Privacy Policy — rusa33

In this Privacy Policy, the following terms carry the meanings set out below unless the context otherwise requires:

• "rusa33", "we", "us", or "our" refers to the operator of the rusa33 platform accessible at https://rusa33.bio, including all affiliated entities responsible for its management and data processing activities.
• "Platform" means the rusa33 website, all associated pages, account systems, game lobbies, sportsbook interfaces, and any mobile-optimized versions thereof.
• "Player", "you", or "your" refers to any individual who accesses the Platform, creates an account, or otherwise provides personal data to rusa33.
• "Personal Data" means any information that, alone or in combination with other data, can be used to identify a specific natural person — including name, email address, date of birth, national identity number, payment account details, and IP address.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "KYC" (Know Your Customer) means the identity and age verification process rusa33 is required to conduct in order to confirm a Player's eligibility to use the Platform.
• "Third Party" means any entity other than rusa33 and the Player, including payment processors, game studios, and fraud-prevention service providers.
• "Cookie" means a small text file placed on a Player's device by the Platform to facilitate session management, analytics, and personalization.

rusa33 collects personal data in three primary ways: data you provide directly, data generated automatically by your use of the Platform, and data received from trusted third parties. The categories are detailed below.

rusa33 processes your personal data for the following clearly defined purposes only. No personal data is used outside these stated purposes without your explicit consent or a valid legal basis:

• Account Management: To create, maintain, and secure your Player Account, process login authentication, and communicate account-status updates.
• Identity Verification: To conduct KYC checks that confirm your age (21+), identity, and place of residence in Indonesia, as required by our responsible gaming obligations and licensing conditions.
• Transaction Processing: To process deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja, and to maintain accurate transaction records in IDR.
• Service Delivery: To provide access to the sportsbook (including BRI Liga 1, EPL, La Liga, and Champions League markets), live casino, slots lobby, and all other Platform features.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, and other prohibited activity.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior and to enforce deposit limits, self-exclusion orders, and session time-outs as requested or required.
• Customer Support: To respond to your queries, resolve disputes, and process formal complaints in accordance with our Terms & Conditions.
• Platform Improvement: To analyze aggregated usage data for the purpose of improving the Platform's performance, user experience, and game catalog.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about rusa33 — only where you have given explicit consent to receive such communications. You may withdraw this consent at any time.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.

Every processing activity carried out by rusa33 rests on one or more of the following legal bases. Where multiple bases apply, each is identified below:

rusa33 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be disclosed in the following limited and controlled circumstances only:

• Payment Processors: Your bank account name and account number (or e-wallet identifier) are shared with the relevant Indonesian payment gateway or bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or LinkAja) solely to process your transaction. These institutions are bound by their own data protection obligations.
• KYC Verification Partners: Identity documents submitted during the KYC process are shared with our licensed third-party verification provider solely for the purpose of confirming your identity and age. This provider operates under strict confidentiality agreements with rusa33.
• Game Studio Providers: Minimal session data (such as player ID and session token) is passed to integrated game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to enable game functionality. No additional personal data is shared with studios.
• Fraud & Security Services: Anonymized or pseudonymized technical data (IP address, device fingerprint) may be shared with specialist fraud-prevention services to protect the Platform's integrity.
• Legal and Regulatory Authorities: rusa33 may disclose personal data to competent authorities where required by applicable law, court order, or regulatory directive. In all such cases, rusa33 will disclose only the minimum data necessary to satisfy the legal requirement.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of rusa33's assets, Player data may be transferred to the successor entity, subject to equivalent privacy protections.

rusa33 uses cookies and similar tracking technologies to operate the Platform effectively, ensure security, and improve your experience. The categories of cookies in use are described below:

You may manage non-essential cookies through your browser settings at any time. Disabling functional or analytics cookies will not prevent you from using the Platform but may reduce the quality of your experience. Disabling strictly necessary cookies will impair your ability to log in and use core Platform features.

rusa33 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The specific retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data must be retained beyond a standard period due to a pending legal dispute, regulatory inquiry, or fraud investigation, it will be held in restricted access storage until that matter is resolved.

As a Player on the rusa33 Platform, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected]:

rusa33 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• Transport Layer Security (TLS 1.3): All data in transit between your browser or device and rusa33's infrastructure is encrypted using TLS 1.3 with 256-bit keys, the current industry gold standard.
• Data Encryption at Rest: Sensitive data fields — including payment account details and KYC document files — are encrypted at rest using AES-256 encryption before being written to storage.
• Access Controls: Internal access to Player personal data is restricted on a strict need-to-know basis. All staff members with access to personal data complete mandatory data protection training and are subject to confidentiality agreements.
• Penetration Testing: rusa33 commissions periodic independent penetration tests of its platform infrastructure to identify and remediate vulnerabilities proactively.
• Incident Response: In the event of a personal data breach that is likely to result in a high risk to Player rights, rusa33 will notify affected Players within 72 hours of becoming aware of the incident, describing the nature of the breach, the data involved, and the steps taken to mitigate impact.
• Two-Factor Authentication: Players are encouraged to enable available two-factor authentication options within their Account settings for an additional layer of login security.

rusa33 operates a strict 21+ only policy. The Platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21. Our KYC process is designed to verify age at the point of account activation, and access to funded gameplay is blocked until identity verification is complete.

If rusa33 becomes aware that personal data has been collected from a person under 21 years of age, we will:

• Immediately suspend the relevant Account;
• Delete all personal data associated with the Account from our active systems as quickly as technically practicable;
• Return any deposited balance to the payment method from which it originated, subject to identity verification of the account holder.

If you are a parent or guardian and believe that a person under 21 in your care may have registered on the Platform, please contact rusa33 at [email protected] with the subject line "Minor Account Report" immediately. We will investigate and act on all such reports as a matter of priority.

rusa33 primarily processes Player data on infrastructure located in secure data centers within Asia-Pacific. In limited circumstances — such as when engaging global fraud-prevention or KYC verification services — personal data may be transferred to and processed in countries outside Indonesia.

Whenever personal data is transferred internationally, rusa33 ensures that appropriate safeguards are in place to maintain a standard of protection equivalent to that described in this Privacy Policy, including:

• Transfers only to countries or organizations that maintain recognized data protection standards;
• Contractual data processing agreements with all international service providers that impose equivalent data protection obligations;
• Technical measures such as end-to-end encryption for data transmitted across international network boundaries.

rusa33 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or internal data processing practices. The following process applies to all material changes:

• The revised Privacy Policy will be published on this page with an updated "Last Updated" date at the top.
• All registered Players will receive an email notification to their registered address at least 14 days before any material change takes effect.
• For minor, non-material changes (such as typographical corrections or improved clarity without substantive meaning change), notification will be provided via an on-platform notice rather than individual email.
• Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your Account before the effective date by contacting support.

We encourage you to review this page periodically even if you have not received a change notification, as your continued use of the Platform is subject to the most current version of this Privacy Policy at all times.

For any questions, concerns, or requests relating to this Privacy Policy or rusa33's data processing activities, please contact us through the following channel. All data-related inquiries are handled by our Data Protection team:

rusa33 is committed to handling all privacy inquiries with transparency and care. If you are unsatisfied with our response to a formal complaint, you retain the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction governing rusa33's international operating licence. Details of the applicable authority will be provided in our response to any formal complaint that remains unresolved after our internal review.