fam68 Privacy Policy

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "fam68" / "we" / "us" / "our" refers to the fam68 online casino and sportsbook platform, operated at fam68.club by its licensed operating entity.
• "Player" / "User" / "you" / "your" refers to any individual who accesses, registers on, or uses the fam68 platform in any capacity.
• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly — including but not limited to name, date of birth, national identity number, email address, phone number, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, and deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, fam68.
• "Third-Party Processor" means any external service provider that processes Personal Data on fam68's behalf, such as payment processors, KYC verification providers, and cloud infrastructure operators.
• "KYC" means Know Your Customer — the identity and age verification process required to confirm a Player's eligibility before processing withdrawals or at any other time fam68 deems appropriate.
• "Cookie" means a small text file placed on your device by the fam68 platform to support session management, preference storage, and aggregate analytics.

2 Data Controller

fam68 is the Data Controller responsible for your Personal Data collected through the fam68 platform at fam68.club. As Data Controller, fam68 determines the purposes for which your Personal Data is collected and the manner in which it is processed.

All data protection inquiries, access requests, and complaints should be directed to our support team using the contact details provided in Clause 15 of this Policy. fam68 will acknowledge receipt of all formal privacy requests within 48 hours and provide a substantive response within 30 days.

3 What Data We Collect

fam68 collects Personal Data across several categories depending on your level of interaction with the platform. The table below summarizes the categories of data we collect and provides examples of specific data points within each category.

4 How We Collect Your Data

fam68 collects Personal Data through the following methods:

• Direct collection: Data you provide voluntarily when registering an account, completing the KYC process, making a deposit or withdrawal, or contacting customer support.
• Automated collection: Technical and usage data collected automatically as you interact with the fam68 platform, via server logs, session cookies, and analytics tools.
• Third-party sources: In limited circumstances, fam68 may receive data from licensed KYC and fraud-prevention service providers for the purpose of verifying the accuracy of information you have provided, or from payment processors to confirm transaction status.

fam68 does not purchase Personal Data lists or acquire data from social media platforms without your explicit consent.

5 How We Use Your Data

fam68 uses your Personal Data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or having another lawful basis to do so.

• Account creation and management: To register your account, authenticate your identity at login, and maintain your account settings and preferences.
• Payment processing: To process deposits and withdrawals via your nominated Indonesian bank account (e.g., BCA, BRI, BNI, Mandiri) or e-wallet, and to maintain accurate transaction records.
• KYC and regulatory compliance: To verify your age, identity, and the source of your funds as required by our operating license and applicable anti-money-laundering obligations.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other unauthorized activity on the platform.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor for signs of problem gambling behavior and to facilitate the delivery of responsible gaming tools (deposit limits, self-exclusion, cooling-off periods) where requested.
• Platform improvement: To analyze aggregate usage patterns and improve the performance, content, and user experience of the fam68 platform.
• Promotional communications: To send you information about fam68 bonuses, promotions, and new features — only where you have given explicit consent to receive such communications and have not subsequently opted out.
• Legal compliance: To comply with applicable laws, court orders, regulatory directions, or lawful requests from competent authorities.

6 Legal Basis for Processing

For each processing activity described in Clause 5, fam68 relies on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between fam68 and you — specifically, to operate your account, process your transactions, and deliver the Services you have requested.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, KYC obligations under our operating license, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary for fam68's legitimate business interests — including fraud prevention, platform security, and aggregate analytics — provided those interests are not overridden by your rights and interests.
• Consent: Processing for which you have provided clear, specific, and informed consent — most notably, the sending of promotional and marketing communications. You may withdraw your consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing email.

7 Sharing Your Data

fam68 does not sell your Personal Data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: Licensed Indonesian and international payment service providers (including those supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) that process your deposits and withdrawals on our behalf.
• KYC and identity verification providers: Third-party KYC service providers that assist fam68 in verifying your identity and age in compliance with our licensing obligations.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft that deliver the casino and slot game content on the platform. These providers may receive limited technical data (such as a session token) necessary to deliver the game experience; they do not receive your full Personal Data profile.
• Cloud infrastructure providers: Licensed data hosting and cloud computing providers that store and process platform data on fam68's behalf under contractual data processing agreements that bind them to equivalent privacy and security standards.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, fam68 will disclose Personal Data to the relevant competent authority. fam68 will notify you of such disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by fam68, subject to professional secrecy and confidentiality obligations.

8 International Data Transfers

fam68 operates an international platform, and some of the Third-Party Processors described in Clause 7 may be located in jurisdictions outside Indonesia. When Personal Data is transferred outside Indonesia to such processors, fam68 takes the following steps to ensure your data remains protected:

• We enter into contractual data processing agreements with all Third-Party Processors that impose data protection obligations equivalent to those applicable under our operating license.
• We select Third-Party Processors that maintain recognized international security certifications (such as ISO 27001 or SOC 2 Type II) and operate in jurisdictions with adequate data protection frameworks.
• We carry out due diligence on all Third-Party Processors before engagement and review these arrangements periodically.

By using the fam68 platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia as described above. Where such transfers occur, fam68 ensures appropriate safeguards are in place as outlined in this clause.

9 Data Retention

fam68 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law and our operating license. The following retention guidelines apply:

• Active account data: Retained for the duration of your account's active status and for a minimum of five years following account closure.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years following account closure or the date of the most recent transaction, whichever is later.
• Customer support communications: Retained for up to three years following the resolution of the relevant inquiry or dispute.
• Technical and usage logs: Retained for up to 12 months on a rolling basis, unless specific records are required to be preserved in connection with an ongoing investigation or legal proceeding.
• Marketing consent records: Retained for as long as you have a fam68 account and for up to two years following account closure or withdrawal of consent, to demonstrate compliance with applicable marketing regulations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

10 Security Measures

fam68 implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Transport encryption: All communications between your device and fam68 servers are encrypted using TLS 1.2 or higher (256-bit SSL). This applies to account login, payment processing, and all other platform interactions.
• Data-at-rest encryption: Sensitive Personal Data, including KYC documents and financial account details, is encrypted at rest using AES-256 encryption in our database storage layer.
• Access controls: Access to Personal Data within fam68's internal systems is restricted on a strict need-to-know basis, with role-based access controls and mandatory multi-factor authentication for all staff accessing production systems.
• Intrusion detection: fam68 maintains continuous automated monitoring for unauthorized access attempts, abnormal traffic patterns, and other potential security incidents.
• Incident response: fam68 maintains a documented security incident response procedure. In the event of a data breach that poses a material risk to affected individuals, fam68 will notify the relevant regulatory authority and affected players in accordance with applicable notification requirements.
• Third-party security audits: fam68's platform and data infrastructure are subject to periodic third-party security assessments to identify and remediate vulnerabilities.

11 Cookies & Tracking Technologies

fam68 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential to the operation of the platform — for example, maintaining your login session and remembering your language and display preferences. These cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect aggregate, anonymized data about how Players use the fam68 platform — for example, which game categories are most visited and where users encounter technical difficulties. This data is used solely to improve the platform and is not linked to individual identity profiles.
• Functional cookies: Used to remember your optional preferences, such as your preferred deposit method or game category filter settings, to improve your experience on return visits.

fam68 does not use third-party behavioral advertising cookies, retargeting pixels, or cross-site tracking technologies. We do not allow third-party advertising networks to set cookies through the fam68 platform.

You can manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using certain platform features. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

12 Your Data Rights

As a fam68 player, you have the following rights with respect to the Personal Data we hold about you. To exercise any of these rights, please contact our support team using the details in Clause 15.

• Right of access: You may request a copy of the Personal Data fam68 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of any Personal Data that is inaccurate, incomplete, or outdated. For account details, you may also update certain information directly within your account settings.
• Right to erasure: In certain circumstances, you may request deletion of your Personal Data. This right is subject to fam68's legal and regulatory obligations to retain certain records — for example, transaction records and KYC documents required under anti-money-laundering regulations cannot be deleted upon request during the mandatory retention period.
• Right to restrict processing: You may request that fam68 restrict the processing of your Personal Data in specific circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that fam68 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to the processing of your Personal Data where fam68 relies on legitimate interests as the legal basis, where you believe your rights and interests override those legitimate interests.

fam68 will respond to all valid data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

13 Minors & Age Restriction

The fam68 platform is strictly intended for adults aged 21 years and over. fam68 does not knowingly collect Personal Data from individuals under the age of 21.

As part of the account registration and KYC process, fam68 takes active steps to verify that all players meet the minimum age requirement. Any account found to have been registered by a person under the age of 21 will be closed immediately, all associated data will be deleted in accordance with applicable law, and any balance will be forfeited or returned to the payment source where possible.

If you are a parent or guardian and believe that a minor may have registered a fam68 account, please contact our support team immediately so that we can take prompt action. We take the protection of minors extremely seriously and will prioritize the investigation and closure of any underage account.

14 Changes to This Policy

fam68 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our platform's functionality. When material changes are made, fam68 will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the fam68 platform informing players of the change.
• Where the changes materially affect how we process your Personal Data, send a direct notification to your registered email address.

Your continued use of the fam68 platform following publication of an updated Privacy Policy constitutes your acknowledgment of the revised policy. If you do not agree with the revised policy, you should discontinue use of the platform and contact our support team to request account closure.

The current version of this Privacy Policy is always available at fam68.club/privacy-policy. We recommend reviewing it periodically to stay informed of how fam68 protects your information.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by fam68, please contact our support team through one of the following channels:

• Live Chat: Available 24/7 directly on the fam68 platform — the fastest channel for account-specific privacy queries.
• Email: [email protected] — please include "Privacy Request" in the subject line and allow up to 30 days for a substantive response.
• Indonesian-speaking support: Indonesian-language agents are available during WIB business hours for players who prefer to communicate in Bahasa Indonesia, even though this policy and the platform itself are published in English.

fam68 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your concern to the relevant data protection or regulatory authority in your jurisdiction.