mon33 Privacy Policy

1. Introduction

mon33 ("we", "us", "our", or the "Company") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you access and use the mon33 website, mobile applications, and all associated services (collectively, the "Service").

This Privacy Policy applies to all users of the mon33 platform, including residents of Indonesia and international visitors. By creating an account, accessing the Service, or providing any personal information to mon33, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

If you do not agree with any part of this Privacy Policy, you must immediately cease using the Service and refrain from providing any personal information to mon33. We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated Privacy Policy on our website, with the "Last Updated" date revised accordingly. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

2. Information We Collect

mon33 collects several types of information from and about users of the Service. The information we collect falls into three primary categories:

2.1 Information You Provide Directly

When you register for an account, complete KYC (Know Your Customer) verification, make deposits or withdrawals, contact customer support, or otherwise interact with the Service, you provide us with personal information, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (KTP number, passport number, driver's license number), and photographs or scans of identification documents.
• Contact Information: Residential address, email address, mobile phone number, and preferred language (Indonesian / Bahasa Indonesia or English).
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs), transaction history, deposit and withdrawal amounts, and payment method preferences.
• Account Credentials: Username, password, and security questions/answers used to access your mon33 account.
• Communication Data: Content of messages, emails, live chat transcripts, and other communications you send to mon33 customer support or receive from us.
• Verification Documents: Proof of identity (government-issued photo ID), proof of address (utility bills, bank statements), and selfie photographs holding identification documents, submitted during KYC verification.

2.2 Information Collected Automatically

When you access and use the Service, we automatically collect certain information about your device, browsing behavior, and interaction with the platform:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, bets placed, time spent on each page, click patterns, navigation paths, search queries, and features accessed.
• Gameplay Data: Wager amounts, game outcomes, win/loss records, bonus usage, RTP (Return to Player) statistics, and gameplay session durations.
• Location Data: Approximate geographic location derived from IP address (city, region, country) to ensure compliance with geographic restrictions and local regulations. We do not collect precise GPS coordinates unless you explicitly enable location services on your mobile device.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 6 for details).

2.3 Information from Third Parties

mon33 may receive personal information about you from third-party sources, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) may provide transaction data, verification status, and fraud alerts.
• Identity Verification Services: Third-party KYC and AML (Anti-Money Laundering) verification providers that confirm your identity, verify document authenticity, and screen for sanctions lists or politically exposed persons (PEPs).
• Fraud Prevention Services: Third-party fraud detection systems that provide risk scores, device fingerprinting data, and alerts about suspicious activity patterns.
• Affiliates and Marketing Partners: If you access mon33 through a referral link or affiliate partner, we may receive information about the referral source and campaign parameters.

3. How We Use Your Information

mon33 uses the personal information we collect for the following purposes:

3.1 Account Management and Service Provision

• Create, maintain, and secure your mon33 account;
• Verify your identity, age (21+ requirement), and residential address through KYC processes;
• Process deposits, withdrawals, and other financial transactions;
• Enable you to place wagers, play games, and access all platform features;
• Manage bonus eligibility, wagering requirements, and promotional offers;
• Provide customer support and respond to inquiries via live chat, email, or phone; and
• Communicate account-related information, transaction confirmations, and service updates.

3.2 Legal and Regulatory Compliance

• Comply with KYC, AML (Anti-Money Laundering), and CTF (Counter-Terrorism Financing) regulations;
• Verify that you meet eligibility requirements (21+ years of age, resident of Indonesia or other permitted jurisdictions);
• Detect, prevent, and investigate fraudulent activity, money laundering, collusion, and other illegal or prohibited conduct;
• Respond to legal requests, court orders, subpoenas, or demands from law enforcement or regulatory authorities;
• Enforce our Terms and Conditions, Responsible Gaming policies, and other platform rules; and
• Maintain records required by gaming licenses and regulatory obligations.

3.3 Platform Security and Fraud Prevention

• Monitor account activity for suspicious patterns, unauthorized access, or security breaches;
• Detect and prevent bonus abuse, multi-accounting, collusion, and other violations of our Terms;
• Implement fraud detection systems, device fingerprinting, and risk scoring;
• Protect mon33, our users, and third parties from fraud, theft, and other harmful activities; and
• Conduct internal audits and security assessments to improve platform integrity.

3.4 Service Improvement and Analytics

• Analyze user behavior, gameplay patterns, and platform usage to improve the user experience;
• Conduct A/B testing, usability studies, and feature optimization;
• Develop new games, features, and services tailored to Indonesian player preferences;
• Generate aggregated, anonymized statistics and reports for internal business purposes; and
• Optimize website performance, load times, and mobile responsiveness.

3.5 Marketing and Communications

• Send promotional offers, bonus notifications, and personalized marketing communications (with your consent);
• Deliver targeted advertisements based on your gameplay preferences and betting history;
• Notify you of new games, features, tournaments, and special events (Indonesian Independence Day promotions, Ramadan offers, Idul Fitri bonuses, etc.);
• Conduct surveys and gather feedback to improve our services; and
• You may opt out of marketing communications at any time by adjusting your account preferences or contacting customer support.

3.6 Responsible Gaming

• Implement self-exclusion, deposit limits, session time limits, and other responsible gaming tools;
• Monitor gameplay patterns for signs of problem gambling behavior;
• Provide resources, support, and referrals to Indonesian mental health services and gambling addiction support organizations; and
• Comply with responsible gaming obligations under our licensing agreements.

4. Information Sharing and Disclosure

mon33 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers

We share personal information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: Indonesian banks and e-wallet providers that process deposits and withdrawals.
• KYC/AML Verification Services: Identity verification companies that confirm your identity, age, and compliance with AML regulations.
• Fraud Detection Services: Companies that provide fraud prevention, risk scoring, and security monitoring.
• Customer Support Tools: Live chat platforms, email services, and CRM systems used to communicate with you.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers that store mon33 data.
• Analytics Providers: Services that help us analyze platform usage and user behavior (e.g., Google Analytics).

All third-party service providers are contractually obligated to protect your personal information, use it only for the purposes we specify, and comply with applicable data protection laws.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, government authorities, regulators, or courts when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests;
• Enforce our Terms and Conditions or other policies;
• Protect the rights, property, or safety of mon33, our users, or the public;
• Detect, prevent, or investigate fraud, money laundering, or other illegal activities; or
• Respond to claims that content on the mon33 platform violates third-party rights.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other corporate transaction involving mon33, your personal information may be transferred to the successor entity. We will notify you via email or prominent notice on the website before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your personal information with third parties when you provide explicit consent, such as when participating in a third-party promotion, survey, or integrated service.

5. Data Security Measures

mon33 takes the security of your personal information extremely seriously. We implement comprehensive technical, organizational, and physical security measures to protect your data from unauthorized access, disclosure, alteration, or destruction:

5.1 Encryption

• SSL/TLS Encryption: All data transmitted between your device and mon33 servers is encrypted using industry-standard 256-bit SSL/TLS encryption—the same technology used by major Indonesian banks.
• Data-at-Rest Encryption: Personal information stored on our servers is encrypted using AES-256 encryption algorithms.
• Database Encryption: Sensitive fields such as passwords, financial account numbers, and identification documents are encrypted at the database level.

5.2 Access Controls

• Role-Based Access: Access to personal information is restricted to authorized mon33 employees and contractors who require it to perform their job functions.
• Multi-Factor Authentication: Internal systems require multi-factor authentication (MFA) to prevent unauthorized access.
• Principle of Least Privilege: Employees are granted the minimum level of access necessary to perform their duties.
• Regular Access Reviews: We conduct periodic reviews to ensure access privileges remain appropriate.

5.3 Infrastructure Security

• Secure Data Centers: Our servers are hosted in secure, ISO 27001-certified data centers with 24/7 physical security, biometric access controls, and redundant power and cooling systems.
• Firewalls and Intrusion Detection: We employ enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to monitor and block malicious traffic.
• DDoS Protection: Our infrastructure includes distributed denial-of-service (DDoS) mitigation to ensure platform availability.
• Regular Backups: Data is backed up regularly to secure, geographically distributed locations to prevent data loss.

5.4 Security Audits and Testing

• Third-Party Audits: We engage independent security firms to conduct regular penetration testing and vulnerability assessments.
• Code Reviews: Our development team conducts security-focused code reviews to identify and remediate vulnerabilities before deployment.
• Compliance Certifications: We maintain PCI-DSS compliance for payment card data handling and adhere to international data protection standards.

5.5 Employee Training

All mon33 employees and contractors receive mandatory data protection and security awareness training. They are bound by strict confidentiality agreements and are subject to disciplinary action, including termination, for violating data protection policies.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and for notifying us immediately if you suspect unauthorized access to your account.

6. Cookies and Tracking Technologies

mon33 uses cookies, web beacons, pixels, and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

6.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly. These cookies enable core features like account login, session management, and secure transactions. You cannot opt out of essential cookies without losing platform functionality.
• Performance Cookies: Collect anonymous data about how you use the mon33 platform (pages visited, time spent, error messages encountered) to help us optimize performance and user experience.
• Functionality Cookies: Remember your preferences (language, currency, favorite games) to provide a personalized experience.
• Advertising Cookies: Track your browsing behavior to deliver targeted advertisements and measure campaign effectiveness. These cookies may be set by mon33 or third-party advertising partners.

6.2 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You can configure your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. However, disabling cookies may limit your ability to use certain features of the mon33 platform.

To learn more about cookies and how to manage them, visit your browser's help section or resources like allaboutcookies.org (external reference for informational purposes only).

7. Data Retention

mon33 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

7.1 Active Accounts

For active accounts, we retain your personal information for the duration of your account relationship with mon33 plus an additional period required by law or regulation (typically 5-7 years after account closure to comply with AML, tax, and gaming regulatory requirements).

7.2 Inactive Accounts

If your account remains inactive (no login, no deposits, no wagers) for 12 consecutive months, we may close the account and archive your personal information. Archived data is retained in secure, offline storage for the minimum period required by law, after which it is securely deleted.

7.3 Data Deletion

When personal information is no longer needed and the legal retention period has expired, we securely delete or anonymize it using industry-standard data destruction methods (secure erasure, cryptographic wiping, physical destruction of storage media).

8. Your Privacy Rights

Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information mon33 holds about you. You can access much of this information directly through your account settings. For a comprehensive data export, contact customer support.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information (email, phone number, address) directly in your account settings. For changes to identity information (name, date of birth), contact customer support and provide supporting documentation.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information, subject to legal and regulatory retention requirements. Note that we cannot delete information that we are legally obligated to retain for AML, tax, or gaming compliance purposes (typically 5-7 years). After this period, data will be permanently deleted.

8.4 Right to Object

You have the right to object to certain types of data processing, including processing for direct marketing purposes. You can opt out of marketing communications at any time by adjusting your account preferences or clicking "Unsubscribe" in any promotional email.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another service provider where technically feasible.

8.6 Right to Withdraw Consent

Where we process your personal information based on your consent (e.g., marketing communications), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

8.7 Exercising Your Rights

To exercise any of these rights, please contact mon33 customer support via email at [email protected] or live chat. We will respond to your request within thirty (30) days. We may request additional information to verify your identity before processing certain requests.

9. International Data Transfers

mon33 operates internationally and may transfer your personal information to servers located outside Indonesia, including in jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities;
• Binding Corporate Rules for transfers within the mon33 corporate group; and
• Certification under recognized data protection frameworks where applicable.

By using the mon33 platform, you consent to the international transfer of your personal information as described in this Privacy Policy.

10. Children's Privacy

mon33 strictly prohibits individuals under the age of twenty-one (21) from creating accounts, placing wagers, or using the Service. We do not knowingly collect personal information from minors. If we become aware that a user is under 21 years of age, we will immediately suspend the account, void all wagers, and delete all associated personal information (subject to legal retention requirements for fraud investigation).

If you are a parent or guardian and believe your child has provided personal information to mon33, please contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

mon33 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make changes, we will update the "Last Updated" date at the top of this page.

Material changes (such as changes to the purposes for which we use personal information or significant new categories of data collected) will be communicated to you via email notification or prominent notice on the website at least thirty (30) days before the changes take effect.

Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

12. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or mon33's data practices, please contact us:

• Email: [email protected] (plain text, not clickable)
• Live Chat: Available 24/7 on the mon33 website (accessible via the chat icon in the bottom-right corner of every page)
• Customer Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays
• Languages: Indonesian (Bahasa Indonesia) and English

Our dedicated privacy team will investigate your inquiry and respond within five (5) business days. For urgent privacy concerns or suspected data breaches, please mark your communication "URGENT PRIVACY MATTER" for priority handling.