Privacy Policy

pm2000 ("we", "us", "our", "the Platform") operates the online sports betting and casino services accessible at https://pm2000.cam. As a platform serving Indonesian players, we take our data protection responsibilities seriously. This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of personal data provided by users ("you", "Player") in connection with their use of the Platform.

This policy is incorporated by reference into pm2000's Terms & Conditions. Capitalized terms not defined in this policy carry the meanings assigned in the Terms & Conditions. If there is any conflict between this Privacy Policy and the Terms & Conditions with respect to data privacy, this Privacy Policy shall prevail.

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, location data, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means pm2000, the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means any third party that Processes Personal Data on behalf of pm2000 under a written data processing agreement.
• "KYC Data" means identity and age-verification documents submitted as part of the Know Your Customer process, including copies of Indonesian KTP, passport, and supporting address evidence.
• "Cookies" means small data files placed on your device by the Platform's web server for session management, preference storage, and analytics purposes.
• "DPO" means Data Protection Officer — the individual designated by pm2000 to oversee compliance with data protection obligations and to serve as the primary point of contact for privacy-related inquiries.

3.1 Registration Data

When you create an account on pm2000, we collect the following information:

• Full legal name (as it appears on your Indonesian KTP or passport)
• Date of birth (to verify you are 21 years of age or older)
• Indonesian National Identity Number (NIK) from KTP
• Residential address (province, city, and full street address within Indonesia)
• Email address
• Mobile phone number (Indonesian format)
• Username and encrypted password
• Preferred currency (default: Indonesian Rupiah, IDR)

3.2 KYC and Verification Data

To comply with anti-money laundering (AML) obligations and age-verification requirements, we collect:

• Photograph or scan of Indonesian KTP, passport, or other government-issued identification
• Proof of residential address (bank statement, utility bill, or equivalent, issued within the last three months)
• Selfie photograph holding the identity document
• Bank account or e-wallet details (account name and number) used for deposits and withdrawals, including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja accounts
• Source of funds declaration (for high-value accounts)

3.3 Transactional Data

We record details of all financial transactions conducted through the Platform, including:

• Deposit and withdrawal amounts, dates, times, and payment method used
• Bet history: game type, stake, odds, outcome, and timestamp for all sports bets and casino game rounds
• Bonus credits received, wagering progress, and bonus expiry events
• Account balance at key events (login, deposit, withdrawal, large win/loss)

3.4 Technical and Usage Data

When you interact with the Platform, our servers and analytics tools automatically record:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session start and end times, pages visited, and features used
• Referral URL (the page from which you arrived at pm2000)
• In-game event logs necessary for technical dispute resolution

3.5 Communications Data

When you contact pm2000 support, we retain:

• Live chat transcripts
• Email correspondence
• Records of any complaint, dispute, or escalation and its resolution

pm2000 collects Personal Data through the following channels:

• Directly from you: Registration forms, KYC document submissions, support ticket submissions, live chat conversations, and responses to promotional surveys or competitions.
• Automatically: Server logs, session cookies, analytics scripts running on our own infrastructure, and in-game event tracking systems capture technical and usage data each time you interact with the Platform.
• From payment providers: When you initiate a deposit or withdrawal, your bank or e-wallet provider (such as BCA, BRI, OVO, or DANA) transmits transaction confirmation data to pm2000 to reconcile your Account balance.
• From identity verification partners: Where we use third-party KYC services to validate documents and screen against sanctions lists, those partners share verification outcomes (pass/fail , match confidence, and flagged issues) back to pm2000.
• From fraud prevention systems: Device fingerprinting and duplicate-account detection tools analyze technical attributes of your device and network connection to protect against fraud and collusion.

pm2000 processes Personal Data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the services you have requested under our Terms & Conditions, including account creation, deposits, withdrawals, bet settlement, and customer support.
• Legal Obligation: Processing is required to comply with anti-money laundering (AML), counter-terrorism financing (CTF), age verification, and responsible gaming laws applicable in the jurisdictions where pm2000 holds its international gaming license.
• Legitimate Interests: Processing serves pm2000's legitimate business interests, including fraud prevention, platform security, dispute resolution, analytics to improve service quality, and marketing communications where you have not opted out.
• Consent: Where we process optional data (such as marketing preferences or participation in surveys), we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing conducted before withdrawal.

pm2000 uses Personal Data for the following purposes:

7.1 When We Share Data

pm2000 does not sell or rent Personal Data to third parties. We share data only in the following limited circumstances:

• Payment Processors: Bank transfer and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals.
• KYC Verification Providers: Third-party identity verification and sanctions-screening services receive copies of your submitted identity documents to confirm authenticity and age.
• Game Studio Partners: Live casino and slot game providers (such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Pocket Games Soft) receive your username and bet data to deliver game sessions and maintain Random Number Generator (RNG) integrity.
• Cloud Infrastructure Providers: pm2000 uses secure cloud hosting services to store data. These providers are bound by data processing agreements and do not access Personal Data for their own purposes.
• Fraud Prevention & Security Services: We share device fingerprints, IP addresses, and behavioral data with fraud detection partners to protect the Platform from abuse.
• Legal and Regulatory Authorities: We disclose data when required by law, court order, or regulatory request from gaming authorities, tax agencies, or law enforcement in connection with investigations of illegal activity, money laundering, or terrorism financing.
• Business Transfers: In the event pm2000 undergoes a merger, acquisition, or asset sale, Personal Data may be transferred to the successor entity, subject to the same privacy protections outlined in this policy.

7.2 Data Processing Agreements

All third parties with whom pm2000 shares Personal Data are bound by written data processing agreements requiring them to protect data to the same standard as pm2000, process it only for specified purposes, and not retain it longer than necessary.

pm2000 operates internationally and stores data on secure cloud infrastructure located in multiple jurisdictions. When Personal Data is transferred outside Indonesia, we ensure that such transfers comply with applicable data protection laws by implementing appropriate safeguards, including:

• Relying on data centers and service providers certified under internationally recognized security standards (ISO 27001, SOC 2 Type II).
• Using encryption in transit (TLS 1.3) and at rest (AES-256) for all cross-border data flows.
• Executing Standard Contractual Clauses (SCCs) or equivalent data transfer mechanisms with non-Indonesian data processors.

By using the Platform, you acknowledge and consent to the international transfer and processing of your Personal Data under these safeguards.

pm2000 retains Personal Data only for as long as necessary to fulfill the purposes described in this policy or as required by law. Specific retention periods are as follows:

After the applicable retention period expires, Personal Data is securely deleted or anonymized such that it can no longer identify you.

10.1 Technical Safeguards

pm2000 employs industry-standard security measures to protect Personal Data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and pm2000 servers is encrypted using Transport Layer Security (TLS 1.3). Sensitive data stored on our servers, including KYC documents and payment details, is encrypted at rest using AES-256.
• Access Controls: Access to Personal Data is restricted to authorized personnel only, governed by role-based access control (RBAC) and multi-factor authentication (MFA).
• Intrusion Detection: Automated monitoring systems detect and respond to unauthorized access attempts, DDoS attacks, and other security threats in real time.
• Regular Audits: pm2000 undergoes periodic security audits and penetration testing conducted by independent third-party firms to identify and remediate vulnerabilities.

10.2 Organizational Safeguards

• All pm2000 employees and contractors with access to Personal Data are bound by confidentiality obligations and undergo data protection training.
• Data processing agreements with third parties include mandatory security standards and breach notification requirements.
• Incident response procedures are in place to manage and report data breaches in accordance with legal requirements.

10.3 Your Responsibilities

While pm2000 takes extensive measures to secure your data, you are responsible for maintaining the confidentiality of your username, password, and two-factor authentication credentials. Do not share these with anyone. Report suspected unauthorized access immediately to [email protected].

11.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit the Platform. pm2000 uses cookies to maintain your login session, remember your preferences, and generate anonymized usage analytics.

11.2 Types of Cookies We Use

11.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but doing so may impair functionality of the Platform (for example, you may be unable to stay logged in). pm2000 does not use third-party advertising cookies or cross-site tracking pixels.

As a pm2000 player, you hold the following rights with respect to your Personal Data:

• Right to Access: You may request a copy of all Personal Data pm2000 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: You may request deletion of your Personal Data, subject to legal retention obligations (e.g., AML records must be kept for 5 years regardless of your request).
• Right to Restriction: You may request that pm2000 limit processing of your Personal Data in certain circumstances, such as while a dispute over data accuracy is being resolved.
• Right to Data Portability: You may request an export of your Personal Data in a structured, machine-readable format (JSON or CSV) for transfer to another service.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. pm2000 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing conducted before withdrawal.
• Right to Lodge a Complaint: You may file a complaint with a data protection authority if you believe pm2000 has violated your privacy rights.

12.1 Exercising Your Rights

To exercise any of the above rights, contact our Data Protection Officer (DPO) at [email protected] with "Privacy Rights Request" in the subject line. Include your full name, registered email address, and a description of your request. We will verify your identity and respond within 30 calendar days. There is no fee for submitting a request unless it is manifestly unfounded or excessive.

pm2000 does not knowingly collect or process Personal Data from individuals under 21 years of age. Our registration process requires declaration of age and submission of government-issued identification (Indonesian KTP or passport) during the KYC process to verify that all players meet the minimum age requirement.

If we become aware that an account belongs to a person under 21, we will immediately suspend the account, void all transactions, and delete the associated Personal Data (subject to legal record-keeping obligations). If you believe a minor has created an account on pm2000, contact us immediately at [email protected].

pm2000 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to registered players via email and prominently displayed on the Platform at least 14 days before taking effect. The "Last Updated" date at the top of this policy indicates the effective date of the most recent version.

Continued use of the Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any changes, you must discontinue use of the Platform and may request account closure and data deletion as described in Section 12.

For any questions, concerns, or requests related to this Privacy Policy or pm2000's data practices, please contact:

Data Protection Officer (DPO)
pm2000
Email: [email protected]
Subject Line: Privacy Inquiry / Data Rights Request

Our DPO and support team are available 24/7 to handle privacy-related inquiries in both English and Indonesian. We aim to respond to all formal data requests within 30 calendar days. For urgent security concerns (such as suspected account compromise), use the subject line "Urgent: Security Issue" for priority handling.