amergg is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights as a data subject.
This Privacy Policy ("Policy") is issued by amergg, the operator of the online gaming platform accessible at https://amergg.asia ("Platform"). We act as the data controller in respect of personal information collected through the Platform and our associated customer communications.
This Policy applies to all individuals who visit, register on, or otherwise interact with the Platform, including prospective players who browse without registering, registered players with active accounts, and former players whose accounts have been closed. It governs personal data collected via the website, mobile-optimised pages, customer support channels (live chat and email), and any promotional activities conducted by amergg.
By accessing the Platform or creating an account with amergg, you acknowledge that you have read, understood, and agree to the collection and use of your personal information as described in this Policy. If you do not agree, you must discontinue use of the Platform and may contact us to request deletion of any data we may already hold about you, subject to our legal retention obligations.
This Policy should be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and amergg, and our Responsible Gaming policy, which describes data processing activities specific to player protection tools.
Indonesian Players: amergg's Platform is designed primarily for players located in Indonesia. Personal data you provide is processed in accordance with internationally recognised data protection principles. You acknowledge that Indonesian law regarding online data processing is evolving, and amergg commits to upholding standards consistent with global best practices throughout.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | amergg, as the entity that determines the purposes and means of processing Personal Data collected via the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of amergg under a binding data processing agreement. |
| "Data Subject" | The natural person (you, the Player) to whom the Personal Data relates. |
| "Consent" | Freely given, specific, informed, and unambiguous agreement by a Data Subject to the processing of their Personal Data for a stated purpose. |
| "Cookies" | Small text files placed on your device by the Platform to facilitate session management, preference storage, and analytics. |
| "KYC" | Know Your Customer — the identity verification process required of all Players prior to withdrawal processing. |
amergg collects only the Personal Data necessary to provide, maintain, and improve the Platform's services. The categories of data we collect are as follows:
amergg collects Personal Data through the following channels:
We process your Personal Data only where we have a lawful basis to do so. The table below outlines our principal processing activities, the data categories involved, and the corresponding legal basis:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, Contact | Contract performance |
| KYC identity verification | Identity, KYC Documents | Legal obligation; Contract performance |
| Processing deposits & withdrawals | Financial, Identity | Contract performance |
| Game delivery & sports betting | Gameplay, Technical | Contract performance |
| Customer support & dispute resolution | Communications, Identity, Financial | Contract performance; Legitimate interest |
| Fraud prevention & security | Technical, Financial, Identity | Legitimate interest; Legal obligation |
| Responsible gaming monitoring | Gameplay, Behavioural | Legal obligation; Legitimate interest |
| Marketing & promotions | Identity, Contact, Gameplay | Consent (opt-in required) |
| Platform analytics & improvement | Technical, Behavioural | Legitimate interest |
| Legal & regulatory compliance | All categories as required | Legal obligation |
Marketing Communications: We will only send you promotional emails, bonus offers, or platform updates where you have explicitly opted in during registration or subsequently via your account settings. You may withdraw your marketing consent at any time by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.
amergg does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share your data only in the following limited circumstances:
To process deposits and withdrawals, we share relevant financial and identity data with your chosen payment provider — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja. Each provider operates under its own privacy framework and applicable Indonesian banking regulations. We share only the minimum data necessary to complete the transaction.
KYC document verification is carried out in part by third-party identity verification service providers acting as Data Processors under binding contractual agreements. These providers receive copies of your identification documents solely for the purpose of verifying their authenticity and your identity. They are prohibited from using your data for any other purpose.
Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive anonymised or pseudonymised session identifiers to facilitate game delivery and resolve technical disputes. These providers do not receive your full identity or financial data.
We work with specialist fraud-detection and cybersecurity partners who analyse technical and behavioural data to identify suspicious patterns. Data shared with these partners is processed under strict confidentiality agreements and is used solely for the purpose of protecting the integrity of the Platform and safeguarding Player accounts.
We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, where disclosure is necessary to protect the vital interests of a Player or third party, or where disclosure is required to establish, exercise, or defend legal claims.
In the event of a merger, acquisition, restructuring, or sale of all or part of amergg's business assets, Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected Players via email or Platform notice prior to any such transfer, and the receiving entity will be bound by privacy obligations no less protective than those set out in this Policy.
amergg operates internationally, and some of our Data Processors and technology partners are located outside Indonesia. Where your Personal Data is transferred to a country that may not provide the same level of data protection as Indonesia, amergg implements appropriate safeguards including:
By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia. We take all reasonable steps to ensure that such transfers are subject to appropriate protection measures and that your rights as a Data Subject are not diminished as a result.
We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal, regulatory, and operational obligations. Our standard retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | Anti-money-laundering legal obligation |
| KYC Documents | 5 years after account closure | Regulatory compliance |
| Financial Transaction Records | 5 years after last transaction | Financial reporting & dispute resolution |
| Gameplay History | 3 years after last session | Responsible gaming monitoring; disputes |
| Support Communications | 3 years after resolution | Complaint management & quality assurance |
| Marketing Preferences | Until consent withdrawn + 1 year | Proof of consent; suppression list management |
| Technical & Log Data | 12 months from collection | Security monitoring & fraud detection |
Following the expiry of the applicable retention period, your Personal Data will be securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate analytics purposes, as it no longer constitutes Personal Data.
amergg implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
All data transmitted between your device and the Platform is encrypted using TLS 1.3 (Transport Layer Security). Personal Data stored in our databases is encrypted at rest using AES-256 encryption. KYC documents are stored in encrypted, access-controlled repositories separate from primary application databases.
Access to Personal Data by amergg staff is governed by a strict role-based access control (RBAC) model. Only personnel with a demonstrable operational need to access specific data categories are granted permission. All internal access to Personal Data is logged and subject to regular audit review.
The Platform is hosted on infrastructure protected by enterprise-grade firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation services. Penetration testing is conducted periodically by independent third-party security firms.
In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, amergg will notify affected Players without undue delay and will take immediate remedial action to contain and mitigate the breach. A breach register is maintained internally, and significant incidents are reported to relevant authorities in accordance with applicable law.
Your Role in Security: While amergg invests significantly in platform security, the security of your account also depends on you. Use a strong, unique password, do not share your login credentials with any third party, and contact our support team immediately if you suspect unauthorised access to your account.
The Platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. The categories of cookies we use are described below:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core platform functions: login session management, account security tokens, shopping cart equivalent for deposit flows. | Session |
| Functional | Remember your preferences such as language, display settings, and previously selected payment methods. | Up to 12 months |
| Analytics | Collect aggregate, anonymised data on how Players navigate the Platform to help us improve usability and performance. | Up to 24 months |
| Marketing | Track whether promotional content shown to you (e.g., bonus banners) resulted in uptake. Used only with your consent. | Up to 30 days |
Strictly necessary cookies are placed without requiring your consent, as they are essential to the Platform's operation. All other cookie categories are deployed only with your agreement. You may adjust cookie preferences at any time via your browser settings. Note that disabling functional or analytics cookies may affect your experience on the Platform.
As a Data Subject, you hold the following rights in respect of your Personal Data held by amergg. To exercise any of these rights, contact our support team at the details provided in Clause 14. We will respond to all valid requests within 30 calendar days.
Request a copy of the Personal Data we hold about you, along with information about how and why it is processed.
Request correction of inaccurate or incomplete Personal Data. Certain corrections (e.g., to KYC-verified name fields) may require supporting documentation.
Request deletion of your Personal Data where it is no longer necessary for the original purpose, subject to our legal retention obligations.
Request that we restrict processing of your data (e.g., while a correction request is under review), so that the data is stored but not actively used.
Receive a copy of your Personal Data in a structured, commonly used, machine-readable format, or request transfer to another controller where technically feasible.
Object to processing based on legitimate interest, including profiling for marketing purposes. Your objection will be honoured unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time with immediate effect on future processing.
Request human review of any decision that was made about you solely by automated means and that has a significant effect on you, such as an account suspension triggered by automated fraud detection.
The Platform is strictly restricted to individuals aged 21 years and older. amergg does not knowingly collect Personal Data from any person under the age of 21. Age verification is conducted during the registration process and reinforced during KYC review.
If we become aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all related Personal Data to the extent permitted by our legal obligations, and refund any deposited funds after completing required verification procedures.
If you are a parent or guardian and believe that your child under the age of 21 may have registered an account with amergg, please contact us immediately at the details set out in Clause 14 so that we can take prompt action.
amergg reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, applicable law, or regulatory guidance. When we make material changes to this Policy, we will provide at least 14 days' advance notice via a prominent notice on the Platform and, where we hold your email address, by direct email to your registered address.
The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to any changes, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how amergg has handled your Personal Data, please contact our Data Protection team through the following channel:
Write to us at: [email protected]
Please include the subject line "Privacy Request" or "Data Complaint" and provide your registered username, a clear description of your request or complaint, and any supporting information. We aim to acknowledge all privacy-related correspondence within 2 business days (08:00–22:00 WIB, Monday–Friday) and to provide a full substantive response within 30 calendar days.
For urgent data-related concerns — for example, if you believe your account has been compromised — our 24/7 Indonesian-speaking live chat support team is available to assist you immediately. Live chat agents can escalate data-protection matters to our dedicated privacy team.
Where you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to an appropriate supervisory authority or seek redress through applicable legal channels in your jurisdiction.
Our commitment to data privacy goes beyond legal compliance — it is a core part of the trust we build with every player on the Platform.
Every byte of data transmitted between your device and the amergg Platform is protected by TLS 1.3 encryption. Your personal and financial information is never sent in plain text.
amergg does not sell, rent, or trade your personal data to advertisers or data brokers under any circumstances. Your information is used solely to deliver and improve our services to you.
We send promotional communications only where you have explicitly opted in. You can withdraw marketing consent at any time with a single request to our support team — no dark patterns, no friction.
We keep your data only as long as legally required or operationally necessary. Expired data is securely deleted or irreversibly anonymised on a scheduled basis — no indefinite storage.
Independent penetration testing and infrastructure security reviews are conducted periodically by third-party specialists to identify and remediate vulnerabilities before they can be exploited.
Exercise your rights to access, correct, delete, or port your data at any time. Our privacy team responds to all valid requests within 30 calendar days, with no unnecessary barriers.
Review our full policy suite or get in touch with our support team. We are here to ensure your privacy is always protected at amergg.
Terms & Conditions Responsible Gaming Read the FAQ