At erek01, your privacy is not an afterthought — it is a core design principle. This Privacy Policy explains in plain, precise terms exactly what personal data we collect from Indonesian members, why we collect it, how we protect it, and the rights you hold over your own information.
erek01's approach to privacy is built on six foundational principles that inform every data-handling decision we make — from account registration to account closure.
We collect personal data only for specific, defined purposes — account management, identity verification, fraud prevention, legal compliance, and (with your consent) marketing. We do not collect data speculatively or in excess of those stated purposes.
All personal data held by erek01 is protected with AES-256 encryption at rest and TLS 1.3 encryption in transit. Access to member data is restricted to authorized personnel with a documented operational need. External security audits are conducted regularly.
erek01 does not sell, rent, lease, or exchange your personal data with third parties for commercial or marketing purposes — under any circumstances. Your data is used to serve your account, not to monetize your identity.
You hold meaningful rights over your personal data — including the right to access, correct, export, and request deletion. These rights can be exercised at any time by contacting our support team, subject to the legal retention obligations described in this Policy.
We collect only the data that is genuinely necessary to operate your account, verify your identity, and process your transactions. We do not collect surplus personal identifiers, social media profiles, or sensitive data beyond what our licensing obligations require.
We maintain clear internal records of what data we hold, why we hold it, and how long we retain it. This Policy is reviewed and updated at least annually. You are notified of material changes before they take effect.
About This Policy: This Privacy Policy ("Policy") applies to all personal data processed by erek01 ("the Company", "we", "us", "our") in connection with your use of the erek01 Platform at https://erek01.cam. It applies to all members, visitors, and prospective members, regardless of the device or method used to access the Platform. This Policy should be read alongside our Terms & Conditions.
Throughout this Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, including name, email address, device identifiers, and financial transaction records. |
| "Processing" | Any operation performed on personal data — including collection, storage, use, disclosure, transfer, and deletion. |
| "Data Controller" | erek01 — the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party that processes personal data on behalf of erek01 under a written data processing agreement (e.g., payment gateway providers, KYC verification partners). |
| "Member" | Any individual who has registered an account on the erek01 Platform. |
| "Cookies" | Small text files placed on your device by the Platform to store session information, preferences, and analytical data. |
| "KYC" | Know Your Customer — the identity and document verification process required under our licensing and anti-money-laundering obligations. |
| "AML" | Anti-Money Laundering — the regulatory framework obliging erek01 to monitor transactions and report suspicious financial activity. |
erek01 collects the following categories of personal data, limited strictly to what is necessary for the purposes described in this Policy:
erek01 collects personal data through the following direct and automated channels:
erek01 processes your personal data on the following legal grounds, each of which is documented internally and reviewed periodically:
The personal data collected by erek01 is used exclusively for the following purposes:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation & management | Registration & Identity Data | Contractual Necessity |
| Identity verification (KYC) | KYC Data, Registration Data | Legal Obligation |
| Processing deposits & withdrawals | Financial & Transaction Data | Contractual Necessity |
| Fraud detection & AML monitoring | Financial Data, Technical Data | Legal Obligation, Legitimate Interest |
| Customer support | Communications Data, Account Data | Contractual Necessity |
| Platform security & integrity | Technical & Device Data | Legitimate Interest |
| Responsible gaming monitoring | Transaction Data, Activity Data | Legal Obligation, Legitimate Interest |
| Promotional communications | Contact Data, Preferences | Consent |
| Platform analytics & improvement | Technical & Device Data | Legitimate Interest |
| Legal & regulatory compliance | All categories as required | Legal Obligation |
erek01 does not use your personal data to make solely automated decisions that produce significant legal or similarly significant effects on you without human oversight. Fraud flags and account risk scores generated by automated systems are always reviewed by a qualified member of our compliance team before any account action is taken.
erek01 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:
We engage carefully selected third-party service providers who process data on our behalf under written data processing agreements that require them to maintain confidentiality and implement appropriate security measures. These providers include:
erek01 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are legally compelled to do so by a valid legal order, court order, or regulatory requirement. We will notify affected members of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of erek01's business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Policy that arise from it, with a minimum of 30 days' notice prior to the change taking effect.
Absolute Prohibitions: erek01 will never sell your personal data to data brokers, advertisers, or marketing companies. We will never share your KYC documents or financial records with unaffiliated third parties for commercial purposes. We will never disclose your data to any government body in the absence of a valid, specific legal order.
The erek01 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and optimized experience. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use core Platform features including login and transaction processing. Disabling analytics or marketing cookies will not affect your ability to use the Platform.
erek01 retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to applicable legal and regulatory retention obligations. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Registration Data | 5 years after account closure | Licensing obligation, dispute resolution |
| KYC Documents | 5 years after account closure | AML legal obligation |
| Financial Transaction Records | 7 years after each transaction | AML, audit, and tax compliance |
| Bet & Game Activity Records | 5 years after account closure | Licensing obligation, dispute resolution |
| Support Communications | 3 years after interaction date | Dispute resolution, quality assurance |
| Analytics & Technical Logs | 13 months on a rolling basis | Platform security, fraud detection |
| Marketing Preference Records | Until consent withdrawn + 1 year | Proof of lawful processing basis |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual. Anonymized, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
erek01 is an internationally operated platform. Your personal data may be transferred to, and processed in, countries outside Indonesia — including the jurisdiction in which erek01 holds its gaming license and the locations of our cloud infrastructure and KYC service providers.
Where personal data is transferred internationally, erek01 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include:
By registering an account on the erek01 Platform, you acknowledge that your data may be transferred and processed internationally as described in this clause, subject always to the protections set out in this Policy.
As a member of the erek01 Platform, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting our support team via live chat or at [email protected]:
You may request a copy of all personal data that erek01 holds about you. We will respond to access requests within 30 days of receipt, providing a structured summary of the data held, its source, the purposes of processing, and any third parties with whom it has been shared.
If any personal data held about you is inaccurate or incomplete, you have the right to request its correction. Identity-related corrections may require submission of updated KYC documentation to confirm the change.
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Erasure requests are subject to our legal retention obligations — data that must be retained under AML, licensing, or audit law cannot be deleted until the applicable retention period expires.
You may request that erek01 restricts the processing of your data — for example, while a rectification request is under review, or where you contest the lawfulness of a processing activity. During a restriction period, we will continue to store your data but will not actively process it beyond what is legally required.
Where processing is carried out on the basis of your consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) so that it can be transferred to another service provider of your choosing.
You may object to the processing of your personal data where erek01 relies on legitimate interest as the legal basis. You also have an absolute right to object to the use of your data for direct marketing purposes at any time, with immediate effect.
Response Timeline: erek01 aims to respond to all data rights requests within 14 calendar days. In complex cases, the response period may be extended to a maximum of 30 days, with written notification of the extension provided to you within the initial 14-day window.
The erek01 Platform is strictly restricted to individuals who are 21 years of age or older. erek01 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Registration attempts by underage individuals are prohibited under our Terms & Conditions and will result in immediate account closure and forfeiture of any associated balance.
If erek01 becomes aware that personal data has been collected from an individual under 21 — whether through a misrepresentation at registration or any other means — that data will be deleted promptly and the account permanently closed. If you have reason to believe that a minor has registered on the Platform, please contact our support team immediately at [email protected].
erek01 implements a comprehensive, layered security framework to protect your personal data against unauthorized access, accidental loss, alteration, and destruction. Our technical and organizational security measures include:
Your Role in Security: While erek01 implements robust technical security, your account security also depends on you keeping your password and two-factor authentication credentials confidential. Never share your login details with anyone — including individuals claiming to be erek01 staff. Our team will never ask for your password.
erek01 reviews and updates this Privacy Policy at least once per year, and additionally whenever significant changes to our data processing practices, applicable law, or licensing requirements make an update necessary. The "Last reviewed and updated" date at the top of this page reflects the date on which the current version came into effect.
When material changes are made to this Policy, erek01 will notify you through a prominent notice on the Platform and by email to the address registered on your account, with a minimum of 14 days' advance notice before the updated Policy takes effect. Your continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the changes. If you do not accept the updated Policy, you must cease using the Platform and may request account closure.
This Privacy Policy is governed by and construed in accordance with the laws of the jurisdiction in which erek01 holds its international gaming license. erek01 aligns its data protection practices with internationally recognized privacy frameworks, including the principles of the General Data Protection Regulation (GDPR), as a benchmark for high-standard privacy governance — irrespective of whether GDPR applies directly to your jurisdiction.
Nothing in this clause diminishes any statutory privacy rights you hold under applicable Indonesian law. In the event of a conflict between this Policy and a mandatory requirement of Indonesian law as it applies specifically to you, the mandatory legal requirement shall prevail.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data erek01 holds about you, please contact our Privacy & Data Protection team through any of the following channels:
Our support team responds in both English and Bahasa Indonesia. Privacy-specific requests are handled by our dedicated compliance team. We aim to acknowledge all privacy requests within 2 business days (WIB) and to provide a substantive response within 14 calendar days.
If you are unsatisfied with the resolution of a privacy complaint, you may escalate the matter to the data protection supervisory authority or dispute resolution body designated under our international gaming license.
For questions about how your data is used, your rights as a member, or data deletion requests, our support team is available 24/7. You may also review our Terms & Conditions for the full contractual framework, or visit our FAQ for quick answers on account security, KYC, and data-related topics.