Privacy Policy

1. Introduction and Scope

1.1 Policy Overview

This Privacy Policy applies to all users of caca28 services, including visitors to our website, registered account holders, and anyone who interacts with our platform. It governs the collection, processing, storage, and disclosure of personal information obtained through your use of caca28, including our website at caca28.cam, mobile applications (if applicable), and any related services we provide.

1.2 Data Controller

caca28 acts as the data controller for all personal information collected through our platform. As data controller, we determine the purposes and means of processing your personal data and remain responsible for ensuring compliance with applicable data protection regulations. We process your information in accordance with international data protection standards and Indonesian consumer protection laws where applicable.

1.3 Updates to This Policy

caca28 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated to users via email notification or prominent notice on our platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. Your continued use of caca28 services after policy updates constitutes acceptance of the revised terms.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a caca28 account, we collect personal information necessary to create and maintain your account, verify your identity, and comply with regulatory requirements. This includes:

• Identity Information: Full legal name, date of birth, gender, and nationality as shown on government-issued identification documents.
• Contact Information: Email address, mobile phone number, residential address including street, city, province, and postal code.
• Verification Documents: Government-issued photo ID (Indonesian KTP, passport, or driver's license/SIM), proof of address documents (utility bills, bank statements), and selfie photographs for identity confirmation.
• Financial Information: Bank account details including bank name, account number, and account holder name for processing deposits and withdrawals. E-wallet account information for OVO, DANA, GoPay, ShopeePay, or LinkAja if used for transactions.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers if configured.

2.2 Information Collected Automatically

When you access caca28, certain information is automatically collected through technical means:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages visited, features accessed, time spent on pages, games played, bets placed, click patterns, and navigation paths through the platform.
• Log Data: IP address, access times, referring/exit pages, and interaction with platform elements. We may use IP geolocation to verify user location within Indonesia.
• Transaction History: Complete record of deposits, withdrawals, bets placed, game results, bonus claims, and account balance changes.
• Communications: Customer support interactions via Live Chat, email, WhatsApp, including message content, timestamps, and resolution outcomes.

2.3 Information from Third Parties

caca28 may receive information about you from third-party sources including payment processors (banks and e-wallet providers processing your transactions), game providers (supplying usage and gameplay data), identity verification services (confirming document authenticity), and fraud prevention services (detecting suspicious activity patterns). This information supplements data you provide directly and helps us maintain platform security and regulatory compliance.

3. How We Use Your Information

3.1 Account Management and Service Delivery

We use your personal information primarily to create and maintain your caca28 account, process your registration and identity verification, authenticate your login credentials, manage your account settings and preferences, process deposits and withdrawals, credit winnings and bonuses, maintain transaction records, and provide access to gaming services including sports betting, casino games, slots, and live dealer tables.

3.2 Legal and Regulatory Compliance

caca28 operates in a regulated industry subject to various legal requirements. We process your data to verify your age and confirm you are at least 21 years old, conduct Know Your Customer (KYC) verification to prevent identity fraud, detect and prevent money laundering and financial crimes, comply with gaming regulations and licensing requirements, respond to legal requests from authorities, and maintain records as required by law.

3.3 Security and Fraud Prevention

Your information helps us protect your account and our platform from unauthorized access and fraudulent activity. We use data to monitor account activity for suspicious patterns, detect multiple accounts or bonus abuse, prevent underage gambling and access from restricted jurisdictions, investigate potential violations of our Terms & Conditions, and implement risk management procedures to protect user funds.

3.4 Customer Support and Communication

We process your information to respond to customer support inquiries via Live Chat, email, and WhatsApp, resolve account issues and technical problems, provide important account notifications and security alerts, send transactional emails regarding deposits, withdrawals, and account activity, and communicate policy updates and platform changes that affect your use of services.

3.5 Marketing and Promotional Communications

With your consent, caca28 may use your contact information to send promotional emails about bonuses, special offers, and new game launches, provide personalized recommendations based on your gaming preferences, notify you of upcoming tournaments and events, and share news about platform enhancements and features. You may opt out of marketing communications at any time through account settings or by contacting customer support. Transactional communications (deposit confirmations, withdrawal notifications, security alerts) cannot be opted out as they are essential for account operation.

3.6 Platform Improvement and Analytics

We analyze aggregated and anonymized usage data to improve platform performance and user experience, identify popular games and betting markets, optimize website navigation and mobile responsiveness, develop new features based on user behavior patterns, and conduct market research to better serve Indonesian players' preferences.

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

caca28 shares your information with carefully selected third-party service providers who assist in operating our platform. These include payment processors (Indonesian banks, e-wallet providers, and payment gateways handling financial transactions), game providers (software developers supplying slots, live casino, and sports betting platforms), identity verification services (conducting KYC checks and document authentication), cloud hosting services (storing platform data securely), customer support tools (managing support tickets and communications), and analytics providers (helping us understand platform usage patterns). All third-party providers are contractually obligated to maintain confidentiality and use your data solely for the services they provide to caca28.

4.2 Legal Obligations and Authorities

We may disclose your information when legally required to comply with valid legal processes including court orders, subpoenas, or government requests, cooperate with law enforcement investigations, prevent fraud, illegal activity, or violations of our Terms & Conditions, protect the rights, property, or safety of caca28, our users, or the public, and enforce our legal rights or defend against legal claims.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will provide notice via email or prominent website notification before your data becomes subject to a different privacy policy, and you will have the opportunity to delete your account before such transfer if you do not consent to the new ownership.

4.4 What We Do Not Share

caca28 will never sell your personal information to third parties for their marketing purposes, share your financial details (bank accounts, e-wallet credentials) except as necessary for processing your transactions, disclose your betting history or gambling activity to third parties without your explicit consent (except as required by law), or provide your contact information to external marketers or advertisers.

5. Data Security Measures

5.1 Technical Security

caca28 implements industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive data including passwords (using one-way hashing) and financial information, regular security audits and vulnerability assessments, intrusion detection and prevention systems, and DDoS protection to maintain platform availability.

5.2 Access Controls

Access to personal data is restricted on a need-to-know basis. Only authorized caca28 personnel with legitimate business reasons can access user information, and all access is logged and monitored. Employees with data access undergo security training and sign confidentiality agreements. Multi-factor authentication protects administrative systems and databases containing user information.

5.3 Your Security Responsibilities

While caca28 maintains robust security measures, you also play a crucial role in protecting your account. You are responsible for maintaining the confidentiality of your login credentials, using a strong, unique password (combining letters, numbers, and special characters), never sharing your username or password with third parties, logging out after each session, especially on shared devices, keeping your registered email address and phone number secure, and immediately reporting any suspected unauthorized access to customer support.

5.4 Security Breach Notification

In the unlikely event of a data breach affecting your personal information, caca28 will notify affected users via email within 72 hours of discovering the breach. The notification will include the nature of the breach, types of data potentially compromised, steps we are taking to address the issue, and recommendations for protecting yourself from potential harm.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit caca28. They help us recognize you, remember your preferences, maintain your login session, and improve platform functionality. We use several types of cookies including essential cookies (required for basic platform operation like maintaining login state), functional cookies (remembering your preferences and settings), analytics cookies (collecting anonymized usage data to improve the platform), and performance cookies (monitoring page load times and technical performance).

6.2 Third-Party Cookies

Some cookies on caca28 are placed by third-party service providers including analytics services that track platform usage patterns, game providers that maintain your game sessions, and payment processors that facilitate secure transactions. These third parties have their own privacy policies governing their use of cookies and tracking technologies.

6.3 Managing Cookie Preferences

Most web browsers allow you to control cookie settings through their preferences or settings menu. You can typically choose to block all cookies, accept only first-party cookies, or receive notifications before cookies are placed. However, disabling cookies may affect platform functionality, potentially preventing login, losing personalized settings, or causing games to malfunction. Essential cookies required for platform operation cannot be disabled without ceasing to use caca28 services.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to request a copy of the personal information caca28 holds about you. We will provide this information in a structured, commonly used, and machine-readable format (typically CSV or JSON) within 30 days of your request. You can request data export by contacting customer support via email at [email protected].

7.2 Correction and Updates

You have the right to update inaccurate or incomplete personal information. You can modify most information directly through your account settings, including contact details, password, and preferences. For changes to identity information (name, date of birth) or financial details, contact customer support with appropriate documentation supporting the requested changes.

7.3 Deletion and Account Closure

You may request deletion of your personal data and closure of your caca28 account at any time. Upon receiving your deletion request, we will close your account within 7 business days and begin the data deletion process. However, certain information must be retained for legal and regulatory compliance purposes, typically for 5-7 years after account closure. Retained data includes transaction records, KYC documents, and records necessary for tax, audit, or legal purposes.

7.4 Objection and Restriction

You may object to certain processing of your personal information, particularly for marketing purposes. You can opt out of promotional emails through account settings or by clicking unsubscribe links in marketing messages. You may also request restriction of processing in specific circumstances, such as while disputing data accuracy or when you've objected to processing pending our verification of legitimate grounds.

7.5 Exercising Your Rights

To exercise any of these privacy rights, contact caca28 customer support via email at [email protected], Live Chat on the platform, or WhatsApp support. Include your full name, registered email address, and specific request. We may require identity verification before processing requests to prevent unauthorized disclosure of personal information. There is no fee for exercising your privacy rights unless requests are clearly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee.

8. Data Retention and Deletion

8.1 Active Account Data

For active caca28 accounts, we retain personal information for as long as your account remains open and for a reasonable period thereafter to comply with legal obligations and resolve disputes. Account data includes identity information, contact details, transaction history, and gaming records.

8.2 Retention After Account Closure

Following account closure, caca28 retains certain information for legal, regulatory, and business purposes. Transaction records, KYC documents, and financial data are typically retained for 5-7 years to comply with anti-money laundering regulations and tax requirements. Communications logs and support tickets may be retained for 2-3 years for quality assurance and dispute resolution. Marketing data and preferences are deleted within 30 days of account closure or opt-out request.

8.3 Anonymized Data

caca28 may retain anonymized, aggregated data indefinitely for statistical analysis and platform improvement. This data cannot be linked back to individual users and does not constitute personal information under privacy regulations.

9. International Data Transfers

caca28 operates internationally and may transfer your personal information to servers located outside Indonesia for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place including standard contractual clauses approved by data protection authorities, ensuring third-party service providers maintain adequate data protection standards, encrypting data during transmission and storage, and limiting access to authorized personnel only. By using caca28 services, you consent to international data transfers necessary for platform operation, subject to the protections described in this Privacy Policy.

10. Contact Information

10.1 Privacy Questions and Concerns

If you have questions, concerns, or complaints about this Privacy Policy or how caca28 handles your personal information, please contact us through the following channels:

• Email: [email protected] (include "Privacy Inquiry" in subject line)
• Live Chat: Available 24/7 through the platform website
• WhatsApp: Contact our support team (number displayed on website)

10.2 Response Timeline

We aim to respond to all privacy-related inquiries within 72 hours during business days. Complex requests requiring investigation or consultation may take up to 30 days, and we will keep you informed of progress throughout the process.