Privacy Policy desa33 –
Your Data, Our Responsibility

Article 1 – Introduction

Desa33 is an online gaming entertainment platform committed to operating at the highest privacy standards. We understand that your trust is our most valuable asset, and that trust begins with how we handle your personal data.

This Policy applies to all data collected through the official desa33 website, mobile app (Android and iOS), and other official communication channels such as live chat and support email. It does not apply to third-party websites or services that may be linked to our platform.

As a responsible platform operator, desa33 operates with user data protection as a priority — not merely a compliance obligation. We believe that transparency in data management is part of delivering a great experience to every member.

Article 2 – Data We Collect

Desa33 collects various categories of data to support service operations and meet applicable verification obligations. Below is a breakdown of the data we may collect:

Article 3 – How We Collect Data

Desa33 collects data through several different methods, depending on the type of information:

• Directly from you: when registering an account, completing your profile, making a deposit or withdrawal, contacting the support team, or uploading KYC verification documents.
• Automatically: via cookies, server logs, and standard tracking technologies that record technical data when you access the platform — including IP address, device type, and navigation patterns.
• From payment providers: when you make a transaction, the payment gateway forwards a transaction confirmation containing the data needed to verify your payment.
• From game providers: Game performance data and session results are collected from provider systems integrated with the desa33 platform.

Article 4 – Purpose of Data Use

The data desa33 collects is used for specific and limited purposes. We do not use your data for anything beyond what is stated below:

• Account operations: creating and managing your account, processing deposits and withdrawals, and providing access to all platform features.
• Identity verification (KYC): ensuring every member is a real individual who meets the age requirements and is not on any applicable restriction list.
• Platform security: detecting, preventing, and investigating suspicious activity, fraud, money laundering, or system abuse.
• Customer support: responding to enquiries, handling complaints, and providing technical assistance as needed by members.
• Service improvements: analysing usage patterns in aggregate (anonymised) to improve platform performance, interface, and features.
• Important communications: sending notifications related to your account, policy changes, or relevant security information you need to be aware of.
• Responsible gaming: monitoring activity patterns to identify signs of problematic gaming behaviour and provide the necessary support.

Article 5 – Sharing Data with Third Parties

Desa33 does not sell or rent members' personal data to third parties. However, in the course of platform operations, there are situations where data must be shared with specific parties in defined roles:

• Payment providers: payment gateways, banks, and e-wallet operators require certain data to process your deposit and withdrawal transactions.
• Game providers: game content providers receive the session data required to run games and calculate outcomes correctly.
• Identity verification services: third-party KYC vendors assist in verifying identity documents to strict security standards.
• Legal authorities: if required by applicable law or a valid court order, desa33 will provide the requested data to the relevant authorities.

All third parties working with desa33 are bound by confidentiality agreements and are required to uphold data protection standards equivalent to our own.

Article 6 – Data Storage & Security

Desa33 uses enterprise-grade server infrastructure to store member data. The security measures in place include:

• Data encryption in transit using TLS/SSL protocols with regularly renewed certificates.
• Data encryption at rest for sensitive information such as financial data and identity documents.
• Role-based access control — only staff who genuinely require access to specific data are permitted to access it.
• Audit logs recording every access to member data for monitoring and investigation purposes when required.
• Regular security updates and periodic penetration testing to identify and close vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) for internal staff access to systems containing member data.

While we maintain strict security standards, no digital system can guarantee 100% protection against all threats. Your account security also depends on the practices you follow — including using a strong password and never sharing your login credentials with anyone.

Article 7 – Cookies & Similar Technologies

Desa33 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small files stored on your device when you access our website.

• Essential cookies: required for the platform to function properly — including keeping your login session active and saving display preferences.
• Analytics cookies: collecting anonymous usage data to help us understand which parts of the platform are most frequently used and need improvement.
• Security cookies: helping detect unusual activity such as repeated login attempts or access from unrecognised locations.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect platform functionality — some features may not work properly without them.

Article 8 – Your Personal Data Rights

As a desa33 member, you have a number of rights you can exercise regarding your personal data. desa33 respects and facilitates the exercise of these rights:

Article 9 – Data Retention

Desa33 retains members' personal data for as long as the account remains active and for a specified period after account closure. Retention periods are determined based on data type and applicable legal requirements:

• Identity and KYC data: retained in accordance with applicable regulations, generally a minimum of 5 years after account closure to meet anti-money laundering obligations.
• Transaction history: retained for a minimum of 5 years for audit purposes, dispute resolution, and financial reporting.
• Communication logs: retained for 2 years as a reference for dispute resolution if required at a later date.
• Technical data and cookies: retained for a shorter period based on operational needs, generally no longer than 13 months.

Once the retention period expires, data is securely deleted or anonymized so it can no longer be linked to the original identity.

Article 10 – Privacy Policy Changes

Desa33 may update this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or service improvements. Each update will include its effective date at the top of this document.

For changes that are material and significantly affect your rights, desa33 will provide active notification via an in-platform alert or email to the address registered on your account — at least 7 days before those changes take effect.

Continued use of the desa33 platform after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree to the changes, you may stop using the service and request account closure.

Article 11 – Contact Us for Privacy Matters

If you have any questions, concerns, or wish to exercise your privacy rights, the desa33 team is ready to help. We are committed to responding to every privacy inquiry seriously and as promptly as possible.

The desa33 privacy team can be reached via live chat available 24/7 on the platform, or by email at [email protected]. Please include relevant account information (excluding your password) so we can verify your identity and process your request accurately.