Privacy Policy — yuyu33

The following definitions apply throughout this Privacy Policy unless context requires otherwise:

• "Company", "yuyu33", "we", "us", or "our" refers to the internationally licensed gaming operator that owns and operates the yuyu33 platform at yuyu33.cam.
• "Platform" means the yuyu33 website, all associated subdomains, mobile-optimised versions, and any related applications or services.
• "User", "you", or "your" means any individual who accesses, browses, registers on, or otherwise interacts with the Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, residential address, national identity number, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "KYC" means Know Your Customer — the identity and age-verification process required of all registered Users.
• "Third Party" means any individual or entity other than the User and yuyu33.
• "Cookie" means a small text file placed on your device by a website to store information about your browsing session, preferences, or behaviour.

2.1 yuyu33 acts as the data controller in respect of all Personal Data collected from Users of the Platform. As data controller, yuyu33 determines the purposes and means by which your Personal Data is processed.

2.2 The Platform is operated under an international gaming licence. While our principal target audience comprises players residing in Indonesia, the Platform is operated from an offshore jurisdiction. Your Personal Data may therefore be stored and processed in a jurisdiction other than Indonesia.

2.3 For any data protection queries, requests to exercise your rights, or complaints, please contact our Privacy Team at the address provided in Section 14 of this Policy.

3.1 Data You Provide Directly. When you register an Account, complete KYC verification, make deposits or withdrawals, or contact our support team, you provide us with data that may include:

• Full legal name and date of birth;
• Indonesian national identity number (NIK from KTP) or passport number;
• Residential address in Indonesia (street, city, province, postal code);
• Email address and phone number;
• Payment account details (bank account numbers for BCA, BRI, BNI, Mandiri, CIMB Niaga; e-wallet identifiers for OVO, DANA, GoPay, ShopeePay);
• Selfie photographs and identity document scans submitted for KYC verification;
• Source-of-funds declarations where required by our AML compliance programme;
• Support correspondence, complaint records, and chat transcripts.

3.2 Data Collected Automatically. When you access and use the Platform, we automatically collect certain technical and behavioural data, including:

• IP address, device type, operating system, and browser version;
• Geolocation data derived from your IP address;
• Session timestamps, pages visited, links clicked, and features used;
• Betting history, wagering patterns, game session logs, deposit and withdrawal records;
• Cookie identifiers and similar tracking technologies (see Section 7).

3.3 Data from Third Parties. We may receive Personal Data about you from third-party sources, including:

• KYC and identity verification service providers who validate your identity documents;
• Fraud detection and AML screening services;
• Payment processors who confirm transaction status;
• Publicly available registers or databases used to screen for politically exposed persons (PEPs) or sanctions list matches.

3.4 Summary of Data Categories. The table below summarises the main categories of Personal Data we process:

yuyu33 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your Account, process deposits and withdrawals, settle wagers, and provide customer support.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including anti-money-laundering requirements, KYC obligations, age verification mandates, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided these interests are not overridden by your privacy rights. This includes fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: Where we rely on your consent to process your data — for example, for certain marketing communications — we will ask for explicit consent and you may withdraw it at any time without affecting the lawfulness of prior processing.

yuyu33 uses your Personal Data for the following specific purposes:

1. Account Management: To create, maintain, and manage your Account, including password recovery, security alerts, and account-status notifications.
2. Identity & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with our KYC obligations.
3. Payment Processing: To facilitate deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay, and to process withdrawal requests to your verified payment accounts.
4. Fraud & Security: To detect, investigate, and prevent fraud, identity theft, money laundering, and other unlawful or prohibited activities on the Platform.
5. Responsible Gaming: To monitor wagering patterns and account behaviour for signs of problem gambling, and to action responsible gaming restrictions applied by the User or required by our policies.
6. Customer Support: To respond to your queries, process complaints, and maintain records of support interactions for quality assurance purposes.
7. Legal Compliance: To comply with applicable laws, court orders, regulatory requirements, and the conditions of our international gaming licence.
8. Service Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.
9. Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and platform updates relevant to your interests. You may opt out at any time by contacting support.

6.1 yuyu33 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own commercial purposes. We share your data only in the following limited circumstances:

• Payment Processors: We share the minimum necessary financial data with licensed payment processors and banking partners (including those facilitating transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, Visa, and Mastercard) to execute your deposit and withdrawal instructions.
• KYC & Identity Verification Providers: We share identity documents and personal details with accredited third-party verification services solely for the purpose of confirming your identity and age in accordance with our KYC obligations.
• Fraud & AML Screening Services: We may share data with specialist fraud prevention and anti-money-laundering screening providers to protect the Platform and its users from financial crime.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft may receive session-level technical data necessary to deliver their games. These providers are contractually prohibited from using that data for any purpose other than game delivery and audit.
• Regulatory & Law Enforcement Authorities: We will disclose Personal Data to government agencies, regulators, or law enforcement bodies where required to do so by applicable law, court order, or the conditions of our gaming licence.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of our business, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6.2 All third-party service providers with whom we share Personal Data are contractually required to process that data solely on our instructions, to maintain appropriate security standards, and to delete or return the data when the service engagement ends.

7.1 yuyu33 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform effectively, maintain your login session, remember your preferences, and gather analytics data.

7.2 The main categories of cookies we use are as follows:

7.3 Strictly necessary cookies are placed without consent as they are essential to Platform operation. Functional and analytics cookies are placed on the basis of your consent or our legitimate interests, as applicable.

7.4 You may control or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your Account.

7.5 We do not use cookies to build advertising profiles or to track your browsing activity across third-party websites.

8.1 yuyu33 retains your Personal Data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law or our gaming licence conditions. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five years following Account closure, in accordance with standard AML record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five years from the date of verification or from the date of Account closure, whichever is later.
• Transaction and Betting Records: Retained for a minimum of five years from the date of the transaction, as required by financial record-keeping obligations.
• Support Correspondence: Retained for three years from the date of the last interaction, or longer where a formal complaint or legal proceeding is pending.
• Technical and Analytics Data: Retained in anonymised or aggregated form for up to 24 months for performance analysis purposes.
• Marketing Consent Records: Retained for as long as you hold an Account and for three years after Account closure, to evidence the basis of any marketing communications sent to you.

8.2 Where retention beyond these periods is required by a specific legal obligation, court order, or ongoing investigation, data will be held until that obligation is discharged.

8.3 When data is no longer required, it is securely deleted or anonymised in accordance with our data destruction procedures.

9.1 yuyu33 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is protected using 256-bit SSL/TLS encryption. Our domain enforces HTTPS across all pages and services.
• Encryption at Rest: Sensitive data fields — including identity document details and financial account references — are encrypted at the database level using industry-standard AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with access to User data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: Administrative access to systems containing Personal Data requires multi-factor authentication.
• Penetration Testing: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: yuyu33 maintains a documented data breach response plan. In the event of a breach affecting your rights and freedoms, we will notify you and relevant authorities within the timeframe required by applicable law.

9.2 While we take all reasonable steps to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials and for notifying us immediately if you suspect unauthorised access to your Account.

10.1 As a User of the Platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact our Privacy Team as described in Section 14:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you. You may also update certain Account details directly through your Account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal obligations to retain certain data under AML and KYC regulations.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. You have an absolute right to object to processing for direct marketing purposes, and we will cease that processing immediately upon receipt of your objection.
• Right to Withdraw Consent: Where we rely on your consent to process your data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10.2 We will respond to all rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

10.3 We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline to respond.

11.1 The Platform is strictly intended for adults aged 21 years and over. yuyu33 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of the Account registration and KYC process.

11.2 If we become aware that we have inadvertently collected Personal Data from a person under the age of 21, we will immediately suspend the associated Account, delete the data in question, and, where applicable, return any deposited funds to the source payment method.

11.3 If you are a parent or guardian and believe your child may have registered on the Platform, please contact us immediately at the address provided in Section 14. We will investigate and act promptly.

11.4 We recommend that adults sharing devices with minors make use of parental control software to restrict access to gambling websites, including the yuyu33 Platform.

12.1 As an internationally operated platform serving Indonesian players, yuyu33 may transfer your Personal Data to servers and service providers located outside of Indonesia. Where such transfers occur, we take appropriate steps to ensure that your data receives an equivalent level of protection to that required under applicable data protection standards.

12.2 Safeguards we apply to cross-border transfers include:

• Selecting service providers in jurisdictions that maintain adequate data protection frameworks;
• Entering into data processing agreements with all third-party processors that include standard contractual clauses or equivalent data transfer mechanisms;
• Carrying out transfer impact assessments where required to evaluate the risk to your data in the destination jurisdiction.

12.3 By registering an Account on yuyu33, you acknowledge that your Personal Data may be transferred internationally in accordance with the safeguards described in this section.

13.1 yuyu33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or Platform functionality. The revised Policy will be published on this page with an updated effective date.

13.2 Where amendments are material — for example, where we introduce a new category of data processing or a new type of third-party disclosure — we will endeavour to notify registered Users via email or in-platform notification at least seven days before the changes take effect.

13.3 Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, please cease using the Platform and contact us to request Account closure in accordance with the process described in our Terms & Conditions.

14.1 For any questions, concerns, or requests relating to this Privacy Policy or to your Personal Data, please contact the yuyu33 Privacy Team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the support widget on the Platform
• Response Time: Privacy-related enquiries will receive an acknowledgement within 24 hours (WIB, UTC+7) and a substantive response within 30 days.

14.2 If you are not satisfied with our response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or supervisory body in your jurisdiction.

14.3 All correspondence relating to data protection matters should be clearly marked "Privacy Policy Enquiry" to ensure prompt routing to the appropriate team member.