madu33 Privacy Policy

This page describes what we collect when you use madu33 and how we keep that data protected. We take your privacy seriously and comply with applicable data protection laws in every jurisdiction where we operate.

When you register on madu33, we collect your full name, email, phone number, and date of birth. During identity verification (KYC), we request a scan of your national ID, passport, or driver's license. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or your bank account (mobile banking, local payment, online payment, e-wallet), your payment details are processed through encrypted channels and are not stored long-term on our servers. We also log your IP address, device type, and browser information for security and fraud prevention.

Our commitment is to use your data only for account management, payment processing, regulatory compliance, and service improvement. We never sell your information to third parties for marketing. This policy explains our practices in full, your rights, and how to contact us with data questions.

Data Collection and Use on madu33

What We Collect

We at madu33 collect personal data in several categories. First, account data: when you register, we collect your full legal name, email address, phone number, and date of birth. Second, identity data: during KYC verification, we collect government-issued ID information (national ID number, passport details, or driver's license number). Third, payment data: when you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we receive payment method details. These are processed by our payment processor and are deleted after settlement; we do not store card or account numbers long-term.

Fourth, activity data: we log every bet, withdrawal, login, and support interaction on your account. We also collect technical data—your IP address, device model, browser type, and operating system—for security monitoring and fraud detection. Fifth, communication data: if you contact our support team, we store your messages and our responses to resolve your request and to improve our service.

How We Use Your Data

We use your personal data for five primary purposes. First, account administration: your name, email, and phone allow us to create and manage your account, send you notifications, and help you reset your password if needed. Second, verification and compliance: your identity document is used solely to comply with know-your-customer (KYC) and anti-money-laundering (AML) regulations. We are required by law to verify users' identities before processing deposits and withdrawals.

Third, payment processing: your payment method data is shared with our payment processors (for mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfers) to authorize deposits and withdrawals. We do not retain this data ourselves; it is managed by our payment partners according to their own security standards. Fourth, fraud and security: we analyze your activity data and technical information to detect suspicious behavior, protect against unauthorized access, and prevent abuse of madu33. Fifth, service improvement: we may use anonymized, aggregated data to improve our platform's features, speed, and user experience. We never use your data to profile you for targeted advertising outside madu33.

Data Retention and Deletion

We retain your account data (name, email, phone, date of birth) for as long as your account is active and for a retention period after closure to comply with legal and regulatory requirements. Identity verification documents (ID scans) are retained for a minimum period required by AML regulations, typically 5–7 years. Payment transaction records are retained for the same period to support audit trails and regulatory reporting.

Activity logs (bets, withdrawals, logins) are retained as long as your account exists; they form part of your account history and are needed for dispute resolution. Support messages and communication data are retained for at least 2 years to support ongoing customer service and dispute handling. Upon your request and after all regulatory retention periods have elapsed, we will delete your personal data. However, we may retain anonymized or aggregated data indefinitely for research and analytics purposes.

Third-Party Processors and Data Sharing

We at madu33 do not sell your personal data to third parties for marketing or commercial purposes. However, we do share data with service providers who assist us in operating madu33. These include payment processors (for online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers), identity verification providers (who validate your government-issued ID), and our hosting and analytics partners. All third-party processors are bound by confidentiality agreements and must use your data only for the specified purpose.

We may also share data with legal authorities, regulators, or law enforcement if we are compelled by subpoena, court order, or legal obligation. In such cases, we will inform you unless we are legally prohibited from doing so. Our servers may be located outside your jurisdiction; by using madu33, you consent to your data being processed and stored in any jurisdiction where we operate.

We at madu33 encrypt your data, limit access to a need-to-know basis, and never sell your information to advertisers or marketers.

Cookies and Tracking Technologies

We use cookies to store your login session, remember your preferences, and analyze how you interact with madu33. Session cookies expire when you close your browser; persistent cookies remain on your device for a longer period to keep you logged in. We use analytics cookies to track page visits, button clicks, and other interactions to improve our platform. These analytics cookies do not identify you personally; they are used in aggregate form only.

You can disable cookies in your browser settings, but doing so may limit your ability to use madu33 fully. We do not use third-party tracking pixels or beacons that follow you across the internet; our cookies are used on madu33 only.

Your Rights and Data Protection

Your Rights on madu33

You have rights regarding your personal data on madu33. Right of access: you can request a copy of all personal data we hold about you. We will provide this in a standard digital format within 30 days of your request. Right to correction: if you believe your data is inaccurate or incomplete, you can request that we update it. You can also update certain information yourself in your account settings (name, email, phone).

Right to deletion: you can request deletion of your account and associated personal data, subject to legal retention requirements (such as AML record-keeping). After deletion, we will remove your data from active systems but may retain anonymized records for compliance. Right to portability: you can request your data in a portable format suitable for transfer to another service. Right to restrict processing: you can request that we limit how we use your data, though this may affect your ability to use madu33.

Data Security on madu33

We at madu33 protect your data through multiple security layers. All data transmitted to our servers is encrypted using TLS (Transport Layer Security); your password is hashed and is never stored in plain text. Our servers are protected by firewalls, intrusion detection systems, and regular security audits. We enforce strong password policies and support two-factor authentication (2FA) to prevent unauthorized account access.

Payment data is processed through PCI-DSS compliant payment gateways; we do not store credit card or bank account details on our systems. Access to your personal data is restricted to madu33 employees who need it to perform their jobs, and all staff are bound by confidentiality agreements. While we take extensive precautions, no system is entirely immune to security breaches. If we discover unauthorized access to your data, we will notify you and relevant authorities as required by applicable law.

International Data Transfers

Our servers and data centers may be located in jurisdictions outside your own country. By using madu33, you consent to your personal data being transferred to, stored in, and processed in any jurisdiction where we operate. We take steps to ensure that data is protected to a standard equivalent to your home jurisdiction, but laws in other countries may differ. If your jurisdiction prohibits transfer of data outside its borders without explicit consent, you are responsible for verifying that such transfer is permitted before using madu33.

Contact Us About Your Data

If you have questions about how we collect, use, or protect your data, contact our privacy team through the channels listed in your madu33 account. We respond to data-related enquiries in English and Indonesian within 10 business days. If you are in a jurisdiction with a data protection authority (such as a Privacy Commissioner or Data Protection Agency), you may also lodge a complaint with them regarding our data practices.

Related policies and guides

Final note on madu33 privacy

We at madu33 are committed to protecting your privacy and complying with applicable data protection laws. Your data is used solely to operate our platform, process your payments, verify your identity, and prevent fraud. We do not sell your information to marketers or advertisers. Your personal data deserves care and respect, and we take that responsibility seriously.

If you have any questions about this privacy policy, how we handle your data, or your rights, contact our privacy team in English or Indonesian through your madu33 account. For serious privacy concerns or complaints, you may contact our legal department through the channels outlined in our legal noticeThis policy is subject to change; we will notify you of material changes by posting an updated version on this page. Continued use of madu33 after changes indicates your acceptance of the updated policy.