abc33 Privacy Policy

abc33 ("we", "us", "our") is committed to protecting the personal information of every player who accesses the abc33 Platform at abc33.club. This Privacy Policy describes the types of personal data we collect, the purposes for which that data is processed, the safeguards we apply to keep it secure, and the rights available to you as a data subject.

This Policy applies to all Players who interact with the abc33 Platform — whether by browsing the site, creating an Account, making a deposit, placing a bet on sportsbook or togel (Indonesia's traditional numbers lottery) markets, participating in a promotion, or contacting our support team. It applies regardless of the device or channel through which you access abc33.

By registering an Account or continuing to use the abc33 Platform after this Policy has been made available to you, you acknowledge that you have read and understood the practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately and request Account closure.

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" Any information that identifies or can reasonably be used to identify a living individual, either on its own or in combination with other data.
• "Processing" Any operation performed on Personal Data — including collection, storage, use, transfer, erasure, or destruction.
• "Data Controller" abc33, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" A third party that processes Personal Data on abc33's behalf, under written instruction and contractual obligation.
• "Player" / "You" Any individual who accesses, registers on, or transacts through the abc33 Platform.
• "Platform" The abc33 website at abc33.club, including all game lobbies, account management pages, and customer support interfaces.
• "KYC" Know Your Customer — the identity-verification process abc33 conducts before processing a Player's first withdrawal.
• "Cookie" A small text file placed on your device by a website to store session information, preferences, or analytical identifiers.
• "IDR" Indonesian Rupiah — the currency in which all abc33 transactions are denominated.

abc33 collects Personal Data across several categories, depending on how you interact with the Platform. The table below summarizes what we collect and why.

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health data, except where strictly required to fulfill a responsible gaming obligation (e.g., self-exclusion records).

abc33 collects your Personal Data through the following channels:

• Direct Submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting support, or responding to a survey.
• Automated Collection: Technical and Usage Data collected automatically when you access the Platform, including via cookies, pixel tags, server logs, and session-recording technologies.
• Payment Processors: Transaction confirmation data (amount, status, timestamp) forwarded to abc33 by our IDR payment partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. We receive only the minimum data required to credit or debit your Balance; we do not store full bank account credentials.
• Game Providers: Round outcomes, session durations, and bet values supplied by certified third-party game studios (e.g., Pragmatic Play, Evolution Gaming, Pocket Games Soft) for account reconciliation and responsible gaming monitoring.
• Fraud-Prevention Partners: Device fingerprint scores and behavioral risk signals from third-party fraud-detection services, used solely to protect your Account and the integrity of the Platform.
• Publicly Available Sources: In limited KYC contexts, abc33 may cross-reference publicly available registry or sanctions-list data to comply with anti-money-laundering obligations.

abc33 processes your Personal Data under one or more of the following legal bases:

• Contractual Necessity: Processing required to create and manage your Account, process deposits and withdrawals, settle bets, and deliver the services described in our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, KYC verification standards, age-verification requirements (21+), and lawful regulatory requests.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, product analytics, and internal audit — where our legitimate business interests do not override your fundamental rights.
• Consent: Processing for optional purposes such as direct marketing communications, personalized promotions, and non-essential cookies — where you have given explicit, freely withdrawable consent.

abc33 uses your Personal Data exclusively for the purposes described in this Policy. Specifically, your data may be used to:

1. Create, verify, and maintain your abc33 Account, including enforcing the single-account rule.
2. Process IDR deposits and withdrawals via your chosen local payment method.
3. Conduct KYC identity checks before approving your first withdrawal request.
4. Detect and prevent fraud, money laundering, bonus abuse, and multi-accounting.
5. Calculate, apply, and track wagering requirements for bonuses and promotions — including seasonal promotions during Idul Fitri, Ramadhan, and other Indonesian holidays.
6. Provide customer support through our 24/7 email channel and supply Indonesian-speaking agents for players who request local-language assistance.
7. Monitor gameplay patterns for responsible gaming purposes and apply protective account restrictions where necessary.
8. Send transactional communications (deposit confirmations, withdrawal notifications, security alerts) to your registered email address.
9. Send promotional communications about new games, bonuses, and platform features — only to Players who have opted in to marketing messages.
10. Conduct internal analytics and product research to improve the abc33 Platform experience.
11. Comply with lawful instructions from competent authorities or fulfill legal obligations under applicable regulations.

abc33 does not share your Personal Data with third parties except in the following circumstances, all of which are governed by strict data-processing agreements or legal obligations:

• Payment Processors: We share the minimum necessary financial data with our IDR payment partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your deposit and withdrawal instructions.
• Game Providers: Certified studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session identifiers and bet data required to operate their games within the abc33 Platform. These providers are contractually prohibited from using that data for any purpose other than game delivery.
• KYC & Fraud Service Providers: Identity-verification and fraud-scoring platforms process your KYC documents and device data as Data Processors acting exclusively on abc33's instructions.
• Professional Advisors: Lawyers, auditors, and compliance consultants engaged by abc33 may access account data under strict confidentiality obligations, solely in connection with their professional mandate.
• Regulatory & Law Enforcement Authorities: Where required by a valid legal order, abc33 will disclose Personal Data to competent governmental or regulatory authorities. abc33 will, where legally permissible, notify affected Players of such disclosures.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of abc33's assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Players will be notified prior to any such transfer.

abc33 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active Account plus a minimum of five years after Account closure, to satisfy AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five years from the date of submission. After this period, documents are securely destroyed unless an ongoing regulatory obligation requires extended retention.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Support Communications: Retained for three years from the date of each interaction, or longer if the communication relates to an unresolved dispute.
• Technical and Usage Data (Analytics): Aggregated or anonymized after 24 months; identifiable technical data is deleted within 13 months of collection.
• Marketing Preference Records: Retained for as long as your Account is active. Opt-out records are retained indefinitely to ensure we do not contact you after a valid unsubscribe request.

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymized. abc33 conducts annual data-retention reviews to ensure compliance with this schedule.

abc33 implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our core security controls include:

• SSL/TLS Encryption: All data transmitted between your device and the abc33 Platform is encrypted using 256-bit SSL/TLS protocols, ensuring that your credentials, payment details, and session data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data fields — including KYC documents, bank account identifiers, and hashed passwords — are encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to production systems containing Personal Data is restricted to authorized abc33 personnel on a strict need-to-know basis, enforced via role-based access control (RBAC) and multi-factor authentication (MFA).
• Intrusion Detection: Automated monitoring systems continuously scan for anomalous access patterns, brute-force attempts, and suspicious account activity. Alerts trigger immediate review by our security team.
• Third-Party Security Audits: abc33's infrastructure and data-handling practices are subject to periodic independent security assessments to identify and remediate vulnerabilities.
• Incident Response: In the event of a confirmed data breach affecting your Personal Data, abc33 will notify affected Players and relevant authorities within 72 hours of becoming aware of the breach, in line with internationally recognized breach-notification standards.

abc33 uses cookies and similar tracking technologies to deliver a functional, secure, and personalized Platform experience. Cookies are small text files stored on your device when you visit abc33.club. They do not contain executable code and cannot access other files on your device.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for core Platform functionality — including maintaining your login session, remembering your language and currency preferences, and preventing cross-site request forgery (CSRF). These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Collect anonymized data about how Players navigate the Platform — which pages are visited most, how long sessions last, and where errors occur. This data helps us improve the Platform. These cookies are activated only with your consent.
• Functional Cookies: Remember personalization choices such as your preferred game lobby view, notification settings, and responsible gaming tool configurations. Activated with your consent.
• Security Cookies: Used by our fraud-detection systems to assign a device fingerprint score and flag anomalous session behavior. These are classified as strictly necessary for Platform security.

You may manage non-essential cookies at any time through your browser settings. Note that disabling certain cookies may affect the quality or availability of some Platform features. abc33 does not use third-party advertising cookies or cross-site behavioral tracking cookies.

As a data subject, you hold the following rights in respect of your Personal Data held by abc33. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a verified request.

• Right of Access: You may request a copy of all Personal Data abc33 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. For standard account fields, you can update your details directly from your Account dashboard without contacting support.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (e.g., the five-year AML record-keeping requirement).
• Right to Restrict Processing: You may request that abc33 temporarily suspend processing of your data while a rectification or objection request is being assessed.
• Right to Data Portability: You may request a machine-readable export of the Personal Data you have provided to abc33 directly (e.g., account registration data, transaction history).
• Right to Object: You may object to processing based on legitimate interests, or to the use of your data for direct marketing purposes. Marketing opt-outs take effect within five business days of a verified request.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Age verification is a mandatory step in the abc33 registration and KYC process. Players are required to declare their date of birth at registration, and this declaration is validated against government-issued identity documents before any withdrawal is permitted.

If abc33 becomes aware that Personal Data has been collected from an individual under the age of 21, that Account will be immediately suspended and all associated data will be securely deleted, except where retention is required for legal compliance. Any funds deposited by an underage individual will be held pending investigation and may be returned to the originating payment method after deducting any amounts associated with wagering activity.

Parents and guardians who believe a minor may have accessed the abc33 Platform using falsified details are encouraged to contact [email protected] immediately for prompt remediation.

The abc33 Platform integrates a number of third-party services to deliver a complete gaming experience. Each third-party provider operates under its own privacy policy and data-protection obligations. abc33 enters into Data Processing Agreements (DPAs) with all third-party processors to ensure your data is handled to a standard consistent with this Privacy Policy.

Key third-party categories and their data interactions include:

• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session tokens and anonymized player identifiers to run game rounds. They do not receive your full name, bank details, or government ID.
• Payment Gateways: Local IDR payment processors handle transaction routing between your BCA, BRI, BNI, Mandiri, or e-wallet account and the abc33 Platform. Financial data is transmitted over encrypted channels and is not stored by abc33 beyond what is required for transaction reconciliation.
• Analytics Providers: Anonymized, aggregated usage data may be processed by analytics platforms to help abc33 understand Platform performance. No personally identifiable information is shared with analytics providers.
• Security & Fraud Services: Device fingerprinting and behavioral analytics providers process Technical Data under strict contractual limitations, solely for fraud prevention on the abc33 Platform.

abc33 does not embed third-party social media trackers, advertising networks, or retargeting pixels on the Platform. Links to third-party sites (if any appear in content) lead to services governed by their own independent privacy policies, for which abc33 accepts no responsibility.

abc33 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable regulations, or Platform features. When a material change is made, we will notify registered Players via email at least seven days before the updated Policy takes effect, and we will update the version number and effective date at the top of this page.

For non-material changes — such as clarifications, formatting corrections, or updates to contact details — we will update the Policy without prior individual notification, though the revised effective date will always be reflected at the top of the document.

Your continued use of the abc33 Platform after the effective date of any revision constitutes your acceptance of the updated Policy. We recommend bookmarking this page and reviewing it periodically to stay informed of how your data is being protected.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the abc33 Privacy team using the details below. All privacy-related inquiries are handled with priority by our dedicated compliance staff.

• Privacy Inquiries Email: [email protected] — please use the subject line "Privacy Inquiry" for fastest routing.
• Data Rights Requests: Use the subject line "Privacy Rights Request" and include your registered email address and a brief description of the right you wish to exercise. We will respond within 30 days.
• Data Breach Reports: If you suspect your Account data has been compromised, email [email protected] immediately with the subject line "Security Concern". Our team will respond within two hours during business hours (08:00–24:00 WIB).
• Response Language: Our Privacy team can respond in English. Indonesian-speaking privacy support is also available for players who request it.