Privacy Policy

1. Introduction

anru33 ("we," "our," "us," or the "Platform") is committed to protecting the privacy and personal data of every user who visits, registers, or interacts with our services at anru33.cam. This Privacy Policy describes in transparent, plain-language terms what personal data we collect, why we collect it, how it is processed and stored, with whom it may be shared, and what rights you hold over your own information.

This Policy applies to all persons who access anru33's website and services, including residents of Indonesia who engage in online casino gaming, sports betting, togel (Indonesia's traditional numbers lottery), or any other entertainment product offered through the Platform. By creating an Account or otherwise using anru33, you confirm that you have read, understood, and accepted the practices described in this Privacy Policy.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which collectively govern your relationship with anru33.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, financial details, and device identifiers.
• "Processing" refers to any operation performed on Personal Data, including collection, recording, storage, use, transmission, disclosure, or deletion.
• "Data Controller" refers to anru33, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" refers to any third-party entity that processes Personal Data on behalf of anru33 under a formal data-processing agreement.
• "User" or "Player" refers to any individual who creates an Account with, or otherwise accesses, anru33's Platform.
• "KYC Data" means identity verification documents submitted by a User, including Indonesian National Identity Card (KTP), passport, proof of address, and related documentation.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, or data concerning a natural person's sex life or sexual orientation.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register or interact with anru33, you provide us with information including:

• Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address (including city and province in Indonesia), and chosen username.
• KYC & Identity Verification: Indonesian National Identity Card (KTP), passport, driver's license, selfie photographs, proof of address (utility bills, bank statements), and any other documents required to verify your identity and age.
• Payment Data: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction references. Full payment card details are never stored on anru33 servers — they are handled exclusively by certified payment processors.
• Communications: Records of your interactions with our customer support team, including live chat transcripts, emails, and any feedback or complaints submitted.
• Responsible Gaming Preferences: Self-exclusion requests, deposit limits, session time limits, loss limits, and cooling-off period settings.

3.2 Data Collected Automatically

When you visit or use the Platform, our systems automatically collect technical and behavioral data:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network information.
• Usage & Behavioral Data: Pages visited, games played, betting history, session duration, click patterns, navigation paths, and in-Platform search queries.
• Location Data: Approximate geographic location derived from your IP address (country and city level). We do not collect precise GPS coordinates unless explicitly requested by you.
• Cookies & Tracking Technologies: Data collected through cookies, web beacons, pixel tags, and local storage as described in Section 9 of this Policy.

3.3 Data from Third Parties

We may receive Personal Data about you from identity verification providers, payment processors, fraud detection services, and publicly available sources where permitted by law. This supplemental data is used solely to verify your identity, prevent fraud, and comply with regulatory obligations.

4. How We Use Your Personal Data

anru33 processes your Personal Data for the following specific and legitimate purposes:

1. Account Management: Creating, maintaining, and operating your anru33 Account, including authentication and access control.
2. Service Delivery: Providing access to games, sports betting markets, live dealer tables, and all other Platform features you are entitled to use.
3. Financial Transactions: Processing deposits and withdrawals via Indonesian banks and e-wallets, reconciling accounts, and maintaining financial records.
4. Identity Verification (KYC/AML): Verifying your identity, age, and source of funds to comply with anti-money laundering (AML), Know Your Customer (KYC), and counter-terrorism financing (CTF) obligations.
5. Customer Support: Responding to your inquiries, resolving disputes, and providing assistance through live chat and email.
6. Security & Fraud Prevention: Detecting, investigating, and preventing unauthorized account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
7. Responsible Gaming: Monitoring gaming behavior patterns to identify potential problem gambling, administering self-exclusion and limit tools, and providing welfare interventions where appropriate.
8. Legal Compliance: Meeting obligations imposed by applicable laws, regulations, court orders, and licensing conditions in jurisdictions where anru33 operates.
9. Platform Improvement: Analyzing aggregated, anonymized usage data to improve game selection, website performance, user experience, and mobile optimization for Indonesian users.
10. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Users who have provided explicit consent. You may opt out at any time.

5. Legal Basis for Processing

anru33 processes your Personal Data only where a valid legal basis exists under applicable data protection law. The primary legal bases we rely upon are:

• Contractual Necessity: Processing required to perform the contract between you and anru33 (i.e., account registration, game delivery, payment processing).
• Legal Obligation: Processing necessary to comply with KYC, AML, CTF, responsible gaming regulations, and other applicable laws.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and customer support, where these interests are balanced against your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear, affirmative consent. Consent may be withdrawn at any time without affecting prior lawful processing.

6. Sharing and Disclosure of Your Data

anru33 does not disclose your Personal Data to unauthorized third parties. We share data only in the following circumstances, and only to the extent strictly necessary:

• Payment Processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance partners receive identity documents and related data solely for the purpose of verifying your eligibility to use the Platform.
• Game Software Providers: Platform partners such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe receive anonymized session data necessary to deliver their games. They do not receive your financial or identity details.
• Fraud Detection & Security Services: Specialist third-party providers receive technical data (IP address, device fingerprint, behavioral patterns) to identify and prevent fraudulent activity.
• Legal & Regulatory Authorities: We may disclose Personal Data to government agencies, law enforcement bodies, licensing regulators, or courts when required to do so by law, court order, or binding regulatory direction.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such change in advance.

All third-party processors engaged by anru33 are bound by formal data processing agreements that require them to process your data only on our instructions, implement appropriate security measures, and refrain from using your data for their own independent purposes.

7. Data Retention

anru33 retains your Personal Data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active Account and for a minimum of five (5) years following Account closure, to satisfy AML and financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or from Account closure, whichever is later, in accordance with applicable anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for financial audit and regulatory compliance purposes.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer if a dispute remains unresolved.
• Marketing Consent Records: Retained for the duration of your consent and for two (2) years after withdrawal, as evidence of the consent previously given.
• Technical Logs: Retained for up to twelve (12) months for security monitoring, fraud investigation, and platform diagnostics.

At the end of the applicable retention period, Personal Data is securely deleted, anonymized, or pseudonymized such that it can no longer be linked to any identifiable individual. Where data must be retained beyond these periods due to ongoing legal proceedings or regulatory investigations, we will inform you to the extent permitted by law.

8. Security Measures

anru33 implements a comprehensive, layered security framework designed to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.3), protecting it from interception during transit.
• Encrypted Data Storage: Sensitive Personal Data stored in our databases, including financial identifiers and KYC documents, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorized personnel on a strict need-to-know basis. All staff with data access undergo background verification and regular privacy training.
• Multi-Factor Authentication: Administrative access to systems containing Personal Data requires multi-factor authentication (MFA) to prevent unauthorized access even in the event of credential compromise.
• Intrusion Detection & Monitoring: Our infrastructure is monitored continuously by automated intrusion detection systems and a dedicated security team operating 24/7 WIB.
• Regular Security Audits: We conduct periodic third-party penetration testing, vulnerability assessments, and independent security audits to identify and remediate risks proactively.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, anru33 will notify affected individuals and relevant authorities within the timeframes required by applicable law.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, operate efficiently, and provide analytical information to website owners. anru33 uses cookies and similar tracking technologies including web beacons, pixel tags, and local storage objects.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. They enable core features such as user authentication, session management, security enforcement, and load balancing. These cookies cannot be disabled without significantly impairing your use of the Platform.
• Performance & Analytics Cookies: Collect anonymized, aggregated data about how users navigate the Platform — which pages are visited most frequently, where users encounter errors, and how sessions flow. This data is used exclusively to improve Platform performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, preferred currency display, and responsible gaming tool configurations, so you do not need to reconfigure them on each visit.
• Marketing & Targeting Cookies: Used only with your explicit prior consent to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. You may withdraw consent at any time through your Account settings.

9.3 Managing Cookies

You may control cookie settings through your browser's privacy controls. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is placed. Please note that blocking strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your Account or completing transactions. Instructions for managing cookies are available in the help documentation for your browser.

10. Your Data Protection Rights

Subject to applicable law and anru33's legal obligations, you hold the following rights in respect of your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected or updated without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, you have withdrawn consent, or it has been unlawfully processed — subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we limit processing of your Personal Data in certain circumstances, for example while the accuracy of the data is being verified.
• Right to Data Portability: Where processing is based on your consent or a contractual necessity, you may request your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request." We will acknowledge your request within 72 hours and aim to fulfill it within 30 days. In complex cases, we may extend this period by a further 60 days, and will notify you accordingly.

11. Protection of Minors

anru33 is strictly an adults-only platform. Our services are intended exclusively for individuals aged 21 years and older. We do not knowingly collect, store, or process Personal Data from anyone under the age of 21. Our registration process includes mandatory age verification steps, and KYC procedures are designed to detect and prevent underage access.

If you are a parent or guardian and believe that a minor under your care has created an Account or provided Personal Data to anru33 without your consent, please contact us immediately at [email protected]. We will investigate promptly and, if confirmed, will close the Account, delete all associated Personal Data, and refund any deposits made.

12. International Data Transfers

anru33 operates globally, and some of the third-party service providers we engage — including game software providers, fraud detection platforms, and cloud infrastructure providers — may process your Personal Data in countries outside Indonesia. Where such international transfers occur, we ensure that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by competent data protection authorities
• Binding corporate rules where applicable
• Transfers to countries recognized as providing an adequate level of data protection
• Other legally recognized transfer mechanisms appropriate to the circumstances

By using anru33 and agreeing to this Privacy Policy, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia, subject to the safeguards described above.

13. Changes to This Privacy Policy

anru33 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where practical, by sending an email to the address associated with your Account at least 14 days before the changes take effect.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. We encourage you to review this Policy periodically. Your continued use of anru33 following the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you must cease using the Platform and may request Account closure.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way anru33 handles your Personal Data, please contact us through the following channels:

• Email: [email protected] — for all privacy-related inquiries, data rights requests, and data breach reports
• Live Chat: Available 24/7 through the Platform (average response time: 2–10 minutes)
• Operating Hours: 24 hours a day, 7 days a week (WIB timezone, UTC+7)

We take all privacy inquiries seriously. Our dedicated Data Protection team reviews every request individually and will respond within the timelines set out in Section 10. We never use automated decision-making in responding to data rights requests — every request is handled by a trained human reviewer.