Privacy Annex — Live Draw Pewaristoto

Summary

1. Data We Do NOT Collect

The app does not collect:

• Name, email, or phone number
• Precise location (GPS)
• Contacts, photos, personal files, or microphone access
• Browsing history outside the app
• Betting data, financial transactions, or gambling activity
• Account identities you use on other platforms

2. Backend API (result data & history)

The app fetches result data, history, statistics, and prediction categories from a backend API operated by the Pewaristoto family. Each API request only sends:

• The market identifier you're viewing (e.g. macau, hkpools, sgtoto)
• Standard HTTP headers — including your internet connection's IP address and device User-Agent (standard info every internet connection sends)

The backend does not receive personal identity (name, email, phone), does not receive unique device identifiers, and does not receive precise location. Backend access logs are kept for a maximum of 90 days for security diagnostics.

3. Push Notifications

To send result update notifications, the app uses a push notification service (Google Firebase Cloud Messaging or OneSignal). Data involved:

• Device token: a unique anonymous identifier generated by the push service, used only to deliver notifications to your device
• Notification status: whether notifications are enabled

The token contains no personal information about you and cannot be used to identify you outside this service. You can disable notifications at any time via the app's settings or Android OS settings.

4. TikTok Business SDK (Ad Attribution)

The app integrates the TikTok Business SDK to measure the effectiveness of our TikTok ad campaigns. The SDK sends limited data to TikTok (ByteDance Ltd.).

Data sent to TikTok:

• Google Advertising ID (AAID): a resettable advertising identifier provided by the Android system — not your personal identity
• App event names: such as install, app_open, view_result — technical in-app events
• Technical event parameters: app version, device model, OS version

Purpose:

Measuring how many installs and in-app actions originated from our TikTok ad campaigns, so we can optimise ad spend. Not used for behavioural profiling, ad targeting toward you, or sale to any other party.

How to opt out of ad tracking:

You can disable AAID at any time via Android device settings:

• Go to Android Settings → Google → Ads
• Tap "Delete Advertising ID" or enable "Limit Ad Tracking"
• Once enabled, the SDK no longer receives a valid AAID and measurement tied to your device stops

TikTok policy links:

• TikTok Privacy Policy
• TikTok Business SDK documentation

5. Cross-Border Data Transfers

Push notification providers (Google/OneSignal) and the TikTok Business SDK process data on servers outside Indonesia. Per UU PDP Article 56, we ensure both providers offer data protection equal to or higher than UU PDP requires.

6. App Permissions Requested

• Internet: to fetch latest results and deliver notifications
• Notifications: to display result update alerts (optional)
• The app does not request location, contacts, camera, microphone, or external storage access

7. Data Retention

• Notification token: until the app is uninstalled or notifications are disabled
• TikTok attribution data: per TikTok's own retention policy (typically up to 180 days for campaign measurement)
• Local result cache: on your device, deleted on uninstall

8. Data Deletion

Uninstalling the app stops further data collection. To request deletion of data already collected, email [email protected] with subject "Live Draw Data Deletion Request".

9. Your Rights

You have all the rights described in the master Pewarisgroup Privacy Policy, including the right to access, correct, delete, and withdraw consent.

10. Contact

Live Draw privacy questions: [email protected]