Privacy Policy

Effective Date: 1 January 2026  |  Last Updated: 1 January 2026

1. Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "33ag", "We", "Us", "Our" — the 33ag online betting platform and its operators, accessible at 33ag.cam.
• "You", "Your", "User", "Member", "Player" — any individual who accesses, registers with, or uses any 33ag service.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, national identity number (KTP), email address, phone number, bank account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, transfer, deletion, or disclosure.
• "Platform" — the 33ag website, mobile-optimized site, and all associated services.
• "KYC" — Know Your Customer verification, the process by which 33ag confirms the identity, age, and residency of Players.
• "IDR" — Indonesian Rupiah (Rp), the currency used for all financial transactions on the 33ag platform.

2. Scope of This Policy

This Privacy Policy applies to all Personal Data collected by 33ag in connection with your use of the Platform, including data collected when you register an account, make deposits or withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), place bets, contact customer support, or visit the 33ag website.

This policy does not apply to third-party websites, payment processors, or services linked from or integrated into the 33ag Platform. Those third parties operate under their own independent privacy policies, and 33ag is not responsible for their data practices.

By using 33ag, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your Personal Data as described herein. If you do not agree, you must discontinue use of the Platform and close your account.

3. Data We Collect

3.1 Data You Provide Directly

When you register, verify your identity, or contact support, you provide us with:

• Full legal name (as appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years old)
• Indonesian national identity number (NIK from KTP) or passport number
• Residential address in Indonesia
• Email address and mobile phone number
• Bank account details (account number, bank name, account holder name) for BCA, BRI, BNI, Mandiri, and other supported institutions
• E-wallet account details (OVO, DANA, GoPay, ShopeePay, or LinkAja)
• Username and encrypted password
• Documents submitted for KYC verification (KTP, SIM, Passport, utility bills, bank statements)

3.2 Data Collected Automatically

When you use the Platform, we automatically collect certain technical data:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on page, and click-stream data
• Session duration and login timestamps
• Bet history, game activity, deposit and withdrawal records
• Cookie identifiers and similar tracking technologies (see Section 7)

3.3 Data from Third Parties

In certain circumstances, 33ag may receive Personal Data about you from third parties, including:

• Identity verification services used to confirm KYC compliance
• Payment processors and Indonesian banking partners confirming transaction status
• Fraud detection and anti-money-laundering screening services
• Responsible gaming databases (where you have registered a self-exclusion)

4. How We Use Your Data

33ag uses your Personal Data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your 33ag account, including login authentication and password management.
KYC & Age Verification	Verifying that you are at least 21 years old and a resident of Indonesia, as required by responsible gaming and compliance obligations.
Payment Processing	Processing deposits and withdrawals in IDR via BCA, BRI, BNI, Mandiri, and other approved Indonesian banks and e-wallets. Verifying transaction ownership to prevent fraud.
Service Delivery	Enabling you to place bets on sports, play casino games, participate in togel (lottery) draws, and access all other 33ag services.
Customer Support	Responding to your support queries, resolving disputes, and maintaining records of your interactions with our team.
Fraud Prevention	Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited behavior.
Responsible Gaming	Monitoring your betting patterns to identify signs of problem gambling and enforcing deposit limits, self-exclusion periods, or cooling-off requests.
Marketing (Optional)	Sending promotional offers, bonus notifications, and seasonal campaign messages (e.g., Idul Fitri, Independence Day promotions) — only if you have opted in. You can opt out at any time.
Legal Compliance	Meeting applicable Indonesian and international legal obligations, including anti-money-laundering (AML) and counter-terrorism financing (CTF) regulations.
Platform Improvement	Analyzing aggregated, anonymized usage data to improve Platform performance, game selection, and user experience.

5. Legal Basis for Processing

33ag processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill the contract between you and 33ag — specifically, to operate your account, accept bets, and process payments.
• Legal Obligation: Processing is required to comply with Indonesian and international law, including KYC regulations, AML obligations, and responsible gaming requirements.
• Legitimate Interest: Processing is in 33ag's legitimate interest to prevent fraud, protect the security of the Platform, and improve our services, provided such interests do not override your fundamental rights.
• Consent: Where we rely on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

6.1 Service Providers

33ag shares your Personal Data with carefully selected third-party service providers who assist us in operating the Platform. These include identity verification providers, payment processors (including Indonesian banking partners and e-wallet operators), fraud detection services, customer support software providers, and IT infrastructure partners. All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing the contracted service.

6.2 Legal Authorities

33ag may disclose your Personal Data to Indonesian government authorities, law enforcement agencies, or regulatory bodies if required to do so by law, court order, or official request. We will notify you of any such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event that 33ag undergoes a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred as part of that transaction. We will notify you prior to your data being transferred and subjected to a different privacy policy.

6.4 No Sale of Data

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the 33ag website. They allow the Platform to recognize your device, maintain your session, remember your preferences, and collect analytical data about your usage.

7.2 Types of Cookies Used by 33ag

• Essential Cookies: Required for the Platform to function. These enable account login, session management, and security features. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and display options, to improve your experience.
• Analytical Cookies: Collect anonymized data about how users navigate the Platform, helping us identify areas for improvement. No personally identifiable information is stored in these cookies.
• Security Cookies: Detect fraudulent activity, prevent unauthorized access, and protect your account from credential theft and session hijacking.

7.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Disabling essential cookies will prevent you from logging into your account and using core Platform features. Disabling analytical or functional cookies will not affect your ability to place bets or process transactions, but may reduce the quality of your experience.

8. Data Retention

33ag retains your Personal Data for as long as your account remains active and for a period thereafter as required by applicable law. Specific retention periods are as follows:

• Account and Identity Data (KYC): Retained for a minimum of 5 years after account closure, in accordance with Indonesian anti-money-laundering regulations.
• Transaction and Betting Records: Retained for a minimum of 5 years from the date of each transaction, as required by financial compliance obligations.
• Customer Support Records: Retained for 2 years from the date of the last interaction, or longer if the record is relevant to an ongoing dispute or legal matter.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever comes first.
• Technical and Log Data: Retained for up to 12 months, after which it is anonymized or deleted.

When data is no longer required, 33ag deletes it securely or renders it permanently anonymous so that it can no longer be linked to you as an individual.

9. Data Security

33ag implements industry-standard technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive data, including passwords (hashed with bcrypt) and payment credentials
• Multi-factor authentication options for account login
• Role-based access controls limiting internal staff access to Personal Data strictly on a need-to-know basis
• Regular third-party penetration testing and security audits
• Dedicated fraud monitoring systems operating 24/7
• Segregated storage of Player funds from operational accounts

10. Your Rights

As a Player registered with 33ag, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond within 14 business days.

• Right of Access: You may request a copy of all Personal Data we hold about you, along with information on how it is used and with whom it is shared.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request correction. For name or date-of-birth changes, supporting documents will be required.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data. We will fulfill this request where we are not legally obligated to retain the data. Note that AML and KYC regulations require us to retain certain records for at least 5 years.
• Right to Restriction of Processing: You may ask us to pause processing of your data while a dispute or rectification request is being resolved.
• Right to Data Portability: You may request your Personal Data in a structured, machine-readable format for transfer to another service.
• Right to Object: You may object to processing based on legitimate interest, including direct marketing. Upon objection to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11. Children and Underage Users

33ag services are strictly intended for adults. You must be at least 21 years of age to register an account and use this Platform. We do not knowingly collect Personal Data from individuals under 21. If we become aware that a person under 21 has registered an account or provided us with Personal Data, we will immediately close that account, void all associated bets, and securely delete the data.

Parents and guardians who believe a minor has accessed 33ag should contact us immediately at [email protected]. We take underage gambling prevention extremely seriously and cooperate fully with parental requests to remove data associated with minors.

12. Changes to This Policy

33ag reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered Members by email or via an on-site notification. We encourage you to review this policy periodically to stay informed about how we protect your data.

Continued use of the 33ag Platform after any changes to this Privacy Policy constitutes your acceptance of the revised terms.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Indonesia. Any disputes arising from this policy or 33ag's data processing practices shall be subject to the exclusive jurisdiction of the courts of Indonesia. By using the 33ag Platform, you consent to Indonesian jurisdiction for the resolution of all data-related disputes.

14. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the 33ag Privacy Team:

• Email: [email protected]
• Live Chat: Available 24/7 on the 33ag Platform
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)

For requests related to data access, erasure, or portability, please include your registered account username and email address so we can locate your records efficiently. We will acknowledge your request within 2 business days and provide a full response within 14 business days.