agm66 Privacy Policy

1 Scope & Data Controller

This Privacy Policy governs the collection, processing, storage, and use of personal data by agm66 in connection with the operation of the online betting and gaming platform available at https://agm66.app. agm66 acts as the data controller in respect of personal data submitted by members and prospective members through the platform.

This policy applies to all individuals who:

• Visit the agm66 website without registering an account (anonymous visitors).
• Register or attempt to register a member account on the agm66 platform.
• Deposit funds, place bets, or use any paid service offered through agm66.
• Contact agm66 customer support via email or live chat.
• Interact with any agm66 promotional communication or campaign.

agm66's primary service audience consists of adults aged 21 and over residing in Indonesia, with a particular focus on users in major cities including Jakarta, Surabaya, Bali, Medan, Bandung, and Yogyakarta. References to Indonesian payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) throughout this policy reflect the payment infrastructure used to process member transactions on the platform.

2 Data We Collect

agm66 collects the minimum personal data necessary to operate a secure, compliant, and high-quality online betting service. The categories of personal data we collect are set out in the table below.

agm66 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless such data is voluntarily provided by a member in the context of a responsible gaming self-exclusion request, in which case it is processed solely for the purpose of administering that request.

3 How We Collect Your Data

agm66 collects personal data through the following means:

3.1 Directly From You

The majority of personal data agm66 holds about you is provided directly by you at the time of registration, during the KYC verification process, when making deposits or withdrawal requests, or when contacting customer support. This includes all identity, contact, financial, and verification document data listed in Section 2.

3.2 Automatically Through Platform Use

When you access the agm66 website or use the platform, agm66's servers automatically record certain technical data, including your IP address, device identifiers, browser characteristics, and session activity logs. This data is collected via server logs and, where applicable, through cookies and similar tracking technologies as described in Section 9.

3.3 From Third-Party Payment Providers

When you make a deposit or request a withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant payment provider may share limited transaction confirmation data with agm66 to verify that the payment was processed successfully. agm66 does not receive your full bank account credentials from these providers — only the data necessary to reconcile and confirm the transaction.

3.4 From Identity Verification Services

agm66 may engage accredited third-party identity verification services to cross-check the accuracy of identity documents submitted during KYC. These services return a verification result (pass / fail / requires review) to agm66; they do not retain your identity documents on agm66's behalf.

4 How We Use Your Data

agm66 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and administering your agm66 member account, including processing login authentication, managing account preferences, and communicating account-related notices.
• Transaction Processing: Crediting deposits, processing withdrawal requests, and reconciling payment records in Indonesian Rupiah (IDR) via the supported local bank and e-wallet channels.
• Identity Verification (KYC): Verifying your identity and age (21+) in compliance with agm66's licensing obligations and internal fraud prevention procedures before processing withdrawals.
• Responsible Gaming: Monitoring betting behaviour for indicators of problem gambling, administering self-exclusion requests, enforcing deposit and loss limits, and providing support to members who contact agm66 with responsible gaming concerns.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the agm66 Terms & Conditions.
• Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance via live chat and email.
• Legal Compliance: Meeting obligations imposed by agm66's gaming license, applicable data protection requirements, and any lawful requests from competent regulatory or judicial authorities.
• Platform Improvement: Analysing aggregated and anonymised usage data to identify service performance issues, improve user experience, and develop new platform features.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign messages to members who have opted in to receive such communications. Marketing messages can be unsubscribed at any time via the account dashboard or by contacting support.

5 Legal Basis for Processing

agm66 processes personal data on the following legal bases, depending on the purpose of the processing activity:

6 Data Sharing & Disclosure

agm66 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. agm66 may share your data only in the following circumstances and only to the extent strictly necessary for the stated purpose:

6.1 Payment Processors

To process deposits and withdrawals, agm66 shares the minimum required financial data with the relevant payment processor — including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers process your data solely to execute the requested transaction and are bound by their own applicable data protection obligations.

6.2 Identity Verification & Fraud Prevention Services

agm66 may share identity document data with accredited third-party KYC verification providers for the sole purpose of confirming member identity and age. agm66 may also share device fingerprint data and IP address information with fraud prevention intelligence services to identify and block known bad actors. All such third-party providers are contractually bound to process this data exclusively on agm66's instructions.

6.3 Technology & Hosting Providers

agm66 uses third-party infrastructure providers — including hosting, content delivery, and cybersecurity services — to operate the platform. These providers may process technical data (server logs, IP addresses) as part of delivering their services to agm66. They act as data processors under contractual data processing agreements and have no independent right to use your data.

6.4 Game Content Providers

The agm66 platform integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive anonymised session identifiers to authenticate game sessions and return results. They do not receive your personal identity data (name, phone number, bank account details) unless explicitly required by the game provider's licensing obligations.

6.5 Legal and Regulatory Disclosures

agm66 may disclose personal data to competent regulatory authorities, law enforcement agencies, or judicial bodies where required to do so by applicable law, a valid court order, or the requirements of agm66's gaming license. agm66 will notify the affected member of any such disclosure to the extent permitted by law.

7 Data Retention

agm66 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your membership and updated as you use the platform. Account activity data (bet history, transaction records) is retained for a minimum of five years from the date of each transaction to satisfy gaming license audit requirements.
• KYC and Identity Documents: Retained for a minimum of five years following account closure or the date of the last transaction, whichever is later, in accordance with anti-money laundering record-keeping requirements applicable to licensed gaming operators.
• Customer Support Records: Live chat transcripts and email correspondence are retained for two years from the date of the interaction, unless the interaction relates to a dispute or compliance matter, in which case records are retained for five years.
• Marketing Data: Retained until you withdraw consent for marketing communications, at which point your details are removed from active marketing lists within 10 business days. A suppression record of your opt-out is retained indefinitely to prevent inadvertent re-addition to marketing lists.
• Technical Logs: Server access logs and IP address records are retained for 90 days for security monitoring and fraud investigation purposes, after which they are automatically deleted.
• Closed Account Data: Following voluntary account closure, agm66 retains core identity and financial transaction data for five years to meet gaming license and financial record-keeping obligations, then securely deletes all associated personal data.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with agm66's data destruction procedures.

8 Security Measures

agm66 implements a multi-layered security framework to protect member personal data against unauthorised access, disclosure, alteration, or destruction. The key security measures in place include:

• TLS/SSL Encryption in Transit: All data transmitted between your browser and agm66's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). The agm66 website is served exclusively over HTTPS.
• Encryption at Rest: Sensitive data fields — including KYC document files, bank account numbers, and password hashes — are encrypted at rest using AES-256 encryption on agm66's database infrastructure.
• Access Controls: Access to member personal data within agm66's internal systems is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls are enforced and audit-logged.
• Password Security: Member passwords are stored exclusively as salted cryptographic hashes. agm66 staff cannot retrieve your plain-text password. If you forget your password, you must use the account recovery process to set a new one.
• DDoS Protection & Firewall: agm66's infrastructure is protected by web application firewalls and distributed denial-of-service (DDoS) mitigation services to maintain platform availability and prevent malicious traffic.
• Regular Security Audits: agm66 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to proactively identify and remediate security risks.
• Incident Response: In the event of a personal data breach that poses a risk to member rights, agm66 will notify affected members and the relevant regulatory authority without undue delay in accordance with applicable requirements.

9 Cookies & Tracking Technologies

agm66 uses cookies and similar client-side storage technologies to operate the platform effectively, personalise your experience, and collect anonymised performance data. The following types of cookies are used:

agm66 does not use third-party advertising cookies or tracking pixels that would allow external advertising networks to build profiles of your browsing behaviour across other websites. You may clear cookies stored by agm66 at any time through your browser settings; however, doing so will log you out of the platform and may affect certain functional preferences.

10 Your Data Rights

As an agm66 member, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, contact agm66 at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data agm66 holds about you. agm66 will provide a structured data summary within 30 days of a verified request.
• Right to Rectification: If any personal data agm66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most data fields, you can update information directly through your account profile.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (for consent-based processing), or where agm66 has no other legitimate basis to retain it. This right is subject to agm66's legal retention obligations described in Section 7.
• Right to Restriction: You may request that agm66 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that agm66 provide your personal data in a structured, machine-readable format (CSV or JSON) where the processing is based on consent or contractual necessity.
• Right to Object: You may object to processing based on legitimate interest at any time. You may also withdraw consent for marketing communications at any time via the account dashboard or by contacting support, without affecting the lawfulness of prior consent-based processing.

agm66 will respond to all verified data rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, with prior notification to the requesting member. agm66 will not charge a fee for data rights requests unless they are manifestly unfounded, repetitive, or excessive.

11 Minors & Age Restriction

agm66 is strictly an adults-only platform. Individuals under the age of 21 are prohibited from registering an account, making deposits, or using any feature of the agm66 platform. agm66 does not knowingly collect personal data from individuals under the age of 21.

If agm66 discovers or is notified that personal data has been collected from an individual who is under 21 years of age, agm66 will immediately close the associated account, void any balance held within it, and securely delete the minor's personal data. If you believe that a person under 21 has registered on the agm66 platform, please notify us immediately at [email protected].

Parents and guardians are strongly encouraged to use parental control software to prevent underage access to online gambling and betting platforms. agm66 supports this effort and will cooperate fully with any legitimate request to investigate suspected underage account usage.

12 International Data Transfers

agm66's platform infrastructure may involve the processing of personal data in jurisdictions outside Indonesia, including in countries where agm66's hosting providers, game content providers (such as Pragmatic Play and Evolution Gaming), or technology partners maintain data centres. Where such international transfers occur, agm66 takes steps to ensure that an appropriate level of data protection is maintained, including by:

• Entering into data processing agreements with all third-party processors that establish contractual data protection standards equivalent to those applied by agm66.
• Engaging only technology providers that maintain internationally recognised security certifications (such as ISO 27001 or SOC 2 Type II).
• Ensuring that game content providers receiving session data are themselves licensed and regulated by reputable gaming authorities, subjecting them to independent data governance oversight.

agm66 does not transfer personal data to countries that lack adequate data protection standards without implementing appropriate contractual safeguards as described above.

13 Changes to This Privacy Policy

agm66 reviews this Privacy Policy regularly and may update it to reflect changes in platform functionality, applicable legal or regulatory requirements, or agm66's internal data handling practices. Material changes — such as new categories of data collected, new third-party data-sharing arrangements, or changes to member rights — will be communicated to registered members via email to the address on file, with at least 14 days' notice before the change takes effect.

Non-material changes (such as typographical corrections, clearer wording that does not alter substantive meaning, or updated contact details) may be made without specific advance notification. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We recommend reviewing this page periodically to stay informed of how agm66 protects your data.

Continued use of the agm66 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revision, you should cease using the platform and contact agm66 to request account closure and data deletion.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the agm66 Privacy Team using the details below. Our support team is available 24 hours a day, seven days a week, with native Indonesian-speaking agents on every shift.