Privacy Policy 33l – Indonesia Player Data Protection

1 Who Is Responsible for Your Data

This Privacy Policy applies to all services operated by 33l ("we", "Platform") through the 33l website and all its subdomains and related services. 33l acts as the data controller and is fully responsible for the collection, use, and protection of players' personal data.

By registering for or using 33l's services, you agree to the practices described in this Privacy Policy. If you do not agree with how we handle your data, we ask that you refrain from using our services.

2 Data We Collect

33l only collects data that is strictly necessary to operate our services, ensure platform security, and comply with legal obligations. The following are the categories of data we collect:

Identity and Account Data:

Financial and Transaction Data:

Technical and Usage Data:

We do not collect data irrelevant to service operations, such as political preferences, religious affiliations, or other sensitive information unrelated to identity verification or account security.

3 How We Use Your Data

Every piece of data collected has a clear, defined purpose. 33l never uses player data for purposes not stated in this policy.

4 Legal Basis for Data Processing

33l processes players' personal data based on one or more valid legal grounds, depending on the context and purpose of the processing:

• Contract performance: processing is necessary to provide the services you have requested — registering an account, processing transactions, and running games.
• Legal obligation: certain data is processed to fulfill legal obligations, including anti-money laundering (AML) procedures, age verification, and reporting to competent authorities.
• Legitimate interest: technical data is processed to prevent fraud, maintain platform security, and improve service quality — in a manner that does not override your fundamental interests or rights.
• Consent: for marketing communications and non-essential cookie use, we request explicit consent that can be withdrawn at any time.

5 Data Sharing with Third Parties

33l does not sell, rent, or trade players' personal data. In limited circumstances, data may be shared with third parties only under the following conditions:

• Integrated payment providers: required transaction information is shared with local payment gateways (banks, DANA, GoPay, OVO, etc.) solely for processing deposits and withdrawals.
• Game providers: usernames and account IDs are shared with game providers integrated on the platform for the technical operation of games.
• Security and anti-fraud services: technical data such as IP addresses and device fingerprints are shared with fraud detection systems to maintain platform integrity.
• Legal authority: data may be shared with competent authorities when required by applicable law or pursuant to a valid court order.

All third parties that receive player data are bound by confidentiality agreements and are required to handle data in accordance with protection standards equivalent to our own policy.

6 Cookies and Tracking Technologies

33l uses cookies and similar technologies to keep the platform running smoothly and deliver a more personalized experience. The following types of cookies are used:

• Essential cookies: required for core platform functions such as maintaining login sessions and language preferences. These cookies cannot be disabled as the platform will not function without them.
• Analytics cookies: helps us understand how players use the platform — which pages are visited most, how long sessions last, and where friction occurs. This data is used in aggregate and anonymous form.
• Preference cookies: stores settings such as language preference, display theme, and game preferences to deliver a more consistent experience.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may significantly affect platform functionality.

7 Data Security

Data protection is at the core of 33l's technical architecture, not an afterthought. The security measures in place include:

• Data transmission encryption using TLS 1.3 with AES-256-GCM cipher suite.
• At-rest encryption for all sensitive information in the database.
• Passwords are hashed using the bcrypt algorithm with a unique salt per account.
• Two-factor authentication (2FA) is available for all player accounts.
• Real-time monitoring of account access and activity with automated anomaly detection.
• Penetration testing and independent security audits conducted on a regular basis.
• Strict internal access controls — only staff with specific authorization can access player data, and every access is recorded in an audit trail.

While we apply industry-leading security standards, no system can be guaranteed 100% risk-free. In the event of a security incident that materially impacts player data, we will provide notification in accordance with applicable obligations.

8 Data Retention and Deletion

33l retains players' personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law.

• Active account data: retained for as long as the account remains active and for as long as necessary to provide the service.
• Post-account closure data: transaction and identity data is retained for a minimum of 5 years following account closure for legal compliance, fraud prevention, and dispute resolution purposes.
• Technical logs: server and access logs are retained for a maximum of 12 months before being automatically deleted.
• Communication data: customer support conversation history is retained for 24 months for training and dispute resolution purposes.

Once the retention period expires, data is permanently deleted using methods that ensure it cannot be recovered.

9 Player Rights over Personal Data

As a 33l player, you have a number of rights you can exercise at any time regarding your personal data:

10 Children's Data Protection

The 33l platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. If we discover that data belonging to an individual under 18 has been collected inadvertently, it will be deleted immediately and the associated account will be closed.

If you become aware of any underage individual using the 33l platform, please report it to our support team immediately so that appropriate action can be taken.

11 Privacy Policy Changes

33l reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable legal obligations. Any material changes — meaning changes that significantly affect how we handle your data — will be communicated through:

• In-platform notifications for currently active players.
• Email notification to the registered email address for highly significant changes.
• Update of the "effective from" date at the top of this page.

Non-material changes such as grammar corrections or clarifications do not require specific notification. We recommend checking this page periodically to stay up to date.

12 Data Protection Contact

For any privacy or data protection questions, requests, or concerns, you can reach the 33l team at:

• Live Chat: available 24/7 directly on the platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for formal data rights requests, response within 30 business days.
• General Support Email: [email protected] — for general inquiries, response within 12 hours.

When submitting a data-related request, please include your full name, registered email address, and a clear description of your request to help us verify and process it promptly.