Privacy Policy — me335

This Privacy Policy ("Policy") is issued by me335 ("me335", "we", "us", "our") and applies to all users ("you", "your", "User") who visit, register on, or otherwise interact with the me335 online betting and gaming platform accessible at https://me335.bet and any associated mobile or web application ("Platform").

This Policy explains how me335 collects, uses, stores, shares, and protects personal data in connection with the provision of our Services — including sportsbook, live casino, slot games, crash games, and togel online (Indonesia's traditional numbers lottery). It also describes the rights you hold over your personal data and how to exercise them.

By registering an Account or continuing to use the Platform, you acknowledge that you have read, understood, and agreed to this Policy. If you do not agree to the collection and use of your data as described herein, you must not register for or use the Platform.

This Policy should be read alongside the me335 Terms & Conditions, which govern the overall contractual relationship between you and me335.

For the purposes of applicable data protection law, me335 is the data controller responsible for the personal data collected through the Platform. As data controller, me335 determines the purposes for which personal data is collected and the means by which it is processed.

All data subject requests, privacy enquiries, and complaints relating to this Policy should be directed to the me335 Data Protection contact as specified in Clause 16 of this Policy.

me335 collects the following categories of personal data in connection with Account registration, KYC verification, payment processing, gameplay, customer support, and Platform improvement:

3.1 Identity & Contact Data

• Full legal name (as it appears on a government-issued ID).
• Date of birth (to verify that you are 21 years of age or older).
• Nationality and country of residence.
• Registered email address.
• Mobile phone number (where provided for two-factor authentication or account recovery).

3.2 Identity Verification (KYC) Documents

• Copies of government-issued photo identification: Indonesian national identity card (KTP), passport, or driver's licence.
• Proof of address documents: bank statements, utility bills, or official correspondence dated within 90 days.
• Proof of payment method ownership: screenshots or statements confirming your ownership of the bank account or e-wallet used to fund your me335 Account.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts (IDR), timestamps, and payment channel used.
• Bank account numbers or e-wallet identifiers associated with your Account (partial, tokenised where possible — me335 does not store full unmasked bank account credentials).
• Bonus credit and rollover history.
• Account Balance at any point in time.

3.4 Gameplay & Betting Data

• Betting and wagering history across all product lines: sportsbook bets (including mix parlay and single-match selections), live casino hands, slot game sessions, crash game rounds, and togel online draw entries.
• Game session durations, stake sizes, win/loss outcomes.
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests).

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP at each login.
• Device type, operating system, browser type and version.
• Device fingerprint (a non-personally-identifiable hash used to detect duplicate accounts).
• Session cookies and persistent preference cookies (see Clause 10).
• Platform interaction logs: pages visited, buttons clicked, time on page.

3.6 Communications Data

• Content of messages sent to me335 customer support via email or live chat.
• Complaint and dispute records.
• Marketing preference settings and opt-in / opt-out history.

me335 collects personal data through the following channels:

• Directly from you — when you complete the Account registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automatically — through cookies, server logs, and device-fingerprinting technologies as you browse and interact with the Platform (see Clause 10).
• From payment providers — transaction confirmation data returned by local bank transfer gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you make a deposit or receive a withdrawal.
• From identity verification services — where me335 engages a third-party KYC provider to validate the authenticity of documents you submit during the verification process.
• From fraud prevention and game integrity services — data flags or risk scores generated by anti-fraud and match-integrity partners in connection with account activity or betting patterns.

me335 uses personal data collected for the following purposes:

me335 does not use personal data for automated individual decision-making that produces legal or similarly significant effects on Users, without human review being available on request.

me335 processes personal data on the following legal bases:

• Contract performance: Processing necessary to create and administer your Account, process transactions, and deliver the Services you have contracted for.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and KYC regulations in me335's operating jurisdiction.
• Legitimate interests: Processing for fraud prevention, network and information security, responsible gaming monitoring, Platform improvement, and the detection of multi-accounting — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and the use of non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7.1 Service Providers

me335 engages carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment processors and banking partners — local bank transfer facilitators and e-wallet operators (including OVO, DANA, GoPay, ShopeePay, LinkAja) to execute your deposit and withdrawal transactions.
• KYC and identity verification providers — to validate the authenticity of identity documents you submit.
• Fraud detection and anti-money laundering (AML) screening services — to assess transaction risk and flag potentially suspicious activity.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive game session data to the extent necessary to operate their games and manage jackpot pools on the me335 Platform.
• Cloud hosting and infrastructure providers — data centre and cloud platform operators responsible for the servers on which the Platform runs.
• Customer support platform providers — software providers that host the live chat and ticketing system through which you contact me335 support.

7.2 Regulatory and Law Enforcement Bodies

me335 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law, court order, or legally binding regulatory demand. me335 will notify you of such disclosures where legally permitted to do so.

7.3 Corporate Transactions

In the event of a merger, acquisition, sale of assets, or reorganisation involving me335, your personal data may be transferred to the acquiring or successor entity as part of the transaction, subject to equivalent privacy protections being maintained. You will be notified of any such transfer and any material change to how your data is processed.

7.4 No Third-Party Marketing Sales

me335 will never sell, rent, or otherwise transfer your personal data to third parties for their independent marketing or advertising purposes without your explicit prior consent.

As an internationally operated online gaming platform serving users in Indonesia, me335 may transfer personal data to servers, service providers, or affiliated entities located outside Indonesia. Where such transfers occur, me335 implements appropriate safeguards to ensure your data receives a standard of protection consistent with applicable international data protection principles, including:

• Binding contractual clauses (standard contractual clauses or equivalent) incorporated into agreements with recipient entities.
• Transfers only to jurisdictions that maintain adequate data protection frameworks, as assessed by me335's compliance function.
• Technical and organisational security measures (encryption, access controls, audit logging) applied at the destination.

If you would like further information about the specific safeguards applied to any cross-border transfer of your data, please contact us at [email protected].

me335 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following standard retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical and Platform-improvement purposes.

me335 uses cookies and similar tracking technologies (collectively "Cookies") on the Platform. A cookie is a small text file stored on your device that allows the Platform to recognise your browser across sessions and store preference information.

10.1 Types of Cookies Used

10.2 Managing Cookies

You may control non-essential Cookies via your Account privacy settings or through your browser's built-in cookie management tools. Disabling strictly necessary Cookies will prevent you from logging in or using core Platform features. Disabling analytics or marketing Cookies will not affect your ability to place bets or access any paid feature.

Subject to applicable law and certain limited exceptions (such as where retaining data is necessary for AML compliance or to defend a legal claim), you hold the following rights over your personal data held by me335:

To exercise any of the above rights, please contact the me335 Data Protection team at [email protected] with the subject line "Data Subject Request — [Your Request Type]". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Complex or high-volume requests may be extended by a further 30 days, with notice provided.

If you are a parent or guardian and believe that a minor in your care has registered on or used the me335 Platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and take appropriate action within 48 hours of receiving a credible report.

me335 uses date-of-birth verification at registration and documentary KYC checks prior to processing withdrawals to enforce the 21+ age restriction. We encourage parents and guardians to make use of internet filtering and parental control software to prevent underage access to online betting platforms.

me335 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport layer security: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Data-at-rest encryption: Sensitive personal data and financial records stored in our databases are encrypted using AES-256.
• Access controls: Personal data is accessible only to authorised staff whose role requires it. Access is governed by role-based permissions, multi-factor authentication (MFA), and comprehensive audit logging.
• Penetration testing: The Platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• Incident response: me335 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected users will be notified within 72 hours of me335 becoming aware of the breach, to the extent technically feasible.
• Staff training: All me335 staff with access to personal data receive mandatory data protection and information security training upon onboarding and annually thereafter.

The me335 Platform may contain references to, or display content supplied by, third-party game studios and payment providers. Where the Platform integrates third-party game content (from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), those studios may collect certain technical data (such as game session identifiers and round outcomes) through the game client interface in order to operate their games and maintain jackpot integrity.

me335 does not control the data practices of these third-party studios and is not responsible for the content of their own privacy notices. We recommend that you review the privacy policies of any third-party provider whose game content you use on the me335 Platform.

me335 does not host external advertising networks or affiliate tracking scripts that would expose your browsing behaviour to unrelated third-party marketers.

me335 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes — for example, changes that affect how we use your data or your rights as a data subject — we will notify you by email to your registered address at least 14 calendar days before the changes take effect.

Non-material changes (such as typographical corrections, formatting updates, or clarifications that do not alter the substantive meaning of any clause) may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must stop using the Platform and contact customer support to close your Account and request deletion of your personal data in accordance with Clause 11.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how me335 has handled your personal data, please contact us through the following channel:

Please include "Privacy Policy Enquiry" or "Data Subject Request — [Request Type]" in the subject line of your email to ensure your message is routed promptly to the me335 Data Protection team.

me335 is committed to resolving all privacy complaints fairly and transparently. If you are not satisfied with our response to your complaint, you may have the right to escalate the matter to a relevant supervisory authority in the jurisdiction in which you reside.