Privacy Policy Protegel – Member Data Protection in Indonesia

This Privacy Policy is issued by Protegel and applies to all services operated under the Protegel brand, including the website protegel.org and related mobile platforms. This document explains in detail how we manage the personal information you provide to us.

We understand that personal data is something sensitive and valuable. That is why Protegel built its entire data management system on privacy-by-design principles from the ground up — not as an afterthought. Every decision about data collection and use always places member interests as the top priority.

By registering or continuing to use Protegel's services, you confirm that you have read and understood this Privacy Policy. If anything is unclear, please do not hesitate to contact our support team before proceeding.

Protegel collects various types of information needed to provide a secure, seamless, and personalized service to every member. Below are the categories of data we collect and the purposes for which they are used:

Data collected by Protegel is used responsibly and limited to the following purposes:

• Account creation and management — identity verification, login authentication, and account preference settings.
• Transaction processing — securely processing deposits, withdrawals, and bonus payments.
• KYC Verification — ensuring every member is a real person and meets the minimum age requirement.
• Platform security — detecting and preventing fraudulent activity, duplicate accounts, or unauthorized access.
• Service personalization — displaying promotions, game recommendations, and relevant content based on your preferences.
• Service communications — sending important notifications about your account, applicable promotions, and platform updates.
• Legal compliance — fulfilling regulatory obligations including Anti-Money Laundering (AML) reporting in accordance with applicable requirements.
• Product improvement — analyzing aggregated (anonymized) data to improve platform performance and user experience.

Protegel does not use your personal data for third-party advertising, does not profile you for sale to advertisers, and does not make automated decisions with legal impact on you without human involvement.

Every processing of personal data at Protegel is carried out on the basis of one of the following legal grounds:

• Contract performance — processing is necessary to fulfill the service obligations you requested (registration, transactions, support).
• Legal obligation — some processing is required by applicable financial and anti-money laundering regulations.
• Legitimate interest — for platform security, fraud prevention, and service improvement.
• Consent — for optional marketing communications and non-essential cookie usage, we request explicit consent that can be withdrawn at any time.

Protegel does not sell, rent, or exchange members' personal data to third parties for commercial purposes. Data is only shared under the following conditions and always with adequate safeguards:

• Technical service providers — partners who help operate the platform (such as server providers, payment gateways, and KYC verification services) bound by strict confidentiality agreements.
• Game providers — game providers (such as Pragmatic Play, PG Soft, etc.) that require minimal data for technical game integration purposes.
• Competent authorities — if required by applicable law, court order, or anti-money laundering regulations, Protegel may share information with the relevant government authorities.
• Business process (acquisition) — in the event of a merger or acquisition, data may be transferred to the successor entity with equivalent or greater privacy protections.

Protegel applies multiple layers of technical and organizational security to protect your personal data from unauthorized access, loss, disclosure, or alteration:

• 256-bit SSL/TLS Encryption for all data transmitted between your browser/app and Protegel's servers.
• Data encryption at rest (at-rest encryption) for all sensitive data stored on our servers.
• Role-based access control (RBAC) — only employees with a legitimate need may access specific data.
• Regular security audits by internal teams and independent third parties to identify and close potential vulnerabilities.
• 24/7 real-time monitoring to detect suspicious activity or unauthorized access attempts.
• Incident response procedures documented to respond swiftly in the event of a data security breach.

That said, no security system is 100% perfect. Protegel is committed to notifying affected members as quickly as possible in the event of a significant data breach.

Protegel uses cookies and similar tracking technologies to enhance the user experience and analyze platform performance. The following are the types of cookies we use:

• Essential cookies — required for core platform functions such as login session management and security. Cannot be disabled.
• Functional cookies — remembering your preferences such as language, display settings, and last accessed menu.
• Analytics cookies — collecting aggregated (anonymized) data on how users interact with the platform for product improvement. Can be disabled.
• Performance cookies — helping us monitor platform speed and stability to ensure a smooth gaming experience.

Protegel retains your personal data for as long as necessary for the purposes described in this policy, or as required by applicable law.

• Active account data — retained for as long as the account is active and for a specified period after account closure.
• Financial transaction data — retained for a minimum of 5 years in accordance with applicable financial regulatory requirements for audit and compliance purposes.
• KYC data — retained in accordance with regulatory requirements, generally 5–7 years after account closure.
• Security and technical logs — retained for the period necessary for security investigations, generally 12–24 months.

Once the retention period ends, data will be permanently deleted or anonymized so that it can no longer be linked to any specific individual.

Protegel respects your rights over your personal data. The following are rights you may exercise at any time:

In the course of its operations, Protegel may process or store data outside Indonesia, particularly on servers located in the Asia-Pacific region. All international data transfers are carried out with adequate safeguards, including standard data transfer agreements or equivalent protective mechanisms.

Protegel ensures that all third-party partners and vendors who receive member data are committed to upholding data protection standards no lower than those applied by Protegel itself.

Protegel services are exclusively available to individuals who are aged 18 and above. Protegel does not knowingly collect or process personal data from individuals under the age of 18.

If Protegel becomes aware that data from a minor has been collected without consent, that data will be deleted immediately and the associated account will be closed. Parents or guardians concerned about a minor's possible access to the Protegel platform are urged to contact our support team right away.

Protegel may update this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or service improvements. Material changes will be communicated to members via their registered email or account dashboard notification at least 7 days before taking effect.

The "last updated" date at the top of this page always reflects the most current version. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, Protegel is ready to assist through the following channels:

• Live Chat — available 24/7 on the Protegel platform, the fastest way to get a response.
• Support email — [email protected] (display as plain text only, not a clickable link).

We are committed to responding to every privacy inquiry or complaint within a maximum of 72 hours on business days. For requests requiring identity verification (such as data access or deletion requests), the process may take longer in accordance with applicable regulations.