Privacy Policy

1. Introduction

liga67 ("we", "us", "our", or "the Company") operates an online sports betting and casino gaming platform accessible at https://liga67.cam and through associated mobile applications (collectively, "the Platform"). We recognize that your privacy is of paramount importance, and we are committed to ensuring that your personal data is collected, processed, stored, and protected in compliance with applicable international data protection standards.

This Privacy Policy applies to all personal information collected through the Platform, including information provided during account registration, depositing and withdrawing funds via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja, wagering on sports events (including BRI Liga 1, EPL, Champions League, and other football competitions), playing casino games and togel (Indonesia's traditional numbers lottery), communicating with Customer Support, and participating in promotional activities.

By registering an account on liga67 and using our Services, you acknowledge that you have read, understood, and consented to the data processing practices described in this Privacy Policy. If you do not agree with any provision of this Policy, you must not use the Platform.

2. Data Controller

The data controller responsible for the collection and processing of your personal data is liga67, registered and licensed under the laws of the jurisdiction in which the Company holds its international gaming license. For all data protection inquiries, requests to exercise your rights, or complaints, please contact our Data Protection Officer using the contact details provided in Section 14 below.

3. Information We Collect

liga67 collects and processes several categories of personal data in order to provide, maintain, and improve our Services. The types of information we collect include:

3.1 Information You Provide Directly

• Registration Data: When you create an account, we collect your full legal name, date of birth (to verify you are at least 21 years of age), email address, mobile phone number, residential address (city, province, postal code), and preferred username and password.
• Identity Verification (KYC) Data: To comply with regulatory obligations and prevent fraud, we may require you to provide copies of your Indonesian National Identity Card (KTP) or passport, proof of address (utility bill, bank statement, or official government correspondence dated within the past three months), and bank account statements or e-wallet screenshots showing your account name and number.
• Payment Data: When you deposit or withdraw funds, we collect your bank account details (account number, account holder name, bank name — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) or e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja phone number or account ID). We do not store your full bank card numbers, CVV codes, or e-wallet PINs.
• Communication Data: When you contact Customer Support via live chat, email, WhatsApp, or in-app messaging, we collect and retain transcripts of your communications, including any attachments or supporting documentation you provide.
• Marketing Preferences: If you opt in to receive promotional emails, SMS messages, or push notifications, we collect your consent preferences and communication history.

3.2 Information Collected Automatically

• Account Activity Data: We automatically log all account activity including login times and locations, bet placements, game sessions, deposit and withdrawal transactions, bonus claims, and changes to account settings.
• Device and Technical Data: When you access the Platform, we collect your IP address, device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, time zone setting (WIB, WITA, WIT), language preference, and referring website URL.
• Cookies and Tracking Data: We use cookies, web beacons, and similar tracking technologies to collect data about your browsing behavior, session duration, pages visited, links clicked, and interaction with promotional content. See Section 9 for detailed information about cookies.
• Geolocation Data: With your consent, we may collect precise or approximate location data to verify your location, detect suspicious login attempts from unfamiliar locations, and comply with jurisdictional restrictions on gaming services.

3.3 Information from Third Parties

• Payment Processors: Our payment service providers (banks and e-wallet operators) may share transaction status information, payment confirmation details, and fraud-detection signals with us.
• Identity Verification Services: We may use third-party KYC verification services to validate the authenticity of identity documents you provide and to check your identity against global fraud databases and watchlists.
• Game Providers: Gaming software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Habanero, and Spribe may share gameplay data, bet outcomes, and session logs with us for settlement, analytics, and compliance purposes.

4. How We Use Your Information

liga67 processes your personal data for the following purposes:

• Account Management: To create and maintain your account, authenticate your identity, process login requests, and provide secure access to your funds and betting history.
• Transaction Processing: To process deposits, withdrawals, and fund transfers; to verify payment sources; to prevent fraudulent transactions; and to maintain accurate financial records.
• Service Delivery: To enable you to place bets on sports events (football, badminton, MotoGP, E-sports), play live casino games, slots, and togel lottery markets; to settle wagers according to official results; to credit winnings to your account; and to apply bonuses and promotions you are eligible for.
• Compliance and Safety: To verify your age (minimum 21 years); to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations; to detect and prevent fraud, collusion, arbitrage betting, bonus abuse, money laundering, and other prohibited activities; to enforce our Terms & Conditions; and to respond to legal requests from regulatory authorities or law enforcement.
• Customer Support: To respond to your inquiries, troubleshoot technical issues, resolve disputes, investigate complaints, and provide assistance in Indonesian and English languages during support hours (08:00–24:00 WIB).
• Marketing and Communications: Subject to your consent, to send you promotional offers, bonus announcements, newsletters, updates about new games or sports markets (such as upcoming BRI Liga 1 fixtures, Champions League finals, or major togel draw results), and personalized recommendations based on your gaming preferences.
• Analytics and Improvement: To analyze platform usage patterns, identify popular games and markets, measure the effectiveness of marketing campaigns, optimize website performance, detect and fix bugs, and develop new features and services.
• Responsible Gaming: To monitor your account activity for signs of problem gambling behavior; to enforce deposit limits, session time limits, and self-exclusion periods you have set; and to provide resources and support for responsible gaming as outlined on our Responsible Gaming page.

5. Legal Basis for Processing

Under international data protection laws, liga67 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and liga67 (i.e., our Terms & Conditions), including account registration, transaction processing, game delivery, and dispute resolution.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including age verification (21+ requirement), KYC/AML procedures, tax reporting, and cooperation with law enforcement or regulatory investigations.
• Legitimate Interests: Processing is necessary for liga67's legitimate business interests, including fraud prevention, security monitoring, platform optimization, customer support, and internal analytics, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by law (particularly for marketing communications, geolocation tracking, and certain cookies), we obtain your explicit, freely given consent before processing your data. You may withdraw consent at any time through your account settings or by contacting Customer Support.

6. Data Sharing & Disclosure

liga67 does not sell or rent your personal data to third parties. However, we may share your information with the following categories of recipients for the purposes described in Section 4:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including payment processing (bank and e-wallet integrations), identity verification (KYC service providers), cloud hosting (data storage and server infrastructure), customer relationship management (CRM systems), email and SMS delivery, live chat software, analytics platforms, and cybersecurity services. These providers are contractually bound to process your data only as instructed by liga67 and to maintain appropriate security measures.

6.2 Game Providers

Gaming software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Habanero, Spribe, and others) receive limited data necessary to deliver game sessions, including your player ID, bet amounts, game selections, and session timestamps. These providers operate under their own privacy policies and data processing agreements with liga67.

6.3 Regulatory Authorities

We may disclose your personal data to gaming regulators, licensing authorities, tax authorities, and law enforcement agencies when required by law, in response to valid legal process (subpoenas, court orders, search warrants), or to comply with anti-money laundering, counter-terrorism financing, or fraud investigation obligations.

6.4 Business Transfers

In the event liga67 undergoes a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy proceeding, your personal data may be transferred to the acquiring or successor entity, subject to the same privacy protections set out in this Policy.

6.5 Affiliates and Partners

We may share aggregated, de-identified, or anonymized data (which cannot reasonably be used to identify you) with business partners, affiliates, sports data providers, and marketing analytics firms for statistical analysis, industry benchmarking, and collaborative research purposes.

7. Data Security

liga67 employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 or higher (256-bit SSL encryption). Sensitive data stored in our databases (including identity documents, payment details, and passwords) is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized liga67 personnel and service providers on a need-to-know basis. Multi-factor authentication (MFA) is required for administrative access to production systems.
• Monitoring and Incident Response: We maintain 24/7 security monitoring, intrusion detection systems, and automated threat-detection tools. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant regulatory authorities without undue delay, in accordance with applicable law.
• Regular Audits: Our security practices and infrastructure are subject to regular third-party security audits and penetration testing to identify and remediate vulnerabilities.

8. Data Retention

liga67 retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal, regulatory, accounting, and reporting obligations. Specific retention periods include:

• Active Accounts: Personal data associated with active accounts is retained for the duration of your relationship with liga67 and for a period of up to seven (7) years after account closure, or as required by applicable gaming regulations and tax laws.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets, winnings) is retained for a minimum of seven (7) years to comply with anti-money laundering regulations and for potential dispute resolution or audit purposes.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the last verification event, whichever is later, to satisfy regulatory record-keeping requirements.
• Communication Logs: Customer support transcripts and correspondence are retained for three (3) years to support quality assurance, training, and dispute resolution processes.
• Marketing Data: If you opt out of marketing communications, your contact information and opt-out preference are retained indefinitely to ensure we respect your choice and do not inadvertently contact you again.

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be attributed to you.

9. Cookies & Tracking Technologies

liga67 uses cookies (small text files stored on your device), web beacons, pixel tags, and similar tracking technologies to enhance your experience on the Platform, remember your preferences, analyze site usage, and deliver targeted advertising.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for core Platform functionality, including user authentication, session management, load balancing, and fraud prevention. These cookies cannot be disabled without severely impairing your ability to use the Platform.
• Performance and Analytics Cookies: Used to collect information about how visitors interact with the Platform (pages visited, time spent, navigation paths, error messages). This data is aggregated and used to improve site performance and user experience. We use services like Google Analytics for this purpose.
• Functionality Cookies: Enable the Platform to remember your preferences (language selection, time zone, display settings) and provide enhanced features (live chat integration, personalized game recommendations).
• Advertising and Marketing Cookies: Used to deliver relevant promotional content, track the effectiveness of marketing campaigns, and prevent you from seeing the same advertisement repeatedly. These cookies may be set by liga67 or by third-party advertising networks.

9.2 Managing Cookies

Most web browsers automatically accept cookies by default, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling cookies may limit your ability to use certain features of the Platform. You can manage your cookie preferences through your browser settings (Chrome, Firefox, Safari, Edge) or through third-party tools such as the Network Advertising Initiative opt-out page.

10. Your Rights

Subject to applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you, including information about the sources, purposes, and recipients of your data.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data. You can also update your account information directly through your account settings.
• Right to Erasure: In certain circumstances (e.g., when data is no longer necessary for the purposes for which it was collected, or you withdraw consent), you may request deletion of your personal data. This right is subject to liga67's legal and regulatory obligations to retain certain records.
• Right to Restriction of Processing: You may request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of data or object to processing based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller, where technically feasible.
• Right to Object: You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time by clicking "unsubscribe" links in emails or adjusting your communication preferences in your account settings.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: If you believe liga67 has processed your personal data unlawfully or in violation of your rights, you have the right to lodge a complaint with the data protection authority in the jurisdiction where liga67 holds its license, or in your country of residence.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to your request within thirty (30) calendar days, or inform you if additional time is required.

11. International Data Transfers

liga67 operates an international platform serving players across multiple jurisdictions, including Indonesia. Your personal data may be transferred to, stored in, and processed in countries outside Indonesia where liga67, our service providers, or game providers maintain facilities. These countries may have data protection laws that differ from those in Indonesia.

When we transfer personal data internationally, we implement appropriate safeguards to protect your data, including Standard Contractual Clauses approved by relevant data protection authorities, adequacy decisions recognizing equivalent levels of protection, or binding corporate rules. For more information about the safeguards in place for international transfers of your data, please contact our Data Protection Officer.

12. Children's Privacy

liga67's Services are strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information and permanently close the associated account. Parents or guardians who believe their child has provided personal data to liga67 should contact us immediately at the email address provided in Section 14.

13. Changes to This Privacy Policy

liga67 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. Where changes are material (for example, changes affecting the purposes for which we process your data, the categories of recipients with whom we share data, or your rights), we will provide advance notice by displaying a prominent notice on the Platform or by sending an email to your registered address at least fourteen (14) calendar days before the revised Policy takes effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the Platform and contact Customer Support to initiate account closure. The most current version of this Privacy Policy is always available at https://liga67.cam/privacy-policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how liga67 handles your personal data, please contact our Data Protection Officer:

• Email: [email protected] (plain text — response within 72 hours)
• General Support Email: [email protected]
• Live Chat: Available 24/7 through your account dashboard (Indonesian-speaking agents on duty 08:00–24:00 WIB)
• WhatsApp: +62 812-3456-7890 (text only; please include "Privacy Inquiry" in your first message)

For formal data protection requests (access requests, erasure requests, complaints), please clearly state the nature of your request and include your registered username and email address for verification purposes. We will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) calendar days, or notify you if additional time is required due to the complexity of your request.