Privacy Policy — ful500

Introduction

ful500 ("we", "us", "our") operates the online gaming platform accessible at https://ful500.pro and is committed to protecting the privacy of every individual who registers, browses, or interacts with the platform. This Privacy Policy sets out the complete framework governing how we collect, use, disclose, store, and protect personal data relating to players, prospective players, and other visitors to the ful500 website.

This policy has been drafted in compliance with applicable international data protection principles, including the core tenets of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability. While Indonesia does not yet have a comprehensive data-protection statute equivalent to the EU General Data Protection Regulation, ful500 voluntarily aligns its practices with internationally recognised best standards, because the players who trust us with their data deserve nothing less.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the agreement between you and ful500.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Data We Collect

3.1 Registration Data. When you create an Account with ful500, we collect the following categories of personal data: full legal name, date of birth, Indonesian residential address, email address, mobile phone number, and the username you select. This information is required to establish your Account identity, verify your eligibility to play (including the 21+ age requirement), and contact you regarding your Account.

3.2 KYC and Identity Verification Data. As part of our identity verification process, we collect copies of government-issued identity documents, including the KTP (Kartu Tanda Penduduk), Indonesian passport, or SIM (Surat Izin Mengemudi). We also collect proof-of-payment-method documentation (e.g., bank statement from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, or Bank Permata; or screenshot confirming ownership of OVO, DANA, GoPay, ShopeePay, or LinkAja accounts). These documents are used solely for compliance and fraud-prevention purposes.

3.3 Financial Transaction Data. We collect records of all deposits and withdrawals processed through your Account, including transaction amounts in IDR, timestamps, payment method identifiers, and transaction status. We do not store full bank account numbers or e-wallet PINs — only the data necessary to match and reconcile transactions.

3.4 Gaming Activity Data. We collect a complete record of your gaming activity on the platform, including games played, bet amounts, wager outcomes, session durations, and responsible gaming tool usage. This data is used to deliver the gaming service, calculate bonus wagering requirements, and monitor for problem gambling indicators.

3.5 Technical and Device Data. When you access the platform, we automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, screen resolution, language settings, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and service optimisation.

3.6 Communications Data. If you contact our customer support team via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and training purposes.

3.7 Marketing Preferences Data. Where you have provided consent at registration or subsequently opted in, we hold a record of your marketing communication preferences, including your chosen channels (email, SMS, in-platform notification) and any withdrawal of consent you submit.

How We Collect Data

ful500 collects personal data through the following channels:

• Directly from you: During Account registration, KYC document submission, deposit and withdrawal requests, customer support interactions, and when you update your Account profile or communication preferences.
• Automatically through platform use: Via server logs, cookies, and similar tracking technologies that record technical and behavioural data as you navigate the ful500 platform (see Clause 9 for full cookie details).
• From authorised third-party processors: Identity verification vendors may return a verified status flag and risk score to ful500; payment processors confirm transaction completions. These processors do not supply us with raw data beyond what is strictly necessary for the relevant operational purpose.
• From responsible gaming monitoring systems: Automated tools that analyse gaming behaviour patterns and flag indicators consistent with problem gambling, enabling our responsible gaming team to make proactive contact where warranted.

Purpose & Legal Basis for Processing

We process your personal data only where we have a legitimate legal basis for doing so. The table below maps each principal processing activity to its purpose and corresponding legal basis:

Data Sharing

6.1 Authorised Third-Party Processors. ful500 engages a limited number of carefully vetted third-party processors who support the delivery of our services. These include: payment gateway providers (for processing IDR transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja), KYC and identity verification vendors, cloud infrastructure and hosting providers, fraud detection and cybersecurity firms, and customer support platform providers. All processors operate under written data-processing agreements that strictly limit their use of your data to the specified purpose.

6.2 Game Content Providers. Certain gaming activity data may be shared with our certified third-party game providers — including studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to the extent necessary for game delivery, dispute resolution, and RNG certification audits. These providers do not receive full Account or payment data.

6.3 Regulatory and Law Enforcement Authorities. ful500 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, by a valid court order, or where disclosure is necessary to prevent or investigate suspected financial crime, fraud, or other serious illegal activity.

6.4 Business Transfers. In the event that ful500 undergoes a merger, acquisition, or sale of substantially all of its assets, player data may be transferred as part of that transaction. You will be notified via email and/or in-platform notification in advance of any such transfer that materially affects your data rights.

6.5 No Commercial Data Sales. ful500 does not sell, rent, or commercially trade personal data to third parties for their own marketing or profiling purposes. This prohibition is absolute and is not subject to any commercial override.

Data Retention

7.1 Active Accounts. Personal data associated with an active ful500 Account is retained for the duration of the account relationship and for a minimum of five years following account closure. This retention period reflects our anti-money-laundering (AML) compliance obligations and the need to resolve potential disputes arising after closure.

7.2 KYC Documents. Identity verification documents are retained for a minimum of five years from the date of submission, consistent with internationally recognised AML record-keeping standards. After this period, documents are securely deleted from our systems unless an ongoing investigation or legal hold requires extended retention.

7.3 Financial Transaction Records. All deposit and withdrawal records are retained for a minimum of five years. Transaction metadata may be retained for up to seven years where required by the licensing authority's financial record-keeping requirements.

7.4 Marketing Data. Marketing preference records and consent logs are retained for as long as your Account is active plus two years following your last interaction with ful500, unless you request earlier deletion.

7.5 Technical Logs. Server logs and security event records are retained for 12 months on an active basis and archived for a further 24 months before deletion.

7.6 Deletion Requests. Where you submit a valid deletion request (see Clause 10), ful500 will delete or anonymise all personal data that is not subject to a legal retention obligation within 30 calendar days of verifying your identity and the validity of the request.

Security Measures

8.1 Technical Safeguards. ful500 implements a comprehensive suite of technical security controls, including: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest; multi-factor authentication (MFA) for all internal system access; Web Application Firewall (WAF) protection; regular penetration testing by qualified third-party security firms; and automated intrusion detection and alerting systems.

8.2 Organisational Safeguards. Access to player personal data is restricted on a strict need-to-know basis. All personnel with access to personal data undergo background checks and mandatory data protection training. Data access events are logged and subject to periodic audit review.

8.3 Incident Response. In the event of a personal data breach that poses a material risk to affected players, ful500 will notify affected individuals within 72 hours of confirming the breach, setting out the nature of the incident, categories of data involved, likely consequences, and the remedial measures taken.

8.4 Player-Side Security. While ful500 maintains robust platform-side controls, you are equally responsible for the security of your own Account. We strongly recommend using a unique, complex password, enabling two-factor authentication (2FA), and never sharing your Account credentials with any third party.

Cookies & Tracking Technologies

9.1 What Are Cookies. Cookies are small text files stored on your device when you visit the ful500 website. They allow the platform to remember your preferences, maintain your login session, and collect analytics data that helps us understand how the site is used.

9.2 Categories of Cookies We Use.

9.3 Managing Cookies. You may control non-essential cookies through your browser settings at any time. Please note that disabling functional or analytics cookies may affect your experience on the platform. Strictly necessary and security cookies cannot be disabled without rendering the platform inaccessible.

9.4 No Cross-Site Advertising Trackers. ful500 does not use third-party advertising trackers or retargeting pixels that track your behaviour across unrelated websites. Our cookie usage is confined to the operational and analytical purposes described above.

Your Rights

As a registered player, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address associated with your Account.

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 calendar days of verifying your identity. The first copy is provided free of charge; subsequent requests within a 12-month period may incur a reasonable administrative fee.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Certain data (such as your registered full name) may require documentary evidence before amendment is processed.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. This right is subject to our legal retention obligations under AML and licensing rules, which take precedence.
• Right to Restrict Processing: You may request that we restrict active processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection is under assessment.
• Right to Data Portability: For data you have provided directly to ful500 and that we process on the basis of consent or contract, you may request that we provide it in a structured, machine-readable format (CSV or JSON).
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including direct marketing. We will honour all marketing opt-outs within 5 business days of receipt.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Protection of Minors

11.1 Age Restriction. The ful500 platform is strictly for adults aged 21 and over. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Our registration process includes age-verification steps, and we reserve the right to request documentary proof of age at any point.

11.2 Discovery of Minor's Data. If ful500 discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated Account, delete all collected data to the extent not required for legal reporting purposes, and notify the relevant compliance team. If you are a parent or guardian and believe a minor has registered an Account on the ful500 platform, please contact us immediately at [email protected].

11.3 Parental Controls. ful500 recommends that parents and guardians with children in the household use third-party internet filtering tools (such as NetNanny or Kaspersky Safe Kids) to restrict access to online gaming platforms, as a complementary layer of protection beyond our own verification systems.

International Data Transfers

12.1 Cross-Border Processing. ful500 and certain of its authorised third-party processors operate infrastructure in data centres located outside Indonesia. As a result, your personal data may be transferred to and processed in jurisdictions other than Indonesia. These jurisdictions may have data protection laws that differ from those applicable in Indonesia.

12.2 Safeguards. When transferring personal data internationally, ful500 ensures that appropriate safeguards are in place, including contractual data-processing agreements that impose obligations equivalent to internationally recognised privacy standards on the receiving entity, and — where applicable — the use of standard contractual clauses or equivalent transfer mechanisms.

12.3 Cloud Infrastructure. ful500's platform infrastructure uses cloud services provided by internationally recognised providers with ISO 27001 certification and independently audited security programmes. Server locations are selected to minimise latency for players in Jakarta, Surabaya, Medan, Bandung, Bali, and other major Indonesian cities.

Policy Amendments

13.1 Right to Update. ful500 reserves the right to update, revise, or replace this Privacy Policy at any time. The most current version will always be published at https://ful500.pro/privacy-policy with an updated "Last updated" date visible at the top of the page.

13.2 Notification of Material Changes. For changes that materially affect the way we process your personal data — such as introducing a new category of data collection or a new sharing arrangement — ful500 will provide advance notice via email or in-platform notification at least 14 calendar days before the revised policy takes effect, giving you the opportunity to review and, if necessary, close your Account before the changes apply.

13.3 Continued Use. Your continued use of the ful500 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept any amendment, you must cease using the platform and submit a data deletion request in accordance with Clause 10.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the ful500 Privacy Team through the following channels:

• Email: [email protected] — use the subject line "Privacy Request" for all data rights submissions
• Live Chat: Available 24 hours a day, 7 days a week, directly within the ful500 platform, staffed by Indonesian-speaking agents (00:00 – 24:00 WIB, UTC+7)
• Response Commitment: All privacy-related queries are acknowledged within 5 business days and resolved within 30 calendar days

For responsible gaming concerns, self-exclusion requests, or help managing your gaming behaviour, please visit our dedicated Responsible Gaming page or speak to a support agent at any time. For answers to common account and payment questions, see our FAQ.