cerah88 Privacy Policy
When you create a cerah88 account, you upload your government ID and recent utility bill so we can verify your identity. We then hold that data alongside your email, phone number, and payment method information, and we keep it encrypted in our database. This page describes what we collect when you use cerah88 and how we keep that data protected, who has access to it, and what rights you have over it.
We at cerah88 collect and process your personal information only to the extent required by account verification, fraud prevention, and local compliance law. We do not sell your data to marketers. We do not share your account details with third parties except where payment processors or banks need to see them to complete a transaction. If you have questions about what we keep or how we use it, you can request your data at any time—we will provide it within ten business days.
This policy applies to cerah88.app and all services under the cerah88 brand available in supported jurisdictions. If you are located outside these regions—for instance, if you are accessing cerah88 from outside Indonesia—the service is not available to you, and this policy does not apply.
What we collect and why
We at cerah88 collect the following information:
- Account credentials: Email address, password hash, phone number, legal name, and date of birth. We use these to create your account, send you login links and security alerts, and verify your identity.
- Identity documents: Copy of your government-issued ID (KTP, passport, or driving licence) and proof of address (utility bill, bank statement, or rental agreement). We use these for KYC verification—a legal requirement before we allow deposits. We keep these documents in encrypted storage and delete them after a set period if your account is inactive.
- Payment information: When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, we record the payment method, amount, date, and confirmation status. When you deposit via mobile banking, local payment, online payment, or e-wallet virtual accounts, we record the virtual-account number assigned to you (but not your full bank account number—only the suffix used for reference). We use this data to process deposits and withdrawals and to detect fraud (e.g., if someone tries to withdraw to a different payment method than the one used to deposit).
- Game activity: We log which games you play, when you play, your session duration, and your account balance history. We use this to detect problem patterns and to comply with local gambling reporting requirements where applicable.
- Device and network information: Your IP address, device type (Android, iOS, browser), app version, and general location (city-level, not street address). We use this for account security—if your login comes from a new city or device, we may send you a verification email—and to troubleshoot technical issues.
Who can access your data on cerah88
We at cerah88 keep your personal data in-house on encrypted servers. Our staff (customer support, compliance, engineering) can access your data only when needed to resolve account issues or investigate fraud. We do not share your data with marketing partners, data brokers, or affiliate networks.
We do share limited information with external processors:
- Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment processors receive only the amount and your phone number / email (depending on the wallet). online payment, e-wallet, mobile banking, and local payment receive your virtual-account reference number and the deposit amount. They do not receive your full personal data.
- Compliance and law enforcement: If we are legally required by Indonesian authorities (e.g., the Financial Transaction Reports and Analysis Centre for AML compliance), we will disclose account information without notice. We will not disclose this unless legally compelled.
Your rights and our commitments on cerah88
You have the right to access, correct, or request deletion of your personal data at any time. To request your data in full (a data export), contact our support team. We will provide it in a readable format within ten business days. To delete your account and associated data, submit a deletion request through your account settings. We will remove your personal information from active databases within 30 days, though we may retain anonymised transaction records for compliance purposes for up to seven years.
We at cerah88 use cookies and local storage on your device to remember your login session and your language preference. These cookies are first-party only—we do not use third-party tracking pixels or analytics cookies that follow you across the web. You can disable cookies in your browser settings, but this may disable some cerah88 features (e.g., you will need to log in every time you visit).
We encrypt all data in transit using TLS (HTTPS) and at rest using AES-256. We require two-factor authentication for high-risk operations (password reset, withdrawal requests). We audit our systems quarterly for vulnerabilities and maintain a bug-bounty program for security researchers to report issues.
Your data security is our responsibility. We at cerah88 treat your information as carefully as we would our own.
Contact us about privacy
If you have questions about this policy, want to access or delete your data, or have a privacy complaint, contact our data protection team at [email protected] or through the in-app support chat. We will acknowledge your request within two business days and resolve it within ten days. If you are located in Jakarta, Surabaya, Bandung, Medan, Semarang, or Yogyakarta and believe we have violated your privacy rights, you may also file a complaint with the relevant local authority.
This policy may change. We will notify you of material changes via email or through a prominent notice on cerah88 before the new policy takes effect. Your continued use of cerah88 after such notice constitutes acceptance of the updated policy.