Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings assigned below. These definitions are consistent with those used in the net33 Terms & Conditions.

net33 collects the minimum Personal Data necessary to operate the Platform securely and in compliance with applicable anti-money-laundering, responsible gaming, and data protection standards. The categories of Personal Data we collect are set out below.

net33 collects Personal Data through the following channels:

• Direct Submission: When you register an Account, complete your KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey, you provide Personal Data directly to net33.
• Automated Technologies: When you visit or interact with the Platform, we automatically collect Technical Data and Usage Data through cookies, web beacons, server logs, and similar tracking technologies. This data is collected on every Platform visit, including visits by non-registered users.
• Payment Processors: When you initiate a deposit or withdrawal, our payment processing partners (Indonesian banks and e-wallet providers) transmit transaction confirmation data — including amounts in IDR and masked account identifiers — to net33 for reconciliation and fraud-prevention purposes.
• KYC Verification Partners: net33 uses accredited third-party identity verification providers to cross-check your submitted identity documents against official databases. These providers return a verification result (pass/fail) and a risk score; they do not grant net33 access to raw government identity databases.
• Game Providers: Game studios integrated on the net33 platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may transmit session-level game data — round IDs, bet amounts, outcomes — to net33 for game integrity, dispute resolution, and responsible gaming monitoring.

net33 processes Personal Data for the following purposes. Each purpose is linked to a legal basis described in Section 5.

net33 processes Personal Data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform our contract with you as a Member — including Account creation, payment processing, KYC verification, and customer support. Without this processing, we cannot provide you with access to net33 Services.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including anti-money-laundering (AML) obligations, identity verification mandates, and record-keeping requirements under our operating licence conditions.
• Legitimate Interests: Processing carried out to protect the security and integrity of the Platform (fraud prevention, bot detection), to improve our products and services through anonymised analytics, and to manage responsible gaming monitoring. In all cases, net33 has assessed that these legitimate interests do not override your fundamental privacy rights.
• Consent: Processing of your data for marketing communications and personalised promotional offers. Consent is freely given, specific, and may be withdrawn at any time without affecting your ability to use the Platform. To withdraw consent, use the unsubscribe link in any marketing email or update your preferences in Account settings.

net33 does not sell your Personal Data. We share data with third parties only in the following limited and controlled circumstances:

• Payment Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the minimum transaction data required to process your deposit or withdrawal — typically your account identifier and the IDR amount.
• KYC & Identity Verification Providers: Accredited third-party KYC providers receive copies of your identity documents and selfie photographs for the sole purpose of verifying your identity and age. These providers are contractually prohibited from using your data for any other purpose.
• Game Studios: Integrated game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) receive a pseudonymous player session token — not your name or contact details — necessary to operate the game, record outcomes, and resolve game-level disputes.
• IT Infrastructure & Security Providers: Cloud hosting, content delivery, and cybersecurity vendors operate the technical infrastructure supporting the net33 Platform. These vendors process data only on our documented instructions and are bound by data processing agreements.
• Legal Authorities: Where required by applicable law, a court order, or a legitimate regulatory request, net33 may disclose specific Personal Data to law enforcement agencies or regulatory bodies. net33 will notify the affected Member of such a disclosure where legally permitted to do so.

net33 uses cookies and similar technologies to operate the Platform, remember your preferences, maintain your login session, and gather anonymised analytics. The cookies we use fall into the following categories:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent access to the Platform. Disabling analytical or functional cookies will not affect your ability to bet or play games on net33.

net33 implements a layered security architecture designed to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• End-to-end 256-bit SSL/TLS encryption on all data transmissions between your device and our servers — the same standard used by BCA Internet Banking and Mandiri Online.
• Tokenisation of all payment credentials at the point of entry — raw bank account numbers and e-wallet identifiers are never stored in plain text on net33 infrastructure.
• Role-based access controls limiting employee access to Personal Data strictly to those functions required for their specific job role. All access is logged and periodically audited.
• Real-time intrusion detection and prevention systems (IDS/IPS) monitoring for anomalous traffic patterns, SQL injection attempts, and brute-force login attacks.
• Regular independent penetration testing and vulnerability assessments of the Platform's public-facing and internal infrastructure.
• Automated alerts triggered when unusual Account activity is detected — such as logins from an unrecognised device or IP geolocation outside your typical usage pattern.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, net33 will notify affected Members without undue delay and will take all necessary remediation steps. We will also report the breach to the applicable regulatory authority within the timeframe required by our operating jurisdiction.

net33 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal and regulatory obligations. The following retention periods apply:

Once a retention period expires, Personal Data is either securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

As a Member of net33, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact us via live chat or email support@net33.club. We will respond within five business days of receiving a verified request.

• Right of Access: You may request a copy of all Personal Data we hold about you, along with information on how it is being processed, the categories involved, and any third parties with whom it has been shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, corrections may require re-submission of supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. Note that we may be required to retain certain data to comply with legal obligations even where an erasure request is made.
• Right to Restrict Processing: You may request that net33 pause the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You may request a structured, machine-readable copy of the Personal Data you provided to net33 directly, for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your Personal Data for direct marketing purposes at any time, with immediate effect. You may also object to processing carried out on the basis of legitimate interests, subject to net33 demonstrating compelling grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The net33 Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from anyone under the age of 21. This age threshold is set above the standard adult majority in recognition of the additional safeguards appropriate for online gaming services targeting the Indonesian market.

net33 enforces this restriction through mandatory age verification at the registration stage and through the KYC process prior to withdrawal. If we become aware that Personal Data has been collected from a person under the age of 21 — whether through self-disclosure, third-party report, or our own monitoring — we will:

• Immediately suspend and permanently close the Account in question.
• Forfeit any Balance or Bonus Funds held in that Account in accordance with our Terms & Conditions.
• Delete all Personal Data associated with the underage Account within 14 days of discovery, except where retention is required for legal compliance purposes.

net33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. When material changes are made, we will notify registered Members by email to the address on record and by a prominent notice on the Platform homepage, no less than seven (7) calendar days before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this page reflects the date on which the current version came into effect. We encourage you to review this Privacy Policy periodically. Your continued use of the net33 Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you do not accept the revised Privacy Policy, you may close your Account by contacting our support team before the revision's effective date. We will process your closure request and handle any remaining Balance in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way net33 handles your Personal Data, please reach out through any of the following channels. All data-related enquiries are handled by our dedicated compliance and support team.

• Live Chat: Available 24 hours a day, 7 days a week, directly on the net33 Platform. This is the fastest way to reach our Indonesian-speaking support team for urgent data and Account matters. Response time is typically under 2 minutes.
• Email: support@net33.club — for formal data subject access requests, erasure requests, rectification requests, and complaints relating to data processing. We aim to acknowledge all email enquiries within 24 hours (WIB) and to resolve data subject requests within five business days.

Our support team operates around the clock in Western Indonesia Time (WIB, UTC+7). Native Indonesian-speaking agents are available at all hours for Members who prefer to communicate in Indonesian — even though the Platform itself is in English. For responsible gaming emergencies, including immediate self-exclusion requests, please always use the 24/7 live chat channel.