agam62 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how agam62 ("agam62", "we", "us", or "our") collects, uses, stores, and shares personal data in connection with your use of the agam62 online betting and casino platform, accessible at agam62.app ("Platform").

agam62 is committed to handling your personal information with transparency, integrity, and care. This Policy is designed to give you a clear and honest picture of our data practices so that you can make informed decisions about your engagement with our Platform. We encourage you to read it in full alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

By registering an account on, or otherwise accessing, the agam62 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly — including but not limited to name, date of birth, national identity number, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, organisation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means agam62, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party organisation that processes Personal Data on behalf of agam62, under a binding data processing agreement, and subject to agam62's instructions.
• "Member" means any individual who holds a registered account on the agam62 Platform.
• "KYC Data" means identity verification documents and supporting materials collected through agam62's Know Your Customer process, including copies of your Indonesian National Identity Card (KTP), passport, bank statements, and selfie photographs.
• "Cookies" means small text files placed on your device by the agam62 Platform for the purposes of session management, fraud prevention, and aggregate analytics.

3 Personal Data We Collect

agam62 collects the following categories of personal data from Members and Platform visitors:

3.1 Registration & Account Data

• Full legal name (as it appears on your Indonesian government-issued identity document)
• Date of birth (for 21+ age verification)
• Indonesian National Identity Card number (NIK) or passport number
• Residential address
• Email address
• Indonesian mobile phone number
• Username and encrypted password

3.2 Financial & Transaction Data

• Bank account details used for deposits and withdrawals (e.g., BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, BSI, Bank Permata)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal transaction records, including amounts in Indonesian Rupiah (IDR), timestamps, and payment channel used
• Bet history, game activity records, and win/loss summaries

3.3 KYC & Verification Data

• Scanned or photographed copies of your Indonesian National Identity Card (KTP) or passport
• Proof of bank or e-wallet account ownership
• Selfie photographs taken during identity verification, if requested by our compliance team
• Source of funds declarations, where required under our AML programme

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, page views, and navigation paths within the Platform
• Cookies and similar tracking technology identifiers (see Section 9)
• Error logs and crash reports used for platform stability monitoring

3.5 Communications Data

• Records of support interactions via email or live chat, including message content and timestamps
• Responses to surveys, feedback forms, or promotional communications where you have opted in

4 How We Collect Your Data

agam62 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place bets, contact our support team, or participate in a promotion.
• Automatically through the Platform — when you browse agam62.app, our servers and cookies collect technical data such as your IP address, device identifiers, and session behaviour.
• From payment service providers — when you initiate a transaction, our payment processing partners (including Indonesian bank transfer gateways and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja) transmit transaction confirmation data to agam62.
• From identity verification providers — where agam62 uses a third-party KYC verification service to validate your identity documents, that provider may return verification results and data extracts to agam62.
• From fraud prevention and AML screening services — agam62 may cross-reference your registration data against publicly available sanctions lists and fraud databases as part of its compliance obligations.

5 Purpose of Processing Your Data

agam62 processes your personal data for the following specific purposes:

6 Legal Basis for Processing

agam62 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the agam62 Terms & Conditions — including account registration, transaction processing, and bet settlement.
• Legitimate interests: Processing necessary for fraud prevention, platform security, AML compliance, responsible gaming monitoring, and aggregate platform analytics, where these interests are not overridden by your data protection rights.
• Legal obligation: Processing required to comply with applicable regulatory requirements, including KYC obligations, financial record-keeping mandates, and responses to lawful requests from competent authorities.
• Consent: Processing for optional purposes — such as sending you promotional communications about new games, seasonal bonuses (including promotions tied to Idul Fitri, Ramadhan, or major sporting events such as the EPL, Champions League, and BRI Liga 1), or surveys — where you have given your explicit consent, which you may withdraw at any time.

7 How We Share Your Data

agam62 does not sell your personal data. We share it only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors and banking partners — Indonesian bank transfer gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data required to process your transactions.
• Identity verification providers — Third-party KYC service providers receive your identity documents and registration data solely for the purpose of verifying your identity in accordance with our compliance obligations.
• Game content providers — Studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe may receive a pseudonymous session token to facilitate your game participation. They do not receive your full personal profile.
• Fraud prevention and AML screening services — Specialist compliance service providers process limited registration and transaction data to screen for fraud signals and sanctions list matches.
• Responsible gaming organisations — Where a Member requests self-exclusion, relevant data may be shared with third-party self-exclusion schemes in which agam62 participates.
• Legal and regulatory authorities — agam62 will disclose personal data to competent law enforcement or regulatory authorities where required to do so by applicable law, court order, or binding regulatory instruction. Where legally permitted, agam62 will notify the affected Member of such disclosure.
• Professional advisers — Auditors, legal counsel, and insurers may access personal data on a strictly need-to-know basis under professional confidentiality obligations.

8 Data Retention

agam62 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

9 Cookies & Tracking Technologies

agam62 uses the following categories of cookies and similar technologies on the Platform:

• Strictly necessary cookies: Essential for Platform operation — including session authentication tokens, security cookies (CSRF protection), and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, odds format preferences, and session timeout configuration. These persist across browser sessions to improve your experience.
• Analytics cookies: Collect aggregated, anonymised data about how Members use the Platform — including page views, navigation paths, feature adoption rates, and error frequencies. agam62 uses this data internally to improve Platform performance. No individual-level profiling is performed.
• Fraud prevention tokens: Short-lived device fingerprinting tokens used to detect unusual login patterns, rapid account switching, and other signals associated with unauthorised access or bonus abuse.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling functional cookies will reset your preferences on each visit.

10 Your Data Rights

As an agam62 Member, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of access: Request a copy of all personal data agam62 holds about you, in a commonly used electronic format.
• Right to rectification: Request correction of any inaccurate or incomplete personal data in your account profile or our records.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note: KYC and transaction data must be retained for regulatory compliance periods as described in Section 8, and cannot be deleted on request during this period.
• Right to restrict processing: Request that we pause processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold.
• Right to data portability: Request a structured, machine-readable export of the personal data you have provided to agam62 directly, for transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional email communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: Object to processing based on agam62's legitimate interests where you believe your fundamental rights outweigh those interests. agam62 will review and respond to all such objections within 30 days.

11 Data Security

agam62 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and agam62 servers.
• AES-256 encryption for sensitive data stored in our databases, including financial account details and KYC documents.
• Strict access controls: personal data is accessible only to agam62 employees and contractors who have a documented operational need, and access is logged and audited.
• Multi-factor authentication required for all staff accounts with access to production systems containing Member data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures: in the event of a data breach that is likely to affect your rights, agam62 will notify affected Members and relevant authorities as required within 72 hours of becoming aware of the incident.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your agam62 login credentials and for notifying us promptly at [email protected] if you suspect any unauthorised access to your account.

12 Children's Privacy

The agam62 Platform is strictly for adults aged 21 and over. agam62 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an individual under 21 — through registration, payment, or any other means — we will immediately suspend the associated account, delete the data collected, and return any deposited funds to the original payment source.

13 Third-Party Links

The agam62 Platform may reference third-party services such as payment providers (BCA, BRI, BNI, Bank Mandiri, OVO, DANA, GoPay) or game studio brands (Pragmatic Play, Evolution Gaming, NetEnt). agam62 does not control the privacy practices of these third parties, and their own privacy policies govern how they handle data you share with them directly through their respective platforms or applications. agam62 is not responsible for the privacy practices of any third-party service.

14 International Data Transfers

agam62 operates infrastructure and engages service providers that may be located outside Indonesia. Where your personal data is transferred to a jurisdiction outside Indonesia, agam62 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia, including:

• Binding data processing agreements with all international Data Processors, incorporating internationally recognised standard contractual clauses.
• Transfer only to jurisdictions that maintain adequate data protection standards as assessed by agam62's compliance team.
• Minimisation of data transferred internationally to the minimum necessary for the operational purpose.

15 Changes to This Privacy Policy

agam62 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable regulatory standards. Where changes are material — affecting how we collect, use, or share your personal data in a way that could meaningfully affect your rights — agam62 will provide at least 14 days' prior notice by email to all registered Members and by posting a prominent notice on the Platform.

Non-material changes (such as typographical corrections or clarifications that do not alter our substantive data practices) will take effect immediately upon publication. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how agam62 protects your data.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change, you must stop using the Platform and may request account closure and data deletion in accordance with Section 10.

16 Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by agam62, please contact our Privacy & Data team through the following channel:

• Email: [email protected] — use the subject line "Privacy Policy Inquiry" or "Data Rights Request" as appropriate.
• Support availability: 24 hours a day, 7 days a week including Indonesian national public holidays (WIB — Western Indonesia Time, UTC+7). Indonesian-speaking agents available at all times.
• Acknowledgement time: All privacy-related inquiries are acknowledged within 48 hours. Data rights requests receive a substantive response within 30 calendar days.