Privacy Policy — agm66

The following definitions apply throughout this Privacy Policy:

agm66 collects personal data through several channels: directly from you during registration and account management; automatically when you use the Platform; and, in limited circumstances, from trusted third-party sources such as KYC verification providers and payment processors.

2.1 Data Provided Directly by You

• Registration data: Full legal name, date of birth, email address, mobile phone number, country and city of residence (Indonesian Members specify their province and city, e.g., DKI Jakarta, Surabaya, Bandung, Medan, Yogyakarta, Bali), preferred currency (IDR or cryptocurrency), and a self-selected username and password.
• KYC identity documents: Government-issued photo identification (e.g., KTP — Indonesian national identity card, or passport), proof of residential address (e.g., utility bill or bank statement dated within three months), and in some cases a selfie with the identity document for liveness verification.
• Payment data: Bank account details for local Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon); e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja; and cryptocurrency wallet addresses for USDT, BTC, or ETH transactions. agm66 does not store full card numbers for card payments — card tokenization is handled exclusively by our PCI-DSS compliant payment processor.
• Support communications: Any information you voluntarily provide when contacting agm66 via live chat or email, including the content of your messages, attachments, and your account details as shared in support correspondence.
• Responsible gaming data: Self-declared deposit limits, self-exclusion requests, time-out preferences, and any disclosures you voluntarily make to agm66 about your gambling habits for the purposes of Member protection. This data is treated with elevated confidentiality.

2.2 Data Collected Automatically

• Log and technical data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, pages visited on the Platform, time and duration of each visit, and session identifiers.
• Betting and gaming activity data: Records of all wagers placed, game sessions commenced, stake amounts, settlement outcomes, bonus activations, and withdrawal requests. This data is retained as part of agm66's legal and regulatory obligations.
• Cookie and tracking data: As described in Section 6 below, agm66 uses functional and analytics cookies to maintain session integrity and analyze aggregate usage patterns. We do not deploy advertising cookies or cross-site behavioral tracking technologies.

2.3 Data from Third-Party Sources

• KYC providers: agm66 engages reputable third-party identity verification services to cross-reference the documents you submit against official data sources. These providers may return a verification status, a fraud risk score, and in some cases additional identity attributes to assist agm66 in satisfying its age verification and anti-money laundering obligations.
• Payment processors: Payment gateway partners confirm transaction statuses and, where required by anti-fraud protocols, may share limited transaction-related data with agm66 to support chargeback prevention and suspicious activity monitoring.
• Sports data providers: agm66 receives event results and odds data from licensed sports data feed providers for the purpose of settling bets. This data relates to events, not to individual Members, and does not constitute personal data collection from you.

agm66 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose not listed here without first seeking your explicit consent or as otherwise required by applicable law.

• Account creation and management: To register your account, verify your identity and age, maintain your account profile, enforce the one-account-per-member rule, and manage account closures or suspensions where required.
• Service delivery: To provide you with access to sports betting markets (including BRI Liga 1, EPL, Champions League, and Indonesian national team events), live casino games, togel draws, slot titles from Pragmatic Play, Evolution Gaming, and other providers, and all other wagering products available on the Platform.
• Financial transaction processing: To process deposits made via BCA, BRI, BNI, Mandiri, and other supported Indonesian payment channels, and to process withdrawal requests to your nominated bank account or e-wallet in accordance with agm66's payment terms.
• KYC and regulatory compliance: To verify that you meet the minimum age requirement of 21 years, to satisfy anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under our international licensing conditions, and to fulfil any reporting obligations to our licensing authority.
• Fraud prevention and platform security: To detect, investigate, and prevent unauthorized account access, multi-accounting, bonus abuse, payment fraud, match-fixing-related activity, and other forms of prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor account activity for indicators of problem gambling behavior, to administer self-exclusion requests and deposit limits you have set, and to contact you proactively where our monitoring systems flag a potential concern about your gambling patterns — in accordance with our commitment to Member welfare.
• Customer support: To respond to your inquiries, resolve disputes, and maintain a record of support interactions for quality assurance and training purposes. Support is available in English and Indonesian.
• Platform analytics and improvement: To analyze aggregate, anonymized usage patterns across the Platform in order to improve the user experience, optimize page performance, and develop new features that better serve Indonesian players.
• Promotional communications: Where you have opted in to marketing communications, to send you information about agm66 promotions, bonus offers, seasonal campaigns (e.g., Idul Fitri, Ramadhan, and Indonesian Independence Day promotions), and new game releases. You may opt out of marketing communications at any time via the account settings page or by contacting support.
• Legal proceedings and dispute resolution: To establish, exercise, or defend legal claims, including the preservation of relevant account records during any ongoing dispute or regulatory inquiry.

agm66 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which agm66 relies are as follows:

• Contractual necessity: Processing that is required to perform the contract between you and agm66 — including account registration, service delivery, payment processing, and account management — is carried out on the basis that it is necessary to fulfill our obligations to you as a Member.
• Legal obligation: Processing required for agm66 to comply with applicable laws and our international licensing conditions — including KYC verification, AML/CTF monitoring, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, support quality assurance, and aggregate analytics is carried out on the basis of agm66's legitimate interests, where those interests are not overridden by your rights and interests as a data subject.
• Consent: Where agm66 relies on your consent — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal. Withdrawal of consent to marketing will not affect your ability to continue using the Platform.

agm66 may share your personal data with the following categories of recipients:

• KYC and identity verification providers: Third-party services engaged to verify the identity documents and personal details you submit during KYC review. These providers act as data processors under written agreements with agm66 and may not use your data for their own purposes.
• Payment service providers: Banks, e-wallet operators (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency processing services through which deposits and withdrawals are routed. Shared data is limited to what is necessary to execute and verify the transaction.
• Game content providers: Integrated game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive a session token and anonymized Member identifier to authenticate your game session. These providers do not receive your full identity or financial data.
• Fraud prevention and AML screening services: Third-party platforms that assist agm66 in screening transactions and accounts against global watchlists, sanctions databases, and fraud detection models. Data shared is limited to what is necessary for the screening purpose.
• Legal and regulatory authorities: agm66 will disclose personal data to our licensing authority, law enforcement agencies, courts, or other governmental bodies where required by law, valid legal process, or a binding order from a competent authority. Where legally permissible, agm66 will notify the affected Member prior to making such a disclosure.
• Professional advisors: Legal counsel, auditors, and insurers who are bound by professional confidentiality obligations and engaged in connection with the operation of the agm66 business.
• Business succession: In the event of a merger, acquisition, or sale of all or substantially all of the assets of agm66, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it before the transfer takes effect.

agm66 uses cookies and similar lightweight tracking technologies to ensure the Platform functions correctly, to maintain your session, and to gather anonymized analytics about how visitors and Members navigate the site.

Types of cookies used by agm66:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your language and currency preferences, and ensure that security tokens are correctly passed during transactions. The Platform cannot function without them, and they cannot be disabled.
• Analytics cookies: agm66 uses privacy-respecting analytics tools to measure aggregate traffic volumes, page performance, and user journey patterns across the Platform. Data collected is anonymized and used solely to improve the Platform experience for Indonesian players. No individual-level behavioral profiles are built from analytics data.
• Preference cookies: These cookies remember display preferences you have set — such as odds format (decimal, Hong Kong, Malay) and notification settings — so that your chosen configuration persists across sessions.

agm66 does not use advertising cookies, retargeting pixels, or any cross-site tracking technologies that follow you across websites unrelated to agm66. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform.

agm66 retains personal data for only as long as necessary to fulfill the purpose for which it was collected, plus any mandatory retention period required by our licensing authority or applicable regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active membership and for a minimum of five (5) years following account closure, in compliance with standard AML record-keeping requirements applicable to licensed gambling operators.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later. Where a regulatory investigation is ongoing, KYC records will be retained for the duration of that investigation plus a further two (2) years.
• Transaction records: All deposit and withdrawal records, including supporting payment confirmations, are retained for a minimum of five (5) years to satisfy AML/CTF record-keeping obligations.
• Betting history: Complete wagering records are retained for five (5) years from the date of each transaction, both to satisfy licensing requirements and to support the resolution of any bet settlement disputes raised by Members within that period.
• Support correspondence: Records of customer support interactions are retained for three (3) years from the date of each interaction, or for the duration of any related formal dispute, whichever is longer.
• Marketing data: Where you have consented to receive marketing communications, your contact preferences are retained until you withdraw your consent. Following opt-out, a suppression record is maintained indefinitely to ensure your preference is honoured.
• Analytics data: Aggregated, anonymized analytics data does not constitute personal data and is retained indefinitely for platform improvement purposes. Raw log data from which analytics are derived is purged after ninety (90) days.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymized in accordance with agm66's data destruction policy.

Regardless of where you are located, agm66 extends the following data rights to all Members and visitors. To exercise any of these rights, please contact agm66's Data Protection team at the email address provided in Section 14. agm66 will respond to verified requests within 30 calendar days.

To submit a data rights request, please email [email protected] with the subject line "Data Rights Request", your registered account username, the email address associated with your account, and a clear description of the right you wish to exercise. agm66 may request additional verification of your identity before processing the request to protect against unauthorized access to a Member's personal data.

agm66 implements a layered technical and organizational security framework designed to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and agm66's servers.
• Encryption at rest for all personally identifiable data stored in agm66's databases, using AES-256 or equivalent standards.
• Access control: Personal data is accessible only to agm66 personnel and authorized processors who have a documented, role-specific need to access it. All internal access is logged and audited.
• Multi-factor authentication is enforced for all administrative access to systems holding Member personal data.
• Regular security assessments: agm66 conducts periodic internal security reviews and engages third-party security professionals to perform penetration testing and vulnerability assessments on the Platform.
• Incident response: agm66 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights and freedoms, agm66 will notify affected Members without undue delay and in accordance with applicable breach-notification requirements.

agm66 operates as an internationally licensed platform, and your personal data may be transferred to and processed in countries other than Indonesia in connection with the services described in this Privacy Policy. Such countries may include the jurisdiction of our licensing authority, the locations of our third-party KYC and payment processing partners, and the data center regions where agm66's infrastructure is hosted.

Where personal data is transferred outside of Indonesia to a country that does not provide an equivalent level of data protection, agm66 ensures that appropriate safeguards are in place, which may include contractual clauses that impose data protection obligations on the receiving party equivalent to those described in this policy, or reliance on the recipient's participation in a recognized international privacy framework.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting agm66 at the address provided in Section 14.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on the agm66 Platform, please contact us immediately at [email protected] so that we can take prompt action. agm66 treats the protection of minors as a non-negotiable priority and cooperates fully with parental requests in this regard.

The agm66 Platform does not contain links to third-party websites, social media platforms, or external services as part of its standard navigation. Where references to third-party services appear in promotional content (e.g., references to BRI Liga 1, the AFF Cup, or game studio brands), these are informational references only and do not constitute links to or endorsements of external platforms.

agm66 is not responsible for the privacy practices, data handling standards, or content of any third-party platform that you may independently navigate to in connection with your use of agm66 services — for example, your bank's mobile application when making a transfer to agm66, or an e-wallet platform such as OVO or DANA when funding your account. We encourage you to review the privacy policy of any third-party service you interact with in connection with your agm66 account.

agm66 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable legal requirements, changes to our licensing obligations, or improvements to the Platform. When material changes are made, agm66 will notify active Members via email to their registered address and/or via a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised each time a new version of the Privacy Policy is published. We encourage you to review this page periodically so that you remain informed about how agm66 is protecting your personal data. Your continued use of the Platform following notification of any changes constitutes your acknowledgment of the updated policy. If you do not agree with a material change to this policy, you are entitled to close your account and request deletion of your personal data in accordance with Section 8 of this policy, subject to applicable legal retention obligations.

Previous versions of this Privacy Policy are archived and can be made available to Members upon request by contacting agm66's support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 8, or have concerns about the way agm66 processes your personal data, please contact our Data Protection team using the details below. All communications regarding data privacy are handled with strict confidentiality.

For general platform support, account queries, deposit and withdrawal assistance, or responsible gaming concerns, you may also reach agm66's customer support team — available 24/7 via live chat on the Platform, with Indonesian-speaking agents on hand during WIB peak hours (09:00–21:00 WIB daily). Please visit our FAQ page for answers to common questions, or our Responsible Gaming page for player protection resources and self-exclusion tools.