Privacy Policy

This Privacy Policy ("Policy") applies to all users of the mon33 online betting platform, accessible at https://mon33.vip ("Platform"). It describes how mon33, operated by a licensed international gaming company ("we", "us", "our"), collects, processes, stores, and protects personal data provided by or generated by registered players and visitors ("you", "your").

By creating an Account on the Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately and contact our support team to close your Account.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, all of which together govern your relationship with mon33. In the event of any conflict between this Policy and our Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.

mon33 collects the minimum personal data necessary to provide a secure, compliant, and personalised betting experience. The categories of personal data we may collect include, but are not limited to, the following:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless it is directly and voluntarily provided by you in the context of a responsible gaming request (for example, a self-exclusion request referencing a diagnosed gambling disorder). Such data is processed with the highest level of confidentiality and solely for the purpose for which it was disclosed.

mon33 collects personal data through several channels, each described below:

• Direct submission: Data you provide when registering an Account, completing a KYC verification form, making a deposit or withdrawal request, contacting our support team via Live Chat or email, or participating in a promotional campaign.
• Automated technical collection: Data generated automatically when you access the Platform — including your IP address, device identifiers, session timing data, and cookies. See Clause 9 for our full Cookies & Tracking policy.
• Payment processors: When you initiate a deposit or withdrawal via a local bank virtual account or e-wallet, the relevant payment provider (e.g., BCA, GoPay) shares transaction confirmation data with mon33 to allow us to credit or debit your Account correctly.
• Identity verification providers: Where we use regulated third-party KYC service providers to verify the authenticity of documents you submit, those providers may supply us with a verification result and associated identity confidence score.
• Publicly available sources: In limited circumstances where fraud prevention or AML compliance requires it, mon33 may cross-reference data against publicly available watchlists, sanctions lists, or adverse media databases.

mon33 uses the personal data it collects for the following purposes, each grounded in a lawful basis described in Clause 5:

• Account management: Creating, maintaining, and administering your mon33 Account, processing login credentials, and managing password resets and security alerts.
• Identity and age verification (KYC): Confirming that you are at least 21 years of age and that your identity matches the Account registration data, as required by our international gaming licence obligations.
• Transaction processing: Crediting deposits and processing withdrawal requests, reconciling transaction records, and maintaining accurate financial ledgers in IDR.
• Fraud prevention and security: Detecting and investigating suspicious login activity, unusual betting patterns, multi-account fraud, Bonus abuse, money laundering indicators, and other forms of Prohibited Conduct as defined in our Terms & Conditions.
• Regulatory compliance: Meeting our AML (anti-money laundering) obligations, responding to lawful requests from licensing authorities, and maintaining the records required by our international gaming licence.
• Responsible gaming: Monitoring betting behaviour for signs of problem gambling, administering deposit limits, loss limits, cooling-off periods, and self-exclusion requests, and contacting players proactively where behavioural signals suggest risk.
• Customer support: Responding to queries, resolving disputes, processing complaints, and maintaining correspondence records for quality assurance and training purposes.
• Service improvement: Analysing aggregated, anonymised behavioural data to improve Platform performance, game selection, payment processing speed, and user experience design.
• Marketing communications: Sending promotional offers, reload bonus notifications, and event-specific campaigns (e.g., BRI Liga 1 season promotions, Idul Fitri bonus offers) to players who have opted in to receive such communications. Players may opt out at any time by contacting [email protected].

mon33 does not use personal data for automated individual decision-making that produces significant legal effects, other than automated fraud-detection flagging — which is always followed by a human review before any Account action is taken.

mon33 processes personal data under one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — i.e., the Terms & Conditions governing your Account. This covers Account creation, transaction processing, KYC verification, and customer support.
• Legal obligation: Processing required to comply with our obligations under applicable laws and our international gaming licence, including AML record-keeping, age verification, and responding to lawful regulatory requests.
• Legitimate interests: Processing that is necessary for mon33's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud prevention, Platform security, service improvement, and responsible gaming monitoring.
• Consent: Processing based on your freely given, informed, specific consent. This applies primarily to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

mon33 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

• KYC and identity verification providers: Regulated, contractually bound service providers who verify the authenticity of identity documents you submit. These providers process data solely on mon33's behalf and are prohibited from using it for any other purpose.
• Payment processors: Local Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transactional data required to process deposits and withdrawals on your behalf.
• Game software providers: Third-party game studios integrated into the Platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) receive a pseudonymous player identifier and session token to operate games on their platforms. They do not receive your full identity data or financial account details.
• Regulatory and licensing authorities: mon33's international gaming licence obliges us to share certain player data with our licensing authority upon lawful request. We may also be required to disclose data to law enforcement agencies in connection with criminal investigations, pursuant to a court order or equivalent legal process.
• Fraud prevention and AML databases: Industry-standard watchlist and sanctions-screening services that help mon33 detect and prevent money laundering, terrorist financing, and other financial crime.
• Professional advisors: Lawyers, auditors, and insurers who are bound by professional confidentiality obligations and who process data solely as required for the services they provide to mon33.
• Business transfers: In the event of a merger, acquisition, corporate restructuring, or sale of mon33 or its assets, personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights in relation to it.

All third-party processors engaged by mon33 are required to enter into data processing agreements that impose obligations consistent with this Privacy Policy and applicable data protection law.

mon33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The indicative retention periods for different data categories are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Data that has been anonymised may be retained indefinitely for statistical and analytical purposes.

mon33 implements a comprehensive, multi-layered approach to data security, designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the mon33 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all pages of the Platform — not only login and payment pages.
• Data-at-rest encryption: Personal data stored on mon33's servers is encrypted at rest using AES-256 encryption, ensuring that data stored in our databases cannot be read without the appropriate decryption keys.
• Access controls: Access to personal data within mon33 is strictly role-based and granted on a need-to-know basis. All staff members with access to personal data undergo background checks and regular data protection training.
• Two-factor authentication (2FA): All mon33 internal systems that hold personal data require multi-factor authentication for access. Players are also strongly encouraged to enable 2FA on their own Accounts via Account settings.
• Intrusion detection and monitoring: mon33's infrastructure is monitored continuously by automated intrusion detection systems. Any anomalous access pattern triggers an immediate security alert and human investigation.
• Regular penetration testing: Independent third-party security firms conduct penetration tests on the Platform at least annually to identify and remediate vulnerabilities before they can be exploited.
• Secure data centres: Personal data is hosted in ISO 27001-certified data centres with physical access controls, redundant power supplies, and comprehensive disaster recovery capabilities.

Despite these measures, no system is completely impenetrable. In the event of a data security breach that poses a risk to your rights and freedoms, mon33 will notify affected users and the relevant regulatory authority within the timeframe required by applicable law, and will take immediate steps to contain and remediate the breach.

You are responsible for maintaining the confidentiality of your Account login credentials. mon33 will never ask you for your password through any channel including Live Chat, email, SMS, or telephone. If you believe your Account has been compromised, contact [email protected] immediately.

mon33 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, prevent fraud, and — where you have consented — to personalise your experience and deliver relevant marketing communications. The types of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your preferred language, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing core Platform functionality.
• Performance cookies: These cookies collect anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and whether users encounter error messages. This data is used solely to improve Platform performance.
• Functional cookies: These cookies allow the Platform to remember preferences you have set — such as your preferred odds format, game lobby layout, or deposit amount — to provide a more personalised experience.
• Analytics cookies: mon33 uses aggregated, anonymised analytics data to understand overall usage trends, session durations, and conversion flows. Analytics data does not identify you as an individual.
• Fraud prevention cookies: Technical identifiers used to detect suspicious activity, multi-account attempts, and automated bot behaviour on the Platform. These are necessary for maintaining Platform integrity and cannot be disabled.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary or fraud prevention cookies may impair your ability to log in or use certain features of the Platform. mon33 does not use third-party advertising cookies or retargeting pixels that track your behaviour across other websites.

mon33 recognises and respects your rights in relation to the personal data we hold about you. Subject to applicable legal limitations and our regulatory retention obligations, you hold the following rights:

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. We may require identity verification before processing your request to ensure that we do not disclose your personal data to an unauthorised third party.

The mon33 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or retain personal data belonging to any person under the age of 21. If we discover — through KYC verification, a third-party report, or any other means — that personal data has been collected from a minor, we will:

• Immediately suspend the Account associated with that data;
• Void all pending bets and gaming activity associated with the Account;
• Return any real-money balance to the payment method from which deposits were made, after completing any required AML review;
• Permanently delete or anonymise all personal data associated with the Account, except where we are required by law to retain certain records.

mon33 is operated by an internationally incorporated gaming company and may store and process personal data in jurisdictions outside Indonesia. Where personal data is transferred to a country that does not provide the same level of data protection as Indonesia, mon33 ensures that appropriate safeguards are in place to protect your data. These safeguards include:

• Standard contractual clauses: mon33 incorporates internationally recognised standard contractual clauses into its data processing agreements with third parties located in jurisdictions that have not been assessed as providing adequate data protection.
• Binding corporate rules: Where personal data is transferred within mon33's corporate group, such transfers are governed by binding internal data protection policies that impose obligations equivalent to those in this Privacy Policy.
• Adequacy decisions: Where a transfer destination has been assessed by a relevant authority as providing an adequate level of data protection, mon33 relies on that adequacy decision as the transfer mechanism.

By using the Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions other than Indonesia, and that mon33 will apply the safeguards described above to protect it during such transfers.

mon33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our business operations, or our data processing practices. When we make material changes to this Policy, we will notify you by:

• Posting a prominent notice on the Platform for a minimum of 30 days following the change;
• Sending an email notification to the address registered on your Account; and
• Updating the "Effective Date" and "Last Reviewed" fields at the top of this page.

Your continued use of the Platform after the revised Policy has been posted and notified to you constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the Platform and may request Account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically, even when you have not received a notification, to stay informed about how mon33 is protecting your data. The most current version of this Policy will always be accessible at https://mon33.vip/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mon33 processes your personal data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly on the mon33 Platform — the fastest way to reach us for urgent data protection matters.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is routed to the correct team.
• Written correspondence: Contact details for our registered office are available upon request via Live Chat or email.

We aim to acknowledge all privacy-related enquiries within 2 business days (WIB, UTC+7) and to provide a substantive response within 30 calendar days of receiving a verified request. For complex requests — such as full data access requests involving large volumes of records — we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.