How We Protect Your Privacy
A snapshot of the core commitments serurp makes to every member regarding personal data handling. Full legal detail follows in the sections below.
SSL Encryption at Every Step
All data transmitted between your device and serurp's servers is protected by industry-standard TLS 1.3 encryption. Your credentials, payment details, and personal information travel over fully encrypted channels at all times.
No Sale of Personal Data
serurp does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Data sharing is strictly limited to what is necessary to deliver our services to you.
You Control Your Data
Registered members hold meaningful rights over their personal data, including the right to access, correct, restrict, and request deletion of records we hold. These rights can be exercised at any time through our support team.
Purpose-Limited Data Use
Personal data collected by serurp is used only for the purposes stated in this policy. We do not process your data in ways that are incompatible with the original purpose for which it was collected.
Defined Retention Periods
We hold personal data only for as long as necessary to fulfil the purposes described in this policy or as required by applicable law. Account data is typically retained for five years following account closure to comply with record-keeping obligations.
Breach Notification
In the unlikely event of a data security incident affecting your personal information, serurp will notify affected members without undue delay and provide clear guidance on any protective action you should take.
1Scope & Data Controller
This Privacy Policy applies to all personal data collected, processed, and stored by serurp in connection with the online gaming platform operated at https://serurp.cam and all related services, applications, and communications. It covers data collected from registered members, prospective members who browse the platform without registering, and individuals who contact our customer support team.
For the purposes of applicable data protection principles, serurp acts as the data controller — meaning we determine the purposes and means of processing your personal data. If you have any questions about how we handle your data, you may contact us using the details provided in Section 13 of this policy.
Note: This policy is written in English and governs serurp's data practices in relation to its Indonesian membership base. By registering an account or using the serurp platform, you acknowledge that you have read and understood this Privacy Policy.
2Data We Collect
serurp collects only the personal data that is necessary for the operation of our platform, compliance with legal obligations, and delivery of a high-quality gaming experience. The categories of data we collect are described below.
2.1 Identity and Contact Data
- Full legal name as it appears on your government-issued identity document;
- Date of birth (required for mandatory age verification — members must be 21 or older);
- Residential address in Indonesia (city, province, postal code);
- Valid email address;
- Mobile phone number (used for account security and transaction notifications).
2.2 Identity Verification (KYC) Data
- Copy of Indonesian National Identity Card (KTP) or valid passport;
- Proof of residential address (utility bill, bank statement, or equivalent);
- Selfie photograph for biometric liveness verification where required.
2.3 Financial Data
- Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata;
- E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja;
- Transaction history (deposits, withdrawals, and wager records).
2.4 Technical and Usage Data
| Data Type | Examples | Purpose |
|---|---|---|
| Device Data | Device type, OS, browser version, screen resolution | Platform optimization, fraud detection |
| IP Address | IPv4 / IPv6 address, approximate geolocation | Security monitoring, geographic eligibility checks |
| Session Data | Login timestamps, session duration, pages visited | Account security, responsible gaming monitoring |
| Betting Activity | Markets wagered on, stake amounts, game types played | Service delivery, bonus calculation, fraud prevention |
| Communication Data | Support chat logs, email correspondence | Customer service, dispute resolution, quality assurance |
3How We Collect Data
serurp collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team;
- Automated technologies: Data collected automatically when you access and navigate the platform, including cookies, web beacons, and server log files (see Section 9 for full cookie details);
- Third-party verification services: Identity and age verification data obtained from licensed KYC and anti-fraud service providers as part of our compliance procedures;
- Payment processors: Transaction confirmation data received from Indonesian banking institutions and e-wallet operators when you make deposits or request withdrawals;
- Game providers: Aggregated gameplay data provided by certified studio partners such as Pragmatic Play, Evolution Gaming, and Microgaming for the purposes of dispute resolution and fair-play monitoring.
4Purposes & Legal Basis
serurp processes your personal data only where there is a clear and legitimate purpose for doing so. The primary purposes for which we process personal data, together with the legal basis for each, are set out below.
4.1 Account Management and Service Delivery
We process identity, contact, and financial data to create and manage your serurp account, process deposits and withdrawals in IDR, settle wagers, and communicate account-related updates to you. The legal basis is the performance of our contract with you as a registered member.
4.2 Legal Compliance and KYC
We are required to verify the identity and age of all members before processing withdrawals, and to maintain accurate records of financial transactions in accordance with applicable anti-money laundering principles. The legal basis is compliance with our legal obligations as a platform operator.
4.3 Fraud Prevention and Platform Security
Technical and usage data, including IP addresses, device identifiers, and session logs, are analyzed to detect and prevent fraudulent activity, account takeover attempts, bonus abuse, and other threats to platform integrity. The legal basis is our legitimate interest in maintaining a secure and fair gaming environment for all members.
4.4 Responsible Gaming Monitoring
We monitor gameplay patterns and account activity to identify members who may be exhibiting signs of problem gambling behavior. This enables us to proactively offer responsible gaming tools such as deposit limits, session time-outs, and self-exclusion. The legal basis is our legal obligation and legitimate interest in promoting responsible gaming, as further described on our Responsible Gaming page.
4.5 Marketing and Promotional Communications
With your consent, we may send you promotional emails and platform notifications about new games, bonuses, and seasonal promotions — including offers aligned with Indonesian cultural events such as Idul Fitri, Ramadhan, and Indonesian Independence Day. You may withdraw your consent and opt out of marketing communications at any time by contacting support or using the unsubscribe link in any marketing email.
4.6 Analytics and Platform Improvement
Aggregated and anonymized usage data is analyzed to improve the design, performance, and game selection of the serurp platform. This processing does not involve data that identifies you as an individual and is carried out on the basis of our legitimate interest in continual service improvement.
5Data Sharing
serurp does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:
5.1 Service Providers
We engage carefully selected third-party service providers to support our operations, including KYC and identity verification agencies, payment processing partners (including Indonesian banks and e-wallet operators), cloud infrastructure providers, and cybersecurity firms. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.
5.2 Game Studio Partners
Gameplay data relevant to dispute resolution and fair-play audits may be shared with the certified game studio that supplied the relevant game (for example, Pragmatic Play, Evolution Gaming, or Microgaming). These studios operate under their own licensing obligations and data protection commitments.
5.3 Legal and Regulatory Disclosure
We may disclose personal data where required by a valid court order, regulatory investigation, or other legally mandated obligation. In such cases, serurp will disclose only the minimum data required to satisfy the legal obligation and, where permitted by law, will notify you of such a disclosure.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of serurp's business, your personal data may form part of the transferred assets. You will be notified by email and via a prominent notice on the platform if your data becomes subject to a materially different privacy policy as a result of any such transaction.
Important: serurp will never share your personal data with advertisers, data brokers, or other third parties for their own commercial or marketing purposes. Any data sharing arrangement is governed by strict contractual protections.
6International Data Transfers
serurp's primary operations and data storage infrastructure are located in data centers serving the Asia-Pacific region. In some cases, data may be transferred to, or accessed by, service providers operating in other jurisdictions in order to deliver specific technical services such as fraud analysis or cloud backup.
Where personal data is transferred outside Indonesia, serurp takes reasonable steps to ensure that an equivalent level of data protection applies, including through the use of contractual data protection clauses and assessments of the recipient's security practices. We do not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate safeguards.
7Data Retention
serurp retains personal data only for as long as is necessary to fulfil the purposes described in this policy or as required by applicable law. The following standard retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | 5 years after account closure | Legal compliance, dispute resolution |
| KYC Documents | 5 years after account closure | Anti-money laundering obligations |
| Transaction Records | 5 years after each transaction | Financial record-keeping requirements |
| Betting History | 3 years after each wager | Dispute resolution, fair-play auditing |
| Support Communications | 2 years after resolution of the relevant matter | Quality assurance, dispute evidence |
| Marketing Consent Records | Until withdrawal of consent + 1 year | Proof of lawful marketing basis |
| Technical / Log Data | 12 months on a rolling basis | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to any individual.
8Security Measures
serurp implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Transport Layer Security (TLS 1.3): All data in transit between your browser and our servers is encrypted using current industry-standard protocols;
- Data encryption at rest: Sensitive personal and financial data stored in our systems is encrypted using AES-256 or equivalent cipher standards;
- Access controls: Internal access to personal data is strictly role-based. Only personnel with a legitimate operational need may access member data, and all access events are logged and audited;
- Two-factor authentication: Members are strongly encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security;
- Penetration testing: serurp's platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited;
- Incident response: We maintain a documented data breach response procedure. In the event of a confirmed breach affecting member data, affected individuals will be notified without undue delay.
Your role in security: While serurp takes extensive measures to protect your data, you also play an important part. Use a strong, unique password for your serurp account, never share your login credentials, and contact support immediately at [email protected] if you suspect unauthorized activity on your account.
9Cookies & Tracking Technologies
serurp uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyze how members interact with our services. The categories of cookies we use are described below.
9.1 Strictly Necessary Cookies
These cookies are essential for the platform to operate. They enable core functions such as session management, authentication state, and load balancing. The platform cannot function without these cookies, and they cannot be disabled.
9.2 Functional Cookies
Functional cookies remember your preferences — such as your preferred language, display settings, and previously selected payment methods — so that the platform delivers a more personalized experience on return visits.
9.3 Analytics Cookies
We use analytics cookies to collect aggregated, anonymized data about how members navigate the platform. This information helps us identify popular features, detect navigation issues, and make informed decisions about platform improvements. Analytics data does not identify you as an individual.
9.4 Managing Cookies
You may manage or disable non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect your experience of the platform. Instructions for managing cookies are available in the help documentation of most major browsers.
10Minors & Age Verification
serurp is strictly an adults-only platform. You must be at least 21 years of age to register an account or use any of our gaming services. We do not knowingly collect personal data from individuals under the age of 21.
As part of our KYC process, all members are required to submit proof of age before their first withdrawal is processed. Where serurp has reasonable grounds to believe that a member is under the age of 21, the relevant account will be suspended immediately, all activity on that account will be investigated, and the account may be permanently closed with all balances forfeited.
If you are a parent or guardian and you believe that a minor in your care has registered an account with serurp, please contact our support team at [email protected] immediately so that we can investigate and take appropriate action.
11Your Data Rights
As a member of serurp, you hold meaningful rights over the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team using the details in Section 13. We will respond to all valid requests within 30 days of receipt.
Right of Access
Request a copy of the personal data serurp holds about you, together with information about how it is used.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account record.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances, for example while a dispute over accuracy is being resolved.
Right to Portability
Receive a structured, machine-readable copy of the personal data you have provided to serurp, for transfer to another service if desired.
Right to Object
Object to processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for marketing purposes.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), withdraw that consent at any time without affecting prior processing.
Right Against Automated Decisions
Request human review of any significant decision made about your account solely on the basis of automated processing.
serurp will not charge a fee for the exercise of any of these rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request, notifying you of our reasons.
12Policy Updates
serurp reviews this Privacy Policy periodically to ensure it remains accurate, up to date, and reflective of our current data practices. We may update this policy in response to changes in the services we offer, the technologies we use, or the legal obligations that apply to us.
When material changes are made to this policy, we will notify registered members via their registered email address and display a prominent notice on the platform for a period of at least 30 days following the update. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Your continued use of the serurp platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using the platform and may request account closure by contacting our support team.
Tip: We recommend bookmarking this page and checking it periodically. You can also review our full Terms & Conditions for the complete framework governing your relationship with serurp.
13Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data serurp holds about you, please reach out to our dedicated support team. We are committed to handling all privacy-related inquiries promptly and transparently.
Data Inquiries & Privacy Requests
Email: [email protected]
Support Availability
24 hours a day, 7 days a week — including all Indonesian public holidays. Indonesian-speaking agents are always on hand to assist you.
Please include "Privacy Request" in the subject line of your message and specify the right or request you wish to exercise. We aim to acknowledge all privacy-related inquiries within 48 hours and resolve them within 30 calendar days.
Your Privacy Matters to Us
Still have questions about how serurp handles your personal data? Our support team is available around the clock. You can also review our Terms & Conditions or visit our FAQ for quick answers.
Browse the FAQ Terms & Conditions Back to Homepage