Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by buas33 through our website at https://buas33.cam (the "Platform"), including information collected when you create an account, make deposits or withdrawals, play games, place bets, contact customer support, or otherwise interact with our services. This policy covers personal data collected from residents of Indonesia using the Platform for online gaming, sports betting, live casino, slots, and togel lottery services.

buas33 operates as a data controller for the personal information we collect and process. We are responsible for ensuring that your data is collected lawfully, used appropriately, stored securely, and processed in accordance with applicable data protection regulations and Indonesian privacy laws. Our registered business address and data protection contact information are provided at the end of this policy.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with buas33. If you do not agree with any aspect of this Privacy Policy, you should not use our Platform or services.

2. Information We Collect

buas33 collects several categories of personal information necessary to provide our gaming services, comply with legal obligations, prevent fraud, and improve user experience. The information we collect includes:

2.1 Account Registration Information

When you create a buas33 account, we collect:

• Identity Information: Full legal name, date of birth, gender, Indonesian national identity card (KTP) number and photograph for age and identity verification
• Contact Information: Email address, Indonesian mobile phone number, residential address (province, city, postal code)
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Verification Documents: Government-issued ID photographs, proof of address documents (utility bills or bank statements), selfie photographs for identity confirmation

2.2 Financial and Transaction Information

To process deposits and withdrawals, we collect:

• Payment Method Details: Indonesian bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), bank account holder name, e-wallet identifiers (OVO, DANA, GoPay, ShopeePay account numbers)
• Transaction Records: Deposit amounts, dates and times, withdrawal requests and processing status, payment method used for each transaction, transaction reference numbers
• Balance History: Account balance at any given time, bonus credits, wagering progress, withdrawal-eligible funds

2.3 Gaming and Betting Activity

We automatically collect information about your use of the Platform:

• Gameplay Data: Games played (slots, live casino, table games, togel markets), bet amounts and frequencies, game outcomes and winnings, active bonus campaigns, wagering requirement progress
• Sports Betting Data: Sports and leagues bet on (BRI Liga 1, EPL, La Liga, etc.), bet types (1X2, Asian Handicap, Over/Under, mix parlay), stake amounts, odds accepted, bet outcomes
• Session Information: Login/logout times, session duration, pages visited on the Platform, features used, settings preferences

2.4 Technical and Device Information

When you access the Platform, we automatically collect technical data:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers
• Connection Information: IP address, geographic location (city/region based on IP), internet service provider, connection type (Wi-Fi, mobile data)
• Usage Analytics: Pages visited, features accessed, errors encountered, performance metrics, referral sources

2.5 Communications and Support Data

When you contact customer support or communicate with us:

• Support Tickets: Live chat transcripts, email correspondence, WhatsApp messages, support ticket content and resolution status
• Feedback and Surveys: Responses to satisfaction surveys, product feedback, feature requests, complaints and resolutions
• Marketing Communications: Email newsletter subscriptions, promotional offer opt-ins, communication preferences

3. How We Use Your Personal Data

buas33 uses your personal information for the following legitimate purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your member account
• Processing deposits and crediting funds to your account instantly
• Processing withdrawal requests to your verified Indonesian bank account
• Enabling gameplay across slots, live casino, sports betting, and togel markets
• Tracking your account balance, transaction history, and bonus status
• Providing customer support via live chat, email, and WhatsApp

3.2 Legal Compliance and Identity Verification

• Verifying you are at least 21 years of age as required by Indonesian law and responsible gaming standards
• Confirming your identity through KYC (Know Your Customer) procedures to prevent identity fraud
• Complying with anti-money laundering (AML) regulations by monitoring transaction patterns
• Meeting regulatory reporting requirements for gaming operators
• Responding to legal requests from Indonesian authorities when required by law

3.3 Fraud Prevention and Platform Security

• Detecting and preventing fraudulent account creation, deposits, or withdrawals
• Identifying suspicious betting patterns that may indicate collusion or match-fixing
• Preventing bonus abuse through multiple accounts or coordinated activity
• Monitoring for unauthorized account access or security breaches
• Protecting against payment fraud, chargebacks, and stolen payment methods
• Enforcing our Terms & Conditions and identifying prohibited activities

3.4 Platform Improvement and Analytics

• Analyzing gameplay patterns to improve game selection and user experience
• Understanding which payment methods Indonesian players prefer (BCA, BRI, OVO, DANA, etc.)
• Optimizing website performance, speed, and mobile responsiveness
• Identifying and fixing technical bugs or errors
• Developing new features based on player feedback and usage data
• Conducting aggregate statistical analysis while maintaining individual anonymity

3.5 Marketing and Personalized Communications

• Sending promotional offers, bonus opportunities, and special campaigns (with your consent)
• Personalizing game recommendations based on your playing preferences
• Notifying you of VIP tier upgrades and exclusive benefits
• Sharing relevant sports betting opportunities for leagues you follow (BRI Liga 1, EPL, etc.)
• Celebrating milestones like birthdays with bonus rewards (VIP members)

Important: You can opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in emails. Opting out does not affect essential service communications like transaction confirmations, account security alerts, or terms updates.

4. Data Sharing and Third-Party Disclosure

buas33 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we share data with select third parties when necessary to operate the Platform and comply with legal obligations:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who assist with Platform operations:

• Payment Processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive payment information to process deposits and withdrawals
• Game Providers: Casino game studios and live dealer operators receive gameplay data to deliver game content and calculate outcomes
• Identity Verification Services: KYC verification partners receive identity documents to confirm your age and identity
• Cloud Hosting Providers: Secure data centers host our platform infrastructure and store encrypted backups
• Customer Support Tools: Live chat and ticketing systems process support conversations
• Analytics Platforms: Web analytics services receive anonymized usage data to measure platform performance

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with data protection standards equivalent to this policy.

4.2 Legal and Regulatory Disclosure

We may disclose personal information when legally required or necessary to protect our rights:

• In response to valid legal requests from Indonesian law enforcement or government authorities
• To comply with gaming regulatory requirements and licensing conditions
• To prevent or investigate suspected fraud, illegal activity, or Terms violations
• To protect the safety and security of our users, staff, or the public
• In connection with legal proceedings, court orders, or regulatory investigations
• During business transactions such as mergers, acquisitions, or asset sales (with notice to affected users)

4.3 Anonymized and Aggregated Data

We may share anonymized, aggregated data that does not identify individual users with business partners, researchers, or the public. For example, we might publish statistics about total members, popular games, or average bet sizes without revealing individual player information.

5. Data Security Measures

buas33 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

5.1 Encryption Technologies

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL technology, preventing interception during transmission
• Database Encryption: Personal information stored in our databases is encrypted at rest using AES-256 encryption standards
• Password Hashing: Your password is never stored in plain text — we use bcrypt hashing with salt, making passwords unrecoverable even if our database were compromised
• Secure Payment Processing: Payment information is transmitted directly to payment processors using tokenization and never stored on our servers

5.2 Access Controls and Authentication

• Multi-factor authentication (2FA) available for member accounts and required for staff access
• Role-based access controls limit employee access to personal data on a need-to-know basis
• Regular access audits and automatic session timeouts reduce exposure risk
• IP whitelisting and VPN requirements for administrative system access

5.3 Infrastructure and Network Security

• Firewalls and intrusion detection systems monitor for suspicious network activity
• DDoS protection prevents service disruption attacks
• Regular security patches and software updates address known vulnerabilities
• Secure data centers with physical security controls and redundant backups
• Isolated testing environments prevent accidental exposure of production data

5.4 Staff Training and Policies

• All employees receive data protection and security training
• Strict confidentiality agreements bind staff to protect user data
• Clear security incident response procedures for rapid breach containment
• Regular internal security audits and third-party penetration testing

Security Breach Notification: In the unlikely event of a data breach affecting your personal information, we will notify affected users within 72 hours of discovery, as required by data protection best practices, and will take immediate action to contain the breach and prevent further unauthorized access.

6. Data Retention and Deletion

buas33 retains your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law:

6.1 Active Account Data

While your account remains active, we retain all account information, transaction history, gameplay records, and communications to provide ongoing service, resolve disputes, and comply with legal obligations. You can access and update most information through your account dashboard.

6.2 Closed Account Data

After voluntary account closure, we retain essential data for regulatory and legal compliance periods:

• Financial Records: Transaction history, deposit/withdrawal records, and payment method information retained for 7 years to comply with Indonesian financial regulations and tax requirements
• Identity Verification Documents: KYC documents (KTP photographs, proof of address) retained for 5 years for anti-money laundering compliance and fraud prevention
• Gameplay and Betting History: Game outcomes, bet records, and RTP calculations retained for 3 years for dispute resolution and gaming integrity audits
• Communications: Support tickets and complaint resolutions retained for 2 years for quality assurance and legal protection

6.3 Inactive Account Policy

Accounts with no login activity for 12 consecutive months are classified as inactive. We will attempt to contact you via email and SMS before classifying an account as dormant. After 24 months of inactivity, remaining account balances may be forfeited per our Terms & Conditions, and non-essential data may be deleted while retaining legally required records.

6.4 Data Deletion Requests

You may request deletion of your personal data by contacting our support team. We will delete data not subject to legal retention requirements within 30 days of verification. Note that deletion requests cannot override mandatory retention periods required by Indonesian law, anti-money laundering regulations, or ongoing legal investigations.

7. Your Privacy Rights and Choices

Under applicable data protection regulations, you have the following rights regarding your personal information:

7.1 Right to Access and Portability

You have the right to access your personal data held by buas33. You can view most information directly in your account dashboard, including profile details, transaction history, and bonus status. For a comprehensive data export including all information we hold about you, submit a written request to our support team. We will provide your data in a structured, commonly used format (CSV or PDF) within 30 days.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to correct it. You can update contact information (email, phone, address) directly through your account settings. Changes to identity information (name, date of birth) require verification through customer support and submission of updated identity documents to maintain account security.

7.3 Right to Object and Restrict Processing

You can object to certain uses of your data:

• Marketing Communications: Opt out of promotional emails, SMS, or push notifications at any time via account settings or unsubscribe links
• Profiling and Personalization: Request that we stop using your gameplay data for personalized game recommendations (note: this may reduce your user experience quality)
• Analytics and Research: Request exclusion from aggregate statistical analysis where technically feasible

You cannot object to data processing necessary for core service delivery (account management, payment processing, fraud prevention, legal compliance) as this would prevent us from providing gaming services.

7.4 Right to Withdraw Consent

Where we rely on your consent to process data (e.g., marketing communications, optional cookies), you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Withdrawal does not affect data processing based on legal obligations or contractual necessity.

7.5 Right to Complain

If you believe buas33 has processed your personal data unlawfully or violated your privacy rights, you have the right to lodge a complaint with the relevant Indonesian data protection authority. You can also contact our Data Protection Officer directly using the contact information provided at the end of this policy. We are committed to investigating and resolving privacy complaints promptly.

8. Cookies and Tracking Technologies

buas33 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you across sessions.

8.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for platform functionality — authentication, session management, security. Cannot be disabled without breaking core features.	Session or 30 days
Performance Cookies	Collect anonymous usage data to improve platform speed, identify errors, and optimize features.	1-2 years
Functional Cookies	Remember your preferences (language, display settings, favorite games) for enhanced convenience.	1 year
Analytics Cookies	Track anonymized user behavior to understand popular features, traffic sources, and user journeys.	1-2 years

8.2 Managing Cookie Preferences

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling essential cookies will prevent you from using the Platform effectively. Disabling other cookie types may reduce functionality and personalization. Browser-level cookie management applies site-wide and affects all cookies, not just buas33 cookies. Refer to your browser's help documentation for specific instructions on managing cookies.

9. Children's Privacy Protection

buas33 does not knowingly collect personal information from individuals under 21 years of age. Our services are strictly for adults only (21+) in compliance with Indonesian gambling regulations and responsible gaming standards. Age verification through KYC procedures is mandatory before gameplay or withdrawals are permitted.

If we discover that we have inadvertently collected information from a minor, we will immediately delete that information, close the associated account, and forfeit any remaining balance. Parents or guardians who believe their child has provided information to buas33 should contact our support team immediately. We take underage gambling prevention extremely seriously and continuously improve our age verification processes.

10. Changes to This Privacy Policy

buas33 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated to users via:

• Email notification to your registered email address
• Prominent notice on the Platform homepage and in your account dashboard
• Update of the "Last Updated" date at the top of this policy

Your continued use of the Platform after changes are posted constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, you should cease using the Platform and may request account closure. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

General Privacy Inquiries

• Email: [email protected] (privacy inquiries clearly marked in subject line)
• Live Chat: Available 24/7 through your account dashboard (mention "privacy request")
• WhatsApp: +62 812 3456 7890 (text only, not clickable — for privacy-related support)

Data Protection Officer

For formal data protection inquiries, complaints, or exercising your privacy rights, contact our Data Protection Officer:

Email: [email protected]
Response Time: We aim to respond to privacy requests within 14 business days, with complex requests resolved within 30 days as permitted by law.