Privacy Policy — 333vv Data Commitments

333vv ("we", "us", "our") operates the online gaming and sports betting platform accessible at https://333vv.cam (the "Platform"). This Privacy Policy describes how 333vv collects, processes, stores, shares, and protects personal data provided by or generated about individuals who access or use the Platform ("you", "your", "Player").

This Privacy Policy applies to all personal data processed in connection with:

• Account registration and management on the Platform.
• Deposits, withdrawals, and all financial transactions conducted through the Platform.
• Participation in any game, betting market, promotion, tournament, or bonus offer available on the Platform.
• Communications between you and 333vv's customer support team via live chat, email, or any other channel.
• Your browsing and interaction with the Platform, including via cookies and analytics technologies.

By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this policy, you must not use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, device identifiers, IP address, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, alteration, restriction, or deletion.
• "Data Controller" — 333vv, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of 333vv under a binding data processing agreement, including payment processors, identity verification providers, and cloud hosting services.
• "KYC Data" — identity and age verification documents submitted by a Player in fulfilment of Know Your Customer obligations, including government-issued photo identification, proof of address, and proof of payment method ownership.
• "Cookies" — small text files stored on your device by the Platform that enable session management, preference storage, and analytics.
• "Sensitive Data" — a subset of Personal Data that warrants heightened protection, including financial account numbers, national identity card (KTP) numbers, and biometric data.
• "IDR" — Indonesian Rupiah, the base transaction currency of the Platform.

333vv collects Personal Data through three primary channels: information you provide directly, information generated automatically by your use of the Platform, and information received from third-party service providers. The following table summarises the categories of data collected and their source:

333vv processes Personal Data exclusively for the purposes listed below. We do not use your data for any purpose incompatible with those for which it was originally collected without first obtaining your explicit consent or as required by applicable law.

• Account creation and management: To register, verify, and maintain your Player Account, including age verification (21+ requirement) and identity confirmation.
• Service delivery: To enable you to access and participate in games, betting markets, live dealer tables, poker tournaments, and promotions available on the Platform.
• Financial transaction processing: To process deposits and withdrawals in IDR via your designated bank account or e-wallet, and to maintain accurate transaction records.
• KYC and compliance: To fulfil anti-money laundering (AML) obligations, fraud prevention, and responsible gaming duties, including age verification and the monitoring of unusual transaction patterns.
• Customer support: To respond to your enquiries, process complaints, and provide assistance through our 24/7 live chat and email channels. Indonesian-speaking agents are available from 08:00 to 24:00 WIB.
• Personalisation: To tailor game recommendations, bonus offers, and promotional communications to your demonstrated preferences and playing history, where you have consented to receive such communications.
• Platform security: To detect and investigate fraudulent activity, unauthorised account access, multi-accounting, and other security threats.
• Responsible gaming: To monitor for indicators of problem gambling behaviour and to administer self-exclusion, deposit limit, and cooling-off requests in accordance with our Responsible Gaming policy.
• Legal obligations: To comply with applicable international gaming regulations, tax reporting requirements, and court orders or requests from law enforcement authorities acting within their lawful mandate.
• Platform improvement: To analyse aggregated and anonymised usage data to improve game performance, user interface design, and customer experience.

333vv processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is required to perform our obligations under the contract formed when you register an Account and accept the Terms & Conditions — including account management, service delivery, and payment processing.
• Legal obligation: Processing is required to comply with applicable laws, including AML regulations, KYC verification mandates, and data retention requirements imposed by 333vv's international licensing authority.
• Legitimate interests: Processing is necessary for purposes of fraud prevention, Platform security, responsible gaming monitoring, and the improvement of our services, where these interests are not overridden by your privacy rights.
• Consent: For processing activities that are not strictly necessary for contract performance or legal compliance — including direct marketing communications and optional personalisation features — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

333vv does not sell, rent, or trade your Personal Data. We share Personal Data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: Your financial transaction data is shared with licensed payment processing partners who operate the deposit and withdrawal infrastructure for Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors are bound by contractual data processing agreements and PCI-DSS compliance requirements.
• Identity verification providers: KYC documents and identity data are shared with our third-party verification service provider solely for the purpose of confirming your identity and age (21+). Verification providers are bound by confidentiality obligations and are not permitted to use your data for any other purpose.
• Cloud infrastructure and hosting providers: Platform data, including encrypted account records and transaction logs, is stored on servers operated by our cloud hosting provider. All hosting agreements include data processing terms consistent with this Policy.
• Game and software providers: Where required to resolve disputes about game outcomes or to facilitate provider-side responsible gaming tools, limited usage data may be shared with game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. No identity data or financial data is shared with game studios.
• Legal authorities: 333vv may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will notify you of any such disclosure unless prohibited from doing so by law.
• Business restructuring: In the event of a merger, acquisition, or sale of all or a material part of 333vv's business, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

333vv does not share Personal Data with advertising networks, social media platforms, or data analytics brokers for marketing or profiling purposes.

333vv uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality including login and secure session management. Disabling functional or analytics cookies will not prevent you from accessing core Platform features.

333vv retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or our licensing obligations. The following retention schedule applies:

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and research purposes as it no longer constitutes Personal Data.

333vv implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and 333vv's servers is encrypted using TLS 1.3, the current industry-standard protocol for secure web communications.
• AES-256 encryption at rest: Sensitive Data — including KYC documents, financial account identifiers, and hashed authentication credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to Personal Data within 333vv's systems is restricted on a strict need-to-know basis. All staff with access to Player data are subject to confidentiality obligations and receive data protection training annually.
• Two-factor authentication (2FA): All administrative access to systems holding Personal Data requires multi-factor authentication. Players are also encouraged to enable 2FA on their Accounts.
• Penetration testing and vulnerability management: 333vv conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the Platform's infrastructure.
• Incident response: 333vv maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, affected Players will be notified promptly, and the incident will be reported to relevant authorities as required by applicable law.

333vv's primary server infrastructure is located outside Indonesia. When Personal Data is transferred to or processed in a country other than Indonesia, 333vv takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include:

• Contractual data processing agreements with all third-party processors that impose data protection obligations consistent with this Policy.
• Selecting cloud and infrastructure providers that maintain internationally recognised security certifications (such as ISO 27001 and SOC 2 Type II).
• Limiting the categories of Personal Data transferred internationally to the minimum necessary for the relevant processing purpose.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to servers and processors located outside Indonesia, subject to the safeguards described above.

333vv respects your rights in relation to your Personal Data. You may exercise any of the following rights by contacting our support team via live chat or by emailing [email protected]. We will respond to all verifiable requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

The 333vv Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory step in the account registration process, and KYC verification confirms the age of all Players before withdrawals are permitted.

If 333vv discovers that Personal Data has been collected from a person under the age of 21, that Account will be suspended immediately, all associated funds will be reviewed in accordance with our Terms & Conditions, and the Personal Data will be deleted as promptly as possible subject to any legal retention obligations.

The 333vv Platform does not contain links to third-party websites for general browsing purposes. Where links to game providers or payment processors are presented within the Platform interface, those third parties operate under their own privacy policies, which 333vv does not control.

333vv is not responsible for the privacy practices, content, or security of any third-party service accessed in connection with payment processing or identity verification. We encourage you to review the privacy policies of any third-party service provider you interact with in connection with your use of 333vv.

333vv reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Effective Date" displayed at the top of this page is updated each time the Policy is revised.

Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — we will notify registered Players via email to the address on file at least 14 days before the revised Policy takes effect. For non-material changes (such as clarifications of existing practices or typographical corrections), the updated Policy will be published on this page without advance notice.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and close your Account before the effective date.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about how 333vv has handled your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 via the live chat widget on the Platform. Indonesian-speaking agents are available from 08:00 to 24:00 WIB (UTC+7).
• Email: [email protected] — please include "Privacy Request" or "Data Subject Rights" in the subject line so your message is routed to our data protection team promptly.
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.

If you are not satisfied with our response to your complaint or request, you have the right to escalate your concern to the relevant data protection authority or supervisory body in the jurisdiction applicable to your situation. 333vv will cooperate fully with any such regulatory enquiry.