Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "eco69," "we," "us," or "our" refers to the eco69 online gaming platform operated at https://eco69.cam and its affiliated entities.
• "Player," "you," or "your" means any individual who accesses, registers on, or otherwise interacts with the eco69 platform.
• "Personal Data" means any information that identifies or could reasonably identify a natural person, including but not limited to name, date of birth, Indonesian national ID number (NIK), email address, phone number, IP address, and financial account details.
• "Processing" includes any operation performed on personal data — collecting, storing, using, transmitting, amending, deleting, or disclosing.
• "Data Controller" refers to eco69 as the entity that determines the purposes and means of processing personal data.
• "Third Party" means any entity outside eco69 that receives or processes personal data on our behalf or as an independent controller.
• "Cookies" means small text files placed on your device by eco69 or authorised third-party service providers to enhance platform functionality and user experience.

2. Scope and Application

This Privacy Policy applies to all personal data collected by eco69 in connection with:

• The registration and operation of player accounts on eco69.cam.
• All gaming activities conducted through our platform, including sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) draws.
• Financial transactions, including deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallets (OVO, DANA, GoPay, ShopeePay), and withdrawal requests.
• Customer support interactions conducted via live chat, WhatsApp, or email.
• Marketing communications and promotional activity.
• Use of our mobile application, where available.

This policy does not apply to third-party websites or services that may be linked from our platform. eco69 is not responsible for the privacy practices of any third-party provider, and we encourage you to review their policies independently.

3. Data We Collect

3.1 Registration and Identity Data

When you create an eco69 account, we collect the following:

• Full legal name (as it appears on your Indonesian national identity card)
• Date of birth (to verify you are 21 years or older)
• Indonesian national identity card number (NIK)
• Residential address (including city — e.g., Jakarta, Surabaya, Bandung, Medan)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Financial and Transaction Data

To process deposits and withdrawals securely, we collect:

• Bank account number and account holder name (BCA, BRI, BNI, Mandiri, CIMB Niaga)
• E-wallet account details (OVO, DANA, GoPay, ShopeePay)
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers
• Source-of-funds documentation requested during enhanced due diligence reviews

3.3 Verification (KYC) Data

As part of our Know Your Customer obligations, we collect:

• Copy of Indonesian national identity card (KTP)
• Proof of address (utility bill, bank statement dated within 3 months)
• Selfie photograph holding your identity document

3.4 Usage and Technical Data

We automatically collect the following when you use our platform:

4. How We Collect Data

eco69 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data gathered automatically when you browse or interact with the eco69 platform, via cookies, log files, and analytics tools.
• Third-party sources: Identity verification agencies, fraud prevention databases, payment processors, and publicly available records used to confirm the accuracy of information you have provided.
• Device and browser signals: Information transmitted by your device or browser as part of standard internet communication protocols.

5. Purpose and Legal Basis for Processing

eco69 processes your personal data only for clearly defined purposes and on the basis of a legitimate legal ground. The table below summarises the primary processing activities:

6. Data Sharing and Disclosure

6.1 Authorised Service Providers

eco69 shares personal data with carefully selected third-party service providers who process data on our behalf under strict contractual data protection obligations. These include:

• Payment processors and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and ShopeePay, for the sole purpose of executing deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party services that assist in verifying the identity and age of players in compliance with our legal obligations.
• Fraud prevention services: Specialist analytics platforms that help us identify and prevent fraudulent account activity and money laundering.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, and Microgaming receive only the minimum session data necessary to deliver their games within our platform.
• Cloud hosting and infrastructure providers: Data storage and processing services operating under enterprise-grade security certifications.
• Customer support tools: Live chat and helpdesk software used to manage support tickets and communication history.

6.2 Legal and Regulatory Disclosure

eco69 may disclose personal data to law enforcement agencies, regulatory authorities, or other governmental bodies where we are required to do so by applicable law, court order, or in connection with legal proceedings. We may also disclose data where we reasonably believe disclosure is necessary to prevent fraud, protect the safety of our players, or enforce our Terms and Conditions.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of eco69's business, personal data held by eco69 may be transferred to the acquiring entity as part of that transaction. You will be notified via email or a prominent notice on our platform prior to any such transfer taking effect.

6.4 No Data Sales

eco69 does not sell, rent, lease, or otherwise trade your personal data to any third party for that party's own marketing or commercial purposes. Period.

7. Data Retention

eco69 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's existence plus 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of 5 years after the end of the business relationship, as required by international AML standards.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of the last interaction, or longer if associated with an unresolved dispute.
• Marketing preferences and consent records: Retained for the duration of your account and for 2 years after account closure.
• Technical log data: Retained for up to 12 months for security and diagnostic purposes.

When data is no longer required, eco69 will securely delete or anonymise it so that it can no longer be linked to any individual player.

8. Security Measures

eco69 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your browser or app and our servers is encrypted using TLS 1.2 or higher.
• Data encryption at rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption.
• Access controls: Personal data is accessible only to eco69 personnel with a legitimate operational need. All access events are logged and audited.
• Two-factor authentication (2FA): Available for player accounts and mandatory for all internal staff accounts with access to player data.
• Regular security assessments: eco69 conducts periodic penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
• Incident response plan: A documented data breach response procedure is in place. In the event of a breach affecting your data, we will notify you within 72 hours of becoming aware of the incident.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit eco69. They help us recognise your device on return visits, maintain your session, remember your preferences, and gather analytical data about how our platform is used.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These enable login sessions, shopping cart functionality (for bonus claims), and security features. They cannot be disabled without breaking platform functionality.
• Performance and Analytics Cookies: Used to measure how players interact with our platform — page views, session length, device types, and navigation paths. This data is aggregated and anonymised.
• Functional Cookies: Remember your preferences — such as preferred language, odds format (Asian handicap vs. European), and deposit method — to personalise your experience.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only activated with your consent.

9.3 Managing Cookies

You can control non-essential cookies via the cookie preference centre accessible in your account settings. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to use the eco69 platform. Most browsers accept cookies by default — consult your browser's help documentation for guidance on adjusting cookie settings.

10. Your Data Rights

As an eco69 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your account username.

• Right of Access: You may request a copy of the personal data eco69 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (email address, phone number) can be made directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where we no longer have a legal basis to retain it. Note that data subject to mandatory AML retention requirements cannot be deleted before the applicable retention period expires.
• Right to Restriction of Processing: In certain circumstances, you may request that we limit how we use your data while a dispute or correction request is pending.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format (JSON or CSV) for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including direct marketing. Objection to marketing processing will be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all data rights requests within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for the delay.

11. Protection of Minors

eco69 is strictly an adults-only platform. You must be at least 21 years of age to register an account or participate in any gaming activity. We do not knowingly collect personal data from individuals under 21 years of age.

If we become aware that personal data has been collected from a player who is under 21, we will take immediate steps to close the account, delete the data, and refund any deposits made, subject to verification. If you have reason to believe that a minor has gained access to eco69 — whether using your account or their own — please notify us immediately at [email protected].

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. For more on our responsible gaming tools, visit our Responsible Gaming page.

12. International Data Transfers

eco69 operates servers and infrastructure located across multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries other than Indonesia. Where such transfers occur, eco69 ensures that appropriate safeguards are in place — including standard contractual clauses approved by relevant data protection authorities and binding corporate rules among our group entities — to ensure your data receives an equivalent level of protection regardless of where it is processed.

By creating an eco69 account and using our services, you acknowledge and consent to the transfer of your personal data to our servers and service providers in accordance with this policy.

13. Changes to This Policy

eco69 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. The revised policy will be posted on this page with an updated "Last Updated" date at the top. For material changes — those that substantially affect how we process your personal data — we will provide advance notice via email to your registered address or via a prominent notification within your account dashboard. Your continued use of the eco69 platform following the effective date of any changes constitutes your acknowledgment of the updated policy.

14. Contact Our Data Team

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact eco69's data protection team through any of the following channels:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 — average response time under 3 minutes
• WhatsApp: Available during business hours (08:00–00:00 WIB, Monday to Sunday)