Privacy Policy – lego33

1. Introduction

Welcome to the lego33 Privacy Policy. This document explains how lego33 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal information of our users ("you", "your", "Player") in connection with your use of our online betting and gaming services available at https://lego33.cam. We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws and international best practices.

By creating an account, accessing our website, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you should not use lego33.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform. Where terms are not defined in this Privacy Policy, they carry the meanings assigned in the Terms and Conditions.

2. Data Controller and Contact Information

For the purposes of applicable data protection laws, lego33 is the data controller responsible for your personal information. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Data Protection Officer Email: [email protected]
• Live Chat: Available 24/7 on our website
• Support Hours: 24 hours a day, 7 days a week (Western Indonesia Time / WIB, UTC+7)

We aim to respond to all data protection inquiries within 72 hours. For urgent matters relating to data breaches or unauthorized access, please contact us immediately via live chat.

3. Information We Collect

lego33 collects several categories of personal information to provide, maintain, and improve our services, ensure compliance with legal obligations, and protect the security and integrity of the Platform. The types of information we collect include:

3.1 Information You Provide Directly

When you register for an account or use our services, you provide the following information:

• Account Registration Information: Full legal name, date of birth, gender, residential address (street, city, postal code), email address, mobile phone number, and preferred username.
• Identity Verification (KYC) Documents: Government-issued identification (Indonesian ID card / KTP, passport, driver's license), proof of address (utility bill, bank statement dated within the last 3 months), and in some cases, a photograph of yourself holding your ID for biometric verification.
• Financial Information: Bank account details (bank name, account holder name, account number) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs) for deposit and withdrawal processing. We do not store full credit card numbers; payment card processing is handled by PCI-DSS compliant third-party payment processors.
• Communication Data: Content of communications you send to us via email, live chat, contact forms, or support tickets, including any attachments or screenshots you provide.
• Transaction History: Records of all deposits, withdrawals, bets, game play, bonus claims, and account balance changes.
• Responsible Gaming Preferences: Deposit limits, loss limits, session time limits, self-exclusion periods, and other responsible gaming tool settings.

3.2 Information We Collect Automatically

When you access or use lego33, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers (including Advertising ID for mobile devices), and hardware model.
• Usage Data: Pages visited, features used, time spent on pages, links clicked, search queries, bet history, game sessions, login timestamps, and navigation paths through the Platform.
• Geolocation Data: Your approximate geographic location derived from your IP address to verify that you are accessing the Platform from within Indonesia, as required by our licensing conditions.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to collect information about your browsing behavior and preferences. See Section 9 (Cookies) for more details.
• Performance and Diagnostic Data: Error reports, crash logs, performance metrics, and other diagnostic information to identify and fix technical issues.

3.3 Information From Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Confirmation of successful or failed transactions from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Third-party KYC and AML (anti-money laundering) screening services that verify the authenticity of your identification documents and check your identity against global watchlists, sanctions lists, and politically exposed persons (PEP) databases.
• Fraud Prevention Providers: Information from fraud detection and prevention services that assess the risk level of your account, device, and transactions.
• Marketing Partners: If you arrive at lego33 via an affiliate or marketing partner, we may receive confirmation of the referral source and campaign tracking information.

4. How We Use Your Information

lego33 uses your personal information for the following purposes, which are necessary for the performance of our contract with you, compliance with legal obligations, and our legitimate business interests:

4.1 Account Management and Service Provision

• To create and maintain your user account.
• To process deposits, withdrawals, and other financial transactions.
• To enable you to place bets and play games on the Platform.
• To calculate and credit winnings, bonuses, and promotional rewards.
• To manage your account balance and transaction history.
• To communicate with you regarding your account, transactions, and service updates.

4.2 Identity Verification and Compliance

• To verify your identity, age (21+ requirement), and residential address in compliance with Know Your Customer (KYC) regulations.
• To prevent underage gambling, identity theft, fraud, and money laundering in accordance with AML laws.
• To comply with licensing requirements, regulatory reporting obligations, and lawful requests from government authorities or law enforcement agencies.
• To maintain records required by gaming regulators and financial authorities.

4.3 Security and Fraud Prevention

• To detect, prevent, and investigate fraudulent transactions, unauthorized account access, and abusive behavior including bonus abuse, collusion, and use of automated betting software.
• To monitor account activity for suspicious patterns and protect against hacking, phishing, and other security threats.
• To enforce our Terms and Conditions and protect the rights and safety of lego33, our users, and third parties.

4.4 Responsible Gaming and Player Protection

• To implement and enforce responsible gaming tools including deposit limits, loss limits, session time limits, and self-exclusion.
• To identify players who may be at risk of problem gambling based on behavioral indicators.
• To provide support, information, and resources to players who request assistance with gambling-related issues.
• To comply with our duty of care obligations under responsible gaming regulations.

4.5 Service Improvement and Analytics

• To analyze usage patterns, user preferences, and game performance to improve our products and services.
• To conduct research and statistical analysis to better understand our user base and optimize the user experience.
• To test new features, games, and functionalities before public release.
• To measure the effectiveness of our marketing campaigns and promotional activities.

4.6 Marketing and Communications

• To send you promotional offers, bonus announcements, and marketing communications about lego33 products and services (you may opt out at any time via your account settings or the unsubscribe link in emails).
• To personalize your experience on the Platform by displaying content, offers, and recommendations relevant to your preferences and betting history.
• To send you transactional emails including account confirmations, password resets, withdrawal approvals, and important service announcements (these cannot be opted out as they are essential to your use of the service).

4.7 Legal and Regulatory Obligations

• To comply with legal obligations under Indonesian law and the laws of the jurisdiction where our license is held.
• To respond to legal process including court orders, subpoenas, and regulatory inquiries.
• To protect our legal rights and defend against legal claims.
• To investigate and report suspected criminal activity including fraud, money laundering, and organized crime.

5. Legal Bases for Processing (GDPR and Data Protection Law)

Where applicable data protection laws (including GDPR for European users) require us to specify a legal basis for processing personal data, we rely on the following:

• Contractual Necessity: Processing is necessary to perform our contract with you (Terms and Conditions) and provide the services you requested (account creation, deposits, withdrawals, betting, gaming).
• Legal Obligation: Processing is necessary to comply with legal requirements including KYC/AML regulations, age verification, tax reporting, and regulatory oversight.
• Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, security, service improvement, analytics, and marketing, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required, we obtain your explicit consent for processing (e.g., marketing communications, certain types of cookies). You may withdraw consent at any time.
• Vital Interests: In rare cases, processing may be necessary to protect your vital interests or those of another person (e.g., if we need to contact emergency services).

6. How We Share Your Information

lego33 does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: To facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and international payment methods (Visa, Mastercard).
• Identity Verification Providers: To verify your identity, age, and address, and to screen against fraud databases, sanctions lists, and PEP lists.
• Cloud Hosting and Infrastructure Providers: To store data on secure servers and provide computing resources.
• Customer Support Platforms: To manage live chat, email support, and ticketing systems.
• Analytics and Marketing Tools: To analyze user behavior, measure campaign performance, and optimize the user experience.
• Game Providers: To deliver casino games, slots, live dealer games, and sports betting content (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft).

All service providers are contractually obligated to use your personal information only for the purposes we specify, to maintain appropriate security measures, and to comply with applicable data protection laws. They are prohibited from using your data for their own purposes or sharing it with third parties without our authorization.

6.2 Legal and Regulatory Authorities

We may disclose your personal information to legal, regulatory, and law enforcement authorities when required or permitted by law, including:

• To comply with a legal obligation, court order, subpoena, warrant, or regulatory inquiry.
• To report suspicious transactions under AML regulations or suspected criminal activity to financial intelligence units.
• To cooperate with law enforcement investigations into fraud, money laundering, or organized crime.
• To respond to lawful requests from government agencies or gaming regulators.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity. We will notify you via email and/or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

6.4 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot be used to identify you personally with third parties for industry research, market analysis, or other lawful purposes. This data does not constitute personal information under data protection law.

7. Data Retention

lego33 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: We retain all account data, transaction history, and communications for the duration of your active account and for a period of at least 5 years after account closure to comply with regulatory record-keeping requirements.
• Identity Verification Documents: KYC documents are retained for at least 5 years after the end of the business relationship or account closure, as required by AML regulations.
• Financial Records: Transaction records, deposit and withdrawal data, and payment method information are retained for at least 7 years to comply with financial reporting and tax obligations.
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you again.
• Self-Exclusion Records: Self-exclusion data is retained permanently to prevent future account registrations during or after the exclusion period.

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data retention and disposal policies. Note that some data may persist in backup systems for a limited additional period.

8. Data Security

lego33 takes data security seriously and employs industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL technology.
• Secure Data Storage: Personal data is stored on secure servers located in ISO 27001 certified data centers with physical access controls, surveillance, and intrusion detection systems.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with role-based permissions and multi-factor authentication.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scanning to identify and remediate security risks.
• Employee Training: All employees with access to personal data receive mandatory training on data protection, privacy, and security best practices.
• Incident Response Plan: We maintain a documented incident response plan to detect, respond to, and recover from data breaches or security incidents.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. You acknowledge that you provide your information at your own risk. If you become aware of any unauthorized access to your account, you must notify us immediately at [email protected].

9. Cookies and Tracking Technologies

lego33 uses cookies, web beacons, pixel tags, and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for core site functionality including login, account access, and transaction processing. These cannot be disabled.	Session / Persistent
Performance Cookies	Collect anonymous usage data to analyze site performance, identify errors, and improve user experience.	Persistent (up to 2 years)
Functional Cookies	Remember your preferences (language, timezone, currency) and personalize your experience.	Persistent (up to 1 year)
Marketing Cookies	Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. Require your consent.	Persistent (up to 1 year)

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to receive a warning before a cookie is stored. Note that disabling essential cookies may impair site functionality, and you may be unable to use certain features. Disabling marketing cookies will not reduce the number of advertisements you see, but the ads will be less relevant to your interests.

10. Your Rights and Choices

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal information in certain circumstances, subject to legal retention obligations.
• Right to Restriction: You may request that we limit the processing of your personal information in certain circumstances.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days. Note that some rights are subject to legal limitations and exceptions, particularly where retention is required for regulatory compliance, fraud prevention, or legal claims.

11. International Data Transfers

lego33 operates primarily within Indonesia, but some of our service providers and business partners are located outside Indonesia. When we transfer your personal information internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. These safeguards may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent regulatory authorities.
• Binding Corporate Rules for intra-group transfers.
• Data transfer agreements incorporating privacy and security obligations equivalent to those in this Privacy Policy.
• Certification under recognized international privacy frameworks.

12. Children's Privacy

lego33 services are intended solely for individuals who are at least 21 years of age. We do not knowingly collect personal information from individuals under 21. If you are under 21, you must not register for an account, access the Platform, or provide any personal information to us. If we discover that we have collected personal information from a person under 21, we will delete that information immediately and close the account. Parents or guardians who believe their child has provided information to lego33 should contact us immediately at [email protected].

13. Third-Party Websites and Services

The lego33 Platform may contain links to third-party websites, applications, or services (e.g., payment processors, social media platforms) that are not operated by us. This Privacy Policy applies only to lego33. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit. Providing information to third parties is at your own risk.

14. Changes to This Privacy Policy

lego33 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes, we will notify you by posting the updated Privacy Policy on this page with a revised "Last Modified" date and, where appropriate, by sending you an email notification to the address associated with your account. Your continued use of lego33 after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or lego33's data practices, please contact us:

• General Inquiries: [email protected]
• Data Protection Officer: [email protected]
• Live Chat: Available 24/7 on the lego33 website
• Support Hours: 24 hours a day, 7 days a week (WIB timezone, UTC+7)

We take your privacy seriously and will investigate and respond to all legitimate inquiries promptly. For data subject access requests and rights exercises, please allow up to 30 days for a full response.