Privacy Policy

The following definitions apply throughout this Privacy Policy unless the context otherwise requires:

• "agam66" / "we" / "us" / "our" — the agam66 online gaming platform accessible at agam66.bio and all associated interfaces.
• "Player" / "you" / "your" — any individual who visits, registers on, or uses the agam66 Platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, email address, phone number, date of birth, national identity number, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — agam66, the entity that determines the purposes and means of Processing Personal Data.
• "Third Party" — any person or entity other than you and agam66.
• "KYC" — Know Your Customer; the identity and age verification process required for Account holders.
• "IDR" — Indonesian Rupiah, the base currency of all agam66 transactions.

agam66 collects Personal Data across several categories depending on how you interact with the Platform. The table below summarises what we collect and why.

3.1 Direct Collection

The majority of the Personal Data we hold is provided directly by you when you: register an Account on the agam66 Platform; complete KYC verification by submitting identity documents; make a deposit or request a withdrawal; contact our customer support team via live chat or email; or opt into promotional communications.

3.2 Automated Collection

When you access and use the agam66 Platform, we automatically collect certain Technical and Usage Data through cookies, web beacons, server logs, and similar tracking technologies. This data is collected each time you visit the Platform regardless of whether you are logged into your Account. Full details of our use of cookies are set out in Section 9 below.

3.3 Third-Party Sources

In limited circumstances, we may receive Personal Data about you from trusted third-party sources, including:

• Payment processors and banking partners (for transaction confirmation and fraud screening).
• Identity verification service providers (for KYC and age-verification checks).
• Anti-fraud and anti-money-laundering (AML) screening databases.
• Publicly available sources where required to verify information you have provided to us.

In all cases, we verify that any third-party source has a lawful basis for sharing your data with us before we process it.

agam66 processes your Personal Data for the following specific and legitimate purposes:

• Account Management: Creating, maintaining, and closing your agam66 Account; authenticating your identity at login; managing Account settings and preferences.
• Transaction Processing: Processing deposits and withdrawals in IDR via local Indonesian bank transfer (BCA, BRI, BNI, Mandiri) and e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja); reconciling transaction records.
• Identity Verification (KYC): Verifying that you are at least 21 years of age and a legitimate Account holder; complying with our licensing obligations regarding know-your-customer checks.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, collusion, account takeover, and other prohibited conduct on the Platform.
• Responsible Gaming: Monitoring wagering patterns to identify potential problem gambling behaviour; facilitating deposit limits, session reminders, cooling-off periods, and self-exclusion in accordance with our responsible gaming obligations.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Legal and Regulatory Compliance: Fulfilling our obligations under applicable gaming regulations, AML legislation, and data protection law; responding to lawful requests from regulatory and law enforcement authorities.
• Marketing and Promotions: Sending you promotional offers, bonus notifications, and news about new games and features — only where you have given your consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game performance, user experience, and the overall quality of the agam66 Platform.

agam66 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you as an Account holder — including operating your Account, processing deposits and withdrawals, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming obligations imposed by our licensing authority.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement. Where we rely on legitimate interests, we carry out a balancing test to ensure the impact on your rights is proportionate.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6.1 We Do Not Sell Your Data

agam66 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Your data is shared only in the limited circumstances described below.

6.2 Service Providers

We share Personal Data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include:

• Payment processing partners and Indonesian banking institutions (BCA, BRI, BNI, Mandiri) for transaction execution.
• E-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for digital payment processing.
• KYC and identity verification providers for age and identity checks.
• Game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) for the delivery of gaming services — these providers receive only technical session data, not your financial or identity documents.
• Customer support platform providers for live chat and ticketing services.
• IT infrastructure and cloud hosting providers for secure data storage.
• Fraud detection and AML screening services.

All service providers are bound by contractual data processing agreements that require them to handle your data in accordance with applicable data protection standards and to use it only for the purposes we specify.

6.3 Legal and Regulatory Disclosure

agam66 may disclose your Personal Data to regulatory authorities, law enforcement agencies, courts, or other public bodies where we are required to do so by law, court order, or in connection with legal proceedings. We will, where permitted, inform you of such disclosures.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you via the email address registered to your Account before your data is transferred and becomes subject to a different privacy policy.

agam66 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account Data and KYC Documents: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with AML and gaming regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for financial audit and regulatory compliance purposes.
• Customer Support Records: Retained for three (3) years from the date of each interaction, or longer if the interaction is connected to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the period of your consent and for one (1) year after withdrawal of consent, as evidence of the consent given.
• Technical and Usage Data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised and may be retained for analytical purposes indefinitely.

When Personal Data is no longer required, we delete it securely or anonymise it so that it can no longer be associated with you as an individual.

agam66 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the agam66 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser's address bar when accessing agam66.bio.
• Encrypted Data Storage: Sensitive Personal Data — including identity documents and financial account details — is stored in encrypted form on our servers using AES-256 encryption.
• Access Controls: Access to Personal Data within agam66 is restricted on a strict need-to-know basis. Staff are granted access only to the data necessary to perform their specific job functions, and all access is logged and audited.
• Two-Factor Authentication (2FA): agam66 supports 2FA for Player Accounts to provide an additional layer of protection against unauthorised login attempts.
• Regular Security Audits: Our Platform undergoes regular penetration testing and security audits conducted by qualified third-party security professionals.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach that poses a risk to your rights, we will notify affected Players and the relevant authorities within the timeframes required by applicable law.

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website. They allow the website to recognise your device, remember your preferences, and collect information about how you use the site. agam66 uses cookies and similar technologies (including web beacons and session tokens) to operate and improve the Platform.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in during your visit and security cookies that help us detect fraudulent activity. These cookies cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymous data about how Players use the Platform — such as which pages are visited most frequently and whether error messages are encountered. This data is used solely to improve Platform performance.
• Functionality Cookies: Allow the Platform to remember your preferences, such as your chosen language, preferred game lobby view, and responsible gaming settings.
• Analytics Cookies: Used to understand aggregate player behaviour and session patterns. Data collected through analytics cookies is anonymised before analysis and is never linked back to your individual Account profile.

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse new cookies, be notified when a new cookie is set, and delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your agam66 Account and accessing Platform features. For guidance on managing cookies in your specific browser, refer to the help section of your browser provider.

Subject to applicable law and our legal obligations (including AML and gaming regulatory requirements that may prevent immediate deletion of certain records), you have the following rights in relation to your Personal Data:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and information about how we process it.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request that we delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other lawful basis), or where we have processed it unlawfully. Note that certain data must be retained by law and cannot be deleted on request.
• Right to Restriction of Processing: You may request that we pause processing of your data in certain circumstances — for example, while we verify the accuracy of data you have contested.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a machine-readable copy of Personal Data you have provided to us, for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days. We may need to verify your identity before processing a rights request.

The agam66 Platform is strictly for adults aged 21 and over. We do not knowingly collect Personal Data from anyone under the age of 21. Our registration process requires users to confirm their date of birth, and all Accounts are subject to KYC age verification before withdrawal privileges are granted.

If we become aware that we have inadvertently collected Personal Data from a person under 21, we will take immediate steps to delete that data and close the associated Account. Any deposits made to such an Account will be returned to the original payment method. If you are a parent or guardian and believe that a minor under your care has created an agam66 Account, please contact us immediately at [email protected].

We encourage parents and guardians to make use of parental control software to prevent minors from accessing online gaming platforms. Information on responsible gaming tools — including controls that can limit access — is available on our Responsible Gaming page.

agam66 operates from an international jurisdiction and may transfer your Personal Data to, and store it in, countries outside of Indonesia where our service providers and data infrastructure are located. Some of these countries may not provide the same level of data protection as Indonesian law.

Where we transfer Personal Data internationally, we ensure that appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements with service providers that impose data protection obligations equivalent to those we observe.
• Transfers only to jurisdictions that offer adequate data protection standards as assessed by internationally recognised frameworks.
• Additional technical safeguards such as end-to-end encryption for data in transit across borders.

By creating an Account and using the agam66 Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia as described in this section.

agam66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify you by email to the address registered on your Account and by posting a prominent notice on the Platform. The revised Privacy Policy will take effect on the date specified in the notice.

We encourage you to review this Privacy Policy periodically. Your continued use of the agam66 Platform following any amendment constitutes your acknowledgment of the updated policy. If you do not agree with the revised terms, you must stop using the Platform and may close your Account in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way agam66 handles your Personal Data, please contact our Data Protection team. We aim to respond to all privacy-related enquiries within 5 business days and to all formal rights requests within 30 calendar days.

Email: [email protected]

Our support team is available 24 hours a day, 7 days a week, with native Indonesian-speaking agents ready to assist you at any time. For formal data subject rights requests, email correspondence is the preferred and most efficient channel — please include "Privacy Request" in your subject line and provide enough detail for us to identify your Account and understand your request.