pul500 Privacy Policy

1. Introduction

Welcome to the pul500 Privacy Policy. This document explains how pul500 (the "Company", "we", "us", or "our") collects, uses, stores, shares, and protects your personal information when you access or use our website located at https://pul500.cam (the "Website"), mobile applications (the "App"), and related online betting and gaming services (collectively, the "Services").

At pul500, we are committed to protecting the privacy and security of our users. We understand that Indonesian players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Privacy Policy outlines our data practices in accordance with international data protection standards and applicable regulations governing online gambling operators.

By registering an account, using the Services, or providing us with any personal information, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you must discontinue use of the Services immediately and contact us to delete your account and data.

2. Information We Collect

pul500 collects several categories of personal information to provide, improve, and secure our Services. The types of information we collect include:

2.1 Information You Provide Directly

When you register an account on pul500, you voluntarily provide us with the following personal information:

• Account Registration Data: Full legal name, date of birth, gender, email address, phone number, residential address (street, city, province, postal code), username, and password.
• Identity Verification Documents (KYC): Government-issued photo identification (Indonesian National ID / KTP, passport, or driver's license), proof of address (utility bill, bank statement), selfie verification photos, and any additional documents required to verify your identity, age, and address.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, etc.), payment card details (card number, expiration date, CVV), transaction history, deposit amounts, withdrawal requests, and source of funds documentation.
• Communication Data: Messages, emails, live chat transcripts, customer support tickets, feedback forms, survey responses, and any other communications you send to pul500.
• Promotional Preferences: Marketing consent, email subscription preferences, SMS notification settings, and bonus opt-in/opt-out choices.

2.2 Information Collected Automatically

When you access or use pul500, we automatically collect certain technical and behavioral information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device manufacturer and model, unique device identifiers (IMEI, MAC address, advertising ID).
• Usage Data: IP address, geolocation data (country, region, city), access times and dates, pages viewed, features used, games played, bet history, session duration, click-through rates, referral sources, and navigation patterns.
• Betting and Gaming Activity: Bet amounts, win/loss records, game preferences, sports followed, payment method preferences, bonus usage patterns, and account balance fluctuations.
• Technical Logs: Server logs, error reports, crash data, API calls, system performance metrics, and security event logs.

2.3 Information from Third Parties

pul500 may receive information about you from third-party service providers and partners, including:

• Payment Processors: Transaction verification, fraud detection data, payment success/failure notifications, and chargeback information from Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers.
• Identity Verification Services: Age verification results, identity authentication confirmations, anti-fraud checks, and sanctions list screening from licensed KYC/AML service providers.
• Game Providers: Gameplay data, RNG results, jackpot wins, and technical performance metrics from third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, etc.).
• Marketing Partners: Campaign performance data, affiliate referral information, and advertising effectiveness metrics (no personally identifiable data is shared without your consent).

3. How We Use Your Information

pul500 uses your personal information for the following legitimate business purposes:

Purpose	Legal Basis	Description
Account Management	Contract Performance	Create, maintain, and manage your pul500 account, verify your identity, process registration, and authenticate login credentials.
Service Delivery	Contract Performance	Process bets, settle winnings, manage account balances, provide game access, display personalized content, and deliver the core betting and gaming services.
Payment Processing	Contract Performance	Process deposits and withdrawals, verify payment sources, prevent payment fraud, comply with anti-money laundering regulations, and maintain transaction records.
Customer Support	Contract Performance	Respond to inquiries, resolve disputes, provide technical assistance, handle complaints, and improve support quality.
Security & Fraud Prevention	Legitimate Interest	Detect and prevent fraud, bonus abuse, multiple accounts, underage gambling, money laundering, account takeovers, and other prohibited activities.
Legal Compliance	Legal Obligation	Comply with gambling regulations, KYC/AML requirements, tax reporting obligations, court orders, and requests from regulatory authorities.
Responsible Gaming	Legitimate Interest	Monitor betting patterns for signs of problem gambling, enforce deposit limits, implement self-exclusion, and protect vulnerable players.
Marketing & Communications	Consent	Send promotional offers, bonus notifications, newsletters, and personalized recommendations (only with your explicit consent; you may opt out at any time).
Analytics & Improvements	Legitimate Interest	Analyze user behavior, optimize website performance, improve game selection, enhance user experience, and develop new features.

4. How We Share Your Information

pul500 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and international payment gateways to process deposits and withdrawals.
• Identity Verification Providers: Licensed KYC/AML service providers to verify your identity, age, and address, and to screen against sanctions lists and fraud databases.
• Game Providers: Third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) to deliver live casino streams, slot games, and other gaming content.
• Cloud Hosting Services: Data storage and server infrastructure providers to securely host your account information and ensure platform availability.
• Customer Support Tools: Live chat platforms, ticketing systems, and CRM software to manage customer inquiries and support interactions.
• Analytics Providers: Website analytics tools to understand user behavior, measure campaign performance, and improve our Services (data is anonymized where possible).

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, regulatory bodies, or courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or regulatory request.
• Enforce our Terms and Conditions or investigate potential violations.
• Protect the rights, property, or safety of pul500, our users, or the public.
• Detect, prevent, or address fraud, security vulnerabilities, or technical issues.
• Respond to claims that content or activity violates the rights of third parties.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other business restructuring involving pul500, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent notice on our Website before your data is transferred and becomes subject to a different privacy policy.

5. Data Security and Protection

pul500 employs industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All sensitive data (passwords, payment details, personal documents) is encrypted using 256-bit SSL/TLS encryption during transmission and AES-256 encryption at rest.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data on a need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: Optional 2FA adds an extra layer of security to prevent unauthorized account access.
• Firewall Protection: Enterprise-grade firewalls and intrusion detection systems protect our servers from external attacks and malicious traffic.
• Regular Security Audits: Independent third-party security firms conduct regular penetration testing and vulnerability assessments of our systems.
• Secure Data Centers: Your data is stored in certified, physically secure data centers with 24/7 monitoring, redundant power supplies, and disaster recovery capabilities.
• Employee Training: All pul500 employees undergo mandatory data protection and security awareness training and are bound by strict confidentiality agreements.

Despite our best efforts, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and for all activity that occurs under your account.

6. Data Retention

pul500 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus 7 years after account closure to comply with financial record-keeping requirements and anti-money laundering regulations.
• Transaction Records: Retained for 7 years from the date of transaction to meet tax reporting obligations and facilitate audits.
• KYC Documents: Retained for 7 years after the last account activity to comply with regulatory requirements for identity verification and source of funds documentation.
• Marketing Communications: Retained until you withdraw consent or unsubscribe, after which your contact information is suppressed to prevent future communications.
• Technical Logs: Retained for 90 days for troubleshooting and security purposes, then deleted or anonymized.

After the applicable retention period expires, we will securely delete or anonymize your personal information so that it can no longer be associated with you.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of all personal data we hold about you, including account details, transaction history, and KYC documents.
• Right to Rectification: Correct inaccurate or incomplete information in your account profile.
• Right to Erasure: Request deletion of your personal data (subject to legal retention obligations for financial and regulatory compliance).
• Right to Restrict Processing: Limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format and transmit it to another service provider.
• Right to Object: Object to processing of your data for direct marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent for marketing communications or optional data processing at any time (does not affect processing based on other legal grounds).

To exercise any of these rights, please contact our Data Protection Officer via customer support. We will respond to your request within 30 days. Some requests may require identity verification to prevent unauthorized access to your personal information.

8. Cookies and Tracking Technologies

pul500 uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, remember your preferences, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Required for website functionality, security, and authentication. Cannot be disabled without affecting core Services.
• Performance Cookies: Collect anonymous analytics data about how visitors use our site, helping us improve performance and user experience.
• Functional Cookies: Remember your preferences (language, currency, settings) and provide enhanced features.
• Advertising Cookies: Track your browsing behavior across websites to deliver relevant advertisements (requires consent; you can opt out anytime).

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit your ability to use some features of the Services.

9. International Data Transfers

Your personal information may be transferred to, stored in, and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have data protection laws that differ from Indonesian law. When we transfer your data internationally, we ensure adequate safeguards are in place through standard contractual clauses, data processing agreements, or other legally recognized transfer mechanisms.

10. Children's Privacy

pul500 does not knowingly collect personal information from individuals under the age of 21. Our Services are intended solely for adults who meet the minimum legal gambling age in their jurisdiction. If we discover that we have inadvertently collected information from a minor, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided personal information to pul500 should contact us immediately.

11. Changes to This Privacy Policy

pul500 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by posting a prominent notice on our Website and updating the "Last Updated" date at the top of this policy. Your continued use of the Services after such changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact our Data Protection Officer:

• Email: [email protected] (Please note: This is displayed as plain text for informational purposes only)
• Live Chat: Available 24/7 through your account dashboard or website footer
• WhatsApp Support: Indonesian-speaking agents available during WIB business hours

We will acknowledge receipt of your inquiry within 48 hours and provide a substantive response within 30 days.