Privacy Policy

big233 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and protect the personal data you provide when you access or use the big233 online gambling platform at https://big233.cam (the "Platform"). By registering an account and using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

This Privacy Policy applies to all users of the big233 platform, including visitors who browse the site without registering, registered account holders, and any individual whose personal data is processed by big233 in connection with the provision of our Services. It covers the collection and processing of personal data relating to Indonesian residents and international users accessing the platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the big233 platform. Where there is a conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.

For the purposes of applicable data protection law, big233 is the data controller responsible for the processing of your personal information. This means we determine the purposes and means by which your personal data is processed, and we are accountable for ensuring that such processing complies with applicable privacy and data protection regulations.

While big233 operates under international gaming licenses, we recognize that our primary user base consists of residents of Indonesia. Although Indonesia's data protection framework is evolving, we voluntarily adhere to internationally recognized best practices for personal data protection, including principles aligned with the European Union's General Data Protection Regulation (GDPR) where practicable.

All inquiries, requests, or complaints regarding the processing of your personal data should be directed to our Data Protection Officer at [email protected] (plain text — not a clickable link).

big233 collects personal information from you in several ways when you interact with our platform. The categories of personal data we collect include:

3.1 Account Registration Data

• Identity Information: Full legal name, date of birth, gender, and nationality (as shown on your government-issued ID).
• Contact Information: Email address, mobile phone number, residential address (street, city, postal code, province).
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers if configured.

3.2 KYC (Know Your Customer) Verification Data

• Scanned or photographed copies of government-issued identification documents (Indonesian KTP, passport, SIM/driver's license).
• Proof of residential address documents (utility bills, bank statements, government correspondence).
• Proof of payment method ownership (screenshots of OVO, DANA, GoPay wallets, or bank account statements showing your name and account number).
• Biometric data (facial images) if required for enhanced verification, processed through secure third-party KYC providers.

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, times, payment method used (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Bank account numbers, e-wallet account identifiers, and transaction reference numbers.
• Account balance history, bonus credits, wagering activity, win/loss records.

3.4 Betting Activity and Gameplay Data

• Bets placed (sports bets on football, badminton, MotoGP; togel numbers selected; sabung ayam wagers; casino games played; slots spun).
• Bet amounts, odds accepted, outcomes, payouts, and time stamps.
• Game session duration, RTP (return-to-player) statistics, game preferences, and VIP tier progress.

3.5 Technical and Device Data

• IP address, device type (mobile, tablet, desktop), operating system, browser type and version.
• Cookies, pixel tags, and similar tracking technologies (see Clause 8 for details).
• Referral source (how you arrived at big233 — direct entry, search engine, affiliate link).
• Session logs, page views, click paths, and error reports.

3.6 Communications Data

• Live chat transcripts with customer support agents.
• Email correspondence with big233 (inquiries, complaints, verification requests).
• Survey responses, feedback forms, and promotional preferences.

big233 processes your personal data for the following purposes, each of which is based on one or more lawful grounds under applicable data protection principles:

1. Account Management and Service Delivery: To create, maintain, and manage your user account; to process your bets and gaming activity; to calculate odds, settle bets, and credit winnings; to administer bonuses, promotions, and VIP rewards. (Legal basis: contract performance.)
2. Payment Processing: To process deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; to verify payment method ownership; to prevent payment fraud and chargebacks. (Legal basis: contract performance and legitimate interests.)
3. Identity Verification and KYC Compliance: To verify your identity and age (21+ requirement); to comply with anti-money laundering (AML) regulations and counter-terrorist financing (CTF) obligations; to prevent fraud, duplicate accounts, and underage gambling. (Legal basis: legal obligation and legitimate interests.)
4. Responsible Gaming: To monitor gambling behavior for signs of problem gambling; to enforce deposit limits, loss limits, and self-exclusion requests; to provide reality-check reminders and account time-out features. (Legal basis: legitimate interests and legal obligation.)
5. Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance via live chat, email, or phone. (Legal basis: contract performance and legitimate interests.)
6. Security and Fraud Prevention: To detect and prevent fraudulent activity, collusion, arbitrage betting, bonus abuse, account takeover, and other prohibited conduct; to investigate suspected breaches of our Terms & Conditions. (Legal basis: legitimate interests and legal obligation.)
7. Platform Improvement: To analyze user behavior, game preferences, and betting patterns in order to improve our Services; to optimize platform performance, user experience, and mobile responsiveness. (Legal basis: legitimate interests.)
8. Marketing Communications: To send you promotional emails, SMS messages, or in-app notifications about bonuses, new games, and special offers. You can opt out of marketing communications at any time via the unsubscribe link in emails or by contacting support. (Legal basis: consent.)
9. Legal and Regulatory Compliance: To comply with court orders, legal proceedings, law enforcement requests, and regulatory obligations in the jurisdictions where big233 operates. (Legal basis: legal obligation.)

big233 does not sell, rent, or trade your personal information to third parties for their direct marketing purposes. However, we may share your data with the following categories of recipients in limited circumstances:

• Payment Processors: We share necessary payment information (account holder name, account number, transaction amount) with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja to process your deposits and withdrawals.
• Game Providers: We share limited session data (user ID, bet amounts, game outcomes) with third-party game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft, Habanero, Play'n GO, Red Tiger, Quickspin, and Yggdrasil to deliver live casino, slot, and RNG-based games on our platform.
• KYC and Compliance Partners: We may share identity documents and verification data with specialized third-party KYC service providers who perform age verification, identity authentication, and fraud screening on our behalf under strict data protection agreements.
• Cloud Hosting and IT Service Providers: We use secure cloud hosting infrastructure to store data and deliver services. Our hosting providers operate under contractual obligations to maintain the confidentiality and security of all stored data.
• Law Enforcement and Regulatory Authorities: We may disclose personal data to police, courts, gaming regulators, tax authorities, or other government agencies when required by law, court order, subpoena, or legal process, or when necessary to protect the rights, property, or safety of big233, our users, or the public.
• Legal and Professional Advisors: We may share personal data with lawyers, auditors, accountants, and other professional advisors in connection with legal proceedings, compliance audits, or corporate transactions (e.g., mergers or acquisitions), subject to confidentiality obligations.

All personal data collected by big233 is stored on secure servers operated by reputable cloud hosting providers with data centers located in jurisdictions that provide adequate data protection safeguards. We use a combination of on-premise and cloud-based storage solutions to ensure redundancy, availability, and disaster recovery capabilities.

Your data is stored in the following locations and formats:

• Account and Profile Data: Stored in encrypted relational databases with role-based access controls limiting access to authorized personnel only.
• Identity Documents (KYC Files): Stored in secure document management systems with encryption at rest and restricted access. Documents are retained for the minimum period required by anti-money laundering regulations (typically 5 years post-account closure).
• Transaction and Financial Records: Stored in compliance with financial record-keeping regulations, typically retained for 7 years to meet audit and tax authority requirements.
• Betting Activity Logs: Stored for dispute resolution, fraud prevention, and regulatory compliance purposes, typically retained for 5 years.

We implement strict data retention schedules to ensure that personal data is not kept longer than necessary. See Clause 10 for detailed retention periods.

big233 takes the security of your personal data seriously and has implemented comprehensive technical and organizational measures to protect it from unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and big233 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same standard used by banks and financial institutions.
• Password Security: User passwords are hashed and salted using industry-standard cryptographic algorithms (bcrypt or Argon2). We never store passwords in plain text, and even our administrators cannot view your password.
• Two-Factor Authentication (2FA): We offer optional 2FA for account login, providing an additional layer of security beyond username and password.
• Access Controls: Personal data is accessible only to authorized big233 employees and contractors who require access to perform their job functions. All access is logged and audited.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS). We conduct regular vulnerability scans and penetration tests.
• Data Backup and Disaster Recovery: We maintain encrypted backups of all critical data in geographically separate locations to ensure business continuity in the event of a disaster.
• Employee Training: All big233 staff with access to personal data undergo mandatory data protection and security awareness training annually.
• Incident Response Plan: We maintain a documented incident response plan to quickly detect, contain, and remediate any data security incidents. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by law.

big233 uses cookies, pixel tags, web beacons, and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. A cookie is a small text file stored on your device that allows our platform to recognize you on return visits.

8.1 Types of Cookies We Use

8.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, accept only certain cookies, or delete cookies after each session. Note that disabling essential cookies will impair your ability to use the big233 platform. For more information on managing cookies, consult your browser's help documentation.

8.3 Third-Party Analytics

We may use third-party analytics services (such as Google Analytics or similar platforms) to analyze aggregate user behavior and platform traffic. These services use cookies to collect anonymous data, which is processed in accordance with their respective privacy policies.

Under applicable data protection laws and in accordance with internationally recognized privacy principles, you have the following rights with respect to your personal data held by big233:

1. Right of Access: You have the right to request a copy of the personal data we hold about you, including account information, transaction history, KYC documents, and betting activity. We will provide this information in a structured, commonly used, machine-readable format (typically PDF or CSV) within 30 days of your request.
2. Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings or by contacting support.
3. Right of Erasure (Right to be Forgotten): You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent for processing based on consent. Note that we may be legally required to retain certain data (e.g., financial records, KYC documents) even after account closure.
4. Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing activities.
5. Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to have it transmitted directly to another service provider where technically feasible.
6. Right to Object: You have the right to object to processing based on legitimate interests (e.g., direct marketing, profiling for fraud prevention). Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you have the right to withdraw consent at any time by clicking the unsubscribe link in emails or contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
8. Right to Lodge a Complaint: If you believe big233 has processed your personal data in violation of applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Exercising Your Rights: To exercise any of these rights, please contact our Data Protection Officer at [email protected] (plain text) with the subject line "Data Protection Request — [Your Account Username]". We will respond to your request within 30 days. We may require proof of identity before fulfilling your request to ensure data is disclosed only to the rightful account holder.

big233 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our data retention schedule is as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized such that it can no longer be associated with an identifiable individual. In some cases, we may retain anonymized or aggregated data indefinitely for statistical analysis and platform improvement purposes.

big233 strictly prohibits the use of our Services by individuals under the age of 21 years. We do not knowingly collect personal data from minors, and our registration process requires users to confirm that they are at least 21 years of age.

If we become aware that a user is under 21 years of age — whether through KYC verification, self-disclosure, or third-party report — we will immediately suspend the account, void all bets, refund deposited funds (after deducting any gambling losses already incurred), and permanently close the account. The minor's personal data will be securely deleted within 30 days of account closure, except to the extent retention is required to comply with legal obligations or prevent re-registration.

Parents and guardians who believe a minor has accessed big233 using false information should contact us immediately at [email protected] so we can take appropriate action.

The big233 platform may contain links or integrations to third-party websites, services, or game providers (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others). This Privacy Policy applies only to personal data collected by big233 directly through our platform. We are not responsible for the privacy practices, data collection, or content of third-party sites and services.

When you click on a third-party link or access a third-party game embedded on our platform, you may be redirected to that third party's website or service, which operates under its own privacy policy. We encourage you to review the privacy policies of any third-party service you interact with to understand how they collect, use, and protect your personal data.

big233 does not endorse, guarantee, or assume liability for the privacy practices of any third party. Your interactions with third-party services are at your own risk.

big233 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users via email to their registered email address at least 7 days before the changes take effect (for material changes affecting user rights).
• Display a prominent notice on the big233 platform homepage or login screen for 30 days following the update.

Your continued use of the big233 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you must cease using the platform and contact us to close your account in accordance with our account closure procedures.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by big233, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Inquiry — [Your Account Username]" or "Data Protection Request — [Your Account Username]"
• Live Chat: Available 24/7 via the big233 platform for registered and logged-in users. Our support agents can assist with privacy-related questions in both Indonesian and English.
• Response Time: We aim to respond to all privacy inquiries within 48 hours for general questions and within 30 days for formal data subject access requests.

For formal legal notices or complaints regarding data protection violations, please direct correspondence in writing to the contact email above, clearly marked "Data Protection Complaint — [Your Account Username]" in the subject line. We take all privacy complaints seriously and will investigate and respond in accordance with applicable data protection laws.