is a scam—report it immediately.

7. Data Retention

567luk retains personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations.

7.1 Active Account Data

• While your account is active, we retain all account information, transaction history, gaming activity, and KYC documents to provide services.
• You may request account closure at any time. Upon closure, we will retain data for the periods specified below.

7.2 Retention Periods After Account Closure

• Financial Records (Deposits, Withdrawals, Bets): 7 years from account closure, as required by Indonesian financial regulations and anti-money laundering laws.
• Identity Verification Documents (KTP, Passport, Selfie): 7 years from account closure, as required by KYC/AML regulations.
• Communication Records (Support Tickets, Emails, Chat Logs): 3 years from account closure, for dispute resolution and quality assurance purposes.
• Marketing Preferences and Consent Records: 5 years from consent withdrawal or account closure, to document compliance with marketing laws.
• Login History and Technical Logs: 2 years from account closure, for security analysis and fraud prevention.

7.3 Exceptions

We may retain data beyond standard retention periods when:

• Required by law or legal hold (e.g., ongoing litigation, government investigation)
• Necessary to resolve disputes or enforce agreements
• Required for legitimate business purposes (e.g., investigating suspected fraud, defending legal claims)

7.4 Deletion

After retention periods expire, personal data is securely deleted using industry-standard data destruction methods. Aggregated, anonymized data derived from your activity may be retained indefinitely for statistical and research purposes, as it cannot identify you.

8. Cookies and Tracking Technologies

567luk uses cookies, web beacons, and similar technologies to enhance user experience, analyze traffic, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to recognize your device and remember information about your visit (e.g., language preference, login status).

8.2 Types of Cookies We Use

• Essential Cookies (Strictly Necessary): Required for Platform functionality. Enable account login, session management, payment processing, and security features. These cookies cannot be disabled without severely impacting your ability to use the Platform.
• Functional Cookies: Remember your preferences (language, currency display format, game filter settings) to provide a personalized experience.
• Analytics Cookies: Collect information about how you use the Platform (pages visited, time spent, click patterns) to help us improve services. We use Google Analytics with IP anonymization enabled.
• Marketing/Advertising Cookies: Track your activity across websites to deliver targeted advertisements and measure campaign effectiveness. Placed by third-party advertising networks with your consent.

8.3 Cookie Management

You can control cookies through your browser settings:

• Most browsers allow you to refuse cookies, delete existing cookies, or be notified before cookies are placed.
• Browser instructions: Chrome (Settings > Privacy > Cookies), Firefox (Options > Privacy > Cookies), Safari (Preferences > Privacy), Edge (Settings > Privacy).
• Note: Blocking essential cookies will prevent you from using core Platform features (login, deposits, game play).
• You can opt out of analytics cookies and advertising cookies while still accepting essential cookies.

8.4 Third-Party Cookies

Third-party service providers (Google Analytics, payment processors, game providers) may place their own cookies on your device. We do not control these cookies. Review their privacy policies for information about their data practices.

9. Your Privacy Rights

Under Indonesian data protection principles and international privacy standards (GDPR-aligned), you have the following rights regarding your personal data:

9.1 Right to Access

You have the right to request a copy of the personal data we hold about you. This includes account information, transaction history, gaming activity, and communication records. We will provide the data in a commonly used electronic format within 30 days of your request.

9.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings (email, phone number, address). For changes requiring verification (name, date of birth), contact customer support with supporting documentation.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances:

• Data is no longer necessary for the purposes for which it was collected
• You withdraw consent (for processing based on consent) and no other legal basis applies
• You object to processing and no overriding legitimate grounds exist
• Data has been unlawfully processed

Exceptions: We may refuse erasure if data retention is required by law (financial records, KYC documents), necessary to establish/defend legal claims, or required for fraud prevention. In such cases, we will restrict processing to the minimum necessary for these purposes.

9.4 Right to Restrict Processing

You may request that we limit how we use your data while we investigate a dispute about accuracy or lawfulness of processing. During restriction, we will store the data but not use it except with your consent or for legal claims.

9.5 Right to Data Portability

You have the right to receive personal data you provided to us in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and transmit it to another service provider. This right applies to data processed based on consent or contract performance.

9.6 Right to Object

You may object to processing based on legitimate interests (e.g., marketing, analytics). We will stop processing unless we demonstrate compelling legitimate grounds that override your interests. You can always opt out of marketing communications via unsubscribe links or account settings.

9.7 Right to Withdraw Consent

For processing based on consent (marketing emails, non-essential cookies), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with your request. Include your account username and describe the specific right you wish to exercise. We will respond within 30 days. For security, we may request additional verification (e.g., answer security questions, provide ID) to confirm your identity before processing requests.

10. International Data Transfers

567luk primarily operates in Indonesia and stores data on servers located in secure data centers within Indonesia or neighboring jurisdictions. However, some service providers (cloud hosting, payment processors, game studios) may be located outside Indonesia.

When personal data is transferred internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by data protection authorities
• Certification under recognized data protection frameworks
• Ensuring the recipient jurisdiction provides adequate data protection levels
• Obtaining your explicit consent for specific transfers

By using 567luk services, you consent to international data transfers as described above.

11. Children's Privacy

567luk services are strictly for adults aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age.

If we discover that we have inadvertently collected data from a person under 21, we will:

• Immediately terminate the account
• Delete all associated personal data from our systems
• Forfeit any account balance
• Report the incident to relevant authorities if required by law

If you are a parent or guardian and believe your child has provided personal information to 567luk, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

567luk reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated via:

• Email notification to registered users
• Prominent notice on the Platform homepage
• Update of the "Last Updated" date at the top of this page

Your continued use of the Platform after changes are posted constitutes acceptance of the revised Privacy Policy. If you do not agree with modifications, you must cease using the Platform and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information and Complaints

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

• Email: [email protected]
• Subject Line: Privacy Inquiry / Data Request / Privacy Complaint
• Response Time: We will acknowledge your inquiry within 48 hours and provide a substantive response within 30 days.

Filing a Complaint

If you believe we have violated your privacy rights or mishandled your personal data, you may file a complaint by:

1. Contacting our customer support team at [email protected] with details of your complaint. We will investigate and respond within 7 business days.
2. If unsatisfied with our response, you may escalate to a senior privacy officer by requesting escalation in your communication.
3. You also have the right to lodge a complaint with the Indonesian data protection authority or relevant supervisory authority in your jurisdiction.