Privacy Policy — piv333

1 Overview & Scope

This Privacy Policy ("Policy") describes the practices of piv333 ("piv333", "we", "our", "us") with respect to the collection, use, storage, disclosure, and protection of personal data belonging to users ("you", "your", "Member") of the website at https://piv333.app and all associated services operated under the piv333 brand (collectively, the "Platform").

This Policy applies to all individuals who access or use the Platform, regardless of whether they have registered an Account. It covers personal data collected through the website itself, through our mobile-optimised interface, through customer support interactions, and through any other direct communication channel between you and piv333.

This Policy should be read alongside piv333's Terms & Conditions, which govern your use of the Platform. By registering an Account or continuing to use the Platform, you acknowledge that you have read, understood, and agree to the terms of this Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

piv333 is committed to processing personal data in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• Personal Data: Any information relating to an identified or identifiable natural person, including names, email addresses, phone numbers, IP addresses, device identifiers, financial account details, and any other data that can be used, alone or in combination, to identify an individual.
• Processing: Any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• Data Controller: The entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, piv333 is the Data Controller with respect to all Personal Data collected through the Platform.
• Data Processor: A third party that Processes Personal Data on behalf of the Data Controller under a binding contractual arrangement and in accordance with the Data Controller's documented instructions.
• Consent: A freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for one or more specific purposes.
• Account: A registered user account on the piv333 Platform, created through the registration process and subject to the Terms & Conditions.
• KYC: Know Your Customer — the identity verification process piv333 applies in accordance with its obligations as an internationally licensed gaming operator, requiring Members to submit documentary proof of identity and address before certain transactions may be processed.
• Cookie: A small text file placed on your device by the Platform's server when you visit the website, used to maintain session state, personalise your experience, and collect analytics data as described in Clause 11.

3 Data We Collect

piv333 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

4 How We Collect Data

piv333 collects Personal Data through the following mechanisms:

• Direct Submission: You provide data directly when you register an Account, complete the KYC verification process, make a deposit or withdrawal, update your Account Settings, participate in a promotion, or contact the support team.
• Automated Collection: Technical Data and Usage Data are collected automatically as you interact with the Platform. This includes data collected via server logs, session tracking systems, and cookies as described in Clause 11.
• Payment Processors: When you initiate a deposit or withdrawal through a supported payment method (e.g., BCA transfer, OVO, or DANA), piv333 receives confirmation data from the relevant payment processor, including transaction reference numbers and status updates. piv333 does not receive or store your full bank account credentials; these remain with your bank or e-wallet provider.
• Identity Verification Providers: Where piv333 uses a third-party KYC identity verification service to assist with document checks, that provider may return verification status and risk signals to piv333. The underlying documents are processed in accordance with that provider's data processing agreement with piv333.
• Fraud Prevention Systems: piv333 employs automated fraud detection tools that analyse patterns in Technical Data and Usage Data to identify potentially fraudulent or suspicious account activity. These systems may generate risk scores or flags that are associated with your Account record.

5 Purposes of Processing

piv333 processes your Personal Data for the following specific, explicit, and legitimate purposes:

• Account Registration & Management: To create, maintain, and administer your piv333 Account, verify your identity, and ensure the security of your login credentials.
• Service Delivery: To provide you with access to the gaming products and services available on the Platform — including the sportsbook, live casino, slots, and online poker — and to process your bets, calculate outcomes, and credit winnings.
• Payment Processing: To process deposits and withdrawals via your chosen payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others), including transaction verification, reconciliation, and fraud screening.
• KYC & Regulatory Compliance: To verify your identity and age (21+), satisfy anti-money-laundering (AML) obligations, and comply with applicable international gaming licence requirements.
• Responsible Gaming: To administer deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion requests; to monitor gaming behaviour for signs of problem gambling; and to intervene where necessary in accordance with our Responsible Gaming commitments.
• Customer Support: To respond to your enquiries, resolve complaints, process Account changes, and deliver the 24/7 Indonesian- and English-language support service that piv333 provides.
• Security & Fraud Prevention: To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited conduct as defined in our Terms & Conditions; to protect the integrity of the Platform and the fairness of all games.
• Platform Improvement & Analytics: To analyse aggregated, anonymised usage patterns to improve the Platform's features, game selection, user experience, and overall performance. Individually identifiable data is not used for this purpose without further anonymisation.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and information about new games or features at piv333. You may withdraw consent to marketing communications at any time by contacting [email protected].
• Legal Obligations: To comply with any legal obligation to which piv333 is subject, including responding to lawful requests from competent authorities, court orders, or regulatory inquiries.

6 Legal Basis for Processing

piv333 processes your Personal Data under one or more of the following legal bases, depending on the purpose of Processing:

• Contractual Necessity: Processing is necessary to perform the contract between you and piv333 (i.e., the Terms & Conditions), including Account registration, game play, payment processing, and customer support. Without this Processing, piv333 cannot deliver the services you have requested.
• Legal Obligation: Processing is necessary to comply with legal obligations applicable to piv333 as an internationally licensed gaming operator, including KYC/AML obligations, record-keeping requirements, and regulatory reporting duties.
• Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by piv333 — specifically, fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where none of the above bases applies, piv333 will rely on your freely given, specific, informed, and unambiguous consent. You have the right to withdraw consent at any time without affecting the lawfulness of Processing carried out before withdrawal.

7 Data Sharing & Disclosure

piv333 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. Personal Data is shared only in the following limited and controlled circumstances:

• Payment Service Providers: Your financial transaction data is shared with licensed payment processors — including Indonesian bank transfer gateways and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely to the extent necessary to process deposits and withdrawals on your behalf.
• KYC & Identity Verification Providers: Identity documents and verification data are shared with licensed KYC service providers bound by confidentiality and data processing agreements, for the sole purpose of verifying your identity in accordance with our compliance obligations.
• Game Content Providers: Certain Usage Data (such as session identifiers and game round results) is shared with game studios including Evolution Gaming, Pragmatic Play, Pocket Games Soft, Spribe, NetEnt, and Microgaming, to the extent necessary for those studios to deliver and audit their game content on the Platform.
• Fraud Detection & Security Services: Technical Data and transaction patterns may be shared with third-party fraud detection services that help piv333 identify and prevent account abuse, bonus fraud, and financial crime.
• Legal & Regulatory Authorities: piv333 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where it is legally required to do so by a valid court order, regulatory directive, or other binding legal instrument. piv333 will, where lawfully permitted, notify you of such disclosure.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of piv333's assets, your Personal Data may be transferred to the acquiring entity, provided that entity agrees to process it in a manner consistent with this Policy and to notify you of any material changes.

8 International Data Transfers

piv333 operates as an internationally licensed platform. As a result, your Personal Data may be transferred to, and processed in, countries outside of Indonesia. These may include jurisdictions where data protection laws differ from those in Indonesia.

Where such transfers occur, piv333 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Contractual clauses in agreements with Data Processors in third countries that impose data protection obligations equivalent to those described in this Policy.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by relevant international standards.
• Binding Corporate Rules or equivalent governance frameworks where applicable.

If you would like further information about the specific safeguards applied to any particular international transfer of your Personal Data, please contact our Data Protection contact at [email protected].

9 Data Retention

piv333 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or court order, it will be retained until that matter is fully resolved.

10 Security Measures

piv333 takes the security of your Personal Data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the piv333 Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon and "https://" in your browser's address bar when using the Platform.
• Encryption at Rest: Sensitive Personal Data stored on piv333's servers — including identity documents, financial details, and passwords — is encrypted using AES-256 or equivalent encryption standards.
• Access Controls: Access to Personal Data within piv333's systems is governed by role-based access controls. Only authorised personnel with a documented business need may access specific categories of Personal Data, and all access is logged and auditable.
• Two-Factor Authentication: piv333 supports and recommends two-factor authentication (2FA) for all Accounts. Internal staff systems require mandatory 2FA.
• Regular Security Audits: The Platform undergoes regular independent security assessments, penetration testing, and vulnerability scanning to identify and remediate security risks proactively.
• Incident Response: piv333 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, piv333 will notify affected Members as promptly as practicable and take immediate steps to contain and remediate the breach.
• Staff Training: All piv333 personnel with access to Personal Data receive regular data protection and security awareness training.

11 Cookies & Tracking Technologies

piv333 uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and collect analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language and currency preferences, and ensure the security of your Account. They cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform — such as which pages are visited most frequently, how long sessions last, and which features are most used. This data helps piv333 improve the Platform's performance and content.
• Functional Cookies: These cookies remember your preferences and personalisation choices — such as your preferred game lobby layout, recently played games, or notification settings — to provide a more convenient experience on return visits.
• Security Cookies: These cookies support piv333's fraud detection and account protection systems by recording technical signals that help identify suspicious login attempts or unusual account activity.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair the Platform's core functionality and may prevent you from logging in or accessing game content.

piv333 does not use third-party advertising cookies or behavioural tracking cookies that build profiles of your activity across external websites for advertising purposes.

12 Your Data Rights

As a Member of piv333, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact piv333 at [email protected] with the subject line "Data Rights Request". We will respond within 30 days.

13 Minors & Age Policy

piv333 is strictly a 21+ platform. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes an age declaration step, and KYC identity verification is used to confirm the age of Members before withdrawal functionality is enabled.

If piv333 becomes aware that Personal Data has been collected from a person under 21 years of age, that Account will be immediately suspended, all associated data will be reviewed, and any deposits will be returned to the depositing payment method after identity verification. Winnings accrued by an underage user will be forfeited in full in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered an Account on piv333, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.

14 Third-Party Links & Services

The piv333 Platform may contain references to third-party services — such as game studios, payment providers, or sports data feeds — in the context of delivering Platform features. These references do not constitute endorsement of those third parties' data practices.

piv333 is not responsible for the privacy practices of third-party websites or services that you may access independently outside the Platform. This Policy applies solely to Personal Data collected and Processed by piv333 through the Platform. We encourage you to review the privacy policies of any third-party services you use in connection with your online gaming activity.

15 Changes to This Policy

piv333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. When we make material changes — such as changes to the categories of data we collect, the purposes for which we use it, or your rights — we will notify you via the email address registered to your Account at least 7 days before the changes take effect.

Non-material changes — such as formatting corrections, clarifications that do not alter the substance of our commitments, or updates to contact details — may be made without prior notice and will be indicated by an updated "Last Updated" date at the top of this page.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with the changes, you must cease using the Platform and may request Account closure as described in our Terms & Conditions.

16 Contact & Data Protection Inquiries

If you have any questions, concerns, or requests related to this Privacy Policy or the way piv333 handles your Personal Data, please contact our support and data protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: For data rights requests, use "Data Rights Request — [Your Account Username]" to ensure your inquiry is routed to the correct team.
• Response Time: All data-related inquiries will be acknowledged within 24 hours and substantively responded to within 30 calendar days. Complex requests may require up to 60 days; we will notify you if an extension is needed.
• Languages: Inquiries may be submitted in English or Indonesian. Responses will be provided in the language of your inquiry where possible.
• Support Hours: 24/7, including Indonesian public holidays — Idul Fitri, Nyepi, Indonesian Independence Day (17 August), Christmas, and all national observances.

piv333 is committed to resolving all data protection inquiries fairly, transparently, and within the timeframes set out above. If you are not satisfied with piv333's response to a data rights request, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction.